Top Observations by CDSCO GMP Inspectors During Pharmaceutical Audits
As India’s regulatory authority, the Central Drugs Standard Control Organization (CDSCO) conducts thousands of GMP inspections each year across pharmaceutical manufacturing facilities. These inspections aim to verify compliance with Schedule M and ensure that drug products meet required standards of safety, efficacy, and quality. In this article, we outline the most common observations made by CDSCO GMP inspectors, their implications, and how pharma companies can proactively address them.
Why CDSCO Inspections Are Increasingly Focused and Risk-Based
- CDSCO follows a risk-based inspection approach based on:
- Product category and criticality (e.g., injectables, biologics)
- Past compliance history and CAPA responsiveness
- Market alerts, complaints, and global regulatory reports
- Focus has shifted from checklist audits to holistic Quality Management System (QMS) reviews
- Inspectors evaluate SOP implementation, personnel competency, and stability testing in depth
Most Frequent Observations by CDSCO GMP Inspectors
- Poor Documentation Practices
- Batch Manufacturing Records (BMRs) with overwriting, missing entries, or gaps
- Lack of contemporaneous recording of data (entries made after the fact)
- Inadequate logbooks for equipment usage and cleaning
- Data Integrity Deficiencies
- Unauthorized access to computerized systems (LIMS, HPLC software)
- Disabled or missing audit trails
- Backdating or manipulation of analytical results
- Deviation Handling and CAPA Gaps
- Failure to investigate deviations thoroughly
- No documented root cause
analysis
Repetitive issues not escalated or trended
Validation and Qualification Inconsistencies
Stability Studies and Expiry Justification
Inadequate Personnel Training
Environmental Monitoring Lapses
Deficiencies in Vendor Qualification
Labeling and Packaging Errors
Improper Storage of Raw Materials
- Equipment not calibrated within due dates
- Cleaning validation protocols not followed
- Process validation reports missing risk assessments
- Stability chambers with temperature excursions and no documentation
- Inconsistent sampling intervals
- No justification for assigned shelf-life or accelerated study protocol
- Training records incomplete or not role-specific
- No assessments to verify training effectiveness
- Absence of GMP refresher training calendar
- Sampling plans not based on risk or production activity
- Unexplained out-of-limit microbial counts
- Inadequate HVAC qualification or change filters overdue
- No periodic audits of critical suppliers
- Incomplete vendor risk assessments
- Absence of quality agreements for outsourced testing
- Mislabeled cartons or cartons without proper overprinting checks
- Manual interventions not documented during packaging operations
- Absence of line clearance logs or reconciliation statements
- Materials stored beyond expiry with no disposition records
- Mixing of quarantined and approved lots in same area
- No segregation between APIs and excipients in warehouse
How CDSCO Classifies Observations
- Critical: Direct risk to product quality or patient safety
- Major: Significant non-conformity affecting process control or compliance
- Minor: Technical gaps without immediate risk
- Frequent or repeat Major issues may escalate compliance rating
Typical Response Expectations After an Inspection
- Facility receives a written inspection report highlighting deficiencies
- A CAPA plan must be submitted within 30 calendar days
- CAPA should include:
- Root cause analysis (RCA)
- Corrective actions taken
- Preventive measures implemented
- Timeline and responsibility assignment
- Follow-up inspections may occur based on deficiency criticality
Best Practices to Avoid CDSCO Audit Findings
- Conduct monthly internal audits using Schedule M and WHO TRS 986 templates
- Establish SOPs that reflect actual practice and ensure they are regularly reviewed
- Train QA, QC, production, and warehouse staff continuously
- Implement electronic audit trail systems with secure access control
- Use risk-based approaches in deviation management, validation, and sampling plans
CDSCO’s Increased Reliance on Data-Driven Inspection Tools
- Integrated dashboards are being used to identify high-risk facilities
- Digital GMP inspection checklists streamline on-site reviews
- Complaints, recalls, and market surveillance data feed into audit prioritization
Conclusion
CDSCO inspections are becoming increasingly sophisticated, and their observations reflect a commitment to continuous improvement and patient safety. Pharmaceutical companies operating in India must remain audit-ready by addressing common deficiencies, strengthening their QMS, and ensuring all documentation is complete and compliant. By aligning operations with regulatory expectations, firms can enhance their reputation, minimize disruption, and maintain market access.