Phase 1
Proposal and Initial Assessment
1Submit formal change proposal
Document what is being changed, why the change is proposed, anticipated benefits and preliminary quality impact assessment. Identify all SOPs, batch records, specifications and validated parameters affected. Change proposal approved by QA before any further activities begin. No change activities may begin before QA approval of the proposal.
21 CFR 211.100 · ICH Q10 Section 3.2.3
↓
2Risk assessment - quality impact
Assess whether the change could affect any critical quality attribute. Assess probability of adverse effect, severity and detectability using ICH Q9(R1) 2023 structured methodology. Document the risk assessment rationale. Risk assessment determines the depth of validation required and informs regulatory classification. A risk assessment without documented methodology does not satisfy ICH Q9(R1) subjectivity reduction requirements.
ICH Q9(R1) 2023 · ICH Q10 Section 3.2.3
↓
Does the change fall within an approved PACMP or design space?
YES → Reduced notification
NO → Phase 2
↓ NO
3Identify all affected documents and systems
List every document, procedure, specification, analytical method and system that requires updating if the change is approved. Identify whether any change elements fall within the approved regulatory dossier or outside it. Changes within the dossier require regulatory notification assessment. Changes outside the dossier require notification. This assessment determines the regulatory classification path.
21 CFR 314.70 · ICH Q12 Established Conditions
Phase 2
Regulatory Classification
4Reference applicable FDA guidance
Identify the applicable FDA guidance for the specific change type. FDA CMC Changes to Approved NDA or ANDA. SUPAC guidance for immediate release, modified release or semisolid products. Changes to Approved Applications for Biological Products. ICH Q12 for post-approval lifecycle. Classification must reference the applicable guidance - generic classifications without regulatory basis are a 483 citation risk.
21 CFR 314.70 · SUPAC series · ICH Q12 2020
↓
What is the regulatory reporting classification?
PAS
CBE-30
CBE-0
AR
↓
⚠ Under-classification is an adulteration risk
Classifying a PAS-required change as CBE-30 or minor to avoid regulatory timelines and implementing without FDA approval distributes a product manufactured under an unapproved change - an adulteration violation under 21 CFR 211.1. The consequence is product recall not a delayed filing. When in doubt classify higher.
21 CFR 211.1 · 21 CFR 314.70 · FDA 2024 WL
↓
5Submit regulatory notification if required
PAS: submit and await FDA approval before any implementation. CBE-30: submit and wait 30 days. If FDA objects within 30 days implementation must stop. CBE-0: submit and implement immediately. Annual Report: document for next annual report filing. EU equivalent: Type II variation for major changes, Type IB or IA for minor changes per EU variation regulation.
21 CFR 314.70 · ICH Q12 · EU Variation Regulation
Phase 3
Validation and Implementation
6Develop validation and qualification plan
Define what validation or qualification studies are required before implementation. Equipment changes: IQ OQ PQ scope based on risk assessment. Process changes: process validation studies demonstrating CQA equivalence. Analytical method changes: method comparison or bridging study. Material changes: equivalency data package per FDA SUPAC guidance. Validation plan approved before any study begins.
EU GMP Annex 15 · FDA Process Validation Guidance 2011
↓
7Execute validation studies
Conduct validation studies per approved plan. Document all results including failures. Assess whether results meet acceptance criteria before proceeding to implementation. For PAS changes validation data must be included in the supplement and approved by FDA before commercial implementation. Do not implement based on validation data that is still under review.
FDA CMC Changes Guidance · EU GMP Annex 15 · ICH Q12
↓
Do validation results confirm change does not adversely affect CQAs?
YES → Implement
NO → Reassess or abandon
↓ YES - and PAS approved if applicable
8Update all affected documents
Update every document identified in Step 3: SOPs, batch records, specifications, analytical methods, validation protocols and reports, stability protocols, regulatory submissions. All document updates approved before implementation of the physical change. Train all personnel who will work under the changed conditions. Training records completed before first production run under changed conditions.
21 CFR 211.100 · 21 CFR 211.68 · ICH Q10
↓
9Implement the change
Execute the change per the approved change control plan. Document all implementation steps. For major changes the first commercial batch produced under the changed conditions must not be released until validation data has been reviewed and approved by QA. Deviations from the implementation plan must be documented and assessed before proceeding.
