What investigators cite, and the controls that prevent it
Data integrity findings rarely come from a single failure. They come from controls that worked on paper but not in practice: a shared login, an unreviewed audit trail, a spreadsheet outside the validated system.
Investigators find these during routine inspection. The citation lands on your quality system. The remediation lands on your team.
This guide works backward from what FDA has cited. It maps recurring control failures to the safeguards preventing them — access tied to individual named users, secure computer-generated audit trails under 21 CFR 11.10, periodic review of those trails at defined intervals, and validated workflows keeping records inside the system rather than beside it.
What’s in the guide
A 25-page PDF, about 20 minutes.
- Key takeaways from FDA warning letters
- FDA guidance on data integrity in cloud-based electronic systems
- Tips for implementing robust data integrity practices in your facility
- FDA inspection and enforcement trends — overview, observed examples, and next steps
- FDA guidance for industry: data integrity and compliance with drug CGMP — questions and answers
Built from five FDA warning letters issued between May 2022 and August 2023, with citations to 21 CFR Part 11, § 211.68(b), and §§ 211.180(c) and 212.110(a).
It doesn’t restate the regulation. You already have the regulation. It shows which controls investigators actually ask to see, and what acceptable evidence looks like when they ask.
It’s written for the person who has to answer the question, not the person who approves the budget.
Start here: pick your three most inspection-exposed systems. Walk each one against the guide’s control areas and record where the evidence actually lives. Anywhere the answer is a spreadsheet, a shared account, or a binder, you’re holding a finding nobody has written down yet.
Most of what’s here doesn’t require new software. It requires knowing which controls an investigator will ask to see, and being able to produce the evidence without a scramble.