| Field | Value |
|---|---|
| Document ID | QC-REC-004 |
| Title | Record Retention & FDA Availability Governance |
| Document Type | Authoritative QC Specification |
| Owner | Quality Unit (QU) |
| Approver | Quality Unit (QU) |
| Effective Date | 03/02/2026 |
| Version | v1.0 |
| Change Control Reference | QMS-REC-004 |
This specification establishes mandatory record retention durations and FDA availability controls for all GMP records generated under 21 CFR Part 111.
This control mitigates risk of data loss, inability to reconstruct manufacturing history, regulatory enforcement action, product seizure, warning letters, and consent decrees resulting from unavailable or incomplete records.
Failure to retain and provide records as required constitutes regulatory noncompliance under 21 CFR Part 111 and may result in product adulteration determinations and enforcement action.
Applies To: All GMP records including batch records, laboratory records, specifications, master manufacturing records, complaint files, investigation records, CAPA records, training records, electronic records, and associated metadata.
Excludes: Non-GMP administrative records not required under 21 CFR Part 111.
Compliant State: Records retained for required duration and retrievable within defined availability timeframe.
Nonconforming State: Record retained but not retrievable within required timeframe or incomplete.
Invalid State: Record destroyed prematurely, missing, altered without authorization, or retention period undefined.
Escalation Trigger: Missing, incomplete, altered, or inaccessible GMP record.
Stop-Execution Condition: Execution is prohibited when required GMP record is unavailable to support batch release, investigation, or regulatory inspection.
| Attribute | Compliant State | Nonconforming State | Invalid State | Escalation Trigger | Required QMS Process Entry | QU Authorization Required? |
|---|---|---|---|---|---|---|
| Retention Period | ≥ 1 year past shelf life date or ≥ 2 years beyond distribution when shelf life not defined | Retention period met but undocumented justification for destruction timing | Destroyed prior to required duration | Premature destruction or undocumented retention calculation | Deviation | Yes |
| FDA Availability | Records retrievable within 24 hours of FDA request | Retrievable between 24–72 hours | Not retrievable within 72 hours | Inability to retrieve upon inspection request | Quality Event | Yes |
| Record Integrity | Complete, legible, original or true copy, attributable | Minor completeness issue not affecting data interpretation | Missing, altered, illegible, or falsified record | Data integrity breach identified | CAPA | Yes |
| Trigger Condition | Execution May Continue? | Required Action | QMS Process Entry | Workflow (W)? | QU Authorization (A)? | Required Record |
|---|---|---|---|---|---|---|
| Compliant | Yes | Maintain retention control | None | No | No | Retention Log |
| Nonconforming | Conditional | Initiate investigation | Deviation | Yes | Yes | Deviation Record |
| Invalid | No | Immediate escalation | Quality Event | Yes | Yes | Investigation Record |
| Systemic Failure | No | Comprehensive remediation | CAPA | Yes | Yes | CAPA Record |
When premature destruction occurs, Deviation entry is mandatory.
When records are unavailable during inspection, Quality Event entry is mandatory.
When systemic retention control weakness is identified, CAPA entry is mandatory.
When retention period definitions require modification, Change Control entry is mandatory.
E — Execution: Record archival and storage.
W — Workflow: Deviation, Quality Event, CAPA management.
A — Authorization: Record destruction approval and final investigation closure.
Execution does not confer product disposition authority.
Compliant, Nonconforming, Invalid, Escalation Trigger, and Stop-Execution Condition are defined in Section 5 and are mandatory governance states.
Change Control entry is required for any modification to retention periods, storage media, archival systems, or retrieval timelines.
Independent QU approval is required prior to implementation.
No implementation is permitted without QU authorization.