What is 21 CFR Part 211?
Title 21 of the Code of Federal Regulations Part 211 sets the current good manufacturing practice (cGMP) requirements that pharmaceutical companies must follow when manufacturing, processing, packing, or holding finished drug products for distribution in the United States. Published and enforced by the U.S. Food and Drug Administration, Part 211 applies to prescription drugs, over-the-counter drugs, and biological drug products unless those products have separate, more specific cGMP regulations.
Part 211 works alongside 21 CFR Part 210, which covers general cGMP definitions and scope. Together, Parts 210 and 211 form the baseline cGMP framework for finished pharmaceuticals in the U.S. regulatory system. The full text of 21 CFR Part 211 is available on the eCFR website.
FDA describes 21 CFR Part 211 as the minimum requirement, not the ceiling. The word “current” in cGMP is intentional: the standard evolves as manufacturing science advances, and FDA expects companies to keep pace. A company that was in compliance five years ago may not be in compliance today if newer methods and controls have become standard practice in the industry.
Who must comply with 21 CFR Part 211?
Any person or organization engaged in the manufacture, processing, packing, or holding of a drug product for distribution in the U.S. must comply with Part 211. This includes domestic manufacturers and foreign manufacturers that export to the U.S. market. Contract manufacturing organizations (CMOs), contract laboratories, and warehouses that store finished drug products all fall within the scope of Part 211 for the activities they perform.
FDA applies Part 211 to brand-name drug manufacturers, generic drug manufacturers, over-the-counter drug producers, and certain biological product manufacturers. Combination products that include a drug component are also subject to Part 211 for that component, unless a more specific regulation applies.
Structure and subparts of 21 CFR Part 211
Part 211 is organized into subparts, each covering a distinct area of pharmaceutical manufacturing. Understanding what each subpart requires is the first step toward building a QMS that meets the regulation systematically.
Subpart B: Organization and personnel (211.22, 211.25, 211.28, 211.34)
This subpart requires a quality control unit with the authority and responsibility to approve or reject all drug products. Personnel involved in manufacturing must have the education, training, and experience necessary for their responsibilities. Consultants used in manufacturing or testing must be qualified, and their qualifications must be documented.
Subpart C: Buildings and facilities (211.42-211.58)
Manufacturing facilities must be designed and maintained to prevent contamination, mix-ups, and errors. Buildings must provide adequate space for equipment, materials, and operations. Separate areas are required for different manufacturing steps when contamination risk warrants it. Lighting, ventilation, plumbing, sewage, and washing facilities must all meet specific requirements.
Subpart D: Equipment (211.63-211.72)
Equipment must be of appropriate design, size, and construction for its intended use. It must be cleanable and maintain-able. Automatic, mechanical, and electronic equipment must be routinely calibrated, inspected, and checked according to written procedures. Equipment cleaning and maintenance logs must be kept.
Subpart E: Control of components and drug product containers and closures (211.80-211.94)
All incoming components, containers, and closures must be received, sampled, tested, and approved or rejected before use. This subpart requires written procedures for receiving operations, quarantine, testing, storage, and release. Rejected materials must be clearly identified and controlled to prevent use.
Subpart F: Production and process controls (211.100-211.115)
Manufacturing processes must be based on written procedures developed, reviewed, and approved by the quality unit. Each batch of drug product must be produced and controlled according to these procedures. Any deviations must be recorded and justified. All process steps must be documented in batch production records at the time they occur.
Subpart G: Packaging and labeling controls (211.122-211.137)
Labels and labeling materials must be controlled to prevent mix-ups, which historically have caused serious patient harm. Issuance of labeling must be carefully controlled, with reconciliation of quantities issued and used. Inspection of packaging lines before use is required to ensure no incorrect labels remain from the prior batch.
Subpart H: Holding and distribution (211.142-211.150)
Finished drug products must be held in quarantine until released by the quality unit. Distribution records must identify each lot by batch number, date of distribution, and the name and address of the consignee. This makes recall execution possible when a product problem is identified after distribution.
Subpart I: Laboratory controls (211.160-211.176)
Laboratory controls are one of the most heavily inspected areas in pharmaceutical cGMP. Part 211 requires that laboratory procedures be scientifically sound, that standards and test methods be validated, and that out-of-specification (OOS) results be investigated fully before any batch is approved. Stability testing programs must be established to support expiration dates. Reserve samples of each batch must be retained for defined periods.
