Annex 16 unexpected deviations are one of the most delicate areas of batch release: section 3 of EU GMP Annex 16 allows the Qualified Person, under very precise conditions, to certify a batch despite a deviation from the registered process or from GMP. It is a real option, but an often misunderstood one: it is not a shortcut for releasing borderline batches, but a rigorous path that requires specifications to be met, a complete investigation, a documented risk assessment and a Pharmaceutical Quality System able to defend the decision in an audit. In this guide we look at what the QP can genuinely accept, what never falls within the scope of section 3, and how to build a defensible decision.
Annex 16 unexpected deviations: what section 3 says
Annex 16 of EudraLex Volume 4 ("Certification by a Qualified Person and Batch Release"), in the revision in force since 15 April 2016, dedicates section 3 to the handling of unexpected deviations. The principle is this: the QP may consider certifying a batch affected by an unexpected deviation concerning the manufacturing process and/or the analytical control methods from the marketing authorisation (MA) and/or GMP, provided that all registered specifications for active substances, excipients, packaging materials and the medicinal product are met.
The key word is "unexpected": the deviation must be an unforeseen, non-recurring event. As the MHRA Inspectorate clarified when commenting on section 3, a brief temperature excursion during a transport designed and qualified to prevent it may qualify as unexpected; the same excursion, if it recurs, can no longer be accepted for certification, because it no longer meets the "unexpected" criterion. An event that becomes habitual is a process problem, not an unexpected deviation.
The conditions that must all be satisfied
For the QP even to consider certification under section 3, these conditions must all hold:
- Registered specifications met: all registered specifications for active substances, excipients, packaging materials and the medicinal product must be satisfied. An out-of-specification result immediately closes the door on section 3.
- Thorough investigation and corrected root cause: the deviation must be thoroughly investigated and the root cause identified and corrected - bringing the process back to the registered conditions or, where necessary, submitting a variation to the authorisation.
- Impact assessment using Quality Risk Management: the QP must assess, using QRM principles (ICH Q9), the potential impact of the deviation on the quality, safety and efficacy of the batch or batches concerned, and conclude that this impact is negligible.
- Additional considerations where relevant: for example, including the affected batches in the ongoing stability programme; particular caution is needed for biologicals, because a process deviation can have an unexpected impact on safety and efficacy.
Where responsibilities are shared among several QPs along the supply chain, the certifying QP must be aware of any relevant deviation and take it into account in their decision: section 3 does not work if information does not circulate.
Topics like this one - release decisions, deviations, QP responsibilities - are the daily bread of The Pragmatic GMP, our free weekly newsletter: every week one GMP topic explained from an operational, audit-ready perspective. Subscribe so you do not miss the next deep dives.
What is NEVER an unexpected deviation
Section 3 is often invoked inappropriately. These cases remain outside its scope:
- Specifications not met: no result outside a registered specification can be "accepted" via section 3.
- Planned deviations: a change decided in advance is a change and must be managed through change control (and, if it touches the dossier, through a variation), never as an unexpected deviation.
- Recurring deviations: by the second or third occurrence, the event is no longer unexpected; effective CAPAs or a variation to the dossier are needed.
- PQS failures: failing to update the authorisation after a revised monograph, or other systemic failures, are not covered by section 3.
| Scenario | Section 3 applicable? | Why |
|---|---|---|
| Brief temperature excursion in a qualified shipment, specifications met, isolated event | Yes, assessable | Unforeseen event, impact assessable as negligible using QRM |
| Process parameter outside the registered range, first occurrence, product compliant with specifications | Yes, assessable | Unexpected deviation from the dossier with specifications met; investigation and root-cause correction required |
| Out-of-specification result on the finished product | No | All registered specifications must be met |
| Same deviation already seen on previous batches | No | No longer "unexpected": CAPAs or an MA variation are needed |
| Process change decided before manufacture | No | It is a planned change: change control and, if needed, a variation |
The QP decision process, step by step
- Confirm compliance with specifications: documented verification that all registered specifications (API, excipients, packaging, finished product) are met.
- Investigate the deviation: classification, root cause analysis, extension to other potentially affected batches.
- Formal risk assessment: science-based evaluation of the impact on quality, safety and efficacy in line with ICH Q9, with an explicit conclusion of negligible impact.
- Correct the root cause: return to the registered conditions or initiate the variation; define CAPAs with effectiveness checks.
- Decide and record: the certification references the deviation and the assessment; the batch is tracked as certified under section 3.
Documentation and PQS: the decision must leave a trace
Annex 16 requires the Pharmaceutical Quality System to maintain records of batches certified with an unexpected deviation: these certifications must feed into management review and the annual Product Quality Review. In an audit, the inspector will look for exactly this: how many times section 3 was used, on which products, with which investigations and with what trend. Sporadic, well-documented use demonstrates a mature system; frequent use signals an out-of-control process and turns section 3 from a flexibility tool into a guaranteed finding. If the handling of the deviation stays within the limits of Annex 16, notification of the competent authority is not required, but the bar remains high: when in doubt about the impact, the way forward is dialogue with the authority, not certification.
GuideGxP recommendation
Our operational advice is not to leave section 3 to improvisation in the heat of the moment: define in a dedicated SOP the eligibility criteria (specifications met, first occurrence, root cause identified), the investigation and risk-assessment flow, the QP assessment template and the register of batches certified under this provision, with review in the PQRs. Also prepare two or three pre-reasoned scenarios typical of your process (transport excursions, process parameters, utilities): when the event happens, the QP decides on tracks already laid instead of under pressure. And remember the golden rule: the second occurrence is no longer unexpected.
To go deeper into certification, batch release and the responsibilities of the Qualified Person, our operational guide "Qualified Person (QP) - Annex 16, certification and batch release" (Third edition, with Toolkit) covers the entire decision process, unexpected deviations included, with ready-to-use templates.
