GMP deficiency classification is the moment an inspection changes weight: the same observation, classified as "other" or as "major", has very different consequences for the site. Since 1 January 2019, PIC/S inspectorates have had a dedicated guidance, PI 040-1 "Guidance on Classification of GMP Deficiencies", created to make the way findings are assessed, classified and reported consistent across authorities. Understanding how an inspector reasons when assigning a category is one of the most effective ways to prepare a site: it lets you anticipate the perceived severity of a finding, build proportionate responses and turn self-inspections into a true inspection simulation.
The PIC/S guidance on GMP deficiency classification: what PI 040-1 is
PI 040-1 was developed by a PIC/S working group dedicated to deficiency classification, chaired by Australia's TGA, and entered into force on 1 January 2019. The problem it addresses is concrete: different inspectorates, faced with the same finding, did not always land on the same category. For a company operating in several markets this meant inspection outcomes that were hard to compare; for authorities, difficulties in exchanging information and in the mutual recognition of inspections.
The guidance is aimed primarily at inspectors, but it is public precisely because it is also useful to industry: it contains the category definitions, worked examples of critical and major deficiencies, and a supporting, non-binding tool for classifying findings according to risk management principles. The final classification remains the inspector's judgement, taking into account the context of the finding and the site's quality history.
The three categories: critical, major and other
PI 040-1 adopts the three categories already familiar in the European system, the same ones used in EMA's Compilation of Union Procedures. In short:
| Category | What it indicates | Typical examples |
|---|---|---|
| Critical | A deficiency that has produced, or leads to a significant risk of producing, a product harmful to the patient. It always includes fraud, misrepresentation or falsification of products or data. | Falsification of analytical data; release of a batch whose sterility is not assured. |
| Major | A non-critical deficiency that has produced or may produce a product not complying with the marketing authorisation, the clinical trial authorisation, specifications, pharmacopoeia or dossier, or a significant deviation from GMP. | Process parameters outside the registered dossier; missing validation on a critical step. |
| Other | A deficiency that does not fall into the first two categories but still represents a departure from GMP. | Isolated documentation gaps with no direct product impact. |
Alongside the three categories, the guidance provides for the "comment": a minor, one-off discrepancy that is not formalised as a deficiency but is still raised with the manufacturer for correction. It is a detail worth knowing: a comment recurring across several inspections or self-inspections is often the signal of something that, left alone, will become a real deficiency.
Topics like this one — inspections, classification of findings, responses to authorities — are the daily bread of The Pragmatic GMP, GuideGxP's free weekly newsletter: one operational deep-dive a week, written for the people who actually receive findings and have to close them. Subscribe here.
How the risk-based tool reasons
The core of PI 040-1 is a risk-based classification tool: a finding is assessed for its potential impact on product and patient and for the likelihood of that impact materialising, and the resulting category is then calibrated to the context. Two elements deserve particular attention from the company side.
- Context matters. The same observation can weigh differently depending on the extent of the problem, the type of product (a sterile injectable is not an oral solid) and the site's history: findings already notified in the past and not resolved tend to move up a category.
- Deficiencies are also read as a whole. Several related "other" findings can indicate a system failure and be assessed, in aggregate, as a higher-level problem. This is why answering findings one by one, without a system-level reading, is a short-sighted strategy.
The tool is explicitly non-binding: it serves to make the judgement more objective and repeatable, not to replace it. But precisely for that reason it is valuable to QA as well: applying it to your own internal findings produces a realistic estimate of how an inspector would see them.
Inspection deficiencies and internal deviations are not the same thing
A frequent misunderstanding is to treat the classification of inspection deficiencies as a synonym for the classification of internal deviations (minor, major, critical). The two systems look alike but have different objects: a deviation classifies a quality event by its impact on the batch and the process; a deficiency classifies the site's departure from GMP, observed by an authority, with consequences that fall on the whole facility. After critical or major deficiencies, in fact, PI 040-1 lists the actions an inspectorate may take: compliance communications warning of regulatory action, measures against the manufacturing authorisation or the GMP certificate, market recalls, prohibition of supply or importation, suspension or revocation of marketing authorisations, up to prosecution and public warnings.
Understanding this difference helps calibrate the response: a major deficiency is not closed with a one-off correction, but with a CAPA plan that demonstrates understanding of the root cause and extension of the review to similar products and processes.
How to use PI 040-1 in your company
- In self-inspections: classify internal findings with the PI 040-1 definitions, not only with the deviation scale. The self-inspection programme then becomes a realistic inspection simulation.
- In inspection readiness: re-read your latest reports (internal, customer, authority) asking which findings, re-assessed today with the risk-based tool, would move up a category through recurrence or cumulative effect.
- In responses to findings: argue in the logic of the guidance — impact, likelihood, extent, history — bringing evidence that reduces the perceived risk, not mere statements of commitment.
- In management review: the trend of classifications (internal and external) is a direct indicator of PQS health, far more telling than the absolute number of findings.
GuideGxP recommendation
The weak point we see most often is not the classification itself, but the chain before and after it: deviations investigated superficially, self-inspections that do not use inspection criteria, CAPAs without an effectiveness check. It is exactly the chain the inspector walks backwards when deciding whether a finding is "other" or "major". It pays to govern it with mutually consistent tools: written classification criteria aligned with PI 040-1, documented root cause analysis, an effectiveness check planned when the CAPA is opened.
To set all of this up with ready-to-use procedures and templates, the GuideGxP guide “Deviations, Self-Inspections and CAPA: the chain that holds up in inspection” covers the entire flow — including the classification of findings under PIC/S PI 040-1 — with 18 editable Excel and Word tools.
