Usage Examples
- A deviation was raised for the four-hour hold-time excursion on batch 24-118.
- The deviation investigation extended to two other batches that shared the same filter lot.
- QA will not release until every open deviation on the batch record is closed.
What is Deviation?
Deviation is a departure from an approved instruction, procedure, specification, or established standard in a regulated process, which GMP requires to be recorded and justified, and investigated whenever it is critical or unexplained.
Deviation reporting exists because no process runs exactly as written every time, and a regulator reviewing a batch years later can only see what was recorded. Requiring every departure from an approved procedure to be written down and justified at the point it happens converts an uncontrolled event into evidence a reviewer can evaluate, rather than a gap nobody can reconstruct.
A deviation covers any departure from approved instructions, procedures, specifications, sampling plans, test methods, or established standards, across manufacturing, packaging, testing, storage, and distribution. A deviation is not a test result that simply falls outside specification, which is an OOS, and not an authorised modification to a procedure, which belongs in change control. Scope follows the departure itself, not the outcome it produced.
Deviation handling in practice begins the moment a departure is detected: the record is opened, product impact is assessed, criticality is assigned, root cause is investigated where the deviation is critical or unexplained, and CAPA follows. In the EU, Annex 16 section 3 lets a Qualified Person certify a batch despite an unexpected deviation, a provision with no direct counterpart in 21 CFR part 211.
Not to be confused with
- OOS (out-of-specification) result
- an OOS is a test result outside an established specification; a deviation is a departure from a procedure, instruction, or standard. A batch can accumulate deviations while every result stays in specification, and it can produce an OOS with no procedural departure at all.
- CAPA
- a deviation is the event and its investigation; CAPA is the corrective and preventive action that follows once root cause is known. The deviation record documents what happened; the CAPA record documents what stops it recurring. Closing the deviation does not close the CAPA.
- Change control
- change control authorises an intentional, permanent modification before it is made; a deviation records an unintended departure after it has occurred. Using a deviation record to pre-authorise a change inverts the two systems and leaves the change unassessed.
- Nonconformance
- nonconformance describes material or product that fails to meet a requirement; a deviation describes the process departure, which may or may not yield nonconforming product. One deviation can generate several nonconformances, and a nonconformance can arise with no deviation behind it.
Deviation obligations under US cGMP attach at three points: recording, investigating, and reviewing before release.
What you must do
- 1Follow written production and process control procedures, document them at the time of performance, and record and justify every deviation from them21 CFR 211.100(b)
- 2Record and justify any deviation from written specifications, standards, sampling plans, test procedures, or other laboratory control mechanisms in the QC laboratory21 CFR 211.160(a)
- 3Thoroughly investigate any unexplained discrepancy or any failure of a batch or its components to meet specification whether or not the batch has already been distributed, extend that investigation to other batches of the same drug product and other drug products that may have been associated with it, and make a written record including the conclusions and followup21 CFR 211.192
- 4For active pharmaceutical ingredients, document and explain every deviation from established procedures, and investigate critical deviations with the investigation and its conclusions documentedICH Q7 2.16
- 5Review all deviation, investigation, and OOS reports as part of the batch record review before the batch is releasedICH Q7 6.72
Common mistakes
Recording the deviation without justifying it
21 CFR 211.100(b) requires both a record and a justification. A deviation log entry with no documented rationale for why product quality was unaffected is a written admission of an uncontrolled departure, sitting inside the batch record the quality control unit must approve before release.
Fencing the investigation to the batch where the deviation surfaced
21 CFR 211.192 requires the investigation to extend to other batches of the same drug product and other drug products that may have been associated with the failure, whether or not the batch has already been distributed. A single-batch scope leaves the distributed-product decision undocumented.
Closing at operator error
operator error describes the event, not its cause. A deviation closed on retraining alone, with no assessment of the procedure, the training design, or the workload that produced the error, recurs, and each recurrence lands back in front of the quality unit at batch release under ICH Q7 6.72 with the same unexplained cause.
When This Matters
- A deviation was raised for the four-hour hold-time excursion on batch 24-118.
- The deviation investigation extended to two other batches that shared the same filter lot.
- QA will not release until every open deviation on the batch record is closed.
Frequently Asked Questions
A deviation is a departure from an approved procedure or standard, while an out-of-specification result is a test result that falls outside an established specification. A batch can carry deviations with every result in specification. Both routes reach the investigation requirement in 21 CFR 211.192 once product quality is in question.
Related Use Cases
- Pharma Use Cases
Cut NDA and sNDA prep time by 60% with AI-assisted drafting and automated readiness checks
- Biotech Use Cases
Compress IND prep from 8-12 weeks to under 3 weeks with AI-assisted drafting and validation
- CMC Workflows
Track ICH quality guidelines automatically and get alerts when changes impact your products
- Quality/QA Workflows
Track GxP regulation changes and enforcement trends
