What You Need
to Know.
The regulatory landscape for biologics, cell & gene therapies, and pharmaceutical products is complex, layered, and constantly evolving. This is your plain-language guide to the frameworks, requirements, and milestones that govern your path from bench to market — and what they mean for your quality strategy.
Title 21 — Code of Federal Regulations
The Foundation of US GMP Compliance
Every pharmaceutical and biological product manufactured for the US market operates under Title 21 of the Code of Federal Regulations. Here are the parts most relevant to your quality and compliance program — and what each one actually governs.
Current Good Manufacturing Practice — Finished Pharmaceuticals
The backbone of pharmaceutical GMP. Covers everything from personnel qualifications and facility requirements to laboratory controls, production records, and distribution. If you make a drug product, this applies.
Biological Products — General Standards
The regulatory framework governing biological products including vaccines, blood products, and biologics. Covers establishment standards, product licensing, labeling, and distribution. Critical for any BLA pathway.
Electronic Records & Electronic Signatures
Defines criteria under which electronic records and signatures are considered trustworthy and equivalent to paper. If your lab uses any electronic system — LIMS, eQMS, spreadsheets — Part 11 is in play. Data integrity starts here.
Good Laboratory Practice (GLP) — Nonclinical Studies
Governs the conduct of nonclinical laboratory studies intended to support research or marketing permits. Primarily applies to pre-clinical and toxicology studies using animal models.
Quality System Regulation — Medical Devices
Now harmonized with ISO 13485:2016. Applies to device manufacturers and combination products. If your product has both drug and device components, understanding this overlap is essential for your QMS design.
Investigating Out-of-Specification (OOS) Test Results for Pharmaceutical Production
The definitive FDA roadmap for conducting a proper OOS investigation. Every Phase 2+ company needs an OOS SOP aligned to this guidance. If you're getting 483s for OOS handling, this is the place to start.
Flexible Initiative: Process Validation Flexibilities (2026)
FDA's 2026 update providing more adaptive, risk-based approaches to process validation — particularly relevant for cell & gene therapies. Allows for more flexible PPQ strategies when supported by strong process understanding.
Potency Assurance Guidance (Updated 2024)
Critical reading for any company developing biological or cell-based products. Covers how FDA expects potency assays to be designed, validated, and maintained throughout the product lifecycle.
Compliance Program 7382.850 — Drug Manufacturing Inspections
This is the FDA's internal playbook for how inspectors approach drug manufacturing site inspections. Understanding what they're looking for before they walk in the door is the foundation of real audit readiness.
International Council for Harmonization
The Global Standard for Drug Development Quality
ICH guidelines represent internationally harmonized technical requirements for pharmaceutical development. These aren't optional — they're the scientific and regulatory language your submissions, validations, and quality systems need to speak.
| Category | Guideline | What It Covers & Why It Matters |
|---|---|---|
| Quality | ICH Q1 | Stability testing of new drug substances and products. Defines study design, storage conditions, and shelf-life determination requirements. |
| Quality | ICH Q2 (R2) | Validation of Analytical Procedures. The primary guidance for method validation — specificity, linearity, accuracy, precision, and more. Every validation protocol should reference this. |
| Quality | ICH Q8 | Pharmaceutical Development. Encourages Quality by Design (QbD) approaches. Defines the Design Space concept and how product understanding drives your control strategy. |
| Quality | ICH Q9 | Quality Risk Management. The framework for identifying, assessing, and controlling quality risks throughout the product lifecycle. Underpins FMEA, HACCP, and risk-based validation approaches. |
| Quality | ICH Q10 | Pharmaceutical Quality System. Describes the model for an effective PQS — covering product realization, process performance monitoring, and CAPA systems. Your QMS should map to this. |
| Quality | ICH Q11 | Development and Manufacture of Drug Substances. Specific to drug substance (API/biologic) development and manufacture. Critical for biologics manufacturers defining their control strategy. |
| Quality | ICH Q12 | Lifecycle Management. Framework for managing post-approval changes efficiently. Introduces Established Conditions (ECs) and Product Lifecycle Management (PLCM) documents. |
| Quality | ICH Q14 | Analytical Procedure Development. The newer companion to Q2(R2) — applies QbD principles to analytical methods. Increasingly cited in FDA interactions. |
| Efficacy | ICH E6 (R2/R3) | Good Clinical Practice (GCP). The international standard for designing, conducting, and reporting clinical trials. Essential if your work touches clinical study data or sponsor oversight. |
| Multidisciplinary | ICH M15 | Model-Informed Drug Development. Supports use of quantitative models and simulations to inform development decisions — relevant for dose selection and clinical trial optimization. |
| Multidisciplinary | ICH M4Q (R2) | Common Technical Document — Quality Module. Defines format and content of the quality section of all regulatory submissions. Your BLA/NDA/MAA quality module must follow this structure. |
United States Pharmacopeia
The Compendial Standard for Analytical Methods & Biological Assays
USP chapters provide compendial standards that are legally enforceable for products sold in the US. For biologics and cell-based products, these chapters are your scientific anchor for assay design and validation.
