IT infrastructure Archives - European Industrial Pharmacists Group (EIPG)

Home  /  EMA’s consultation on draft Q&As on remote certification of batches by QP  /  IT infrastructure

A new member within EIPG


The European Industrial Pharmacists Group (EIPG) is pleased to announce the Romanian Association (AFFI) as its newest member following the annual General Assembly of EIPG in Rome (20th-21st April 2024). Commenting on the continued growth of EIPG’s membership, EIPG President Read more

The EU Parliament voted its position on the Unitary SPC


by Giuliana Miglierini The intersecting pathways of revision of the pharmaceutical and intellectual property legislations recently marked the adoption of the EU Parliament’s position on the new unitary Supplementary Protection Certificate (SPC) system, parallel to the recast of the current Read more

Reform of pharma legislation: the debate on regulatory data protection


by Giuliana Miglierini As the definition of the final contents of many new pieces of the overall revision of the pharmaceutical legislation is approaching, many voices commented the possible impact the new scheme for regulatory data protection (RDP) may have Read more

•••

EMA’s consultation on draft Q&As on remote certification of batches by QP

June 3, 2022 , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

by Giuliana Miglierini

The last two years saw the implementation of a high degree of regulatory flexibility as a mean to respond to the many challenges posed by the travel bans consequent to the pandemic. After this “experimental” phase, regulatory authorities are now considering the possibility to allow the routine implementation of some remote procedures in the field of pharmaceutical production.

It is the case of the remote certification/confirmation of batches by the Qualified Person (QP): after the publication of a draft guideline in the form of Q&As (EMA/INS/169000/2022), the European Medicines Agency (EMA) has launched a short public consultation which will remain open up to 13 June 2022. Comments may be sent by email.

The guideline offers EMA’s point of view on the requirements for the physical attendance at the authorised manufacturing site applying to QPs in order to routinely run the remote certification of batches, outside emergency situations. The document has been drafted by the GMDP Inspectors Working Group; it is composed of four questions and their relative answers and it addresses some considerations arising from the experience gained on the application of the guidelines for human and veterinary medicines issued during the pandemic. These last ones were elaborated in cooperation between the European Commission, the Coordination group for Mutual recognition and Decentralised procedures – human (“CMDh”), the Inspectors Working Group, the Coordination group for Mutual recognition and Decentralised procedures – veterinary (“CMDv”) and EMA.

The Agency also warns that the contents proposed by new Q&As’ guideline may be subject to any other interpretation by the European Court of Justice, which is the ultimate responsible for the interpretation of the EU legislation.

The contents of the Q&As

The routine remote certification or confirmation of batches may in future apply to the activities carried out by the QPs within the EU and European Economic Area (EEA), with reference to manufactured or imported human and veterinary medicinal products and investigational medicinal products.

The first answer clarifies that it could be possible for the QP to routinely run remote batch certification or confirmation only if this type of practice is accepted by the relevant national competent authority (NCA) of the member state where the authorised site is located. To this instance, it should be noted that some NCAs may request some specific requirements to authorise the routine remote certification procedure, for example with reference to the location of the QPs.

Should the remote certification be allowed on a routine basis, specific requirements should be met in order to validate this practice, starting from its full compliance to the EU legislation and EU GMP guidelines.

The answer to question 2 specifies that all activities should take place in an EU/EEA country, and that the time spent by the QP at the authorised site “should be commensurate with the risks related to the processes” hereby taking place. To this instance, it is of paramount importance the ability to demonstrate that the QP acting from remote has maintained full knowledge of the products, manufacturing processes and pharmaceutical quality system (PQS) involved in the remote certification/confirmation of batches. That also means that the QP should be highly reliant on the PQS of the authorised site, and this would be only possible by spending an adequate time on-site to verify the adequacy of the PQS with respect to the processes of interest. The pharmaceutical quality system should also include details of all the procedures used for the routine remote certification/confirmation of batches. The possible use of this type of remote procedure by the QP should be also clearly mentioned in the technical agreement governing the relationship between the authorisation holder and the QP, which should also specify all cases requiring the presence on-site of the QP. A robust IT infrastructure should be in place to guarantee the remote access of the QP to all the relevant documentation in the electronic format needed to achieve bath certification/confirmation, according to the provisions described in Annex 16 to the GMPs (Certification by a Qualified Person and Batch Release). To this instance, presence on-site should be always considered to solve issues that cannot properly be addressed from remote. The demonstration of the presence on-site of the QP falls under the responsibility of the Manufacturing/Importers Authorisation (MIA) holders.

These are also responsible to make available to the QPs all the hardware and software needed to guarantee the remote access to the relevant documentation (e.g. manufacturing executions systems, electronic batch records system, laboratory information systems etc.) as well as batch registers. All IT systems used for remote batch release should comply with the requirements of Annex 11 to the GMP (Computerised Systems).

On the same basis, it should be possible for NCAs to contemporaneously access for inspection all documentation and batch registers involved in routine remote certification/confirmation at the authorised site of batch release. MIA holders should also guarantee the QP is the only allowed person to access the batch certification/confirmation function and batch register, that the transferred data are complete and unchanged, and that an adequate system for electronic signatures is in place.

Question 3 simply clarifies that some members states may have some specific requirements about the country of residence of the QP, for example it should be the same where the authorised site involved in the remote certification procedure is located.

The last question discusses technical requirements linked to IT-security and data integrity for remote access, a type of procedure presenting a higher intrinsic risk in comparison to the same activities carried on-site. Here again, the main reference is Annex 11; all equipment and software used for remote certification of batches should always reflect the current technological developments.

