What Is GMP? A Plain-Language Guide to Good Manufacturing Practice

GMP stands for Good Manufacturing Practice. It is the set of regulations, standards and systems that ensure pharmaceutical products are consistently produced and controlled to the quality standards appropriate for their intended use.

That is the official definition. Here is what it means in practice.

Every time a patient takes a tablet, receives an injection or uses a medical device, they are trusting that what is in the package is what the label says it is, in the amount the label claims, free of contamination and safe to use. GMP is the framework that makes that trust justified.

Without GMP, pharmaceutical manufacturers could cut corners without consequence. Use substandard raw materials. Skip stability testing. Release batches without checking whether they meet specifications. The history of pharmaceutical manufacturing before GMP existed is a history of contaminated medicines, incorrectly labelled products and patient deaths that were entirely preventable.

What GMP means and why the c matters

GMP stands for Good Manufacturing Practice. You will also see it written as cGMP - current Good Manufacturing Practice. The c is important.

The word current signals that compliance is not a fixed standard. It is an evolving one. FDA uses the term cGMP deliberately to indicate that manufacturers are expected to use up-to-date technologies, validated methods and current scientific understanding. A manufacturing process that was state of the art in 1990 may not satisfy current GMP expectations in 2026 even if nothing in the regulations has changed.

This means GMP is not a checklist that you complete once and file away. It is a continuous obligation to stay current with regulatory expectations, scientific advances and industry best practices.

Why GMP exists

GMP exists because pharmaceutical product quality cannot be verified by testing the finished product alone.

You cannot test every tablet in a batch. You can test a sample. If that sample passes, you release the batch. But if the manufacturing process is poorly controlled, some tablets in the batch may have the wrong dose, contain contaminants or degrade faster than expected - and your sample-based testing will not catch that.

This is the fundamental problem that GMP solves. It moves quality assurance from end-product testing to process control. If the manufacturing process is properly designed, validated and controlled, every batch produced by that process will meet its specifications - not just the samples you test.

Before GMP regulations existed the consequences of this reality were severe. The 1937 sulfanilamide disaster in the United States killed more than 100 people because a manufacturer dissolved the drug in diethylene glycol - an industrial solvent - without testing the formulation for toxicity. There was no requirement to do so. The Federal Food, Drug and Cosmetic Act was passed the following year in direct response.

The thalidomide tragedy of the late 1950s and early 1960s - in which a sedative prescribed to pregnant women caused severe birth defects in thousands of children - drove regulatory reform across Europe and the strengthening of FDA requirements in the United States. The modern GMP framework that exists today was built from those failures.

What GMP covers

GMP covers every aspect of pharmaceutical manufacturing from the design of the facility to the release of the finished product. The scope is broader than most people outside the industry expect.

Personnel. The people who manufacture pharmaceutical products must be appropriately qualified and trained for the tasks they perform. GMP requires documented training records, competency assessments and health monitoring to prevent contamination from personnel entering manufacturing areas.

Premises and equipment. Manufacturing facilities must be designed to prevent contamination, mix-ups and errors. Equipment must be qualified, calibrated and maintained. Cleaning validation must demonstrate that residues from previous products or batches are removed before the next manufacturing run.

Raw materials and components. Every raw material, excipient, container and closure used in a pharmaceutical product must meet approved specifications. Incoming materials must be tested or otherwise verified before use. Approved supplier lists must be maintained.

Manufacturing processes. Manufacturing processes must be validated - demonstrated to consistently produce product meeting its specifications. Written procedures must exist for every step. Deviations from procedures must be documented and investigated.

Quality control. Laboratory testing of raw materials, in-process materials and finished products must be conducted by qualified analysts using validated methods. Out-of-specification results must be investigated before a batch can be released or rejected.

Documentation. If it is not documented it did not happen. GMP requires complete, accurate, contemporaneous records of everything that occurs in the manufacturing process. This includes batch records, laboratory notebooks, equipment logs, deviation reports and training records.

Quality management. An independent quality unit must oversee all manufacturing operations. It must have the authority to approve or reject every batch regardless of production schedules or commercial pressure.

FDA GMP: 21 CFR Parts 210 and 211

In the United States, GMP requirements for pharmaceutical manufacturers are codified in the Code of Federal Regulations at 21 CFR Parts 210 and 211. These regulations are published by FDA and have the force of law.