Design of Biological Assays
Principles for designing statistically valid biological assays. Covers dose-response relationships, assay formats, and experimental design for potency testing.
Biological Assay Validation
Validation requirements for biological assays — accuracy, precision, linearity, range, specificity, and robustness. Works with ICH Q2(R2) for cell-based potency assays.
Analysis of Biological Assays
Statistical analysis methods for interpreting biological assay results. Essential for establishing valid potency calculations and release criteria.
Validation of Compendial Procedures
Validation requirements when using USP compendial methods. Defines what must be verified versus fully validated when adapting a pharmacopeial procedure.
Verification of Compendial Procedures
The standard for demonstrating that a compendial procedure performs suitably in your laboratory. Required before using any USP method in a GMP context.
ISO Standards
Quality Framework & Laboratory Competence
ISO standards provide internationally recognized frameworks for quality management and laboratory operations. While not always legally mandated for pharmaceutical products, they underpin FDA-recognized QMS models and are required for medical device manufacturing.
Medical Devices — Quality Management Systems
The QMS standard for medical devices, now harmonized with 21 CFR Part 820. Applicable to combination products and any company in the device supply chain. If your product has a device component, your QMS needs to address this.
Medical Laboratories — Quality & Competence
Specifies requirements for quality and competence in medical laboratories. Relevant for clinical and diagnostic labs performing GMP testing and particularly useful for labs seeking accreditation alongside GMP compliance.
Quality Management Systems — Foundation
The foundational QMS standard applicable to any organization. Forms the backbone of ICH Q10 and many GMP-aligned quality systems. Early-stage companies often build on ISO 9001 principles before layering on pharmaceutical-specific requirements.
From Bench to Market —
What FDA Expects at Every Stage
Regulatory requirements aren't static — they evolve as your product advances. Here's what you need to have in place at each stage, and where most companies get caught off guard.
Pre-Clinical Development
The science is front and center here. Manufacturing doesn't need to be commercial grade, but it must be representative. If you switch from Process A in pre-clinical to Process B in the clinic, you'll need comparability data. Start building your quality foundation now — not later.
Pre-IND Meeting (Type B) — Not Required, Highly Recommended
- Request 4–6 months before IND submission
- Align with FDA on CMC expectations early
- Prepare a formal Meeting Briefing Package
- Identify gaps before they become 483s
Investigational New Drug (IND)
Your IND CMC section (Module 3) doesn't require a final validation report — but your analytical methods must be scientifically sound and your manufacturing process clearly described. This is where a solid quality system starts paying dividends.
IND CMC — What Must Be Filed
- Drug substance/product description: molecular structure & characterization
- Manufacturing summary: process flowchart and facility description
- Analytical methods: demonstrate scientific soundness (not full validation yet)
- Jan 2026: Cell & gene therapies — FDA allows "Permissive Product Quality Release"
First-in-Human Studies
Phase 1 is about safety and characterization. Manufacturing operates under "Phase-appropriate GMP" — full validation isn't required yet, but you must demonstrate the product is safe, consistent, and well-characterized. Your quality system should be functional and documented by this point.
