CAPA & Deviations
Explore this topic in more depth to build a complete picture of your quality and compliance operations.
Explore
Glossary Term
Good Distribution Practice (GDP)
The quality rules that govern medicines after they leave the manufacturing site — and the Responsible Person who owns them.
GDP extends GMP-grade discipline into distribution — and most of what it asks for is quality-system work: a documented quality system, a named Responsible Person, governed deviations, qualified suppliers and customers, and self-inspection that closes findings.
On this page
What Good Distribution Practice is
Good Distribution Practice (GDP) is the framework of quality requirements that govern the distribution of medicinal products from manufacturer release through wholesale, warehousing, transport, and final delivery to the customer (typically a hospital, pharmacy, or authorised dispenser). GDP is the quality discipline that ensures product authenticity, integrity, traceability, and conformance to labelled specification across every distribution touchpoint after manufacture.
The framework is distinct from but interlocking with Good Manufacturing Practice. GMP governs how the product is made; GDP governs how it travels. The handoff is the manufacturer's QP release: the product passes from the manufacturer's GMP-governed quality system into the distributor's GDP-governed quality system. A break in either system can compromise the product; both must hold.
In the EU the reference is the Guidelines on GDP of medicinal products for human use (2013/C 343/01); equivalent expectations exist in other regions, and a separate set of GDP guidelines covers active substances. GDP covers the physical disciplines — temperature control and cold chain, premises and equipment, transportation and routing, handling of returns, and controls against falsified medicines — and it requires the appointment of a Responsible Person (RP) accountable for the quality system and GDP compliance at a wholesale distributor.
GDP applies to wholesale distributors, but also to manufacturers who distribute their own products and, in practice, to the brokers and logistics providers in between. A break anywhere in that chain — a temperature excursion in transit, a falsified product entering through a poorly-qualified supplier — can compromise a product that left the factory perfect.
GMP vs GDP — the boundary that defines the handoff
| Dimension | GMP | GDP |
|---|---|---|
| Primary scope | How the product is manufactured | How the product is distributed after manufacture |
| Named owner role | Qualified Person (QP) for batch release | Responsible Person (RP) for distribution oversight |
| Authorisation type | Manufacturing Authorisation (MA) | Wholesale Distribution Authorisation (WDA) |
| Handoff point | QP release (end of GMP scope) | Receipt at the wholesale distributor |
| Key risks managed | Manufacturing variability, raw materials, in-process and finished-product quality | Storage integrity, transport integrity, supply chain authenticity, complaint and recall responsiveness |
| Self-inspection scope | Internal audit per ICH Q10 §4, GMP Chapter 9 | Self-inspection per GDP Chapter 8 §8.1 |
| Recall framework | EU GMP Chapter 8, Annex 15; FDA Recall Strategy | EU GDP Chapter 6 §6.4 with RP and competent-authority coordination |
Where the eQMS line sits
GDP's physical controls — warehouse temperature mapping, vehicle and cold-chain qualification, route monitoring, FMD verification connectivity — are facility, logistics, and supply-chain integration functions, not eQMS functions. Its quality-system spine — SOPs, training, deviations, CAPA, supplier/customer qualification, RP signoffs, self-inspection records, recall management — is exactly what an eQMS governs. A platform that claimed to monitor your cold chain would be overstepping; one that governs the records proving your quality system works is doing its job.
Why GDP is its own inspection
A GDP authorisation (a Wholesale Distribution Authorisation in the EU) is inspected in its own right, separately from GMP, and a GDP non-compliance can suspend a distributor's authorisation — stopping product movement entirely. Wholesale distributors, and manufacturers who also distribute, must demonstrate a functioning quality system: current SOPs at every site, trained staff with defined responsibilities including the RP, deviations and complaints handled and trended, suppliers and customers qualified before trading, and a self-inspection programme that actually finds and closes issues.
The supply chain is also the front line against falsified medicines: GDP's supplier and customer qualification requirements, combined with the EU Falsified Medicines Directive's verification at dispensing, are how counterfeit and diverted product is kept out of the legitimate chain. A distributor who trades with an unqualified supplier has opened the door, and that qualification evidence is a quality-system record.
The recurring findings cluster around predictable gaps: uncontrolled or out-of-date procedures, training gaps, deviations closed without investigation, supplier qualification missing or stale, self-inspections that are performed but never drive corrective action. The cold chain gets the headlines and the capital investment; the QMS records decide the inspection. EU inspection cycles run every 2–5 years with unannounced inspections increasing since 2018.