Subpart J: Records and reports (211.180-211.198)
Records must be retained for at least one year beyond the expiration date of the batch, or at least three years after the distribution of the batch, whichever is longer. Records must be available for review during FDA inspections. This subpart covers master production and control records, batch production and control records, laboratory records, distribution records, and complaint records.
Subpart K: Returned and salvaged drug products (211.204-211.208)
Returned drug products must be identified, stored under proper conditions, and evaluated to determine whether they can be returned to the market. Salvaged drug products require FDA review and approval before redistribution.
What are the most common Part 211 violations FDA cites?
A look at FDA warning letters and 483 observations over recent years reveals consistent patterns. Failures in laboratory controls top the list, particularly inadequate investigation of out-of-specification results and failure to invalidate OOS tests only when scientifically justified. Data integrity violations, where records are altered, backdated, or fabricated, appear frequently and tend to result in serious enforcement action. Production record deficiencies, including incomplete entries, undocumented deviations, and batch records not completed at the time of manufacture, are also common citations.
Equipment cleaning validation failures represent another frequent area of citation. When cleaning procedures are not validated or when equipment is released for use without documented verification that it meets cleanliness specifications, FDA will cite the company under Subpart D and potentially Subpart F.
How a QMS supports 21 CFR Part 211 compliance
21 CFR Part 211 requires documentation at every stage of manufacturing. Batch records must be completed in real time. Deviations must be captured and investigated. Laboratory results must be stored with full traceability. Change controls must be documented, reviewed, and approved before implementation. Training records must reflect what each employee was trained on and when.
Managing this volume of documentation on paper or in disconnected spreadsheets creates the conditions for Part 211 violations. Records get lost, deviations go uninvestigated because the workflow is informal, and OOS results get handled inconsistently because there is no standard process enforced by the system.
Cloudtheapp is a cloud-based, AI-powered QMS platform with 60+ applications designed for regulated pharmaceutical manufacturers. The platform includes dedicated modules for batch records, deviation reports, laboratory testing, audit trails, change management, and training management, all integrated in a single validated environment. FDA’s Computer System Validation guidelines are built into the platform, so every record created in Cloudtheapp meets the integrity requirements of 21 CFR Part 211 and 21 CFR Part 11.
Quality teams using Cloudtheapp can configure batch record workflows to match their specific products and processes, set up automated deviation notifications, and run stability tracking with automated expiration alerts, without writing a line of code. When an FDA investigator walks in, every record they ask for is retrievable in seconds with a complete audit trail showing who created it, who reviewed it, and when.
To see how Cloudtheapp supports 21 CFR Part 211 compliance in a pharmaceutical manufacturing environment, schedule a demo.
How does 21 CFR Part 211 relate to other FDA regulations?
Part 211 sits within a broader framework. It applies to finished pharmaceutical products and works with Part 210 on definitions. For medical devices, the parallel regulation is 21 CFR Part 820 (the Quality System Regulation, recently updated to the QMSR). For biologics, 21 CFR Parts 600-680 apply. For combination products, both the drug and device regulations can apply simultaneously depending on the primary mode of action.
International equivalents include the EU GMP guidelines (Eudralex Volume 4), the ICH Q7 guideline for active pharmaceutical ingredients, and the ICH Q10 pharmaceutical quality system framework. Companies that manufacture for both U.S. and EU markets must satisfy both sets of requirements, which are largely harmonized but have some differences in specific areas like process analytical technology and continuous manufacturing.
What should a quality team prioritize when building Part 211 compliance?
Start with the quality unit. Part 211.22 gives the quality control unit the authority to approve or reject everything. If the quality unit lacks independence from production, or if its decisions can be overridden without documentation and review, the entire cGMP system is structurally compromised.
After the quality unit, focus on laboratory controls. Subpart I consistently generates the most serious enforcement actions because data integrity failures in the laboratory are both common and difficult to remediate once they are discovered. Build a laboratory OOS investigation procedure that is specific, followed without exception, and documented in a system that cannot be altered after the fact.
The third priority is document control and batch records. FDA investigators will pull batch records, and any blank fields, undocumented deviations, or discrepancies between the master batch record and the executed batch record become immediate observations. A validated electronic system that enforces completion of required fields and captures each entry with a timestamped electronic signature eliminates most of these findings before an inspector arrives.
