Title 21 CFR Part 11

Last updated

Title 21 CFR Part 11 is the part of Title 21 of the Code of Federal Regulations that establishes the United States Food and Drug Administration (FDA) regulations on electronic records and electronic signatures (ERES). Part 11, as it is commonly called, defines the criteria under which electronic records and electronic signatures are considered trustworthy, reliable, and equivalent to paper records (Title 21 CFR Part 11 Section 11.1 (a)). [1]



Practically speaking, Part 11 applies to drug makers, medical device manufacturers, biotech companies, biologics developers, CROs, and other FDA-regulated industries, with some specific exceptions. [2] It requires that they implement controls, including audits, system validations, audit trails, electronic signatures, and documentation for software and systems involved in processing the electronic data that FDA predicate rules require them to maintain. A predicate rule is any requirement set forth in the Federal Food, Drug and Cosmetic Act, the Public Health Service Act, or any FDA regulation other than Part 11. [3]

The rule also applies to submissions made to the FDA in electronic format (e.g., a New Drug Application) but not to paper submissions by electronic methods (i.e., faxes). It specifically does not require the 21 CFR Part 11 requirement for record retention for trackbacks by food manufacturers. Most food manufacturers are not otherwise explicitly required to keep detailed records, but electronic documentation kept for HACCP and similar requirements must meet these requirements.

Broad sections of the regulation have been challenged as "very expensive and for some applications almost impractical", [4] and the FDA has stated in guidance that it will exercise enforcement discretion on many parts of the rule. This has led to confusion on exactly what is required, and the rule is being revised. In practice, the requirements on access controls are the only part routinely enforced [ citation needed ]. The "predicate rules", which required organizations to keep records in the first place, are still in effect. If electronic records are illegible, inaccessible, or corrupted, manufacturers are still subject to those requirements.

If a regulated firm keeps "hard copies" of all required records, those paper documents can be considered the authoritative document for regulatory purposes, and the computer system is not in scope for electronic records requirements—though systems that control processes subject to predicate rules still require validation. [5] Firms should be careful to make a claim that the "hard copy" of required records is the authoritative document. For the "hard copy" produced from electronic source to be the authoritative document, it must be a complete and accurate copy of the electronic source. The manufacturer must use the hard copy (rather than electronic versions stored in the system) of the records for regulated activities. The current technical architecture of computer systems increasingly makes the Part 11, Electronic Records; Electronic Signatures — Scope and Application for the complete and accurate copy requirement extremely mandatory. [6]



Various keynote speeches by FDA insiders early in the 21st century (in addition to high-profile audit findings focusing on computer system compliance) resulted in many companies scrambling to mount a defense against rule enforcement that they were procedurally and technologically unprepared for. Many software and instrumentation vendors released Part 11 "compliant" updates that were either incomplete or insufficient to fully comply with the rule. Complaints about the wasting of critical resources, non-value added aspects, in addition to confusion within the drug, medical device, biotech/biologic and other industries about the true scope and enforcement aspects of Part 11 resulted in the FDA release of:

This document was intended to clarify how Part 11 should be implemented and would be enforced. But, as with all FDA guidances, it was not intended to convey the full force of law—rather, it expressed the FDA's "current thinking" on Part 11 compliance. Many within the industry, while pleased with the more limited scope defined in the guidance, complained that, in some areas, the 2003 guidance contradicted requirements in the 1997 Final Rule.

In May 2007, the FDA issued the final version of their guidance on computerized systems in clinical investigations. [7]

This guidance supersedes the guidance of the same name dated April 1999; and supplements the guidance for industry on Part 11, Electronic Records; Electronic Signatures — Scope and Application and the Agency's international harmonization efforts when applying these guidances to source data generated at clinical study sites.

FDA had previously announced that a new Part 11 would be released late 2006. The Agency has since pushed that release date back. The FDA has not announced a revised time of release. John Murray, member of the Part 11 Working Group (the team at FDA developing the new Part 11), has publicly stated that the timetable for release is "flexible".

