A pharmaceutical manufacturer operating two commercial lines experiences a recurring contamination event in their fill-finish suite. The contamination is isolated, the affected batches are quarantined, and a full investigation is completed. Root cause is identified: inadequate gowning procedure compliance at a specific transition point in the cleanroom entry sequence.
A CAPA is opened. The corrective action is well-designed — updated gowning SOP, mandatory retraining for all fill-finish personnel, a revised monitoring protocol, and a 90-day effectiveness check at the transition point. The CAPA is implemented on schedule. At the 90-day mark, the monitoring data shows no recurrence. The CAPA is closed.
Eighteen months later, during routine environmental monitoring, a similar contamination event occurs at the same transition point. A new investigation is opened. The prior CAPA is referenced.
The FDA inspection that follows is not primarily about the new event. It is about the prior CAPA closure.
The prior CAPA record was complete by every internal measure. Root cause was documented. Corrective actions were documented. Training records were attached. The 90-day monitoring data was attached. A closure signature from the QA Director was on the record. The CAPA was closed within the required timeframe.
When the new event occurred and the prior CAPA was pulled for review, the quality team's initial reaction was confidence. The prior CAPA was thorough. The documentation was complete. The closure was on time. There was nothing in the file that looked like a gap.
The investigator found the gap in the first ten minutes of review.
The investigator did not question the root cause determination. He did not challenge the corrective action design. He did not question whether the 90-day monitoring data was accurate.
"Who authorized the conclusion that this corrective action was effective — and what is the record of that authorization decision?"
The QA Director pointed to the closure signature. The investigator looked at the signature. Then he asked the question differently:
"What document captures the effectiveness determination itself — who reviewed the monitoring data, what threshold was applied to conclude effectiveness had been demonstrated, and what standard governed that determination?"
The quality team went back to the file. The monitoring data was there. The training records were there. The closure signature was there.
The authorization record for the effectiveness determination was not there.
The monitoring data showed no recurrence at the 90-day mark. That was a fact. What the file could not establish was the decision: who evaluated that data, against what standard, and formally concluded that the corrective action had been effective.
- The identity of the individual who reviewed the 90-day monitoring data and made the effectiveness determination
- The specific effectiveness threshold — what the monitoring data needed to show, and over what time period, to satisfy the effectiveness standard
- The comparison to the pre-CAPA baseline — what the contamination rate or frequency was before the corrective action, and what it was at the effectiveness check
- The evidentiary standard applied — why 90 days of clean data was sufficient to conclude effectiveness, rather than a longer observation period
- The Quality Unit's independent review and authorization of the closure determination
The QA Director had reviewed the data. She had concluded effectiveness was demonstrated. She had signed the CAPA closure. But none of those things — not even all three together — constituted an authorization record for the effectiveness determination.
A signature on a CAPA closure record proves the CAPA was closed. It does not prove that an effectiveness determination was made, by an identified individual, against a defined standard, on the basis of documented evidence.
"CAPA records were closed without documented effectiveness verification. No record exists demonstrating that a qualified individual reviewed the effectiveness data, applied a defined effectiveness standard, or formally authorized the conclusion that the corrective action had controlled the identified root cause."
The observation was not issued because the corrective action failed. The contamination recurrence was a new event, subject to its own investigation. The observation was issued because the prior closure record did not demonstrate that effectiveness had been formally determined — which meant that when the root cause recurred, there was no prior authorization record to evaluate, defend, or build on.
The absence of the effectiveness authorization record turned a recurrence event into a systemic quality system finding. The investigator's conclusion was not that the corrective action was inadequate. It was that the site had no demonstrated process for formally authorizing effectiveness determinations.
Every CAPA in the review period was then evaluated against the same standard. The pattern was consistent across all of them.
CAPA effectiveness is a decision. The decision is: this corrective action controlled the identified root cause, as demonstrated by this evidence, evaluated against this standard, by this individual, on this date.
That decision requires an authorization record. Not a monitoring report. Not a training attestation. Not a closure signature. A document that captures the decision itself — who made it, what they reviewed, what standard they applied, and why the evidence was sufficient to conclude effectiveness.
The authorization record for effectiveness serves a second purpose that the closure record cannot: it becomes evidence in the next investigation. When a root cause recurs, the first question is whether the prior corrective action was genuinely effective. If the effectiveness authorization record exists — with the baseline, the threshold, the observation period, and the formal determination — the current investigation has a foundation. If it does not exist, the recurrence automatically raises the question of whether the prior closure was legitimate.
An effectiveness determination made without an authorization record is a conclusion without a defense. The investigator's question is not whether the CAPA worked. It is whether the conclusion that it worked was formally made, by an identified person, against a defined standard, at the time the CAPA was closed.
That record is producible at the time of closure. It takes the same amount of time as the closure signature. And when the root cause recurs — and investigators ask whether the prior CAPA was genuinely effective — it is the difference between a defensible quality system and a pattern finding.
Discussion opens when you join. Login with LinkedIn to participate.
Join to Comment →