What are the ALCOA+ data integrity principles for pharmaceutical manufacturers?

ALCOA+ is the foundational framework for pharmaceutical data integrity: Attributable (who collected the data and when), Legible (readable throughout its retention period), Contemporaneous (recorded at the time of activity), Original (first-capture data, not a transcription), and Accurate (free from errors). ALCOA+ extensions add Complete (all data including reanalysis), Consistent (in chronological order), Enduring (in durable medium for the required retention period), and Available (accessible for inspection). FDA, MHRA, WHO, and EU GMP Annex 11 all use the ALCOA+ framework as the basis for data integrity assessment. The FDA Data Integrity and Compliance with CGMP Guidance (December 2018) is the primary US reference document.

How does MHRA data integrity guidance apply to pharmaceutical manufacturers?

The MHRA Guidance on GMP Data Integrity (March 2018) applies to any pharmaceutical manufacturer supplying the UK market, whether based in the UK or overseas. It requires a data governance system covering data ownership, data criticality assessment, and a data integrity risk management approach. The MHRA states that all original raw data must be retained and available for inspection, regardless of format. The guidance aligns with WHO TRS 996 (2016) and EU GMP Annex 11, but contains additional prescriptive detail on audit trail review, data retention, and self-inspection for data integrity.

What is the scope of a pharmaceutical data integrity ALCOA audit?

A pharmaceutical data integrity ALCOA audit covers both paper-based and electronic GMP records: laboratory data (raw chromatography data, spectral files, instrument printouts), batch manufacturing records, environmental monitoring logs, equipment calibration and maintenance records, and quality system records (deviation reports, CAPA, change control). For electronic systems, the audit assesses 21 CFR Part 11 or EU GMP Annex 11 compliance including audit trail activation and review, access control effectiveness, and backup and recovery procedures. For paper records, the audit verifies original versus copy status, contemporaneous completion, and correction practices.

How do I complete this pharmaceutical inspection checklist?

Start by filling in the header fields (date, inspector name, location). Then work through each of the 6 sections, marking Yes/No for each inspection point. Add notes for any issues found. Finally, complete the footer section with your signature. The entire process takes approximately 60-90 minutes.

What happens if I find issues during the pharmaceutical inspection?

Document any issues in the notes field, take photos as evidence, and assign corrective actions. POPProbe's mobile app allows you to instantly assign tasks to team members and track resolution. Critical issues should be escalated immediately per your organization's procedures.

Can I use this checklist on my phone or tablet?

Yes, with POPProbe's mobile app you can complete this checklist on any smartphone or tablet. The app works offline, captures GPS location, allows photo attachments, and automatically syncs when connected. Perfect for field inspections and frontline teams.

What are the key sections in this pharmaceutical checklist?

This pharmaceutical checklist is organized into 6 key sections: ALCOA+ Principles Assessment, Electronic System Controls, Paper Record Controls, Raw Data and Retention, Laboratory Data Integrity, Management Oversight and Culture. Each section contains specific inspection points that qa manager / it compliance manager must verify. The structured layout ensures nothing is missed during pharmaceutical inspections and makes the process efficient, typically taking 60-90 minutes to complete.

How do I customize this pharmaceutical checklist for my organization?

With POPProbe, you can easily customize this Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist to match your organization's specific requirements. Add or remove inspection points, modify section names, adjust scoring criteria, and include your company branding. You can also set up automated scheduling to ensure the checklist is completed annual / pre-regulatory inspection and assign it to specific team members or locations.

What are common mistakes to avoid when completing pharmaceutical inspections?

Common mistakes include: rushing through items without proper verification, failing to document issues with photos or detailed notes, skipping sections that seem repetitive, not following up on previously identified problems, and completing inspections inconsistently. To avoid these, use a digital tool like POPProbe that enforces completion of all 41 fields, requires photo evidence, and tracks corrective actions automatically.

Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist

Data integrity failures are a primary driver of FDA warning letters, import alerts, and consent decrees. This audit systematically assesses data integrity controls across paper-based and electronic systems against ALCOA+ principles and regulatory expectations.

Industry: Pharmaceutical
Frequency: Annual / Pre-Regulatory Inspection
Estimated Time: 60-90 minutes
Role: QA Manager / IT Compliance Manager
Total Items: 33
Compliance: FDA Data Integrity and Compliance with CGMP Guidance (2018), MHRA Guidance on GMP Data Integrity (2018), WHO Guidance on Good Data and Record Management Practices (2016), EU GMP Annex 11 Computerised Systems, FDA 21 CFR Part 11 Electronic Records Electronic Signatures

ALCOA stands for Attributable, Legible, Contemporaneous, Original, and Accurate. ALCOA+ adds Complete, Consistent, Enduring, and Available. Under the FDA Data Integrity and Compliance with CGMP Guidance (December 2018) and MHRA GMP Data Integrity Guidance (March 2018), pharmaceutical manufacturers must ensure all GMP records satisfy these principles. Data integrity failures are a leading cause of FDA warning letters, import alerts, and consent decrees.

Primary regulatory references: FDA Data Integrity and Compliance with CGMP Guidance (December 2018); MHRA Guidance on GMP Data Integrity (March 2018); WHO Guidance on Good Data and Record Management Practices, WHO TRS 996 (2016); EU GMP Annex 11 Computerised Systems; FDA 21 CFR Part 11 Electronic Records and Electronic Signatures.

ALCOA+ Principles Assessment

Verify data meets ALCOA+ requirements.