Benefits of 21 CFR Part 11

21 CFR Part 11 has the following benefits:

See also

Related Research Articles

<span class="mw-page-title-main">Food and Drug Administration</span> United States federal agency

The United States Food and Drug Administration is a federal agency of the Department of Health and Human Services. The FDA is responsible for protecting and promoting public health through the control and supervision of food safety, tobacco products, caffeine products, dietary supplements, prescription and over-the-counter pharmaceutical drugs (medications), vaccines, biopharmaceuticals, blood transfusions, medical devices, electromagnetic radiation emitting devices (ERED), cosmetics, animal foods & feed and veterinary products.

A quality management system (QMS) is a collection of business processes focused on consistently meeting customer requirements and enhancing their satisfaction. It is aligned with an organization's purpose and strategic direction. It is expressed as the organizational goals and aspirations, policies, processes, documented information, and resources needed to implement and maintain it. Early quality management systems emphasized predictable outcomes of an industrial product production line, using simple statistics and random sampling. By the 20th century, labor inputs were typically the most costly inputs in most industrialized societies, so focus shifted to team cooperation and dynamics, especially the early signaling of problems via a continual improvement cycle. In the 21st century, QMS has tended to converge with sustainability and transparency initiatives, as both investor and customer satisfaction and perceived quality are increasingly tied to these factors. Of QMS regimes, the ISO 9000 family of standards is probably the most widely implemented worldwide – the ISO 19011 audit regime applies to both and deals with quality and sustainability and their integration.

<span class="mw-page-title-main">National drug code</span> National Pharmaceutical Identification System,in the USA.

The national drug code (NDC) is a unique product identifier used in the United States for drugs intended for human use. The Drug Listing Act of 1972 requires registered drug establishments to provide the Food and Drug Administration (FDA) with a current list of all drugs manufactured, prepared, propagated, compounded, or processed by it for commercial distribution. Drug products are identified and reported using the NDC.

In the U.S. and Canada, the Reference Daily Intake (RDI) is used in nutrition labeling on food and dietary supplement products to indicate the daily intake level of a nutrient that is considered to be sufficient to meet the requirements of 97–98% of healthy individuals in every demographic in the United States. While developed for the US population, it has been adopted by other countries, though not universally.

<span class="mw-page-title-main">Hazard analysis and critical control points</span> Systematic preventive approach to food safety

Hazard analysis and critical control points, or HACCP, is a systematic preventive approach to food safety from biological, chemical, and physical hazards in production processes that can cause the finished product to be unsafe and designs measures to reduce these risks to a safe level. In this manner, HACCP attempts to avoid hazards rather than attempting to inspect finished products for the effects of those hazards. The HACCP system can be used at all stages of a food chain, from food production and preparation processes including packaging, distribution, etc. The Food and Drug Administration (FDA) and the United States Department of Agriculture (USDA) require mandatory HACCP programs for juice and meat as an effective approach to food safety and protecting public health. Meat HACCP systems are regulated by the USDA, while seafood and juice are regulated by the FDA. All other food companies in the United States that are required to register with the FDA under the Public Health Security and Bioterrorism Preparedness and Response Act of 2002, as well as firms outside the US that export food to the US, are transitioning to mandatory hazard analysis and risk-based preventive controls (HARPC) plans.

<span class="mw-page-title-main">Good manufacturing practice</span> Manufacturing quality standards

Current good manufacturing practices (cGMP) are those conforming to the guidelines recommended by relevant agencies. Those agencies control the authorization and licensing of the manufacture and sale of food and beverages, cosmetics, pharmaceutical products, dietary supplements, and medical devices. These guidelines provide minimum requirements that a manufacturer must meet to assure that their products are consistently high in quality, from batch to batch, for their intended use. The rules that govern each industry may differ significantly; however, the main purpose of GMP is always to prevent harm from occurring to the end user. Additional tenets include ensuring the end product is free from contamination, that it is consistent in its manufacture, that its manufacture has been well documented, that personnel are well trained, and that the product has been checked for quality more than just at the end phase. GMP is typically ensured through the effective use of a quality management system (QMS).

