Data Integrity in Pharmaceuticals: Empowering Trustworthy Decisions from Source to Success via Registration Dossier

Author: Olena Chervonenko, Associate Director, Quality Management & Compliance, PharmaLex

Data-Driven Decision Making: The Power of Trustworthy Data 

In the pharmaceutical sector, data and Data Integrity are subjects of extensive study, research, and publication. Amidst discussions regarding quality control and software, it is crucial to remember the ultimate objective of this effort: the creation of a Registration Dossier ensuring that the data generated during the different stages of the lifecycle of the product is accurate, complete, and reliable.  

When purchasing a dossier, one is essentially acquiring a treasure trove of invaluable data. This includes comprehensive information on a pharmaceutical product’s pharmaceutical development, preclinical data, and crucial clinical trials data. Additionally, the dossier contains vital data about the product’s quality, a testament to its efficacy and safety. The assurance of quality lies firmly in the robustness of this data, making it an indispensable asset for any discerning buyer. 

The Registration Dossier serves three pivotal purposes, each essential to the success of a pharmaceutical product. 

Proving Product Quality: The Registration Dossier acts as a comprehensive testament to the quality of the product. It meticulously documents every aspect of pharmaceutical development, preclinical and clinical data, and quality assurance measures. By presenting a dossier backed by robust data, pharmaceutical companies assert the high quality and efficacy of their products, inspiring trust among stakeholders, regulators, and end-users alike. 

Gaining Marketing Authorization: A well-prepared Registration Dossier is a prerequisite for gaining Marketing Authorization from regulatory agencies. By adhering to Data Integrity principles and providing a comprehensive, transparent, and scientifically sound dossier, pharmaceutical companies establish the credibility of their product, the product’s quality, safety and efficacy, and its compliance with regulatory requirements. This paves the way for agencies to grant the necessary permissions, allowing the product to enter the market and benefit patients. 

Facilitating Technology Transfer: Beyond regulatory approval, the Registration Dossier serves as a valuable asset for companies that are potentially interested in acquiring the product for further technology transfer. In the complex world of pharmaceuticals, seamless technology transfer relies on the availability of accurate and reliable data. A carefully compiled dossier enables a smooth handover of technology to other pharmaceutical companies, fostering collaborations and expanding the product’s reach. 

The creation of a Registration Dossier is not merely a procedural task; it is a strategic endeavor with far-reaching implications. By upholding Data Integrity and providing a robust dossier, pharmaceutical companies unlock new avenues for technology transfer, fostering growth and innovation in the pharmaceutical industry. 

Understanding Data Integrity and Its Relevance: 

Data Integrity, as defined by ISO/IEC 2382:2015, pertains to maintaining accuracy and consistency regardless of changes made [1]. For pharmaceutical companies, Data Integrity is of utmost importance, driving crucial aspects such as drug development, clinical trials, manufacturing, and regulatory compliance. Uncompromised Data Integrity instills trust in medicines’ quality, efficacy, and safety. 

Understanding the “Data Lifecycle” from its origin to the final report is paramount in today’s landscape. The integrity of data, from how it was captured to how it is reported, holds the key to informed decision-making. Data serves as the foundation for critical choices, and data imbued with integrity empowers these choices with precision and reliability. Embracing digital data and its governance offers advantages that drive faster and more accurate decisions. Adherence to robust principles such as ALCOA+ and compliance to regulatory requirements such as FDA’s 21CFR11 and EMA’s EudraLex Annex 11, backed by thorough validation, ensure that Data Integrity remains at the core of the entire data lifecycle.  

ALCOA+ stands as the gold standard for Data Integrity in the medicinal products realm. Its attributes are hailed as the epitome of data reliability not just within this sector, but also in various other industries. Upholding the principles of ALCOA+ ensures that data remains trustworthy and accurate throughout its lifecycle, instilling confidence in decision-making processes across diverse domains. 

