Decide how each process step will control exposure before assigning an equipment category. A potent compound handled as a wet intermediate inside closed equipment may create a different challenge from a less potent but dusty powder repeatedly poured from bags. A useful containment strategy connects the substance, emission mechanism, exposure pathway, operator task and verified control. A band number alone cannot make that connection.
The objective is to protect workers and the environment, prevent cross-contamination and maintain process control. These objectives overlap but require different evidence. The following decision framework is a GuideGxP engineering recommendation informed by occupational hygiene and quality risk management. It deliberately avoids universal OEB tables, exposure targets and technology rankings.
1. Start with a controlled compound dossier
Assemble the available pharmacological, toxicological and physicochemical information under an identified owner. Include active substance identity, relevant impurities, concentration in the handled mixture, physical form, particle characteristics, dustiness, solubility and any relevant volatility. Record whether information describes the actual process material or a different form. Milling, drying or formulation can change emission behaviour.
Potency describes the amount required to produce a biological effect; toxicity concerns adverse effects. Neither term automatically establishes cytotoxicity, sensitisation or the controls needed for a particular operation. A compound may raise concerns through more than one endpoint or exposure route. The assessment must therefore be compound-specific and should state the limits of the available evidence.
Where knowledge is incomplete, identify provisional assumptions and the actions needed to resolve them. A conservative interim control can be appropriate, but its rationale and restrictions should be documented. “High potency” is not a substitute for a hazard assessment, and an absence of published occupational limits does not establish that open handling is acceptable.
2. Keep OEL, OEB and HBEL in their proper roles
An OEL addresses occupational exposure over a defined averaging period and route. Record who established it, which effects it addresses and whether additional short-term, skin or sensitisation considerations apply. Regulatory limits and internally derived limits can have different status. Occupational Hygiene should determine how the complete applicable limit set is used in assessment.
An OEB is a range within a specified banding system. Organisations and providers can use different bands, labels and boundaries. Identify the framework, version, data requirements and uncertainty. Never write “OEB 5 always means below a particular concentration” without a valid source-specific definition. A band can support decisions when data are limited; it does not automatically replace a compound-specific OEL.
HBELs used for cross-contamination address unintended exposure through medicinal products. PDE and ADE are daily exposure concepts within documented toxicological approaches. Their derivations, assumptions and application must be understood. A permitted carryover calculation additionally depends on the next product, dose, batch and shared surfaces or other transfer pathways. Do not convert a daily patient exposure value into an airborne worker limit by simple arithmetic.
| Decision | Relevant basis | Inappropriate shortcut |
|---|---|---|
| Assess operator inhalation exposure | Applicable OEL, task and reference period | Treating a PDE as an air concentration |
| Screen a substance with incomplete data | Named OEB framework and documented uncertainty | Assuming every provider uses identical bands |
| Control product carryover | HBEL-based quality risk assessment and process information | Using room air results as cleaning acceptance |
| Specify an equipment study | Defined containment performance target and test conditions | Claiming that passing the OEL proves every task safe |
3. Map emissions and exposure pathways
Walk the material through the process with operators. Record opening packages, scooping, tipping, sampling, docking, disconnecting, empty-container removal and cleaning. Observe the energy that can mobilise material: falling powder, mechanical agitation, pneumatic transport, vibration, compressed gas, scraping or an abrupt pressure change. The mass present and the mass becoming airborne are different quantities.
Evaluate inhalation, direct skin contact, contaminated surfaces, inadvertent transfer and relevant secondary routes. Air monitoring cannot establish that gloves, handles or tools are free from contamination. A clean room classification cannot replace occupational hygiene assessment. Routine microbiological environmental monitoring and occupational chemical exposure monitoring answer different questions.
Include people who do not operate the process: cleaners, maintenance technicians, laboratory samplers, waste handlers and nearby workers. A task performed briefly by one person can contaminate surfaces used later by others. Document the source-pathway-receptor chain, including movement through equipment, rooms, garments, containers and waste routes.