21 CFR Part 210 is a short introductory section that establishes the scope and applicability of the GMP regulations. The substance is in 21 CFR Part 211, which is divided into subparts covering every element of pharmaceutical manufacturing.

The most important subparts of 21 CFR Part 211 are:

Subpart B - Organisation and personnel (21 CFR 211.22 to 211.68). This subpart establishes the requirements for the quality control unit and personnel qualifications and training. 21 CFR 211.22 is the legal foundation for quality unit independence - the requirement that the quality unit must have the authority to approve or reject batches regardless of production input.

Subpart C - Buildings and facilities (21 CFR 211.42 to 211.58). Requirements for facility design, maintenance, lighting, ventilation and pest control.

Subpart D - Equipment (21 CFR 211.63 to 211.72). Equipment design, construction, maintenance and cleaning requirements.

Subpart E - Control of components and drug product containers and closures (21 CFR 211.80 to 211.115). Requirements for receipt, testing and storage of raw materials.

Subpart F - Production and process controls (21 CFR 211.100 to 211.132). Written procedures, process controls, packaging and labelling controls. 21 CFR 211.100(a) - absence of written procedures or failure to follow them - is consistently one of the top four FDA 483 citation areas.

Subpart I - Laboratory controls (21 CFR 211.160 to 211.194). Specifications, analytical methods, method validation, stability testing and laboratory records. 21 CFR 211.192 - failure to thoroughly investigate OOS results - has been the second most cited 483 observation for four consecutive years.

Subpart J - Records and reports (21 CFR 211.180 to 211.198). Record retention, batch production records, laboratory records and the annual product quality review requirement.

EU GMP: EudraLex Volume 4

In the European Union, GMP requirements are set out in EudraLex Volume 4 - the EU Guidelines for Good Manufacturing Practice for Medicinal Products for Human and Veterinary Use. EudraLex is published by the European Commission and is the regulatory framework applied by EMA and national competent authorities across EU member states.

EU GMP is organised into two main parts and a series of annexes covering specific product types and topics.

EU GMP Part I covers finished medicinal products. It is equivalent in scope to 21 CFR Part 211 and covers the same subject areas - quality management, personnel, premises and equipment, documentation, production, quality control, outsourced activities, complaints and recalls and self-inspections.

EU GMP Part II covers active pharmaceutical ingredients and is based on ICH Q7, the international GMP guideline for API manufacture.

EU GMP Annexes provide supplementary requirements for specific product types and topics. The most significant recent revision was Annex 1 on sterile product manufacture, which was updated in 2022 and introduced the requirement for a documented Contamination Control Strategy for all sterile manufacturing facilities.

EU GMP differs from FDA cGMP in some important ways. EU GMP has a stronger emphasis on the Qualified Person - a named individual with statutory responsibility for batch release in the EU. EU GMP Annex 1 is considerably more prescriptive about sterile manufacturing environmental monitoring than the equivalent FDA guidance. And EudraLex Volume 4 has an annex structure that allows specific requirements for different product types - such as Part IV for Advanced Therapy Medicinal Products - that does not exist in the CFR structure.

ICH guidelines and global harmonisation

The International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use - ICH - develops internationally harmonised guidelines for pharmaceutical quality, safety and efficacy. ICH guidelines do not have direct regulatory force but are adopted by FDA, EMA and regulatory authorities in over 50 countries, making them effectively mandatory for manufacturers supplying global markets.

The ICH Q series guidelines are particularly important for GMP:

ICH Q7 covers GMP for active pharmaceutical ingredients and is the global standard for API manufacture.

ICH Q8(R2) covers pharmaceutical development and introduced the Quality by Design framework - the concept that quality should be built into a product through development rather than tested into it after manufacture.

ICH Q9(R1) 2023 covers quality risk management. The 2023 revision added subjectivity reduction and risk review as new requirements - risk assessments must use structured methods that minimise individual bias and must be updated when new information changes the risk picture.

ICH Q10 defines the pharmaceutical quality system framework within which GMP operates. It establishes four pillars: process performance and product quality monitoring, CAPA, change management and management review.

ICH Q11 covers the development and manufacture of drug substances.

ICH Q12 covers post-approval lifecycle management and introduced tools including Established Conditions and Post-Approval Change Management Protocols that allow manufacturers to manage certain post-approval changes through their own quality systems without prior regulatory notification.

What GMP requires in practice

Understanding GMP regulations is one thing. Understanding what they require in practice is another. Here are the elements that matter most for anyone working in pharmaceutical manufacturing.

