SOPX logo SOPX

Quality & Improvement

GMP Change Control

Also known as: Change Control, Pharmaceutical Change Control, GMP Change Management

The formal, documented system used in regulated manufacturing to propose, assess, approve, implement, and verify any change that could affect product quality.

Read this article summarized with
ChatGPT Claude Perplexity Gemini Grok

GMP change control is the formal, documented system that manufacturers in regulated industries use to propose, evaluate, approve, implement, and review any change that could affect product quality, safety, or compliance. [1] ICH Q10 defines the underlying activity as 'a systematic approach to proposing, evaluating, approving, implementing and reviewing changes,' and names a change management system as one of the core elements of a pharmaceutical quality system. [1] It governs changes to processes, equipment, materials, suppliers, analytical methods, specifications, computerized systems, and the controlling documents themselves, including SOPs. [4] The defining principle is that nothing changes quietly: a change is evaluated against risk before it happens, approved by the quality unit, and checked afterward to confirm it did what it was meant to do without harming product quality. [1] [2]

Key characteristics

  • Formal and documented, not ad hoc: every change is proposed, evaluated, approved, implemented, and reviewed through one system. [1]
  • Risk-based: the depth and formality of the evaluation scale with the level of risk, using the quality risk management methods of ICH Q9. [1]
  • Prospective: planned changes must be assessed and approved before they are implemented, not after the fact. [2]
  • Verified afterward: an effectiveness check confirms the change met its objective with no deleterious impact on product quality. [1] [2]
  • Quality-unit governed: under US cGMP, written procedures and any changes to them must be reviewed and approved by the quality control unit. [3]

Example

Changing a tablet coating SOP at a contract manufacturer

A pharmaceutical contract manufacturer wants to raise the spray rate on a tablet coating line. Because the change could affect the product, it cannot just be done. A change request is raised, a cross-functional team (production, quality, regulatory) runs a risk assessment, and the change is approved before any batch runs. The coating SOP is updated to the new parameters, operators on every shift are retrained on the new version, and the first batches are checked to confirm the change achieved its goal with no impact on quality. Only then is the change closed. The updated SOP, the approval trail, and the proof that operators were trained on the new version are all part of the record.

Comparison

Change control vs deviation

Aspect Change control Deviation
Timing Planned, before the change happens Unplanned, after work went off-procedure
Trigger A deliberate improvement or required change A departure from the written procedure
Regulatory basis 21 CFR 211.100(a), EU GMP Ch.1, ICH Q10 21 CFR 211.100(b): deviations recorded and justified
Outcome Approved, implemented, verified, closed Investigated, root-caused, often feeds CAPA

How SOPX handles this

SOPX is not a full quality-management change-control suite, but it covers the part of change control where most teams lose the thread: getting the revised procedure in front of the people who do the work, and proving they followed it. When a change is approved, a supervisor updates the procedure, the previous version is preserved in history (Pro supports version restore), and Run mode captures each operator confirming, with a signature, that they executed the new steps. Analytics show who viewed and ran the latest version. The formal risk assessment and approval still live in your quality system, but the document and the retraining evidence stay current and traceable.

Related use case: Quality & Compliance →

Frequently asked questions

What is the difference between change control and change management?
ICH Q10 uses 'change management' for the broad, lifecycle-wide system: a systematic approach to proposing, evaluating, approving, implementing, and reviewing changes. [1] 'Change control' is the more operational term for the formal gate inside that system, the mechanism by which qualified people review a proposed or actual change and approve it before it takes effect. [4] In everyday use the two terms are used interchangeably: change management is the umbrella, change control is the approval step.
What triggers a GMP change control?
Any modification that could affect product quality, safety, or compliance, including changes to processes, equipment, facilities, materials, suppliers, analytical methods, specifications, computerized systems, or controlled documents such as SOPs. [4] ICH Q10 notes that innovation, continual improvement, and the outputs of quality monitoring and CAPA are common drivers of change. [1]
What is the difference between a change and a deviation?
A change is planned and approved before it happens; a deviation is an unplanned departure from the written procedure. US cGMP requires that 'any deviation from the written procedures shall be recorded and justified,' and deviations are typically investigated for root cause and may feed corrective and preventive action (CAPA). [3] A planned change must never be run through the deviation process to avoid formal change control.
What is an effectiveness check?
It is the verification step performed after a change is implemented to confirm it worked. ICH Q10 states that 'after implementation, an evaluation of the change should be undertaken to confirm the change objectives were achieved and that there was no deleterious impact on product quality.' [1] EU GMP Chapter 1 carries the same requirement. [2] If the objectives were not met, further action is needed before the change can be closed.
Does updating an SOP need change control?
In a GMP environment, yes. Under 21 CFR 211.100(a), written procedures 'including any changes' must be drafted, reviewed, and approved by the appropriate units and reviewed and approved by the quality control unit. [3] In other words, editing a controlled procedure is itself a change-control event: the revision needs approval, the previous version must be retained, and affected staff have to be retrained on the new version.

Sources

Statements above draw on the references below. Numbers in the text link to the matching entry.

  1. [1]
    ICH Q10 Pharmaceutical Quality System
    ICH (International Council for Harmonisation) · Accessed 2026-06-20
  2. [2]
    EudraLex Volume 4, EU GMP Guide, Chapter 1: Pharmaceutical Quality System
    European Commission · Accessed 2026-06-20
  3. [3]
    21 CFR 211.100 - Written procedures; deviations
    Cornell Law School, Legal Information Institute · Accessed 2026-06-20
  4. [4]
    Change Control in Pharma: Definition, Types, Process, and Regulatory Requirements
    SimplerQMS · Accessed 2026-06-20

Related terms

Tags

compliance quality pharmaceuticals gmp documentation

Last reviewed: 2026-06-20

Stop writing SOPs. Start recording them.

Film any process on your phone. SOPX turns it into a structured, editable SOP in under 10 minutes. No writing required.

Try SOPX free Book a 15-min demo