GMP compliance
GMP compliance is the demonstrated, current state of operating to GMP — evidenced continuously by your own records, and confirmed periodically by an inspectorate.
GMP compliance is the demonstrated, current state of operating to GMP — evidenced continuously by your own records, and confirmed periodically by an inspectorate.
Plain-English explanation, then the primary regulation it comes from.
Understanding gmp compliance
It helps to separate three things that get conflated. A manufacturing authorisation permits you to manufacture. A GMP certificate records that an inspection found the site compliant on a given date. Compliance itself is the underlying state, and it is the only one of the three that can change between Tuesday and Wednesday.
That distinction explains why a valid certificate is a weak defence. The certificate attests to a past inspection. If your validation status has drifted, your CAPA backlog has grown and your audit programme has stalled since then, you are not compliant today regardless of what the certificate says — and your own records will show it before an inspector does.
Compliance is lost gradually and then suddenly. The gradual part is deferral: an audit slips, a re-qualification rolls forward, a CAPA is closed on retraining without a confirmed root cause. Each decision is defensible in isolation. The sudden part is an inspection that reads them together and concludes the quality system is not effective — which is a systemic finding, not a list of small ones.
The commercial consequence deserves stating plainly. A GMP non-compliance statement is published on EudraGMDP, where customers, partners and competitors can read it. Recovery is measured in quarters, and the remediation runs on a deadline set by somebody else.
- Authorisation, certificate, compliance
- Three distinct things. Only the third describes your position today, and only your own records evidence it.
- Evidence is continuous
- Deviation and CAPA records, validation status, training records, audit execution and management review are the running proof.
- Deficiencies are graded
- Findings are classified as critical, major or other. Grading reflects patient risk and systemic weakness, not the length of the finding.
- Repeat findings are weighted heavily
- A recurrence demonstrates the previous correction did not work, which is a statement about your CAPA system rather than about the original issue.
- Outcomes are public
- GMP certificates and non-compliance statements are published in EudraGMDP.
Common failure modes
- Preparing for compliance in the weeks before an announced inspection, which is exactly when the day job cannot absorb the work.
- Metrics reported but never acted on, so the site can see its own decline and does nothing that changes it.
- Closing findings to hit a date rather than to fix a cause, producing a documented pattern of ineffective CAPA.
- No owner for the seam between two frameworks — GMP and MDR, or GMP and GDP — so nobody is accountable for it.
Where this is written down
- European CommissionEudraLex Volume 4 — EU GMP guidelines
Part I, Chapter 1 and Chapter 9
- EMAEMA — Good manufacturing practice
GMP certificates, non-compliance statements and EudraGMDP
- IGJ, NetherlandsInspectie Gezondheidszorg en Jeugd (IGJ)
Read next
Looking for a definition rather than an explanation? The GMP glossary covers the abbreviations in one line each.
Knowing the requirement is not the same as closing the gap
If you want to know where your site actually stands against this, the readiness score covers seven quality-system domains in twenty questions, and takes about ten minutes.