Good Manufacturing Practice (GMP) is a set of regulations that ensure products like medications, food, and dietary supplements are consistently produced and controlled to meet quality standards. In the United States, the FDA enforces these rules to guarantee the identity, strength, quality, and purity of products before they reach consumers. GMP covers everything from how a factory is built and maintained to how employees are trained and how records are kept.
Why GMP Exists
The core purpose of GMP is simple: prevent harm. A contaminated batch of medication, a mislabeled food product, or an inconsistent supplement dosage can injure or kill people. GMP regulations require manufacturers to build quality into every step of production rather than relying on testing the finished product alone. This means controlling raw materials, maintaining equipment, training workers, and documenting everything along the way.
Without GMP, manufacturers could cut corners that would be invisible to consumers. You can’t tell by looking at a pill whether it contains the right amount of active ingredient, whether it was made in a clean environment, or whether it will break down properly in your body. GMP regulations exist to close that gap between what consumers can verify and what actually matters for safety.
GMP vs. cGMP
You’ll often see the term “cGMP,” where the “c” stands for “current.” This distinction matters because it means manufacturers can’t simply meet standards that were adequate decades ago. They’re expected to use up-to-date technology, systems, and scientific understanding. A facility that was compliant in 2005 might not pass inspection today if it hasn’t kept pace with advances in quality management, testing methods, or contamination prevention. The FDA uses “cGMP” specifically to signal that these standards evolve.
The Five Pillars of GMP
GMP is often broken down into five categories, sometimes called the “5 Ps”: People, Premises, Processes, Products, and Procedures. These overlap in practice, but they provide a useful framework for understanding what inspectors look for.
- People: Employees must be qualified for their roles and fully trained. Everyone from the production floor worker to the quality control scientist has documented responsibilities.
- Premises: Facilities must be in good condition with proper ventilation, lighting, plumbing, and sanitation. Building design should minimize contamination risks, such as separating raw materials from finished products.
- Processes: Manufacturing steps must be reliable and reproducible. If a process changes, the deviation has to be investigated and documented.
- Products: Raw materials must be tested and approved before use. Components, containers, and closures are all inspected. Rejected materials are separated and tracked.
- Procedures: Written procedures govern every significant activity. These aren’t optional guidelines. They’re enforceable requirements that workers follow step by step.
How GMP Applies to Different Industries
GMP regulations look different depending on what’s being manufactured, though the underlying philosophy is the same.
Pharmaceuticals
Drug manufacturing faces the most detailed GMP requirements. In the U.S., these are codified under 21 CFR Part 211, which sets minimum standards for finished pharmaceuticals intended for humans or animals. The regulation covers eleven major areas: organization and personnel, buildings and facilities, equipment, control of components and containers, production and process controls, packaging and labeling, holding and distribution, laboratory controls, records and reports, and returned or salvaged products.
Specific requirements include tamper-evident packaging for over-the-counter drugs, expiration dating based on stability testing, controls to prevent penicillin cross-contamination, and reserve samples from each production batch. Every facility must have a dedicated quality control unit with the authority to approve or reject any batch.
Food and Dietary Supplements
Food manufacturers follow a separate set of GMP rules under 21 CFR Part 117, which also incorporates hazard analysis and risk-based preventive controls. Dietary supplements have their own dedicated framework under 21 CFR Part 111, reflecting the unique risks of that industry. The food rules emphasize hazard prevention, traceability, and allergen management alongside the standard requirements for facility cleanliness, personnel hygiene, and process controls.
Quality Assurance vs. Quality Control
Two terms come up constantly in GMP environments, and they mean different things. Quality assurance (QA) is the broader system of planned activities designed to ensure that quality requirements will be met. It focuses on how processes are performed and how products are made. Quality control (QC) is the inspection side: the testing, sampling, and checking that confirm a product actually meets specifications.
Think of QA as building the system that prevents problems, and QC as catching problems that slip through. QC is technically a subset of QA. In a GMP facility, QA activities include auditing, writing standard operating procedures, and managing change control. QC activities include testing raw materials, running stability studies, and verifying that finished products meet their label claims. Both functions are essential, and regulators expect clear separation between them and production staff to avoid conflicts of interest.
Documentation and Data Integrity
If it isn’t documented, it didn’t happen. This principle is foundational to GMP. Every significant action, from receiving raw materials to releasing a finished batch, must be recorded. Facilities maintain policies and records covering traceability, training, calibration of instruments, shelf-life management, sanitation schedules, and much more.
The gold standard for GMP record-keeping is a framework called ALCOA+, introduced by the FDA in the early 1990s and later expanded. The original ALCOA principles require that data be Attributable (you can identify who recorded it), Legible (readable and permanent), Contemporaneous (recorded at the time of the activity), Original (the first-captured version), and Accurate (free from errors). The “plus” adds four more requirements: Complete, Consistent, Enduring, and Available. Together, these nine attributes apply to both paper and electronic records and form the basis for what inspectors evaluate when they review a facility’s documentation.
Data integrity failures are among the most serious GMP violations. Backdating a lab notebook, deleting a failed test result, or failing to record a deviation can result in severe regulatory consequences, because it undermines the entire system of trust that GMP is built on.
What Happens During a GMP Inspection
Regulatory agencies conduct routine and for-cause inspections of manufacturing facilities. In the U.S., FDA inspectors follow a structured process that typically covers personnel qualifications and training, personnel hygiene, supply chain controls, production processes, equipment design and maintenance, sanitary facilities, pest control, warehousing and distribution, and facility grounds. Inspectors review both written policies and the records that prove those policies are actually followed.
If an inspector finds violations, they document them on a Form 483, which lists specific observations of noncompliance. The manufacturer then has an opportunity to respond with a corrective action plan. If the issues are serious or the response is inadequate, the FDA may escalate to a warning letter. Warning letters are public documents, and they can damage a company’s reputation significantly. Beyond warning letters, enforcement can include import alerts, consent decrees, product seizures, injunctions, and criminal prosecution in extreme cases.
GMP Around the World
GMP is not just an American system. The World Health Organization maintains its own GMP guidelines, now in their tenth edition, covering 46 guidelines on manufacturing and inspection-related topics. These WHO standards serve as a reference for countries building or strengthening their own regulatory systems, particularly across Africa, the Americas, Eastern Mediterranean, Europe, South-East Asia, and the Western Pacific. The European Union has its own GMP framework (EU GMP Annex system), and other major regulators in Japan, Canada, Australia, and elsewhere maintain comparable standards.
For companies that manufacture products for export, compliance with multiple GMP frameworks is often necessary. Harmonization efforts exist, but differences in specific requirements still create complexity for global manufacturers. A facility selling pharmaceuticals in both the U.S. and EU, for example, needs to satisfy both the FDA’s cGMP rules and the EU’s own inspection standards.