ALCOA+ is the acronym for Attributable, Legible, Contemporaneous, Original, Accurate and encompasses the following quality attributes for data [7,15]: 

Attributable: Tracing data to individuals and measurement systems for accountability. 

Legible and Permanent: Ensuring data remains readable and accessible throughout its lifecycle. 

Contemporaneous: Capturing data in real-time for accurate and timely records. 

Original Record or “True Copy”: Preserving the authenticity of data from its source to subsequent modifications. 

Accurate: Defining processes for precise data capture, including source verification and format documentation. 

The “+” Expands Beyond ALCOA circumscribes Encompassing Complete, Consistent, Enduring, and Available. 

Complete: Ensuring data includes relevant metadata for comprehensive documentation. 

Consistent: Maintaining the correct chronological order of data to preserve consistency and sequence. 

Enduring: Safeguarding data’s longevity and integrity throughout storage and use. 

Available: Enabling easy accessibility and verification by authorized personnel. 

It is important to note that the ALCOA+ principle applies to electronic data, paper records, and hybrid systems, encompassing various types of data management [16]. 

The comprehensive requirements set by regulators for the Pharmaceutical Quality System (PQS) today include the following main documents: 

  • FDA 21 CFR Part 11  
  • FDA Guidance for Industry Data Integrity Compliance with Drug cGMP  
  • EMA Good Manufacturing Practice (GMP) guidance to ensure Data Integrity  
  • MHRA GxP Data Integrity Guidance and Definitions [9] 
  • WHO Guideline on Data Integrity, Annex 4 [10] 
  • PIC/S Good Practices for Data Management and Integrity in Regulated GMP/GDP Environments [12]  
  • GAMP Records and Data Integrity Guide – ISPE/GAMP, March 2017 [13] 
  • EU Good Manufacturing Practice, Volume 4, Annex 11 [14] 

Proving Product Quality 

Within the realm of pharmaceutical development, a cornerstone principle to follow, as per the ICH guideline Q8 (R2) [3], is Quality by Design (QbD). The objectives of QbD include achieving meaningful product quality specifications, to increase process capabilities and reduce product variability, to increase product development, and manufacturing efficiencies [4,5,6]., ultimately, designing a manufacturing process that is able to  manufacture a product that consistently meets the set quality requirements. This rigorous approach to pharmaceutical development not only serves as a critical component of the Registration Dossier but also lays the groundwork for future changes such as upscaling or transferring a process are planned. 

The Registration Dossier is a comprehensive compilation of data, evidence, and scientific understanding that showcases the quality, safety, and efficacy of the product. At its core, the dossier is built upon robust data, carefully documented, and upheld with unwavering belief in the principles of Data Integrity. 

Data Integrity is the bedrock on which the Registration Dossier stands tall, providing confidence to stakeholders, regulators, and end-users. A thorough approach to data collection, analysis, and documentation ensures that every facet of the product’s development is transparent, traceable, and credible. As the dossier traverses the regulatory pathway, the assurance of Data Integrity empowers pharmaceutical companies to gain Marketing Authorization and pave the way for future technological advancements. 

With Data Integrity at the helm, the Registration Dossier becomes a catalyst for continuous improvement. Data-driven insights gleaned from pharmaceutical development studies and manufacturing experience form the basis for informed decision-making. These insights provide the scientific understanding necessary to support the establishment of the design space, specifications, and manufacturing controls. 

Furthermore, as processes evolve and new equipment is introduced, Data Integrity acts as a safeguard against potential pitfalls. It enables companies to assess the impact of changes with confidence, ensuring that the quality, safety, and efficacy of the product remains uncompromised. By building Data Integrity into the fabric of pharmaceutical development, companies create a culture of excellence and accountability that extends far beyond the initial dossier submission. 

The dossier, fueled by irrefutable data and a commitment to Data Integrity, not only proves the quality and safety of the product but also emboldens the industry to achieve new heights of excellence. As the pharmaceutical landscape continues to evolve, the role of Data Integrity in nurturing robust products and fostering a culture of continuous improvement becomes increasingly vital. 

