Computerized Systems

EU GMP Non-Compliance (4 reports published for the same company- see previous posts): Het Nederlands Kanker Instituut-Antoni van Leeuwenhoek Ziekenhuis Stichting – inadequate OOS and aseptic controls

by

Following inspections on 10–12 February and 22–23 April 2026, the Netherlands Health and Youth Care Inspectorate found the hospital pharmacy GMP non-compliant. The NCA recorded one critical, seven major and 14 other deficiencies. The critical deficiency concerned an inadequate OOS process: multiple batches of registered finished products were released despite moisture or assay results outside specified limits, and an ATMP was released despite a failed in-process sterility test. The OOS procedure could permit certification and release without thorough investigation or sufficient justification. Major findings included inadequate aseptic controls, contamination control strategy, process simulations, microbiological investigation and trending, cleanroom behaviour and gowning. Weaknesses also affected the PQS, deviations, CAPA, change control, complaints, self-inspection, PQRs, computerized system validation, data integrity and documentation. The NCA’s stated action was withdrawal of four GMP certificates covering Plesmanlaan and Louwesweg. An unscheduled re-inspection is planned based on the company’s action plan. For the M22BOL study, the NCA described limited impact and left decisions to concerned Member States; no implemented suspension was reported.

FDA Cites Curia New York for API Data Integrity and Computerized System Failures

by

FDA issued a warning letter to Curia New York, Inc. after its January 28–February 5, 2026 inspection of the Rensselaer API manufacturing facility. It states the firm’s APIs are adulterated because manufacturing methods, facilities, or controls did not conform to CGMP. FDA cited incomplete laboratory records and thousands of unexplained HPLC/UPLC injections, including use of the Empower “Developer” role; discarded original records and review of photocopies; and shared computerized-system credentials. FDA found the firm’s responses inadequate in scope or supporting evidence. It requested independent investigations, retrospective data-integrity and computerized-system assessments, product-impact and risk evaluations, laboratory remediation, and a global CAPA plan.

EMA reports on international API inspection programme, 2017–2024

by

EMA’s report reviews the International API Inspection Programme from 2017 to 2024. Across 13 participating authorities, information was shared on 936 inspected sites and 1,684 inspections, approximately 50% more inspections than in the previous period. Of the sites, 644 (69%) were of shared interest; inspection reliance was reported for 107 sites. Authorities conducted 91 remote inspections, while 27 joint inspections covered 25 sites. Duplicate inspections affected 32% of sites and were more frequent following non-compliant outcomes. The report identifies legal, confidentiality, language, technical and resource barriers to report sharing and centralised data exchange. It recommends timelier information sharing, improved report usability, stronger reliance practices and action on duplication.