Is the Annex 15 Revision Relevant to Your Organisation?
If you are a GDP-licensed wholesaler or distributor, a contract manufacturer, or an active substance manufacturer operating within the EU or under PIC/S oversight, the answer is yes. The forthcoming revision of EU GMP Annex 15 on Qualification and Validation is not just a GMP matter. It directly touches transport validation, supplier qualification, quality risk management, and the oversight frameworks that GDP operators must maintain across their distribution networks.
The EMA GMP/GDP Inspectors Working Group, together with PIC/S, published a concept paper for the targeted revision of Annex 15 on 19 January 2026. The public consultation opened on 9 February 2026 and closes on 9 April 2026. The final draft guideline is expected to be published by December 2026, with implementation expected to follow. That timeline is shorter than most organisations assume, and preparation must begin now.
This blog explains why the revision is happening, what is changing, and specifically what it means for GDP operators who may not yet have considered how these changes apply to their operations.
Why Is Annex 15 Being Revised Now?
The current version of Annex 15 has been in place since 2015. While it has served as the primary qualification and validation reference for finished product manufacturers, it was never made mandatory for active substance manufacturers. That gap became visible in a serious and consequential way during the nitrosamine contamination crisis in sartan medicines, which led to widespread recalls across Europe and globally.
The post-crisis lessons-learned investigation found a common thread running through affected active substance manufacturers: insufficient process and product knowledge during development, weak investigation practices when acceptance criteria were not met, and inadequate control strategies. These are precisely the areas that Annex 15, if applied, is designed to address. Paragraph 4.2.2 of the lessons-learned report specifically recommended making Annex 15 mandatory for active substance manufacturers.
The revision also incorporates updates to align Annex 15 with ICH Q9(R1) on Quality Risk Management, which was itself revised in 2023 to address the overuse of risk assessment as a formality rather than a genuine decision-making tool. The combined effect is a significant tightening of expectations around how qualification and validation activities are planned, executed, documented, and maintained throughout the product lifecycle.
What the Revision Proposes: The Key Changes
The concept paper is a targeted, not comprehensive, revision. A full-scope revision is planned as a second phase once this targeted update is complete. The specific areas the revision addresses are as follows.
Scope Extended to Active Substance Manufacturers
This is the headline change. Annex 15 currently applies to finished medicinal product manufacturers, with its principles described as optional supplementary guidance for active substance manufacturers. The revised Annex 15 will make compliance mandatory for manufacturers of both chemical and biological active substances. EU and PIC/S inspectorates will verify compliance at active substance manufacturing sites during regulatory inspections. This is a shift from guidance to enforceable expectation, and it changes the inspection risk profile for every API manufacturer operating in or supplying into the EU.
Validation Master File and Q&V Policy Governance
The revision proposes extending and strengthening the concept of the Validation Master File. Under the updated framework, organisations will be expected to maintain a documented Qualification and Validation Policy that governs how all qualification and validation activities are planned, executed, reviewed, and updated over time. This policy must be linked to change control procedures and must define clear ownership and review cycles.
For GDP operators, this has a direct implication: the transport validation and equipment qualification activities associated with your distribution infrastructure must be governed by a documented policy that is subject to regular review, not simply captured in one-off study reports that are archived and forgotten.
Full Qualification Stage Coverage Including URS and FAT
The revision proposes extending the stages of qualification to include explicit coverage of User Requirements Specifications (URS) and Factory Acceptance Testing (FAT), alongside the existing installation, operational, and performance qualification stages. This means the qualification lifecycle must now be demonstrably traceable from initial requirements definition through to ongoing performance monitoring.
For GDP operators qualifying cold storage facilities, temperature-controlled vehicles, warehouses, and monitoring systems, this fuller lifecycle approach means that qualification documentation must trace back to clearly written user requirements, not simply record that a piece of equipment was tested and passed.
Transport Validation: The GDP-Specific Change
One of the most directly relevant elements of the revision for GDP operators is the explicit strengthening of transport validation guidance. The concept paper proposes providing more detailed GDP-specific guidance on transport verification, with an emphasis on how transport conditions can directly impact active substance quality.
The current Annex 15 already includes transport validation as a validation category, but the revised version is expected to raise the standard significantly, requiring:
- Risk-based evidence that transport lanes have been qualified under real-world conditions, not just theoretical scenarios
- Documentation that covers the full range of environmental variables including temperature, humidity, vibration, and handling conditions
- Defined acceptance criteria established before study execution, not retrospectively
- Ongoing transport monitoring programmes with periodic re-qualification triggered by route changes, seasonal variation, or excursion history
- Clear links between transport qualification data and the product’s marketing authorisation storage conditions
For wholesalers and distributors who have treated transport qualification as a light-touch exercise, this raised standard represents a material compliance gap that needs to be addressed before the revised annex is formally published.
