Standard Operating Procedure for Data Integrity Controls in Regulatory Documentation
| Department | Regulatory Affairs |
| SOP No. | RA/2026/768 |
| Supersedes | NA |
| Page No. | 1 of X |
| Issue Date | 16/04/2026 |
| Effective Date | 16/04/2026 |
| Review Date | 16/04/2028 |
Purpose
This SOP establishes the requirements and controls to ensure data integrity in all regulatory documentation throughout its lifecycle. It aims to maintain accuracy, completeness, consistency, and reliability of data in regulatory records, thereby supporting compliance with applicable regulations and facilitating robust quality management and decision-making processes.
Scope
This procedure applies to all regulatory documentation created, reviewed, approved, archived, and managed within the Regulatory Affairs department. It covers electronic and paper-based data related to regulatory submissions, correspondence, approvals, and compliance records. The SOP excludes non-regulatory documents and data managed by other functional areas unless referenced in regulatory filings.
Responsibilities
- Regulatory Affairs Personnel: Execute documentation tasks following data integrity principles.
- Supervisors: Review and approve regulatory documents ensuring data accuracy and completeness.
- Quality Assurance: Verify adherence to data integrity controls during audits and reviews.
- Document Control Team: Manage document versioning, archival, and retrieval.
- IT Support: Maintain secure, validated electronic systems to safeguard data integrity.
Accountability
The Head of Regulatory Affairs is accountable for the implementation, compliance, periodic review, escalation of issues, and continuous effectiveness of this SOP across all regulatory documentation activities.
Procedure
1. Preparation and Prerequisites:
Ensure all personnel involved are trained on data integrity principles and this SOP. Confirm that systems used for document creation, storage, and retrieval are validated and access-controlled.
2. Document Creation:
Generate regulatory documents using approved templates and formats. Record data accurately at the point of origin. Avoid retrospective alterations; if corrections are necessary, they must be clearly documented with reasons, dated, and authorized.
3. Review and Approval:
All regulatory documents must undergo systematic review and approval by designated roles before submission or archival. Reviewers must verify data completeness, accuracy, and consistency with source information.
4. In-Process Controls:
Maintain audit trails for electronic systems capturing user actions, changes, and approvals. For paper records, use indelible ink; corrections should be made by striking through the original text without obscuring it and annotating reasons.
5. Data Storage and Archival:
Store documents securely in controlled access environments, whether physical or electronic. Ensure backup procedures are in place to prevent data loss and maintain retrievability during the document retention period.
6. Data Integrity Verification:
Conduct periodic audits and assessments of regulatory documentation for compliance with data integrity standards. Investigate discrepancies or anomalies promptly and implement corrective actions.
7. Handling Deviations and Non-Compliance:
Identify and document any deviations from data integrity requirements. Raise and manage deviation reports as per quality system procedures, including root cause analysis and corrective/preventive actions.
8. Documentation and Record Retention:
Maintain complete records of all versions, approvals, reviews, and audits related to regulatory documents. Retain records as per regulatory and organizational requirements ensuring they remain accessible and legible.
9. Closure:
On completion of the document lifecycle (e.g., submission approval, archival period expiration), ensure proper disposition per regulatory guidance and organizational SOPs. Periodically review and update this SOP to incorporate changes in regulatory requirements or internal processes.
Abbreviations
- SOP: Standard Operating Procedure
- GMP: Good Manufacturing Practice
- QA: Quality Assurance
- RA: Regulatory Affairs
- IT: Information Technology
- CSV: Computer System Validation
Documents
- Regulatory Document Data Integrity Checklist (Annexure-1)
- Data Integrity Deviation Report Form (Annexure-2)
- Regulatory Document Review and Approval Record (Annexure-3)
References
- FDA Guidance for Industry: Data Integrity and Compliance with CGMP (2018)
- EMA Guideline on GxP Data Integrity (2016)
- ICH Q7 Good Manufacturing Practice Guide
- 21 CFR Part 11 – Electronic Records; Electronic Signatures
- ICH Q10 Pharmaceutical Quality System
Version
1.0
Approval
| Prepared By | |
| Checked By | |
| Approved By |
Annexures
Annexure-1: Regulatory Document Data Integrity Checklist
Purpose: To ensure all regulatory documents comply with data integrity requirements before submission or archival.
| Check Item | Yes / No | Comments |
|---|---|---|
| Data recorded at point of origin | Yes | – |
| Corrections properly documented and authorized | Yes | – |
| Document reviewed and approved by designated personnel | Yes | – |
| Electronic records audit trail verified (if applicable) | Yes | N/A for paper docs |
| Documents stored securely with controlled access | Yes | – |
Annexure-2: Data Integrity Deviation Report Form
Purpose: To document and manage deviations related to data integrity breaches in regulatory documentation.
| Field | Details |
|---|---|
| Deviation Report No. | DIR/2026/001 |
| Date of Reporting | 16/04/2026 |
| Description of Deviation | Unauthorized modification of regulatory submission document detected. |
| Impact Assessment | Potential regulatory non-compliance risk. |
| Root Cause Analysis | Inadequate access control permissions on electronic system. |
| Corrective Actions Taken | Access rights reviewed and restricted; staff retrained on SOP adherence. |
| Preventive Actions Proposed | Implement routine audits of access logs and improve system validation. |
| Deviation Closed Date | 30/04/2026 |
| Reviewed By | – |
| Approved By | – |
Annexure-3: Regulatory Document Review and Approval Record
Purpose: To document review and approval status of regulatory documents ensuring data integrity compliance prior to release or filing.
| Field | Information |
|---|---|
| Document Title | Regulatory Submission Module 1 |
| Document Number | RA-DOC-001 |
| Version | 1.2 |
| Prepared By | Regulatory Affairs Team |
| Review Date | 14/04/2026 |
| Reviewed By | – |
| Approval Date | 15/04/2026 |
| Approved By | – |
| Comments/Notes | Document compliant with data integrity requirements. |
Revision History
| Revision Date | Revision No. | Revision Details | Reason for Revision | Approved By |
| 16/04/2026 | 1.0 | Initial issue | New SOP creation |