Written procedures for everything

Every manufacturing step, every laboratory test, every cleaning operation and every quality system activity must have a written, approved procedure. The procedure must be followed as written. If it is not followed, a deviation must be documented and investigated.

A pharmaceutical professional who performs a task correctly but does not follow the written procedure has still committed a GMP deviation. The purpose of written procedures is not just to ensure tasks are done correctly - it is to ensure they are done consistently and reproducibly, by any qualified operator, on any day.

Batch records

Every manufacturing batch must have a complete batch record - a document that captures every step performed in the manufacture of that specific batch. The batch record is the legal record of how the product was made. It must be completed contemporaneously - at the time the step is performed - not retrospectively.

A batch record that is incomplete, contains errors, or has been altered without documentation is a GMP violation regardless of whether the product itself meets its specifications.

Investigation of deviations and failures

When something goes wrong - a batch fails a specification test, a procedure is not followed, equipment malfunctions during a critical operation - the event must be documented and investigated. The investigation must identify the root cause of the failure and implement corrective actions that prevent recurrence.

Human error is not a root cause. It is an immediate cause at most. A compliant investigation must explain why the system allowed the human error to occur - what training gap, procedure design failure or supervision gap enabled it.

Change control

Any change to an approved manufacturing process, equipment, material, facility or quality system must be assessed before implementation. The assessment must determine whether the change could affect product quality and whether a regulatory submission is required before the change can be made.

Implementing a change without going through the change control process - even a change that turns out to be beneficial - is a GMP violation.

Data integrity

All data generated in a pharmaceutical manufacturing or testing environment must meet the ALCOA++ principles: Attributable, Legible, Contemporaneous, Original, Accurate, Complete, Consistent, Enduring, Available and Traceable.

Data integrity violations - deleting test results, backdating records, using shared login credentials that prevent attribution of data to specific individuals - are among the most serious GMP failures and account for approximately 15% of all FDA warning letters.

What happens when GMP fails

GMP failures have consequences that range from regulatory citations to product recalls to patient deaths. Understanding the consequences helps explain why GMP is treated as seriously as it is.

FDA Form 483 observations. During an inspection FDA investigators issue Form 483 observations for GMP deficiencies they identify. A 483 is not a final enforcement action - it is a list of observations requiring response. The manufacturer must respond within 15 working days with a description of corrective actions.

Warning letters. If a 483 response is inadequate or if violations are serious, FDA issues a warning letter. Warning letters are public documents that appear on FDA's website. Research shows that manufacturers with inadequate 483 responses face greater than 50% probability of receiving a warning letter. In FY2025 FDA issued 303 drug warning letters - a 59% increase from the prior year.

Import alerts. FDA can place a manufacturer on an import alert, preventing products from that facility from entering the US market until the GMP violations are corrected to FDA's satisfaction. Import alerts can remain in place for years.

Consent decrees and injunctions. For the most serious violations FDA can seek court orders requiring manufacturers to stop production until violations are corrected under FDA supervision. Consent decrees typically require extensive remediation programmes costing tens or hundreds of millions of dollars.

Product recalls. When a released product is found to have a quality defect that poses a risk to patients, a recall may be required. Recalls are classified by the severity of the risk. Class I recalls involve a reasonable probability of serious adverse health consequences or death.

GMP training and why it matters

Nearly 65% of FDA Form 483 observations in recent years have been linked to training gaps and documentation issues. Pharmaceutical professionals who understand GMP - not just what the procedures say but why they exist - make better decisions, catch problems earlier and avoid the citation patterns that generate warning letters.

GMP training is a regulatory requirement under 21 CFR 211.68. Personnel must be trained on the specific procedures they are required to perform and must demonstrate competency - not just read and sign an SOP.

But effective GMP training goes beyond compliance. It builds the quality thinking that prevents the kind of quality culture failures that FDA's Quality Management Maturity programme is designed to identify and reward. A pharmaceutical professional who understands why batch records must be completed contemporaneously, why human error is never a root cause and why change control exists will make better judgements under pressure than one who follows procedures without understanding the reasoning behind them.

If you are new to pharmaceutical manufacturing, the GMPify Essentials Series is the place to start. Six courses covering pharmaceutical quality, QC lab testing, water systems, regulatory affairs, biopharmaceuticals and regulatory CMC - each built directly from the primary regulatory sources. Available immediately at learn.gmpify.com.