Implementing Data Integrity in pharmaceutical development requires a comprehensive approach that spans various instruments and methods. Here are some key instruments and ways to ensure Data Integrity throughout the pharmaceutical development process: 

Data Governance and Standard Operating Procedures (SOPs): Develop clear and robust Data Governance policies and SOPs that outline the principles and procedures for data collection, management, and documentation. These SOPs should encompass all aspects of data handling, from raw data acquisition to data review, approval, and archiving. 

Training and Education: Provide regular training and education to all personnel involved in pharmaceutical development on the importance of Data Integrity, best practices, and compliance with relevant guidelines and regulations. Ensure that personnel are aware of their responsibilities in maintaining Data Integrity. 

Audit Trails and Data Logging: Implement electronic systems with audit trails that capture all actions taken on data, including data entry, modification, and deletion. Maintain data logs and audit trails and ensure these are readily accessible for audit purposes. A system should be in place describing the periodic review and audit requirements of audit trails and data logs. 

Data Backups and Data Recovery: Establish robust data backup and recovery procedures to safeguard against data loss or corruption. Regularly back up data and validate the integrity of backups to ensure data availability and reliability. 

Electronic Signatures and Authentication: Use electronic signatures for data entry and approvals, ensuring traceability and accountability. Implement secure user authentication measures to prevent unauthorized access to critical data [8]. 

Validation and Qualification of Systems: Validate all computerized systems used in pharmaceutical development to ensure they meet Data Integrity requirements. Regularly assess and requalify systems to ensure their continued reliability. 

Risk Assessments: Conduct risk assessments to identify potential vulnerabilities in data management processes and address them proactively. Assess the impact of identified risks on Data Integrity and implement appropriate mitigation measures. 

Data Review and Oversight: Implement a robust review process for data to ensure accuracy, completeness, and consistency. Establish a clear oversight mechanism to monitor data-related activities and address any issues promptly. 

Vendor Qualification: Perform thorough vendor qualification for outsourced services or software providers to ensure they adhere to Data Integrity principles and regulatory requirements. 

Data Encryption and Security: Use encryption and other security measures to protect data during storage, transmission, and sharing. Implement access controls to restrict data access based on the principle of least privilege. 

Continuous Improvement: Foster a culture of continuous improvement by regularly reviewing data management processes, identifying areas for enhancement, and implementing corrective actions as needed. 

Documentation and Record-Keeping: Maintain comprehensive documentation and records of all data-related activities, including data collection, analysis, and decision-making processes. 

Quality Risk Management: Integrate Quality Risk Management (QRM) practices into data-related processes to identify, evaluate, and mitigate risks to Data Integrity effectively. 

Periodic Data Integrity Reviews: Conduct periodic Data Integrity reviews and audits to assess compliance with established procedures and identify opportunities for improvement. 

By adopting these instruments and methods, pharmaceutical development organizations can establish a strong foundation of Data Integrity, ensuring the credibility, reliability, and compliance of data throughout the entire lifecycle of the pharmaceutical product. 

Gaining Marketing Authorization 

Keeping all primary data and its associated documentation, such as chromatograms, spectra, calculations, validation data, clinical trial data, stability data, and quality control data, together with their backups, is a critical aspect of ensuring Data Integrity in the pharmaceutical development and manufacturing process. This comprehensive data preservation is essential for successful Good Manufacturing Practice (GMP) inspections. The Agency responsible for conducting GMP inspections depends on the region and country where the Marketing Authorization application is submitted. 

The GMP inspection is a crucial step in the regulatory approval process. For example, FDA (United State Food and Drug Administration), TGA (Therapeutic Goods Administration of Australia), MHRA (Medicines and Healthcare products Regulatory Agency of The United Kingdom of Great Britain and Northern Irland), Health Canada, PMDA (Pharmaceuticals and Medical Devices Agency of Japan) conduct pre-authorization GMP inspections to ensure compliance with GMP regulations before issuing Marketing Authorization for medicinal products. 