Among the suggestions made by the Q&A draft guideline is the precise identification of all hardware transferred off-site to the QP, that should be inventoried and kept updated. Hard disks should be encrypted, and ports not required, disabled.

Attention should also be paid to the configuration of any virtual private network (VPN) used by the QP to improve the security of the connection to the IT infrastructure of the authorised site and to prevent unauthorised accesses. Authentication should be based on recognised industry standards (e.g. two-factor or multifactor authentication, with automatic date of expiry). The transfer of data should be secured by strong transport encryption protocols; assignment of individual privileges and technical controls falls under the responsibility of the MIA holder


EDQM, the RTEMIS scheme for remote inspections and new application forms for CEPs

April 9, 2022 , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

by Giuliana Miglierini

Starting in 2022, the Real-Time Remote Inspections (RTEMIS) programme, established by the European Directorate for the Quality of Medicines & HealthCare (EDQM) as a pilot in November 2020 to provide a tool to face travel restrictions due to Covid-19, has turned permanent. Companies applying for Certificates of suitability to the monographs of the European Pharmacopoeia (CEPs) may thus receive a notification for a RTEMIS inspection, as a part of the activities of the EDQM. The Directorate is responsible in cooperation with the participating agencies, for assessing the GMP compliance and CEPs applications relative to manufacturing sites of active pharmaceutical ingredients (APIs). The final GMP certificate issued from the NCA incorporates, following the positive closure of a remote inspection clearly states that the inspection was performed as a “distant assessment”.

Companies can adhere to the RTEMIS programme on a voluntary basis; the tool will complement the other modalities available to the EDQM to inspect manufacturers of pharmaceutical active ingredients, i.e. on-site inspections and documentation-based GMP assessment. As for on-site inspections, RTEMIS is also subject to the payment of fees. According to the Directorate, remote inspections cannot replace the on-site ones in terms of value and effectiveness, but many prove useful to assess GMP compliance for companies which have been already inspected. The RTEMIS scheme will thus form the third pillar for the supervision of GMP compliance of API manufacturers registered in the EDQM’s CEP scheme.

To qualify for an RTEMIS inspection, the concerned company should make available a suitable IT infrastructure and hardware to support the remote interaction with the EDQM’s team. To this regard, the notification letter will also include details about the expected infrastructural requirements; interested companies can contact the EDQM HelpDesk for further information.

The pilot phase to validate the RTEMIS scheme for remote inspections ran by the EDQM with reference to several manufacturing sites in India, selected on the basis of their GMP compliance history and a risk assessment, and which participated to the project on a voluntary basis. According to EDQM, suitable Corrective and Preventative Action Plans were developed by the inspected companies to address minor and major deficiencies identified during the inspections, leading to a degree in GMP conformity that the Directorate indicates as “satisfactory”.

Key factors for remote inspections

The pilot phase of the RTEMIS programme closed at the end of 2021 and led to the identification of several key factors to be respected in order to guarantee the success of remote inspections. During this period, RTEMIS inspections ran by the EDQM with the support of European Economic Area (EEA) inspectorates.

At a minimum, an appropriate IT infrastructure and hardware at the inspected site should be available to support a stable connection with the EDQM’s inspectors. During the preparatory phase of the inspection great attention should be paid to choose a suitable web conference application, running connectivity tests before the established date for the inspection, as well as a secure platform for the sharing of all relevant documentation (often in advance of the inspection). The selection of the IT tool to be used can benefit of the initial support from the EDQM’s IT department. Another important feature that should be always kept in mind refers to the possibility to run parallel sessions of discussion between the inspectors’ team and the staff and experts of the inspected company.

In remote inspections, participants are often located far apart, for example EDQM’s inspectors based in Strasbourg (F) may interact with an inspected company in China or India. The great difference in time zone requires a great flexibility on both sides to set the schedule for connections. Flexibility is also needed to face the many challenges posed by remote inspections, often requiring approaches significantly different from the traditional ones used for on-site inspections. Digital connected tools such as smart glasses may be used, for example, by the staff at the inspected site to allow inspectors to perform a real-time virtual tour of the plants.

New forms for CEPs applications

The EDQM also updated all forms to be used to apply for the release of Certificates of Suitability to the European Pharmacopoeia monographs. The forms to be used in case of a new application, revisions and sister files are available at the dedicated page of the EDQM’s website

The revision is intended to facilitate the transfer of data the EDQM’s new IT tools, which have been implemented starting 1 April 2022. The new forms also better reflect data available within the EMA’s SPOR – Organisation Management Services (OMS) system, including company details, names and addresses. The EDQM recommend communicating other additional data linked to the ones present in EMA’s website, i.e. the ORG_ID and LOC_ID.

 Applicants should also insert localisation data for their manufacturing sites, in the form of GPS coordinates. To this instance, the internationally recognised WGS 84 system should be used, using latitude and longitude (with the + and – symbols) expressed in degrees to at least five decimal places, as described in policy document PA/PH/CEP (10) 118.

Tables detailing the marketed medicinal products containing a certain active substance and the respective list of accepted Active Substance Master Files/Drug Master Files (ASMFs/DMFs) have been also updated, in order to better reflect the commercialisation history of the products and the quality assessments already performed.

EDQM also advises companies to use the form “change of contact details” as the preferred tool to inform the Directorate about the change of the contact person for one or more CEP dossiers (ref. policy document PA/PH/CEP (10) 86).

EDQM’s website is also undergoing a complete revision, aimed to improve the user experience and to ensure a quick and easy access to all relevant information. The new version of the site will be accessible from the same web address www.edqm.eu and is expected to be online in April 2022.