1. Document Control

FieldValue
Document IDQC-CHG-003
TitleValidation & Requalification Governance Specification
Document TypeAuthoritative QC Specification
OwnerQuality Unit (QU)
ApproverQuality Unit (QU)
Effective Date03/01/2026
Versionv1.0
Change Control ReferenceQMS-CHG-003

QC-CHG-003 — Validation & Requalification Governance Specification

Authority Statement: This document is controlled by the Quality Unit (QU). Final product disposition, approval, release, rejection, and quality decision authority remain exclusively with QU and shall not be delegated.

2. Purpose

This specification establishes mandatory governance requirements defining when validation, verification, or requalification is required following a change that may impact product quality, safety, identity, strength, purity, composition, labeling, packaging, data integrity, or GMP system control.

This requirement mitigates the risk that uncontrolled or inadequately evaluated changes result in unvalidated processes, unqualified equipment, unverified cleaning states, compromised computerized systems, or unsupported product release decisions.

21 CFR Part 111 requires manufacturers to establish specifications, implement process controls, validate processes where appropriate, and ensure that quality control operations are adequate to ensure dietary supplements are not adulterated. Failure to trigger required validation or requalification following change exposes the firm to regulatory action, product adulteration risk, and loss of state of control.

3. Regulatory Basis

4. Scope

Applies To: All GMP-relevant changes governed under QMS Change Control impacting equipment, facilities, utilities, computerized systems, cleaning processes, analytical methods, manufacturing processes, packaging processes, labeling controls, specifications, suppliers, or environmental controls.

Excludes: Purely administrative changes that demonstrably have zero impact on GMP systems, product quality attributes, validated state, or regulatory compliance status.

5. Definitions

Compliant State: Change evaluated; validation, verification, or requalification requirement correctly determined; required protocol approved; execution completed; objective evidence demonstrates state of control; QU authorization documented.

Nonconforming State: Required validation or requalification identified but incomplete, failed, or executed outside approved protocol parameters.

Invalid State: Change implemented without required validation determination; missing risk assessment; missing protocol approval; missing objective evidence; missing QU authorization.

Escalation Trigger: Objective condition requiring mandatory QMS entry, including unvalidated implementation, failed qualification, or change impacting validated state without documented assessment.

Stop-Execution Condition: Execution is prohibited when a change affecting validated state has been implemented without approved validation determination and required protocol authorization.

6. Acceptance Criteria

Attribute Compliant State Nonconforming State Invalid State Escalation Trigger Required QMS Process Entry QU Authorization Required?
Change Impact Assessment Documented risk assessment explicitly determines validation, verification, or requalification requirement prior to implementation Assessment incomplete or missing objective impact justification No documented assessment prior to change implementation When change affects validated system without documented assessment Deviation Yes
Validation / Requalification Execution Approved protocol executed; predefined acceptance criteria met; report approved Protocol executed but one or more acceptance criteria not met No approved protocol prior to execution When predefined acceptance criteria are not met Deviation Yes
Implementation Gate QU authorization documented prior to release or routine use Authorization delayed beyond implementation Routine use initiated without QU authorization When routine GMP execution begins without authorization Quality Defect Yes

7. Decision Logic Matrix

Trigger Condition Execution May Continue? Required Action QMS Process Entry Workflow (W)? QU Authorization (A)? Required Record
Compliant Yes Proceed following documented validation approval Change Control No Yes Approved Validation Report
Nonconforming No Investigate failed acceptance criteria Deviation Yes Yes Deviation Record
Invalid No Stop execution; perform impact assessment Deviation Yes Yes Deviation Record
Systemic / Repeated Failure No Evaluate validation program effectiveness CAPA Yes Yes CAPA Record

8. Exception Handling

When validation acceptance criteria are not met, Deviation entry is mandatory.

When systemic breakdown in change-triggered validation occurs, CAPA entry is mandatory.

When unvalidated implementation impacts distributed product, Quality Defect entry is mandatory.

When change scope expands beyond approved parameters, Change Control amendment is mandatory.

9. Required Records

Base Execution Record

Approved Change Control record including documented validation determination.

Conditional Workflow Records

Deviation, CAPA, or Quality Defect record when triggered by objective condition.

QU Authorization Record

Approved validation protocol and validation report with QU authorization prior to routine GMP use.

10. Authority Classification

E — Execution: Authorized personnel execute approved validation protocols and record results.

W — Workflow: QA administers Deviation, CAPA, and Quality Defect workflows under QU authority.

A — Authorization: QU approves validation protocols, reports, and implementation gates.

Execution does not confer product disposition authority.

11. Control State Definitions

Compliant State: All acceptance criteria satisfied.

Nonconforming State: One or more acceptance criteria not met.

Invalid State: Record incomplete, missing required element, missing authorization, or control parameter undefined.

Escalation Trigger: Objective condition that requires mandatory entry into a defined QMS process.

Stop-Execution Condition: Execution is prohibited until resolution under QMS governance.

12. Change Control

Change Control entry is required for any modification impacting validation scope or requalification triggers.

Independent QU approval is required prior to implementation.

No implementation is permitted without documented QU authorization.

13. References