21 CFR 211.100(b) · ICH Q10 Section 3.2.3
Phase 4
Verification and Closure
10Post-implementation verification
Confirm the change achieved its intended outcome without adverse effects on product quality. Collect process performance data from the first production batches under changed conditions. Compare against pre-change baseline and against acceptance criteria defined in the change control record. Verification activities must be defined before implementation - not designed retrospectively to confirm what happened.
EU GMP Annex 15 · ICH Q10 Section 3.2.3
↓
Does post-implementation data confirm the change achieved intended outcome?
YES → Step 11
NO → Investigate and reassess
↓
11Update dossier and regulatory submissions
Update all regulatory submissions to reflect the implemented change. For ICH Q12 Established Conditions changes update the PLCM document. For changes within an approved PACMP file the required notification with the comparability data package. Ensure that batch genealogy, investigation records and recall capability are maintained for the physical location where the change was implemented.
ICH Q12 · 21 CFR 314.70 · EU Variation Regulation
↓
12QA review and formal closure
QA reviews complete change control package: proposal and risk assessment, regulatory classification and notification, validation data, document updates, personnel training, implementation evidence and post-implementation verification. All elements confirmed complete. Open change controls monitored for on-time closure. Changes open beyond 60 days without documented justification are a standard FDA 483 finding.
21 CFR 211.22 · ICH Q10 Section 3.2.3
↓
CHANGE CLOSED
APQR trending · Dossier current · Misclassification audit complete
ICH Q10 Section 3.2.3 · 21 CFR 211.180(e)
FDA Regulatory Reporting Categories - 21 CFR 314.70
Prior Approval Supplement (PAS)
FDA approval required
Major changes with substantial potential to adversely affect product quality. FDA must approve the PAS before any implementation. Typical review: 6 to 12 months standard, 2 months priority. Implementing before approval is an adulteration violation.
Examples: new drug substance synthetic route, formulation changes altering inactive ingredients, new sterile manufacturing site, container closure change for sterile products, scale changes beyond validated range, specifications relaxed below approved limits.
Changes Being Effected - 30 Days (CBE-30)
Implement after 30 days if no FDA objection
Moderate changes with moderate potential to affect quality. Submit to FDA and implement 30 days later if FDA does not object. If FDA objects within 30 days implementation must stop immediately.
Examples: new manufacturing site for non-sterile products, equipment changes to different design same operating principle with equivalency data, certain packaging material changes.
Changes Being Effected (CBE-0)
Implement immediately on submission
Changes within approved design space or PACMP scope. Submit and implement immediately. Changes covered by an approved PACMP under ICH Q12 can be implemented as CBE-0 even when they would normally require CBE-30 - the core PACMP efficiency benefit.
Examples: changes within ICH Q12 design space, changes within approved PACMP scope with required comparability data, certain site transfers for non-sterile products with demonstrated equivalency.
Annual Report (AR)
Report in next annual submission
Minor changes with minimal potential to adversely affect quality. No prior notification required. Report in the next annual report. EU equivalent: Type IA variation notified within 12 months of implementation.
Examples: editorial corrections to batch record text not altering steps or parameters, minor label corrections, certain analytical laboratory changes not affecting methods or specifications.
ICH Q12 Post-Approval Lifecycle Tools
Established Conditions (ECs)
ECs define which dossier elements require regulatory notification when changed. Non-EC elements can be managed through the internal quality system without notification. EC list is maintained in the PLCM document. Changes within design space are not changes to ECs.
Post-Approval Change Management Protocol (PACMP)
Pre-agreed plan for managing a defined future change within agreed boundaries. Once approved, qualifying changes use the reduced notification category in the PACMP. A change normally requiring CBE-30 can be implemented as CBE-0 within an approved PACMP. A change normally requiring PAS may be implementable as CBE-30 with pre-specified data.
Product Lifecycle Management (PLCM) Document
Living document capturing the current EC list, approved PACMPs and EC designation rationales. Updated when ECs change or new PACMPs are approved. Single reference for current regulatory status of all manufacturing elements. Reduces complexity of managing post-approval changes across multiple products and jurisdictions.
Who benefits most from ICH Q12
Manufacturers who invested in Quality by Design development approaches and have approved design spaces. Manufacturers with demonstrated quality system maturity. FDA has indicated that PACMP applicants with QMM programme participation may receive more flexible PACMP terms - directly linking quality culture to regulatory efficiency.