4. Characterise tasks and credible variability
For each task, record quantity, concentration, duration, frequency, geometry, material condition and working method. Describe normal variation rather than only the easiest demonstration. A partially emptied liner, powder adhering to a valve seat, an awkward package size or a long campaign may create a different challenge from a short clean-equipment trial.
Group similar exposure situations only when there is a defensible basis. Operators sharing a job title may perform different duties; different jobs may include the same emission-generating task. Occupational Hygiene should define the assessment population and strategy. Avoid assuming that one area sample represents every worker or that one successful operation establishes long-term control.
Consider foreseeable abnormal conditions separately from routine operation. Examples include incomplete docking, a glove puncture, power interruption, loss of exhaust, jammed discharge and a spill inside an enclosure. The strategy should identify prevention, detection, safe response and recovery. Emergency response arrangements require site-specific planning and trained personnel, not improvised instructions in a generic article.
5. Apply the hierarchy of controls
First consider elimination or substitution where technically and therapeutically feasible. At the process-design level, reduce the need for manual powder handling, use a less emissive material form when justified or combine steps to avoid intermediate opening. These changes need product and process evaluation; exposure reduction does not authorise an uncontrolled formulation change.
Next assess closed processing and engineered containment. An enclosed machine can reduce emissions at source, but inlet, outlet, sampling and maintenance interfaces still require review. A glovebox, isolator, ventilated enclosure or downflow booth must be selected against the task and evidence, with a clear definition of its operating limits.
Administrative controls and PPE address residual risks and support reliable operation. They include access control, work instructions, training, permitted conditions and protective equipment selected for the actual hazards. Respiratory protection requires the applicable programme and fit requirements. It should not be the default remedy for a preventable design gap or protect only the wearer while others remain exposed.
6. Define primary and secondary containment
Primary containment controls the material close to its source: a closed vessel, sealed transfer, isolator or effective local enclosure. Secondary controls limit migration or consequences if the primary boundary is challenged. Rooms, airlocks, pressure relationships and controlled movement may contribute to that secondary strategy. Their functions must be explicitly assigned.
Negative room pressure can help direct migration at a boundary, but powder emitted beside an operator may enter the breathing zone before reaching room extraction. Likewise, an enclosure pressure reading does not prove effective capture at every opening. Consider boundary integrity, airflow, operator movements, disturbances and task performance together.
Where product protection is also required, assess the complete architecture. An aseptic containment isolator must address sterile processing and worker protection, including transfers and failure modes. It cannot be specified by simply combining a positive-pressure aseptic requirement with an unrelated negative-pressure requirement. The design needs a coherent pressure and contamination control rationale.
7. Turn the assessment into an operating envelope
Describe what the selected system is intended to handle and the conditions under which evidence applies. Include approved packages, material properties, throughput, task sequence, operator interventions, cleaning method, pressure and extraction ranges, and consumable configuration. List conditions that require reassessment, such as a dustier material or a different docking geometry.
Define the containment performance target with Occupational Hygiene. Consider how the task contributes to total occupational exposure, repeated operations, background sources and uncertainty. A design target may include a margin for reliable control, but its derivation should be recorded. Avoid presenting a target as a universal technology rating.
Translate assumptions into measurable prerequisites and practical restrictions. If the study depends on a particular liner closure, that closure becomes part of the approved method. If the system only controls discharge at an established rate, higher throughput needs evaluation. A study report is useful only when its conditions can be maintained in production.
8. Plan evidence in layers
Design review checks the risk logic and control concept. Commissioning and qualification establish installation, functional response and the operating envelope. Containment performance studies examine defined emission-generating tasks using a justified material and sampling plan. Actual occupational exposure assessment considers the real workplace, compound and worker activities. These layers inform one another but are not interchangeable.
The current ISPE SMEPAC guide is the third edition, published in December 2024. Its public scope describes standardised assessments under defined conditions, including surrogate airborne emissions and surface deposition. Refer to the licensed guidance for its detailed methodology; do not claim that an improvised sampling exercise is SMEPAC-compliant.