Inspector perspective: “Show me the Responsible Person's signed release of last month's returned products to saleable stock. I want to see the quality assessment that supported each release. Then show me the supplier qualification file for [named supplier] and the most recent self-inspection report covering Chapter 5 operations.” The three records together tell the inspector whether the RP is operationally engaged, whether supplier qualification is current, and whether self-inspection is detecting and closing operational gaps. A gap in any one of the three triggers a deeper inspection.
Where GDP requirements live
The regulatory framework for GDP spans European, US, and international references, with the European framework being the most developed and prescriptive:
- EU GDP Guidelines 2013/C 343/01 — the primary EU reference. Chapter 1 Quality Management; Chapter 2 Personnel including the Responsible Person; Chapter 3 Premises and Equipment; Chapter 4 Documentation; Chapter 5 Operations including supplier and customer qualification; Chapter 6 Complaints, Returns, Falsified Medicinal Products, Recalls; Chapter 7 Outsourced Activities; Chapter 8 Self-Inspection; Chapter 9 Transportation.
- EU GDP for Active Substances (2015/C 95/01) — parallel guidelines covering APIs in distribution
- EU Falsified Medicines Directive (2011/62/EU) — supply-chain integrity and verification, interlocking with GDP supplier/customer controls. Commission Delegated Regulation 2016/161 supplemented FMD with technical specifications for safety features.
- WHO TRS 957 Annex 5: GDP for Pharmaceutical Products — the global reference many non-EU jurisdictions model their GDP rules on
- EU GMP Chapter 1 — the pharmaceutical quality system, of which GDP's quality system is the distribution-facing extension
- PIC/S PE 011-1 GDP Guide — the PIC/S equivalent adopted by PIC/S participating authorities (Australia TGA, UK MHRA post-Brexit, Singapore HSA, Canada, Switzerland)
- US Drug Supply Chain Security Act (DSCSA) — Title II of the Drug Quality and Security Act of 2013; serialisation, verification, and enhanced drug distribution security pillars phased in through November 2023
- 21 CFR Part 205 — US wholesale drug distribution requirements
- UK Human Medicines Regulations 2012 (as amended) — UK GDP framework post-Brexit, administered by MHRA; closely mirrors EU 2013/C 343/01
- National GDP regulations — most jurisdictions have their own GDP rules and inspectorates; the EU guidelines are the most widely modelled
What a GDP inspection probes
A GDP inspection of a distribution site walks the quality system as much as the warehouse. Beyond checking temperature-mapping records and walking the storage areas, inspectors test the QMS behind the operation:
The quality system and RP. Is there a documented quality system with current SOPs at this site? Is the Responsible Person appointed, trained, and actually exercising oversight — with records of their decisions, approvals, and reviews? An RP who is named but not demonstrably active is a finding.
Deviations and complaints. How are temperature excursions, damaged-goods events, and customer complaints handled? Are they governed deviations with investigation and CAPA, or are they logged and forgotten? Inspectors follow specific excursions into the record. Excursion-handling without documented QA assessment is the typical finding pattern.
Supplier and customer qualification (§5.2, §5.3). Is every supplier and customer qualified before trading — verified authorisation, bona fides checked — and re-qualified on a cadence? This is the falsified-medicines firewall, and gaps here are taken seriously.
Returns to saleable stock (§5.5, §6.2). The RP signoff requirement on returns is a controlling discipline. Inspectors review returns decisions disproportionately because the pattern reveals RP engagement.
Self-inspection (Chapter 8). Is there a self-inspection programme, is it performed on schedule, and — critically — do its findings drive documented corrective action? A self-inspection programme that never finds anything, or finds things that are never fixed, is worse than none.
Recall capability (§6.4). Annual mock recalls test the firm's ability to identify, locate, and recover distributed product within regulator-expected timelines. The mock-recall report documents time-to-recall, completeness of recovery, and corrective actions for gaps.
The temperature data lives in monitoring systems and the goods move on qualified vehicles; but the SOPs, the RP's oversight records, the deviations, the qualification files, the returns dispositions, the self-inspection reports, and the mock-recall outcomes are quality-system records, and their completeness decides the inspection.