Computerized system validation (CSV) is the process of testing/validating/qualifying a regulated computerized system to ensure that it does exactly what it is designed to do in a consistent and reproducible manner that is as safe, secure and reliable as paper-based records. This is widely used in the Pharmaceutical, Life Sciences and BioTech industries and is a cousin of Software Testing but with a more formal and documented approach. The validation process begins with validation planning, system requirements definition, testing and verification activities, and validation reporting. The system lifecycle then enters the operational phase and continues until system retirement and retention of system data based on regulatory rules.

<span class="mw-page-title-main">Federal Food, Drug, and Cosmetic Act</span> Acts of the United States Congress

The United States Federal Food, Drug, and Cosmetic Act is a set of laws passed by the United States Congress in 1938 giving authority to the U.S. Food and Drug Administration (FDA) to oversee the safety of food, drugs, medical devices, and cosmetics. The FDA's principal representative with members of congress during its drafting was Charles W. Crawford. A principal author of this law was Royal S. Copeland, a three-term U.S. senator from New York. In 1968, the Electronic Product Radiation Control provisions were added to the FD&C. Also in that year the FDA formed the Drug Efficacy Study Implementation (DESI) to incorporate into FD&C regulations the recommendations from a National Academy of Sciences investigation of effectiveness of previously marketed drugs. The act has been amended many times, most recently to add requirements about bioterrorism preparations.

An electronic lab notebook is a computer program designed to replace paper laboratory notebooks. Lab notebooks in general are used by scientists, engineers, and technicians to document research, experiments, and procedures performed in a laboratory. A lab notebook is often maintained to be a legal document and may be used in a court of law as evidence. Similar to an inventor's notebook, the lab notebook is also often referred to in patent prosecution and intellectual property litigation.

The process of establishing documentary evidence demonstrating that a procedure, process, or activity carried out in testing and then production maintains the desired level of compliance at all stages. In the pharmaceutical industry, it is very important that in addition to final testing and compliance of products, it is also assured that the process will consistently produce the expected results. The desired results are established in terms of specifications for outcome of the process. Qualification of systems and equipment is therefore a part of the process of validation. Validation is a requirement of food, drug and pharmaceutical regulating agencies such as the US FDA and their good manufacturing practices guidelines. Since a wide variety of procedures, processes, and activities need to be validated, the field of validation is divided into a number of subsections including the following:

Title 21 is the portion of the Code of Federal Regulations that governs food and drugs within the United States for the Food and Drug Administration (FDA), the Drug Enforcement Administration (DEA), and the Office of National Drug Control Policy (ONDCP).

<span class="mw-page-title-main">Office of Global Regulatory Operations and Policy</span>

The Office of Global Regulatory Operations and Policy (GO), also known as the Office of Regulatory Affairs (ORA), is the part of the U.S. Food and Drug Administration (FDA) enforcing the federal laws governing biologics, cosmetics, dietary supplements, drugs, food, medical devices, radiation-emitting electronic devices, tobacco products, and veterinary medicine products which may have potentially harmful side effects for the consumer.

<span class="mw-page-title-main">Medical food</span>

Medical foods are foods that are specially formulated and intended for the dietary management of a disease that has distinctive nutritional needs that cannot be met by normal diet alone. In the United States they were defined in the Food and Drug Administration's 1988 Orphan Drug Act Amendments and are subject to the general food and safety labeling requirements of the Federal Food, Drug, and Cosmetic Act. In Europe the European Food Safety Authority established definitions for "foods for special medical purposes" (FSMPs) in 2015.

Good clinical data management practice (GCDMP) is the current industry standards for clinical data management that consist of best business practice and acceptable regulatory standards. In all phases of clinical trials, clinical and laboratory information must be collected and converted to digital form for analysis and reporting purposes. The U.S. Food and Drug Administration and International Conference on Harmonisation of Technical Requirements for Registration of Pharmaceuticals for Human Use have provided specific regulations and guidelines surrounding this component of the drug and device development process. The effective, efficient and regulatory-compliant management of clinical trial data is an essential component of drug and device development.