Investigations When Acceptance Criteria Are Not Met
The revision addresses a recurring inspection finding: organisations completing qualification or validation studies that do not meet acceptance criteria, then applying ad hoc justifications to accept the results anyway. The revised Annex 15 will require that failures to meet pre-defined acceptance criteria are subject to formal investigation, root-cause analysis, and documented remediation before any decision to accept or reject the study is made.
For GDP operators, this applies directly to temperature excursions during transport qualification studies, storage area mapping failures, and equipment performance tests that fall outside specified limits. The requirement to investigate, document, and remediate rather than simply re-run a study until an acceptable result is obtained is a significant operational change for organisations that have not yet established robust qualification investigation procedures.
Alignment with ICH Q9(R1): Risk Management as a Real Tool
The revised Annex 15 will incorporate the updated ICH Q9(R1) expectations around quality risk management. The key shift introduced in ICH Q9(R1) is the explicit requirement that risk assessments must be used as genuine decision-support tools, not as documentation produced to satisfy an audit requirement after the decision has already been made.
In practice, this means:
- Risk assessments for qualification scope, validation extent, and change control decisions must be documented before the decision is made, not retrospectively
- Risk assessment methodology must be proportionate to the complexity and product risk involved
- Risk review cycles must be defined and followed, not simply referenced in a procedure that is never acted upon
- Decisions made on the basis of risk assessments must be traceable back to the assessment itself in the quality system
For GDP operators whose risk assessments are currently produced as static documents that are not revisited after initial approval, alignment with ICH Q9(R1) through the revised Annex 15 will require a structural update to how risk management is integrated into ongoing operations.
The Revision Timeline and What It Means for Your Planning
The published timetable for the Annex 15 revision is as follows:
- Public consultation on the concept paper: 9 February to 9 April 2026
- Discussion and drafting by EMA GMP/GDP IWG and PIC/S: from April 2026
- Public consultation on the draft guideline: April to June 2026
- Endorsement by EMA GMP/GDP IWG: July 2026
- Publication by the European Commission: by December 2026
Implementation is expected to follow publication, with a transition period that is yet to be formally confirmed. However, based on the pattern of previous Annex revisions, organisations should plan for a six to twelve month implementation window from publication. That puts the effective compliance date in mid to late 2027 at the earliest, but organisations that begin preparation now will be far better positioned than those who wait for the final published text.
What GDP Operators Should Do Right Now
The following actions should be initiated immediately, before the final guideline is published:
- Review your current transport qualification documentation and assess it against the emerging requirements for risk-based lane qualification, full environmental variable coverage, and defined acceptance criteria
- Map all equipment qualification records against the proposed extended lifecycle model, from URS and FAT through to ongoing performance qualification, and identify gaps
- Assess whether your current Validation Master File or equivalent documentation constitutes a governance-level policy or simply a summary index, and upgrade it accordingly
- Review all qualification and validation investigations from the past two years to confirm that acceptance criteria failures were formally investigated with documented root-cause analysis
- Align your quality risk management procedures with ICH Q9(R1) expectations, ensuring risk assessments are prospective, traceable, and subject to defined review cycles
- If your organisation sources active substances from manufacturers who have not previously been subject to mandatory Annex 15 requirements, update your supplier qualification and vendor audit programme to include Annex 15 readiness as an audit criterion
- Engage in the public consultation before the 9 April 2026 deadline if your operations are particularly affected by the transport validation or GDP-specific sections, as stakeholder input can shape the practical language of the final guideline
How Quality and Vigilance Ltd Can Help
At Quality and Vigilance Ltd, we support GDP operators, pharmaceutical manufacturers, and life science organisations in preparing for and responding to regulatory change through practical, inspection-ready compliance consulting. Our services relevant to the Annex 15 revision include:
- GDP compliance audits covering transport qualification, storage qualification, and supplier oversight against current and emerging Annex 15 expectations
- GMP audit services and gap assessments for manufacturers preparing for the extended scope of mandatory Annex 15 compliance
- QMS design and optimisation to embed lifecycle qualification governance, Validation Master File policy structures, and ICH Q9(R1) aligned risk management frameworks
- SOP development and controlled document review for transport validation, qualification investigations, and change control procedures
- Supplier qualification and vendor audit programmes updated to include Annex 15 readiness criteria for active substance manufacturers
- CAPA management and root-cause analysis support for organisations with outstanding qualification or validation findings
- GMP and GDP training for quality teams and operational staff on Annex 15 requirements and what the revision means for day-to-day compliance
Get in touch with our team to discuss how the Annex 15 revision affects your specific operations and what steps your organisation should be taking during the consultation period and beyond.