Change control failures show up as procedure failures
Under 21 CFR 211.100(a), written procedures “including any changes, shall be drafted, reviewed, and approved by the appropriate organizational units and reviewed and approved by the quality control unit” (eCFR). In FY2025, § 211.100(a) was FDA’s third most-cited drug observation, with 162 citations (GMP Insiders), and it drew 33 citations in 2025 drug warning letters (Pharmaceutical Online). A weak impact assessment is often where it starts.
For how to assess a change before approval, including ICH Q9(R1) and revalidation decisions, see Change Impact Assessment: How to Assess a GMP Change Before You Approve It.
Two questions every impact assessment answers
1. What is the GMP impact?
ICH Q10 sets the expectation: “Quality risk management should be utilised to evaluate proposed changes,” changes “should be evaluated by expert teams,” and “After implementation, an evaluation of the change should be undertaken to confirm the change objectives were achieved” (ICH Q10).
2. What is the regulatory impact?
For approved drugs, the applicant “must assess the effects of the change before distributing a drug product” (FDA guidance), then report it in the right category under 21 CFR 314.70:
| Category | Potential effect | Reporting |
|---|---|---|
| Major | ”substantial potential to have an adverse effect” | Prior approval supplement before distribution |
| Moderate | ”moderate potential” | Changes Being Effected in 30 days (CBE-30), or Changes Being Effected supplement (often called CBE-0) where allowed |
| Minor | ”minimal potential" | "documented by the applicant in the next annual report” |
ICH Q12: planning changes in advance
ICH Q12 introduced tools to make changes more predictable. Established conditions are “legally binding information considered necessary to assure product quality,” and “changes to ECs must also be reported to the regulatory authority.” A post-approval change management protocol is “a regulatory tool that provides predictability and transparency” (FDA/ICH Q12). In the US, “PACMPs are referred to as comparability protocols and are voluntary” (FDA draft).
2026 context. Onshoring is driving facility and supplier changes. FDA’s PreCheck program, announced in August 2025, supports new US manufacturing sites (Sidley). Site transfers and new suppliers are exactly the changes that need disciplined impact assessments.
Change impact assessment template
| Area | Questions to answer | Evidence |
|---|---|---|
| Product quality | Could the change affect identity, strength, quality, purity or stability? | Risk assessment, development data, stability plan |
| Process and validation | Does process validation, cleaning validation or equipment qualification need to be repeated? | Validation impact assessment |
| Analytical methods | Are methods or specifications affected? | Method validation or comparability data |
| Materials and suppliers | New supplier, grade or site? | Supplier qualification records |
| Facilities and utilities | HVAC, water, room classification affected? | Engineering assessment |
| Computerized systems | Configuration, data flows or audit trails affected? | CSV impact assessment |
| Documentation and training | Which SOPs, master records and specifications change? Who needs training? | Document list, training plan |
| Regulatory | Which application sections or established conditions are affected? Reporting category? | Regulatory assessment against 314.70 and Q12 |
| Other markets | EU variation or other country filings needed? | Regulatory matrix |
| Post-implementation | What will confirm the change worked? | Effectiveness criteria and review date |
Change control checklist
- Change described clearly, with rationale and scope
- Risk assessment completed using ICH Q9 principles, with formality scaled to risk
- Cross-functional review (QA, QC, production, engineering, regulatory)
- Regulatory reporting category determined and documented before implementation
- Quality unit approval before implementation
- Actions completed: validation, documents, training, supplier updates
- Regulatory submission filed and, for prior approval changes, approved before distribution
- Post-implementation review confirms objectives were achieved
Catch the impacts people miss
The most common gap is an impact nobody listed: the cleaning validation that relied on the old equipment, the SOP that still names the old supplier. AI document assessment can scan your SOPs, master records and validation reports for references affected by a proposed change and cite the passage behind every finding.
Run a sample regulatory document assessment on the documents linked to one change. AskDona shows the evidence; your change control board decides.
FAQ
Who must approve GMP changes? Under 21 CFR 211.100(a), changes to written procedures must be reviewed and approved by the quality control unit (eCFR).
How do I know if a change needs a prior approval supplement? If it has “substantial potential to have an adverse effect” on product quality, it is a major change under 21 CFR 314.70(b) (eCFR).
What are established conditions? Under ICH Q12, “legally binding information considered necessary to assure product quality” (FDA/ICH Q12).
Do we need to check changes after implementation? Yes. ICH Q10 expects an evaluation “to confirm the change objectives were achieved” (ICH Q10).
References
All pages opened and checked by October 9, 2026.
| Source | Type | Date | Used for |
|---|---|---|---|
| eCFR: 21 CFR Part 211 | Regulation text | Current | § 211.100(a) |
| eCFR: 21 CFR 314.70 | Regulation text | Current | Reporting categories |
| FDA: Changes to an Approved NDA or ANDA | Regulator guidance | Apr 2004 | Assess before distribution |
| ICH Q10 | ICH guideline | Jun 4, 2008 | Change management |
| FDA/ICH Q12 guidance | Regulator guidance | May 2021 | Established conditions, PACMP |
| FDA: Q12 implementation considerations (draft) | Regulator guidance | May 2021 | Comparability protocols |
| GMP Insiders: FY2025 observations | Industry analysis | Jan 5, 2026 | 211.100(a) citations |
| Pharmaceutical Online: 2025 warning letters | Expert column | Dec 15, 2025 | 33 citations |
| Sidley: FDA PreCheck | Law firm | Aug 13, 2025 | Onshoring |