Key Quality System Requirements at Phase 1
- Functional OOS/OOT/AIA investigation procedures
- Change control process in place
- Training records current and complete
- Method qualification data supporting release testing
- Deviation management with documented root cause analysis
Pivotal Clinical Trials
Stakes escalate significantly here. Any significant manufacturing change requires an IND Information Amendment. The End-of-Phase 2 (EOP2) Meeting with FDA is a critical milestone — this is where you align on your Process Performance Qualification (PPQ) strategy before Phase 3.
Don't Enter Phase 3 Without These
- Fully validated analytical methods per ICH Q2(R2)
- Validated potency assay with established specifications
- Agreed PPQ strategy from EOP2 meeting minutes
- Robust CAPA system with demonstrated effectiveness
- QMS capable of supporting commercial scale operations
Biologics License Application (BLA) / New Drug Application (NDA)
You've done the work. Now it all goes on paper. The quality module (eCTD Module 3) must be comprehensive, internally consistent, and tell a coherent story of your process development, validation, and control strategy. FDA will conduct a Pre-Approval Inspection (PAI) — inspectors visit the site directly.
PAI Readiness — What FDA Looks For
- Data integrity across all systems — paper and electronic
- All PPQ batch records complete and verified
- Analytical method validation packages final and approved
- OOS history reviewed — all investigations closed
- Training records current for all personnel involved in manufacture
- Change control history documented and complete
Lifecycle Management — Post-Approval Changes
Approval isn't the finish line — it's the starting line for lifecycle management. Any change to your manufacturing process, analytical methods, or facilities must be filed with FDA under the appropriate supplement category. Getting the classification wrong can mean implementing a change before approval — a serious compliance violation.
Change Classification — Know Before You File
- Prior Approval Supplement (PAS): Major changes. Cannot implement until FDA approves (4–6 months)
- Changes Being Effected — CBE-30: Moderate changes. File, wait 30 days, implement if no objection
- Annual Report: Minor changes such as editorial SOP updates and minor method optimizations
Top FDA 483 Citations —
And What They Actually Mean
A Form 483 is issued when an FDA investigator observes conditions that may constitute violations of the Food Drug and Cosmetic Act. These are the citations that show up most frequently — and the ones a well-built quality system prevents.
Laboratory Controls — Inadequate OOS Investigation
Failure to conduct a thorough investigation when a test result falls outside established specifications. The most common and most preventable 483 citation. Requires a phase-appropriate OOS SOP and trained investigators.
Data Integrity Failures
Altered records, deleted runs, uncontrolled spreadsheets, or electronic systems without audit trails. FDA takes this extremely seriously — data integrity issues can trigger Warning Letters and import alerts. 21 CFR Part 11 compliance is your protection.
Inadequate CAPA System
CAPAs that aren't closed, don't address root cause, or lack effectiveness checks. FDA wants to see that when something goes wrong, you found the real reason and fixed it — not just the symptom.
Training Records — Incomplete or Not Current
Personnel performing GMP activities without documented, current training. Every analyst must have training records tied to the specific SOP version they're working under. Version control and training alignment are non-negotiable.
Method Validation — Insufficient or Not Completed
Release testing performed with methods that haven't been adequately validated or transferred. Particularly common for companies transitioning from development to GMP testing without a formal validation package per ICH Q2(R2).
EU / EMA Regulatory Guidance
Coming Soon
The European regulatory landscape — including EMA guidelines, EudraLex Volume 4 Annex requirements, ATMP regulations, and the latest 2026 reforms — is in development. This section will cover everything you need to know about taking your product to the EU market.
EudraLex Vol. 4 Annex 2
Biological medicinal substances GMP requirements
ATMP Regulation (EC) 1394/2007
Cell & gene therapy regulation in the EU
EMA Annex 1 (Revised)
Sterility assurance — updated manufacturing requirements
2026 EMA Reforms
New flexibility pathways for innovative products
CTA / CTIS Portal
Clinical trial authorization via the EU unified portal
Variations 2026
Overhauled post-approval change framework
Know the Landscape.
Build With Confidence.
Understanding the regulations is step one. Having an experienced partner help you apply them to your specific product, stage, and team is what actually moves the needle.