CliniGA CRO

CliniGA CRO Blog

21 CFR Part 11 scope assessment: start with the record

A system’s electronic format does not make a product label an adequate Part 11 assessment.

Cover image for: 21 CFR Part 11 scope assessment: start with the record
Photo: National Institute of Allergy and Infectious Diseases · License: Public domain · Cropped and resized.
Published
Updated
Sources checked

A system’s electronic format does not make a product label an adequate Part 11 assessment. Start by identifying the regulated record, how it is used and which version is retained as the reliable record throughout its intended lifecycle.

Identify the regulated record

Part 11 contains provisions for electronic records and signatures; assess applicability alongside the underlying record requirements. FDA electronic-system guidance provides interpretive recommendations. Present guidance and binding regulations according to their different status rather than describing every recommendation as a statutory obligation.

Trace its lifecycle

Inventory creation, review, approval, transfer and archive points. In a mixed paper-and-electronic process, explain the purpose of each record. Consider necessary metadata and audit trails before assuming that a PDF output preserves the full context required to understand the original regulated information.

Apply the control checklist

Map access, change tracking, validation and retention controls to risk and intended use. Test preservation of meaning during record export. Know who retains responsibility for readability and access when a system closes or a supplier changes, including dependencies on proprietary software.

  • Record the underlying requirement in the inventory.
  • Distinguish authoritative records from copies used for review.
  • Test exported records and associated metadata.

Challenge vendor assertions

A claim of being Part 11 compliant does not complete the study-specific assessment. Examine vendor evidence, configuration and actual user processes together. Retain the scope decision and rationale, and revisit its assumptions when a new integration or use changes the regulated record pathway.

Frequently asked questions

Does every electronic file have the same scope?
No. Evaluate record type, regulatory use and applicable provisions.
Is a vendor declaration sufficient?
Not alone. Consider intended use, configuration, processes and supporting evidence together.

Sources

  1. eCFR — 21 CFR 11
  2. FDA — Electronic Systems, Records and Signatures guidance