Set analytical capability before collecting samples. Ask whether the method can distinguish the target from background, quantify concentrations relevant to the decision and handle expected recovery and storage conditions. Non-detects are not zeros. A technically excellent enclosure study with an unsuitable analytical limit may leave the acceptance question unanswered.
9. Integrate cross-contamination and environmental controls
The quality assessment should consider retention, airborne migration, mechanical transfer and mix-ups across the facility. Cleaning controls, material segregation and movement routes may be necessary even when occupational measurements are satisfactory. Conversely, acceptable product carryover does not prove that maintenance exposure is controlled. Keep the evidence and decision authorities visible.
For EU human medicinal product manufacture, Chapters 3 and 5 and EMA HBEL guidance provide an important product-quality framework. ICH Q9(R1) supports risk management. Occupational requirements depend on the site jurisdiction and exposure situation; HSE or NIOSH guidance should be identified by scope rather than labelled as universal pharmaceutical law.
Environmental release, waste and discharge controls require their own assessment. An exhaust filter does not resolve contaminated filter disposal, liquid waste, accidental releases or permitted emissions. Identify the environmental owner and the applicable site conditions. The containment boundary should extend through controlled removal of the material, not end at the edge of the production room.
10. Test the strategy with a realistic example
Suppose a facility introduces a new powder into an existing granulation train. The mixer is closed, but dispensing uses a booth and the process includes manual sampling and dry cleaning. The new material has different dustiness and a lower approved OEL than the previous substance. It is insufficient to accept the train because both compounds were placed in a similarly named band.
The team reassesses dispensing, transfer, sampling and cleaning, reviews the booth operating envelope and checks whether the analytical method supports the revised target. It considers closed transfer and contained sampling, then evaluates residual tasks and maintenance. Existing qualification is leveraged only where configuration and intended use remain relevant. New evidence is targeted at the changed exposure pathways.
The outcome may be a controlled retrofit, a restricted campaign or a different process route. The decision record should show why the controls are adequate, what remains uncertain and which conditions would reopen the assessment. This makes the strategy usable by operations and by future projects, rather than a document that expires after procurement.
Strategy review checklist
- Is the compound dossier specific to the actual material form and process?
- Are OEL, OEB, HBEL, PDE and ADE used with their correct scope and documented basis?
- Have routine, nonroutine and repeated tasks been assessed, including indirect exposure?
- Were elimination, process changes and closed handling considered before reliance on PPE?
- Are primary containment and secondary room controls assigned distinct functions?
- Are acceptance targets and analytical capability established before testing?
- Are surrogate performance and actual workplace exposure assessed separately?
- Are cleaning, maintenance, waste and environmental interfaces included?
- Are triggers for reassessment linked to change control and periodic review?
Maintain the strategy as a lifecycle decision record. Changes in toxicological knowledge, powder form, equipment, work practice, production frequency or incident history can invalidate an earlier assumption even when the machine itself has not changed.
Sources, scope and engineering recommendations
Source status checked on 25 September 2026. Apply each document within its jurisdiction and scope. GEP and GuideGxP recommendations are engineering advice, supported by risk assessment; examples are illustrative. For copyrighted standards and ISPE guides, the public scope and edition were verified; detailed licensed protocols are not reproduced.
- [REGULATORY REQUIREMENT] European Commission — EudraLex Volume 4, Chapters 3 and 5.
- [GUIDANCE] EMA — Health-based exposure limits for shared manufacturing facilities.
- [GUIDANCE] MHRA — Cross-contamination control and HBEL questions and answers.
- [QRM] ICH Q9(R1) — Quality Risk Management, EMA current version.
- [OCCUPATIONAL HEALTH REQUIREMENT / GUIDANCE] NIOSH — Hierarchy of Controls.
- [OCCUPATIONAL HEALTH REQUIREMENT / GUIDANCE] NIOSH — Occupational Exposure Banding Process for Chemical Risk Management.
- [GUIDANCE] PIC/S PI 052-1 — Inspection of HBEL assessments and use in QRM.