What strong GDP quality systems share
The cold chain is engineering; these are the quality-system controls that make a GDP operation defensible:
The self-inspection that never closes a finding
A GDP self-inspection programme that runs on schedule but whose findings never become tracked, closed corrective actions is a finding in itself — it signals a quality system going through the motions. Inspectors check not just that self-inspections happen, but that what they find actually drives change. The loop has to close, and the closure has to be evidenced. The same pattern applies to mock recalls — annual exercises that produce no findings year after year are a red flag, not reassurance.
- Current, site-specific SOPs — controlled, one effective version, covering each GDP activity at each site
- An operationally engaged Responsible Person — appointed, trained, present at the site, signing off on returns/qualifications/significant deviations — not a nominal RP
- Trained personnel with defined roles — GDP training delivered and recorded, responsibilities clear
- Governed deviations and complaints — temperature excursions, damage, and complaints investigated with documented quality assessment, not just logged
- Supplier and customer qualification (§5.2, §5.3) — verified before trading, re-qualified on cadence; the falsified-medicines firewall
- FMD verification operation — verification at receipt, decommissioning at supply, suspect-status handling per §6.3
- Outsourced-activity agreements (Chapter 7) — written contracts with logistics and storage providers defining GDP responsibilities, periodic audit per risk-based schedule
- Returns handling with RP signoff — every return-to-saleable-stock decision documented and signed by the RP, not delegated
- A working self-inspection programme — scheduled, performed, with findings driven to closure via CAPA within defined windows (typically 90 days for major findings)
- Annual mock recalls with documented outcomes — time-to-recall, completeness of recovery, corrective actions for gaps
- Temperature-excursion management — defined limits, impact assessment on product, documented QA decisions
- Falsified-product handling procedure — operational evidence of FMD verification connectivity and notification capability to competent authority
How Complere supports GDP quality work
Complere governs the GDP quality-system layer — not the warehouse, not the vehicles, not the cold chain, not the FMD verification platform. Those are facility, logistics, and supply-chain integration functions, and an eQMS claiming to monitor temperature or qualify a refrigerated truck would be overstepping. What Complere does govern is the set of records a GDP inspection actually reads.
Controlled SOPs across distribution sites — one effective version, full revision history, retirement of superseded procedures — so each site works to current instructions. The Responsible Person role is supported through role-based approval routing and e-signatures that enforce RP signoff on the GDP decisions you run through Complere — significant deviations, supplier/customer qualification status changes, and controlled documents. Role-based training with completion evidence and competency sign-off, including the RP and site staff. Deviations and complaints — temperature excursions, damaged goods, customer complaints — captured, investigated, and trended, with the impact-on-product assessment recorded and RP signoff enforced. Supplier and customer qualification records maintained as controlled evidence with periodic-review triggers.
A self-inspection programme run in Audit Management, where findings are captured, classified, and driven to closure through linked CAPAs — closing the loop the inspection checks for. Recall decisions, communications, and mock-recall exercises are run as controlled records — the decision evidence, RP signoff, and outcome reports live in document control and the audit workflow — while the physical recall logistics run in your operational systems.
What Complere does not provide: real-time WMS inventory, continuous cold-chain temperature monitoring, or FMD verification platform connectivity to NMVS. Firms operating under GDP typically pair Complere with a Warehouse Management System (WMS), a temperature monitoring platform, and an FMD verification platform — with the quality-system layer running through Complere. The boundary is the kind of architectural distinction the buyer evaluating Complere for GDP scope should hear before contract signature: both layers are needed; neither alone is sufficient.
Frequently asked questions
Common questions about Good Distribution Practice (GDP) sourced from regulatory references and inspection patterns.
Who can be the Responsible Person, and what makes the role operationally enforceable?
The Responsible Person (RP) is named under the wholesale distribution authorisation and must have appropriate competence and experience per EU GDP Chapter 2 §2.2 — typically a degree in a scientific discipline (pharmacy, chemistry, biology) plus relevant practical experience in pharmaceutical distribution. The role is enforceable when the RP is operationally engaged: their name appears on current quality records, they signed off on recent significant decisions, training records are current, and they have authority to halt distribution of suspect product without external approval. A nominal RP — named for regulatory purposes but operationally absent — is the most-frequently-found GDP deficiency in EU inspections.
How is a cold-chain temperature excursion handled, in operational terms?
