Batch Record Review and QP Certification: What Annex 16 Requires

Batch record review is often described as a paperwork check. EU GMP Annex 16 describes something considerably wider: a defined set of assurances a Qualified Person must have in place before certifying a batch for release. The current version is dated 12 October 2015, with a deadline for coming into operation of 15 April 2016, and it remains the reference point for what a batch review has to establish.

Three things the QP must personally ensure

Section 1.6 is short and often overlooked. The QP must personally ensure that certification is permitted under the terms of the manufacturing and import authorisation, that any additional duties or requirements of national legislation are met, and that the certification is recorded in a register or equivalent document. Only a QP of the manufacturer or importer named in the marketing authorisation may certify a batch (1.1) — and the general principles are explicit that ultimate responsibility for the product across its lifetime stays with the marketing authorisation holder, which does not dilute the QP's duty at the point of certification.

The twenty-one assurances behind a certification

Section 1.7 is the real scope of a batch review. Before certifying, the QP must ensure that all manufacturing and testing followed GMP; that the full supply chain is documented and available; that site audits have been carried out and the reports are available; that all sites comply with the marketing authorisation for the intended territory; and that manufacturing and testing match the authorisation.

It continues into materials: starting and packaging materials complying with the authorisation with supplier quality systems in place; active substances manufactured under GMP and, where required, distributed under GDP; imported active substances for human use meeting Article 46(b) of Directive 2001/83/EC; excipients made under ascertained GMP under Article 46(f); and TSE status complying with the authorisation where relevant.

Then the batch itself: records complete and endorsed with all in-process checks done; processes still validated and personnel trained and qualified; finished product quality control data meeting specification, or the approved real-time release programme; post-marketing commitments addressed and stability data supporting certification; changes evaluated with any additional checks completed; and batch-related investigations — explicitly including out-of-specification and out-of-trend results — complete enough to support certification.

And finally the surrounding system: that ongoing complaints, investigations or recalls do not negate the certification; that required technical agreements are in place; that the self-inspection programme is active and current; that distribution and shipment arrangements are in place; and that safety features under Article 54(o) are affixed where appropriate.

Two of those deserve attention because they are system-level rather than batch-level. "Personnel trained and qualified" means a training gap can block a release — which is why the Chapter 2 training obligation and, for sterile products, Annex 1 personnel qualification sit upstream of batch certification rather than beside it. And "self-inspection programme active and current" means an overdue audit schedule is a release issue, not merely an internal one.

How far a QP may rely on other people

Annex 16 is realistic about this. Section 1.7 permits the QP to delegate tasks to trained and competent staff or third parties, and states plainly that the QP will need to rely on the pharmaceutical quality system. The condition is that the QP maintains ongoing assurance that this reliance is well founded — reliance is allowed, blind reliance is not.

For third-party audits, Section 2.2 requires the QP to have a written final assessment and approval of audit reports, and to know the outcome of any audit with critical impact before certifying. Where responsibility is shared between QPs, sections 1.4.2 and 1.4.3 require the sharing to be set out in an agreed document.

Imported product: testing is not optional

For batches imported from outside the EU, Section 1.5.4 requires a full qualitative analysis and a quantitative analysis of at least all the active substances, carried out in a Member State, unless a mutual recognition agreement or similar arrangement applies. Samples must be fully representative of the batch (1.5.5). Where sampling happens at a third-country site, Section 1.5.6 sets conditions including a documented quality risk management process, audits, comparative studies and periodic checks on samples taken after import. Section 1.5.7 allows a QP certifying successive batches from the same bulk to rely on testing of the first imported batch, but only with a documented, risk-based justification.

Certifying despite an unexpected deviation

Section 3 is the part most frequently misquoted as "deviations block release". It does not say that. A QP may consider certifying a batch affected by an unexpected deviation, but the conditions are narrow and cumulative: the registered specifications must still be met, the deviation must have been thoroughly investigated with its root cause corrected, and a quality risk management assessment must demonstrate the impact is negligible. A variation to the marketing authorisation may also be required.

That places the weight on investigation quality. "Root cause corrected" is the same standard Chapter 1 sets for CAPA, where human error cited as a cause has to be justified and system causes ruled out. A deviation closed on an unjustified operator-error finding cannot support a Section 3 certification.

The register, and how long it has to survive

Section 1.10.1 requires each certification to be recorded in a register or equivalent document, kept up to date, and made available to competent authorities. The retention period is whatever the Member State sets, and in any case at least five years. Given that the register is one of the first things an inspector asks for, its completeness is a poor place to discover a gap — which is why data integrity expectations apply to it as much as to any production record.

Reading a batch review as a scope, not a checklist

The practical consequence of Section 1.7 is that a batch review cannot be completed from the batch file alone. Supply-chain documentation, audit outcomes, validation status, training records, technical agreements, self-inspection currency and open complaint investigations all sit outside the batch record and all have to be in a known state. Sites that treat batch review as a document reconciliation tend to find this out during an inspection rather than before one. For QPs and the teams supporting them, the Article 49 qualification route sets who may hold the role; Annex 16 sets what the role actually has to do, and structured CPD courses are one way to keep that current.