Frequently Asked Questions - GxP Compliance

Below is a list of Frequently Asked Questions about GxP Compliance at the University of Miami.  Please contact us if you still have unanswered questions.

Open All Tabs
  • What is GxP?

    A general term used to refer to the FDA’s “good practice” regulations, where the “x” can stand for Clinical, Laboratory, or Manufacturing in Good Clinical Practice (GCP), Good Laboratory Practice (GLP) and Good Manufacturing Practice (GMP).

Open All Tabs
  • What is Part 11?

    Part 11 is an abbreviated way of referring to FDA’s regulation on electronic records and electronic signatures, known as 21 CFR Part 11.

Open All Tabs
  • When does FDA’s regulation 21 CFR Part 11 apply?

    It applies to records in electronic form that are created, modified, maintained, archived, retrieved, or transmitted under any records requirements (predicate rules) set by the Agency (FDA).  It also applies to electronic records submitted to the FDA (even if such records are not specified in the regulations).

Open All Tabs
  • What are the Predicate Rules?

    Any FDA regulation that requires certain records to be maintained or submitted to the Agency.  For example, 21 CFR 312 for Investigational New Drug (IND) Applications requires the following:

    • 21 CFR 312.62(b) requires an investigator to maintain case histories that record all observations and other data pertinent to the investigation on each individual administered the investigational drug or employed as a control in the investigation.

    If an investigator is maintaining the above records (case histories) in electronic format, then 21 CFR Part 11 applies to these records.

Open All Tabs
  • What types of records are considered “Part 11” records?

    Records required to be maintained under predicate rules:

    • that are maintained in electronic format in place of paper
    • that are maintained in electronic format in addition to paper format and that are relied on to perform regulated research-related activities
    • Records submitted to FDA in electronic format under predicate rules (even if such records are not specified in Agency regulations)

Open All Tabs
Open All Tabs
  • What is computer system validation?

    Documented evidence that a computerized system performs its intended functions, reliably, and with consistent intended performance in its operating environment.

Open All Tabs
  • What kind of documentation is generated during the validation process?

    Much like conducting a research study, system validation begins with a plan (Validation Plan) that outlines the validation tasks and deliverables.  A series of documents are created to document the system installation, system’s functions, end users’ requirements for the system, test scripts, as well as how each requirement will be tested to demonstrate that the system operates as intended.   When the system is tested following the approved test scripts, each executed step is recorded and many screenshots are collected as evidence. In addition, a series of SOPs are created to describe topics such as: how to use the system, system maintenance, security, access management, back up and recovery, among others.  At the end of the validation effort, a Validation Summary Report is generated and the final outcome is described.

Open All Tabs
  • Who performs the computer system validations at the University?

    Typically, system validations are performed by Research Information Technology (IT) along with the end users of the system who execute User Acceptance Testing to demonstrate that the system operates as intended using the end users’ workflows and configurations.

Open All Tabs
  • When is a system considered Part 11 compliant?

    A system can only be Part 11 compliant if it meets the control requirements set forth in 21 CFR Part 11 AND if it was validated in-house. This includes User Acceptance Testing by the end users to demonstrate that the system operates as intended using the end users’ workflows and configurations.

Open All Tabs
Open All Tabs
Open All Tabs
Open All Tabs
  • When can electronic signatures be used in FDA-regulated research?

    Electronic signatures that are intended to be the equivalent of handwritten signatures or initials required by predicate rules must be executed using a system that meets the control requirements set forth in 21 CFR Part 11 AND that system must be validated at the University for its intended use.

Open All Tabs
  • What are FDA’s requirements for electronic signatures?

    Electronic signatures that are intended to be the equivalent of handwritten signatures or initials required by predicate rules must be executed using a system that meets the control requirements set forth in 21 CFR Part 11 AND that system must be validated in-house for its intended use.

     

    In addition, electronic signatures that are not based on biometrics (e.g. fingerprint) must use at least two identification components such as a username and password to ensure that each electronic signature is unique to one individual. The electronic signature must also be linked to the electronic record to ensure that the signature cannot be excised, copied, or otherwise transferred to falsify an electronic record.

     

    The electronic signature manifestation must contain the following:

    • Printed name of the signer
    • Date and time when signature was executed
    • Meaning of the signature (e.g. approval, review or authorship)

     

    For more details on electronic signatures, refer to 21 CFR Part 11: Electronic Records; Electronic Signatures.

Open All Tabs