Regulatory Inspectors will review the Pharmaceutical Quality System (PQS) during the Inspection, together with all data generated during the development, manufacturing, and testing of the pharmaceutical product, to ensure data has been appropriately recorded, stored, and maintained. 

The key aspects that Regulatory Inspectors will focus on during the GMP inspection regarding Data Integrity include: 

Data Integrity Controls: The Regulatory Inspectors will examine the PQS to ensure that robust controls are in place to prevent data manipulation, loss, or unauthorized access. This includes implementing ALCOA+ principles (Attributable, Legible, Contemporaneous, Original, Accurate, and other “+” attributes) for Data Integrity. 

Data Management and Storage: The Inspection will verify whether the PQS has the required procedures for data management and storage. This includes secure data storage, appropriate access controls, and regular backups to prevent data loss. 

Audit Trail and Version Control: The Regulatory Inspectors will assess if there is a comprehensive audit trail system in place that records all changes to data and provides details on who made the changes, when the changes were made and why these changes were made. Version control for documents and data is essential to ensure traceability and prevent unauthorized alterations. 

Data Accessibility: During the inspection, it is expected that data is easily accessible for review and verification. This includes having organized and well-maintained records that can be readily presented to the Inspectors. 

Training and Personnel Competency: The Regulatory Inspectors will assess the training, competency and understanding of the importance of Data Integrity of personnel who are involved with data generation, recording, and management. Adequately trained personnel, with a good understanding of the principles of Data Integrity, are more likely to adhere to Data Integrity practices. 

Validation and Documentation: The Inspection will verify that all analytical methods, equipment, and processes used to generate data are properly validated or qualified and documented. 

Data Review and Approval: The PQS should outline a clear process for data review and approval with definitions of roles and responsibilities, ensuring that data is thoroughly reviewed and approved by authorized personnel before its inclusion in the Registration Dossier. 

The consequences of Data Integrity issues identified during a GMP inspection can be severe, putting the Company under significant financial and reputational risk. A Warning Letter from regulatory authorities such as the FDA, or a Non-Compliance Report from European Regulatory bodies, not only highlight potential shortcomings in Data Integrity practices, but also reflect on the overall quality and compliance of the Company’s operations.  

Notably, between 2017 and 2022, the FDA issued over 160 Warning Letters citing Data Integrity deficiencies, with 13 Warning Letters issued in 2022 alone [11].  

Approximately half (42, 49%) of the total 85 GMP Warning Letters issued by the FDA in 2018, for example, included a Data Integrity component [2]. 

Such regulatory actions can lead to costly remediation efforts, possible product recalls, delays in product approvals, and even the suspension of manufacturing activities. Moreover, the damage to the Company’s reputation can erode trust among stakeholders, customers, and the public, impacting future business opportunities and market standing. Therefore, ensuring robust Data Integrity measures is paramount for safeguarding the Company’s financial stability and preserving its reputation within the pharmaceutical industry and regulatory bodies. 

The Final Milestone: Ensuring Success After Receiving Marketing Authorization (MA) 

Receiving Marketing Authorization (MA) is a momentous achievement for any pharmaceutical company, marking the green light for commercialization. At this juncture, companies are presented with two pivotal paths: embarking on commercial manufacturing independently or exploring the possibility of selling the MA and executing a site transfer to another manufacturer. The success of the first option rests entirely on the Company’s capabilities, while the latter demands a rigorous evaluation of Data Integrity through a thorough due diligence process. 

During due diligence, potential buyers or partners thoroughly examine the data presented in the Registration Dossier to gain an in-depth understanding of the product’s scientific foundation and technological intricacies. Key elements, such as the Quality Target Product Profile (QTPP), Critical Quality Attributes (CQAs), clinical/non-clinical data, risk assessments, design space, control strategy, and product lifecycle management, undergo rigorous scrutiny. The integrity and reliability of data becomes the focal point, as it serves as the bedrock of assessing the product’s quality, safety and efficacy, the robustness of associated processes and potential risks. 

