| Field | Value |
|---|---|
| Document ID | QC-UTIL-004 |
| Title | Backflow & Cross-Connection Prevention Specification |
| Document Type | Authoritative QC Specification |
| Owner | Quality Unit (QU) |
| Approver | Quality Unit (QU) |
| Effective Date | YYYY-MM-DD |
| Version | v1.2 |
| Change Control Reference | CC-XXXX |
This specification establishes mandatory Quality Control requirements governing prevention of backflow and cross-connection between Potable Water (PW), Purified Water (PUW), Process Water (PRW), and wastewater systems serving GMP-designated areas.
This control mitigates contamination risk caused by reverse flow, pressure imbalance, mechanical device failure, improper segregation, or physical cross-connection that could introduce biological, chemical, or physical contaminants into systems supporting exposed materials.
Failure to maintain adequate cross-connection protection creates regulatory exposure under 21 CFR Part 111 relating to sanitary design, facility suitability, contamination prevention, and system control. This specification defines objective acceptance criteria and escalation governance under the QMS.
Applies To: All backflow prevention devices, air gaps, physical segregation controls, hazard tie-ins, and cross-connection safeguards protecting PW, PUW, PRW, and wastewater systems within or supplying GMP-designated areas.
Excludes: Non-GMP utility systems not connected to or supplying GMP-designated areas.
Compliant State: All required backflow prevention devices, air gaps, and segregation controls are installed, functional, verified within defined intervals, and documented.
Nonconforming State: One or more objective protection requirements are not satisfied, including missing, failed, bypassed, obstructed, or overdue testing conditions.
Invalid State: Required inspection, testing, verification, or hazard classification documentation is missing or incomplete.
Escalation Trigger: Confirmed device failure protecting PW or PUW systems, confirmed unprotected cross-connection at GMP interface, confirmed backflow event, or defined reassessment threshold.
Stop-Execution Condition: Execution is prohibited when confirmed backflow or confirmed failure of protection device affects PW or PUW systems serving exposed materials.
| Attribute | Compliant State | Nonconforming State | Invalid State | Escalation Trigger | Required QMS Process Entry | QU Authorization Required? |
|---|---|---|---|---|---|---|
| System Segregation | No unprotected cross-connection between PW/PUW/PRW and waste systems | Unprotected cross-connection identified | Verification record missing | Cross-connection confirmed at GMP interface | Deviation + Change Control | Yes |
| Backflow Device – PW / PUW | Approved device installed and functional at all hazard tie-ins | Device missing, bypassed, failed, or overdue testing | Inspection or test record missing | Failure protecting PW or PUW | Deviation + Quality Defect | Yes |
| Backflow Device – PRW | Approved device installed and functional at PRW hazard tie-ins | Device missing, bypassed, failed, or overdue testing | Inspection or test record missing | Failure at PRW device serving open product exposure | Deviation + Quality Defect | Yes |
| Air Gap Protection | Air gap ≥ 2x supply pipe diameter and unobstructed | Air gap deficient or obstructed | Verification record missing | Deficiency at PW or PUW interface | Deviation + Change Control | Yes |
| Periodic Device Testing | Testing interval ≤ 12 months unless hazard tier requires shorter interval | Testing overdue or test failure documented | Test documentation missing | Test failure protecting PW or PUW | Deviation + Quality Defect | Yes |
| Confirmed Backflow Event | 0 events affecting PW or PUW | Any confirmed event | Event documentation missing | Backflow affecting PW or PUW | Deviation + Quality Defect | Yes |
When ≥2 Nonconforming States occur within 30 days for the same protection system, CAPA entry is mandatory.
| Trigger Condition | Execution May Continue? | Required Action | QMS Process Entry | Workflow (W)? | QU Authorization (A)? | Required Record |
|---|---|---|---|---|---|---|
| Compliant State | Yes | Continue under controlled state | None | No | No | Backflow Inspection Log |
| Nonconforming State | Conditional | Escalate under QMS | Deviation | Yes | No | Deviation Record |
| Invalid State | No | Execution is prohibited until record validity restored | Deviation | Yes | No | Deviation Record |
| Confirmed Backflow or PW/PUW Device Failure | No | Isolate affected system | Deviation + Quality Defect | Yes | Yes | Quality Defect Record + QU Authorization |
| Reassessment Trigger (≥2 in 30 days) | Yes | Systemic evaluation required | CAPA | Yes | Yes | CAPA Record |
When Nonconforming State is identified, Deviation entry is mandatory.
When PW or PUW protection failure is confirmed, Quality Defect entry is mandatory.
When structural redesign or hazard reclassification occurs, Change Control entry is mandatory.
When reassessment threshold is met, CAPA entry is mandatory.
Execution is prohibited when Stop-Execution Condition exists.
E — Execution: Authorized personnel perform inspection and testing of backflow controls and record results.
W — Workflow: Mandatory QMS workflow entry when acceptance criteria are not met.
A — Authorization: Quality Unit retains final authority for contamination assessment, infrastructure modification approval, and quality-impacting decisions.
Execution does not confer product disposition authority.
Compliant: All protection systems functioning and documented.
Nonconforming: Any objective requirement not satisfied.
Invalid: Required inspection/test documentation missing.
Escalation Trigger: Confirmed device failure protecting PW or PUW, confirmed unprotected cross-connection at GMP interface, confirmed backflow event, or reassessment threshold.
Stop-Execution Condition: Confirmed backflow or confirmed device failure affecting PW or PUW systems serving exposed materials.
Change Control entry is required for modifications to segregation architecture, hazard classification, protection device type, or air gap design. Independent QU approval is required prior to implementation. No implementation is permitted without documented QU authorization.