Four stages: (1) detection — monitoring system flags out-of-range in real time, with documented alarming and operator notification; (2) segregation — affected product segregated from saleable stock pending quality assessment; (3) quality assessment — QA reviews the excursion against the product's stability data and the manufacturer's release specification; (4) disposition — documented decision recorded with RP signoff for returns-to-saleable-stock. An excursion handled informally — flagged in real-time but without documented quality assessment — is a typical finding pattern.
What is the Falsified Medicines Directive (FMD) verification operation and how does it interact with GDP?
The Falsified Medicines Directive layered anti-counterfeit requirements onto GDP starting 9 February 2019. The pillars are serialisation (every prescription package carries a unique identifier in a 2D Data Matrix) and verification (the identifier is verified against the National Medicines Verification System at multiple supply-chain points). Wholesale distributors verify at receipt and decommission at supply. The GDP Chapter 6 §6.3 handling for suspected falsified medicines integrates with the FMD verification workflow — when NMVS verification fails or returns an unexpected status, the falsified-handling procedure activates.
How are returns to saleable stock decided and who has the authority?
EU GDP Chapter 5 §5.5 and Chapter 6 §6.2 require: (1) the product was distributed by the firm to the returning customer (receipt evidence on file); (2) storage conditions during customer possession were within labelled specification (documented); (3) packaging intact, no tampering signs (physical inspection); (4) sufficient remaining shelf life; (5) RP quality assessment confirms suitability. The RP signoff is the controlling step. Returns failing the criteria are destroyed per Chapter 5 §5.6 with evidence. Competent authority inspectors review returns-to-saleable-stock decisions disproportionately because the pattern reveals RP discipline.
What is the difference between EU GDP (2013/C 343/01) and UK GDP under MHRA?
After Brexit, the UK left the EU regulatory framework but maintained substantial alignment. UK GDP requirements are codified in the UK Human Medicines Regulations 2012 as amended, with MHRA as the responsible competent authority. The MHRA published UK Guidelines on Good Distribution Practice that closely mirror EU 2013/C 343/01 in structure and content — with UK-specific provisions for medicines moving between Great Britain and Northern Ireland, MHRA-specific RP qualification, and WDA renewal cycles. The UK is also a PIC/S participating authority. Operationally, the GDP discipline is largely consistent between EU and UK.
How does the Drug Supply Chain Security Act (DSCSA) interact with US distribution quality work?
DSCSA provides the US framework for traceability through pharmaceutical distribution, structurally analogous to but distinct from EU FMD. Requirements phased in across 10 years through November 2023: serialisation of every prescription package, transaction information/history/statement (TI/TH/TS) exchange at each transfer, verification of returned product, suspect-product handling with FDA notification, and enhanced drug distribution security with interoperable electronic systems. Unlike EU, the US does not have a single 'GDP guideline' — expectations live across DSCSA, 21 CFR Part 205, state Boards of Pharmacy, and various FDA guidance documents.
What does a mock recall look like, and what are inspectors checking for?
A mock recall simulates a real recall to test the firm's ability to identify, locate, and recover distributed product within regulator-expected timelines — typically performed annually. The procedure walks through identification of the batch and downstream customers, communication to affected customers, recovery and return, reconciliation of quantities distributed against quantities recovered, and report-out to senior management and the RP. The outcome records time-to-recall, completeness of recovery, gaps identified, and corrective actions. A pattern of mock recalls year-over-year with no findings signals the exercise is performative; real exercises surface findings and drive demonstrable improvement.
How does Complere's scope compare to a Warehouse Management System (WMS) or a cold-chain monitoring platform?
Complere governs the GDP quality-system layer — SOPs, training records, RP decisions, deviations, supplier/customer qualification files, CAPA, self-inspection programme, recall management. It does NOT provide real-time WMS inventory, continuous cold-chain temperature monitoring, or FMD verification connectivity to NMVS. Firms operating under GDP typically pair Complere with a WMS, a temperature monitoring platform, and an FMD verification platform. Both layers are needed; neither alone is sufficient for serious GDP-regulated operations. The boundary is the architectural distinction the buyer should hear before contract signature.
Continue Exploring
Explore related topics, modules, and compliance resources for a deeper understanding of your quality system.
See the GDP quality-system layer in one connected platform
Walk through how Complere keeps the GDP documents, deviations, supplier qualification, training, and self-inspection records that competent authorities request.