Conducting due diligence is a comprehensive undertaking, involving a precise evaluation of all aspects of the product, including the data captured in the dossier. The data’s comprehensiveness is crucial, as potential buyers or partners, who might not be intimately familiar with the pharmaceutical product, seek transparency and clarity. This is particularly significant when contemplating technology transfer or divesting the MA to another manufacturer. 

In addition, the due diligence process assesses the feasibility and practicality of the technology involved in the pharmaceutical product’s manufacturing process. This entails evaluating the compatibility of the manufacturing equipment and facilities with the processes and specifications detailed in the dossier. The ability of the technology to scale up and adapt to the new manufacturing site becomes a pivotal consideration, and only concrete data can instill confidence in interested buyers. 

Indeed, the due diligence process holds immense importance as it directly influences the chances of success of the chosen path. Thoroughly assessing Data Integrity and technological workability lays the groundwork for seamless technology transfer or fruitful collaborations with new partners. This rigorous evaluation ensures that the MA, accompanied by the reliable data and scientific understanding within the dossier, opens doors to a successful journey in the pharmaceutical market. 

To sum up 

The unwavering commitment to Data Integrity, adhering to current requirements and expectations, stands at the core of the pharmaceutical industry. This foundational principle empowers every stage of a pharmaceutical product’s development, from inception to the market’s fruition. By upholding Data Integrity, pharmaceutical companies establish a strong reputation for excellence, inspiring confidence among stakeholders and regulatory bodies, and fosters a culture of trust. Furthermore, this dedication to Data Integrity paves the way for transformative innovations that ultimately benefit patients and society as a whole. The significance of Data Integrity cannot be overstated, as it not only ensures compliance with regulations, but also elevates the pharmaceutical industry to new heights of integrity and reliability. 


  1. ISO/IEC 2382:2015 – Information technology — Vocabulary 
  2. European Industrial Pharmacists Group (EIPG) The new PIC/S guideline on data integrity 
  3. ICH Q8(R2) – Pharmaceutical Development, November 2005, Step 4. 
  4. FDA Guidance for Industry: Quality by Design (QbD) for ANDAs, November 2021. 
  5. AAPS PharmSciTech, Volume 20, Issue 2, March 2019 – “Quality by Design Approach: Regulatory Perspective.” 
  6. Pharmaceutical Research, Volume 37, Issue 7, July 2020 – “Quality by Design: An Overview.” 
  7. ALCOA+ – what does it mean? – ECA Academy (  
  8. Part 11, Electronic Records; Electronic Signatures – Scope and Application | FDA
  9. MHRA. GMP Data Integrity Definitions and Guidance for Industry  letter ( 
  10. TRS 1033 – Annex 4: WHO Guideline on data integrity 
  11. Data integrity issues in pharmaceutical industry: Common observations, challenges and mitigations strategies – ScienceDirect 
  12. PIC/S. 
  13. GAMP Guide: Records & Data Integrity | ISPE | International Society for Pharmaceutical Engineering 
  14. EudraLex – Volume 4 ( 
  15. Data Integrity: History, Issues, and Remediation of Issues | PDA Journal of Pharmaceutical Science and Technology 
  16. Guidance on good data and record management practices; World Health Organization, WHO Technical Report Series, No.996, Annex 5; 2016. ( 


This blog is intended to communicate PharmaLex’s capabilities which are backed by the author’s expertise. However, PharmaLex US Corporation and its parent, Cencora, Inc., strongly encourage readers to review the references provided with this article and all available information related to the topics mentioned herein and to rely on their own experience and expertise in making decisions related thereto as the article may contain certain marketing statements and does not constitute legal advice. 

Contact us for more information

Scroll to Top