What pharmaceutical quality assurance does
Pharmaceutical quality assurance (QA) is the function that makes sure every drug is made, tested and released under control, and that the company can prove it. QA writes and approves procedures, reviews batch records, oversees deviations and investigations, approves changes, audits suppliers and decides whether a batch can be released.
In US law, these duties sit with the “quality control unit” in 21 CFR 211.22, usually called the quality unit. Most companies split it into QA (oversight, systems and release) and QC (laboratory testing), but the legal responsibility belongs to the unit as a whole.
What the regulation requires of the quality unit
| 21 CFR 211.22 | Requirement |
|---|---|
| (a) | “There shall be a quality control unit that shall have the responsibility and authority to approve or reject all components,” plus containers, closures, labeling and finished products, and to review production records and ensure errors are investigated; this includes products made under contract |
| (b) | Access to adequate laboratory facilities for testing |
| (c) | Responsibility to approve or reject procedures and specifications that affect identity, strength, quality and purity |
| (d) | Responsibilities and procedures written down, and followed |
Source: eCFR, 21 CFR 211.22.
QA vs QC
| Quality assurance (QA) | Quality control (QC) | |
|---|---|---|
| Focus | Systems and decisions | Testing and results |
| Typical work | Procedures, batch record review, deviations, CAPA, change control, audits, release | Raw material, in-process, finished product and stability testing; method validation |
| Question answered | Was the product made under control? | Does the product meet specification? |
| Common failure | Procedures not followed; weak investigations | Unsound lab controls; unexplained OOS results |
Why QA failures top FDA’s list
The most cited drug observation in FY2025 was 21 CFR 211.22(d), quality unit procedures not written or not followed, with 243 citations, followed by inadequate investigations (211.192) with 164 (GMP Insiders). The analysis describes “a Quality Unit that is not consistently functioning as the governing authority mandated by Part 211.”
Recent warning letters show what that looks like:
- No written QU procedures and missed investigations. In February 2026, FDA found a firm “failed to establish adequate written responsibilities and procedures applicable to the quality control unit,” and cited an out-of-trend result found among discarded materials that “was neither properly documented at the time of performance nor adequately investigated” (FDA warning letter, Nelson Co.).
- No real authority. In a warning letter to an API maker, FDA said the QU “did not exercise effective oversight to prevent, detect, and remediate these risks,” and was not the “independent, empowered system owner” CGMP requires (ECA Academy).
What a strong QA function looks like
- Independence: QA reports outside production and can stop a batch without being overruled.
- Written authority: responsibilities and procedures documented and current, as 211.22(d) requires.
- Real-time oversight: QA on the floor and in the lab, not only at the end of the batch.
- Rigorous investigations: root cause supported by evidence; product impact assessed.
- Change control and risk management using ICH Q9(R1) principles.
- Supplier and contract oversight, including approval or rejection of products made under contract.
- Management visibility: metrics on deviations, CAPA, complaints and right-first-time, reviewed by leadership.
- Resources: enough trained people for the workload.
Pharmaceutical QA checklist
- Quality unit responsibilities written and approved, per 211.22(d)
- QA independent of production in the organization chart and in practice
- Batch record review and release procedures followed and timely
- Deviations and OOS results investigated to evidence-based root cause
- Change control includes risk assessment and QA approval
- Contract manufacturers and labs overseen by the quality unit
- Quality metrics reviewed by management
- QA staffing adequate for workload
- Procedures match actual practice
Give QA reviewers an evidence-based first pass
QA spends much of its time reading: batch records, investigations, change requests and procedures. AskDona reviews these documents against 21 CFR 211, ICH guidelines or your own procedures, flags gaps, unsupported conclusions and inconsistencies, and cites the passage behind every finding. QA keeps the decision.
Run a sample QA procedure assessment on one investigation or procedure set. AskDona shows the evidence; your quality unit decides.
FAQ
What is pharmaceutical quality assurance? The function that ensures drugs are made, tested and released under control, with records that prove it.
What is the difference between QA and QC? QA oversees systems and decisions; QC performs testing. Both sit within the quality unit under 21 CFR 211.22.
What does the quality unit approve? Components, containers, closures, labeling, finished products, procedures and specifications (eCFR).
What is the most common QA finding? Quality unit procedures not written or not followed, 21 CFR 211.22(d) (GMP Insiders).
Can QA be overruled by production? It should not be; the quality unit must have the authority to reject materials and batches.
References
All pages opened and checked by October 14, 2026.
| Source | Type | Date | Used for |
|---|---|---|---|
| eCFR: 21 CFR 211.22 | Regulation | Current | Quality unit duties |
| GMP Insiders: FY2025 observations | Trade analysis | Jan 5, 2026 | Citation counts |
| FDA warning letter: Nelson Co. | Regulator | Feb 12, 2026 | QU procedures, investigation |
| ECA Academy: QU warning letter | Trade association | n.d. | QU authority |