MHRAGMPDataIntegrityDefinitionsandGuidanceforIndustryJanuary2015MHRAGMP数据完整性定义和行业指导原则1月2015简述:Dataintegrityisfundamentalinapharmaceuticalqualitysystemwhichensuresthatmedicinesareoftherequiredquality.ThisdocumentprovidesMHRAguidanceonGMPdataintegrityexpectationsforthepharmaceuticalindustry.ThisguidanceisintendedtocomplementexistingEUGMP,andshouldbereadinconjunctionwithnationalmedicineslegislationandtheGMPstandardspublishedinEudralexvolume4.数据完整性是制药质量体系确保药品质量的基石。本文提供了MHRA对制药行业GMP数据完整性的指导原则。本指导原则旨在对现有EUGMP进行补充说明,需结合国家药品法规及GMP标准内Eudralex第四册进行阅读理解。ThedatagovernancesystemshouldbeintegraltothepharmaceuticalqualitysystemdescribedinEUGMPchapter1.Theeffortandresourceassignedtodatagovernanceshouldbecommensuratewiththerisktoproductquality,andshouldalsobebalancedwithotherqualityassuranceresourcedemands.Assuch,manufacturersandanalyticallaboratoriesarenotexpectedtoimplementaforensicapproachtodatachecking,butinsteaddesignandoperateasystemwhichprovidesanacceptablestateofcontrolbasedonthedataintegrityrisk,andwhichisfullydocumentedwithsupportingrationale.数据管理体系需要结合在EUGMP第一章描所述的质量体系中。投入到数据管理的精力和资源应与对应产品质量风险相称,同时也应权衡其他质量保证工作的资源需求,从而进行合理分配。因此,生产企业和分析实验室不是对数据进行刻板的核对,而是要设计并运行一个对数据完整性风险可控的管理体系,并完整地记载这样设计和运行的支持性理由。Dataintegrityrequirementsapplyequallytomanual(paper)andelectronicdata.Manufacturersandanalyticallaboratoriesshouldbeawarethatrevertingfromautomated/computerisedtomanual/paper-basedsystemswillnotinitselfremovetheneedfordataintegritycontrols.ThismayalsoconstituteafailuretocomplywithArticle23ofDirective2001/83/EC,whichrequiresanauthorizationholdertotakeaccountofscientificandtechnicalprogressandenablethemedicinalproducttobemanufacturedandcheckedbymeansofgenerallyacceptedscientificmethods.数据完整性的要求同时适用于手工(纸质)数据和电子数据。生产企业和分析实验室要意识到从自动/电脑系统回归到手动/纸质记录体系,其本身并不会消除对数据完整性进行控制的要求。而且这也可能造成不符合条款2001/83/EC第23条需要考虑科学和技术发展程度的要求,因为该要求企业确保药品能够以普遍接受的科学方法进行生产和检验。Throughoutthisguidance,associateddefinitionsareshownashyperlinks.本指导原则所涉及的相关定义以超级链接连接的方式出现。Establishingdatacriticalityandinherentintegrityrisk:建立数据的关键程度和内在的完整性风险:Inadditiontoanoverarchingdatagovernancesystem,whichshouldincluderelevantpoliciesandstafftrainingintheimportanceofdataintegrity,considerationshouldbegiventotheorganisational(e.g.procedures)andtechnical(e.g.computersystemaccess)controlsappliedtodifferentareasofthequalitysystem.Thedegreeofeffortandresourceappliedtotheorganisationalandtechnicalcontrolofdatalifecycleelementsshouldbecommensuratewithitscriticalityintermsofimpacttoproductqualityattributes.除了一个包括对确保数据完整性至关重要的相应政策和人员培训的总体数据管理体系,同时应考虑在不同质量体系领域对构建性(如操作程序)和技术性(如计算机系统访问权限)控制手段的应用。对数据生命周期中各要素进行构建性和技术性控制的程度,要与其对产品质量属性影响关键程度相对应Datamaybegeneratedby(i)apaper-basedrecordofamanualobservation,or(ii)intermsofequipment,aspectrumofsimplemachinesthroughtocomplexhighlyconfigurablecomputerisedsystems.Theinherentriskstodataintegritymaydifferdependinguponthedegreetowhichdata(orthesystemgeneratingorusingthedata)canbeconfigured,andthereforepotentiallymanipulated(seefigure1)数据可由以下几种情况产生:(i)人工观测的纸质记录,(ii)对于设备,由简单设备或复杂的高度可配置计算机系统产生的图谱。数据完整性的内在风险程度会有所不同,这取决于数据(或系统生成、使用数据)的可配置程度,即被潜在处理的可能性(见图1)。Figure1:Diagramtoillustratethespectrumofsimplemachine(left)tocomplexcomputerizedsystem(right),andrelevanceofprintoutsas‘originaldata’图1:图示说明简单设备图谱(左)到复杂的计算机系统图谱(右),及将打印数据作为“初始数据”的对应关系Withreferencetofigure1above,simplesystems(suchaspHmetersandbalances)mayonlyrequirecalibration,whereascomplexsystemsrequire‘validationforintendedpurpose’.Validationeffortincreasesfromlefttorightinthediagramabove.However,itiscommonforcompaniestooverlooksystemsofapparentlowercomplexity.Withinthesesystemsitmaybepossibletomanipulatedataorrepeattestingtoachieveadesiredoutcomewithlimitedopportunityofdetection(e.g.stand-alonesystemswithauserconfigurableoutputsuchasFT-IR,UVspectrophotometers).参考图1,简单系统(诸如pH计和天平)可能只需要校准,而复杂的系统需要“对预期用途进行验证”。验证活动在上图中从左到右相应加强。但是,企业常常容易忽视一些貌似并不复杂的系统。在此类系统中,有可能通过处理数据或重复检测以获取期望的结果,并且不容易被发现(例如带有用户可配置输出功能单机版设备,如FT-IR,UV分光光度计)。Designingsystemstoassuredataqualityandintegrity系统化设计以确保数据质量和完整性Systemsshouldbedesignedinawaythatencouragescompliancewiththeprinciplesofdataintegrity.Examplesinclude:系统的设计应遵循数据完整性的原则包括以下:•Accesstoclocksforrecordingtimedevents对用作记录以时间为顺序事件的计时器进行权限控制•Accessibilityofbatchrecordsatlocationswhereactivitiestakeplacesothatadhocdatarecordingandlatertranscriptiontoofficialrecordsisnotnecessary将记录放置在生产现场,避免不必要的临时记录数据然后事后誊成正式记录•Controloverblankpapertemplatesfordatarecording对用于数据记录的纸质空白模板进行控制•Useraccessrightswhichprevent(oraudittrail)dataamendments用户权限控制以防止(或审计追踪)数据篡改•Automateddatacaptureorprintersattachedtoequipmentsuchasbalances采用数据自动采集方式或将打印机连接到设备,例如天平•Proximityofprinterstorelevantactivities打印机设置在靠近相关活动的位置•Accesstosamplingpoints(e.g.forwatersystems)取样位置所在区域(例如水系统的取样位置)的权限控制•Accesstorawdataforstaffperformingdatacheckingactivities.对原始数据核对的区域进行权限控制Theuseofscribestorecordactivityonbehalfofanotheroperatorshouldbeconsidered‘exceptional’,andonlytakeplacewhere:用笔录员替另一个操作人员进行活动记录是“特例/非常规流程”,仅在以下情况下采用:•Theactofrecordingplacestheproductoractivityatriske.g.documentinglineinterventionsbysterileoperators.记录活动会使产品或行