Good tissue practice (GTP) is one of the "GxP" requirements derived from good manufacturing practice. The rule was written and is enforced by the U.S. Food and Drug Administration (FDA), specifically the Center for Biologics Evaluation and Research. The authority for the regulation comes from the Public Health Service Act and all of the requirements relate to transmission of communicable disease, including bacterial or fungal contamination during processing.

Design controls designates the application of a formal methodology to the conduct of product development activities. It is often mandatory to implement such practice when designing and developing products within regulated industries.

Good documentation practice is a term in the pharmaceutical and medical device industries to describe standards by which documents are created and maintained. While some GDP / GDocP standards are codified by various competent authorities, others are not but are considered cGMP. Some competent authorities release or adopt guidelines, and they may include non-codified GDP / GDocP expectations. While not law, authorities will inspect against these guidelines and cGMP expectations in addition to the legal requirements and make comments or observations if departures are seen. In the past years, the application of GDocP is also expanding to cosmetic industry, excipient and ingredient manufacturers.

The U.S. Food and Drug Administration (FDA) is authorized to perform inspections under the Federal Food, Drug, and Cosmetic Act, Sec. 704 "Factory Inspection". Form FDA 483, "Inspectional Observations", is a form used by the FDA to document and communicate concerns discovered during these inspections. Also referred to as "Form 483" or merely "483", it states thereon that it

... lists observations made by the FDA representative(s) during the inspection of your facility. They are inspectional observations, and do not represent a final Agency determination regarding your compliance

An electronic trial master file (eTMF) is a trial master file in electronic format. It is a type of content management system for the pharmaceutical industry, providing a formalized means of organizing and storing documents, images, and other digital content for pharmaceutical clinical trials that may be required for compliance with government regulatory agencies. The term eTMF encompasses strategies, methods and tools used throughout the lifecycle of the clinical trial regulated content. An eTMF system consists of software and hardware that facilitates the management of regulated clinical trial content. Regulatory agencies have outlined the required components of eTMF systems that use electronic means to store the content of a clinical trial, requiring that they include: Digital content archiving, security and access control, change controls, audit trails, and system validation.

Approvable letters, and the related non-approvable letters, were notifications sent out by the Food and Drug Administration (FDA) to drug manufacturers alerting them to the approval prospects of their drugs under development. The letters were intended to let manufacturers know how much work is needed on their applications. Non-approval letters were rejections of a drug's application. Approvable and non-approvable letters were covered under Title 21 of the Code of Federal Regulations, section 314.110.


  1. "CFR - Code of Federal Regulations Title 21". U.S. Food & Drug Administration. U.S. Food & Drug Administration. Retrieved 15 September 2016.
  2. "Food and Drug Administration CFR Title 21 Part 11". Microsoft. Microsoft. Retrieved 15 September 2016.
  3. "Part 11, Electronic Records; Electronic Signatures — Scope and Application". U.S. Food & Drug Administration. U.S. Food & Drug Administration. Retrieved 15 September 2016.
  4. "21 CFR Part 11 - Electronic Records and Electronic Signatures". Lab Compliance. Lab Compliance. Archived from the original on 27 August 2016. Retrieved 15 September 2016.
  5. "Part 11, Electronic Records; Electronic Signatures — Scope and Application". U.S. Food & Drug Administration. U.S. Food & Drug Administration. Retrieved 15 September 2016.
  6. "CFR - Code of Federal Regulations Title 21". U.S. Food & Drug Administration. U.S. Food & Drug Administration. Retrieved 15 September 2016.
  7. "GUIDANCE DOCUMENT Computerized Systems Used in Clinical Investigations Guidance for Industry May 2007". FDA. Archived from the original on 2023-01-24. Retrieved 1 Feb 2023.