Supplier WHO GMP non-compliance during WHO inspection – CAPA aligned to WHO standards


Published on 28/01/2026

Addressing Supplier Non-Compliance with WHO GMP During Inspections: A Playbook for Pharma Professionals

Supplier non-compliance with WHO GMP standards poses a significant risk to pharmaceutical operations, leading to financial losses and regulatory scrutiny. Ensuring compliance throughout the supply chain is crucial, particularly during WHO inspections. This playbook is designed to equip you with actionable steps to quickly triage symptoms of non-compliance, conduct deep-dive analyses, implement controls, and maintain inspection-ready documentation.

To understand the bigger picture and long-term care, read this WHO GMP Compliance.

By following this structured approach, professionals across manufacturing, quality control, quality assurance, engineering, and regulatory affairs can enhance their compliance framework and be better prepared for WHO inspections while effectively addressing any instances of non-compliance.

Symptoms/Signals on the Floor or in the Lab

Identifying early signals of supplier non-compliance with WHO GMP can prevent more severe ramifications. Common symptoms include:

  • Product Quality Issues: Deviations in specifications, unexpected defects, or contamination.
  • Document and Record Discrepancies: Missing,
outdated, or inaccurate documentation.
  • Inconsistent Batch Variability: Fluctuating performance metrics, indicating shifts in material quality.
  • Audit Findings: Observations raised during internal audits or previous inspections that have not been adequately addressed.
  • All personnel should be trained to recognize these symptoms early to enable timely interventions. A robust Communication Protocol will enhance awareness across departments.

    Likely Causes

    Supplier non-compliance typically falls under various categories. Below is a breakdown of possible causes, with examples:

    Category Examples
    Materials Substandard raw materials, contamination, incorrect storage conditions
    Method Inadequate SOPs, lack of validated procedures
    Machine Equipment malfunction, uncalibrated instruments
    Man Lack of training, high turnover, insufficient supervision
    Measurement Inaccurate measurements, faulty testing equipment
    Environment Inadequate sanitation, improper environmental controls

    Immediate Containment Actions (first 60 minutes)

    Upon identifying potential non-compliance, immediate containment actions are crucial:

    1. Cease Operations: Stop relevant processes until an investigation is initiated.
    2. Secure Affected Materials: Quarantine all materials and products that may be impacted by non-compliance issues.
    3. Notify Management: Inform relevant stakeholders immediately, including Quality Assurance and Regulatory Affairs personnel.
    4. Document Findings: Begin documentation of the occurrence, including timestamp, personnel involved, and initial observations.
    5. Engage a Multifunctional Team: Assemble a team from cross-functional areas like production, quality, and engineering for initial assessment.

    Investigation Workflow

    A thorough investigation is essential for understanding the extent of non-compliance. The following steps outline a comprehensive workflow:

    • Data Collection: Gather all relevant documentation, including batch records, SOPs, and quality control data.
    • Interviews: Conduct interviews with production staff, quality personnel, and suppliers to gain insights into the problem.
    • Document Review: Assess previous audit findings and previous CAPA records related to the supplier.
    • Data Analysis: Use statistical tools to analyze data trends and identify any anomalies during the production process.

    Interpreting the data collected allows teams to form a clearer understanding of the event and allows for better identification of multiple causes.

    Root Cause Tools

    Utilizing structured tools can clarify root causes. Here’s a look at several valuable methods:

    • 5-Why Analysis: A straightforward approach to drill down to the root cause by asking “why” repeatedly.
    • Fishbone Diagram: Also known as an Ishikawa diagram, it visually represents potential causes grouped by categories to aid brainstorming.
    • Fault Tree Analysis: A more formal method that uses logic diagrams to identify potential failures leading to the observed problem.

    Choosing the appropriate tool depends on complexity and the resources available. For straightforward issues, 5-Why could suffice, while more complex, systemic failures may require Fault Tree Analysis.

    CAPA Strategy

    When addressing non-compliance, a robust CAPA strategy is essential:

    • Correction: Rectify any immediate quality issues, such as disposing of non-compliant products and fixing documentation errors.
    • Corrective Action: Develop and implement changes to procedures, training, or equipment to address the root cause effectively.
    • Preventive Action: Establish new control measures or monitoring protocols to prevent recurrence of the issue.

    Document all actions taken under CAPA as part of maintaining compliance with WHO GMP standards and ensure that records are easily accessible for future inspections.

    Control Strategy & Monitoring

    Continuous monitoring helps assure ongoing compliance. Implement the following control strategies:

    Related Reads

    • Statistical Process Control (SPC): Utilize SPC tools to analyze production data continuously and detect any deviations early.
    • Sampling Plans: Create a system for regular sampling of raw materials and end products to ensure ongoing compliance.
    • Alarm Systems: Set up alarms for critical parameters in the production environment to signal any variations immediately.
    • Verification Activities: Regularly verify that procedures remain effective and relevant through audits and validations.

    Validation / Re-qualification / Change Control Impact

    Changes resulting from non-compliance may necessitate updates to validation and re-qualification efforts:

    • Validation Impact: Determine whether changes in processes or equipment affect the approved validation status and conduct re-validation as necessary.
    • Change Control Process: Follow change control protocols for all significant adjustments, ensuring that revisions are documented and approved.
    • Documentation: Ensure updates to validation documents, batch records, and equipment specifications reflect any changes made.

    Inspection Readiness: What Evidence to Show

    Being prepared for inspections requires that specific documentation and evidence is readily available:

    • Batch Records: Ensure that all batch records are complete and reflect compliance with all approved processes.
    • Logs: Maintain detailed logs of operations, monitoring, and maintenance activities.
    • Deviation Reports: Clearly document any deviations along with the CAPA actions taken.
    • Training Records: Ensure that training records show that personnel are adequately trained in current SOPs and compliance measures.

    Be prepared to demonstrate the effectiveness of the CAPA actions taken to address any noted non-compliance during audits or inspections.

    FAQs

    What should I do if a supplier is found non-compliant during an inspection?

    Immediately initiate corrective and preventive action while conducting a thorough investigation of the non-compliance.

    How can we improve our supplier management to avoid non-compliance?

    Regular audits, robust supplier qualification processes, and performance monitoring can help mitigate risks associated with suppliers.

    What documentation is essential for audit readiness?

    Critical documentation includes batch records, CAPA documentation, logs, training records, and deviation reports.

    How often should we conduct internal audits of suppliers?

    Internal audits should be conducted at scheduled intervals, typically annually, but may require more frequent audits based on previous performance.

    What are the key components of a CAPA plan?

    A successful CAPA plan includes correction, corrective actions, preventive actions, and thorough documentation of all processes.

    Can root cause analysis tools be used interchangeably?

    While they serve a similar purpose, each tool is suited to different situations. Choose based on the complexity and nature of the issue.

    How do we ensure ongoing compliance with WHO GMP standards?

    Implement robust monitoring, regular training, and continuous improvement processes in your quality management system.

    What is the timeline for implementing corrective actions after an inspection?

    Timelines vary but should focus on prompt action, ideally within 20 to 30 business days for minor issues, with appropriate justification for delays on more complex actions.

    Why is it vital to maintain inspection-ready documentation?

    Inspection-ready documentation demonstrates compliance and can help mitigate fines or product recalls while ensuring continuous supply chain integrity.

    What steps should be taken when a non-compliance issue occurs?

    Immediate containment, thorough investigation, correction, and preventive measures should be documented and reviewed continuously.

    Pharma Tip:  WHO GMP gap identified during internal gap assessment – avoiding repeat WHO observations