Module Overview: An outline of the module’s scope and objectives, and notes on terminology.
21CFR11 and its Scope: We define regulation 21CFR11 (‘Part 11’), explain its purpose, and set out criteria for identifying the environments, computer systems, electronic records, and electronic signatures to which it applies. We describe how underlying legal requirements are specified by predicate rules. We point out that it is not the type of computer system that determines whether Part 11 applies, but the use to which the system is put. Finally, we introduce the regulation’s distinction between closed and open systems.
Procedures and Controls: We describe the procedures and controls that need to be established and followed to comply with Part 11. We identify those for which the FDA exercises enforcement discretion. We give examples of open systems and outline additional procedures and controls required for them.
Electronic Signatures: We set out Part 11’s requirements for electronic signatures. We specify the information to be provided and we outline constraints on the way signatures are linked to records. We emphasise the importance of uniqueness of signatures and verification of the identity of signatories. We mention the need for one-off certification with the FDA. We outline components of non-biometric and biometric signatures. Finally, we set out procedures and controls required for user names and passwords.
FDA Enforcement Discretion: We describe the FDA’s narrow interpretation of Part 11, and its effect on the need to comply with some of the regulation’s provisions. We discuss the latest relevant FDA guidance for industry and the effect of the agency’s interpretation on its enforcement of compliance with requirements for validation, audit trails, record retention, and record copying. We also specify the exemption for legacy computer systems.
Assessment: Multiple-choice mastery assessment.
- Define regulation 21CFR11 and explain its context and purpose
- Specify criteria to determine which environments, computer systems, electronic records, and electronic signatures must comply with the regulation
- Describe procedures and controls required by the regulation for electronic records and electronic signatures
- Describe the consequences of the FDA’s discretion in enforcing compliance with some of the provisions of the regulation
Who Will Benefit from this Module?
- This module provides essential training for all personnel who use computer systems in GxP environments.