All data entries attributable to individual responsible for the action?
All records legible and permanently recorded in indelible ink or electronic format?
Data recorded at the time the activity was performed (no backdating)?
Original data preserved and not transcribed without retention of original?
Data accurately reflects the actual observations and is not manipulated?
Complete data set including all raw data, anomalies, and excluded data documented?

Electronic System Controls

Verify electronic system data integrity controls.

Audit trails enabled and active for all GMP electronic systems?
Audit trails regularly reviewed and part of batch record review?
All users have unique individual logins - no shared accounts?
Access control matrix with role-based permissions documented and enforced?
Former employee and contractor accounts deactivated promptly?
Laboratory instrument computers not accessible to users with local administrator rights?

Paper Record Controls

Verify paper record data integrity.

All corrections made correctly: single line strikethrough, initials, date, reason?
No use of correction fluid (Wite-Out), overwriting, or obliterating original entries?
No data recorded in pencil in batch records or laboratory notebooks?
Controlled forms used with version number and effective date?
No loose paper records or Post-it notes with data not attached to formal record?

Raw Data and Retention

Verify raw data availability and retention.

All raw data (chromatograms, spectroscopy data, instrument printouts) retained?
No evidence of data deletion or audit trail clearing in electronic systems?
Regular backup of electronic data with tested restoration?
Data retention schedule compliant with regulatory requirements (minimum per 21 CFR 211.68)?
Archived records retrievable within required timeframe?

Laboratory Data Integrity

Assess QC laboratory data integrity controls.

QC results reviewed by second person before reporting?
No evidence of testing into compliance (excessive repeat testing until in-spec)?
All OOS investigations properly documented including all test data?
All analysts qualified for tests they perform?
Sample chain of custody documented from receipt through disposal?

Management Oversight and Culture

Assess data integrity culture and management oversight.

All relevant personnel trained on data integrity expectations and consequences?
Data integrity policy in place with clear expectations and escalation path?
Mechanism for anonymous reporting of data integrity concerns?
Data integrity metrics reviewed at management review?
Periodic data integrity audit conducted by QA or independent party?
Data integrity included in self-inspection program?

Related Pharmaceutical Life Sciences Checklists

Related Quality Systems Checklists

Why Use This Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist?

This pharmaceutical data integrity and alcoa+ compliance audit checklist helps pharmaceutical teams maintain compliance and operational excellence. Designed for qa manager / it compliance manager professionals, this checklist covers 33 critical inspection points across 6 sections. Recommended frequency: annual / pre-regulatory inspection.

Ensures compliance with FDA Data Integrity and Compliance with CGMP Guidance (2018), MHRA Guidance on GMP Data Integrity (2018), WHO Guidance on Good Data and Record Management Practices (2016), EU GMP Annex 11 Computerised Systems, FDA 21 CFR Part 11 Electronic Records Electronic Signatures. Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What does the Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist cover?

This checklist covers 33 inspection items across 6 sections: ALCOA+ Principles Assessment, Electronic System Controls, Paper Record Controls, Raw Data and Retention, Laboratory Data Integrity, Management Oversight and Culture. It is designed for pharmaceutical operations and compliance.

How often should this checklist be completed?

This checklist should be completed annual / pre-regulatory inspection. Each completion takes approximately 60-90 minutes.

Who should use this Pharmaceutical Data Integrity and ALCOA+ Compliance Audit Checklist?

This checklist is designed for QA Manager / IT Compliance Manager professionals in the pharmaceutical industry. It can be used for self-assessments, team audits, and regulatory compliance documentation.

Can I download this checklist as a PDF?

Yes, this checklist is available as a free PDF download. You can also use it digitally in the POPProbe mobile app for real-time data capture, photo documentation, and automatic reporting.

What are the ALCOA+ data integrity principles?

ALCOA+ is a framework for pharmaceutical data integrity: Attributable (who collected the data and when), Legible (readable throughout its retention period), Contemporaneous (recorded at the time of activity), Original (first-capture data, not a transcription), and Accurate (free from errors and reflective of the actual observation). The ALCOA+ extensions add Complete (all data including reanalysis), Consistent (all elements in chronological order), Enduring (recorded in durable medium for the required retention period), and Available (accessible for review and inspection). FDA, MHRA, WHO, and EU GMP Annex 11 all use the ALCOA+ framework as the basis for data integrity assessment.

What does FDA 21 CFR Part 11 require for pharmaceutical electronic records?

FDA 21 CFR Part 11 requires that electronic records be accurate, reliable, and protected from unauthorized access and alteration. Closed systems must have authority checks, device checks, and time-stamped audit trails capturing the date, time, operator, and nature of any change. Electronic signatures must be unique to the individual and linked to the electronic record. Systems must be validated per 21 CFR Part 211.68 to ensure accuracy and reliability. The regulation applies to records required under FDA predicate rules (21 CFR Parts 210-211, 820) when created, modified, maintained, archived, retrieved, or transmitted in electronic form.

What data integrity violations lead to FDA warning letters?

FDA warning letters for data integrity violations commonly cite: backdating or pre-dating of GMP records; deletion or overwriting of original data without a complete audit trail; out-of-specification results followed by retesting without investigation; shared login credentials making data entries unattributable; computerized systems lacking access controls or Part 11-compliant audit trails; and paper records altered with correction fluid without the original entry preserved. The FDA Data Integrity and Compliance with CGMP Guidance (2018) is the framework FDA investigators apply during inspections.