Pharmaceutical Quality • Data Integrity
ALCOA and ALCOA+ in Pharmaceuticals
A practical brief on trustworthy GMP records, the ALCOA+ principles, and how they apply to laboratory, manufacturing, and stability data.
What does ALCOA mean?
ALCOA is a widely used way to describe the qualities of reliable data: Attributable, Legible, Contemporaneous, Original, and Accurate. ALCOA+ adds that records should also be Complete, Consistent, Enduring, and Available throughout their required lifecycle.
In pharmaceutical quality systems, these principles apply to paper and electronic records, including the data and context needed to understand how a result was created, processed, reviewed, and retained. ALCOA+ is a practical framework; it should be applied alongside the applicable GMP regulations, guidance, approved procedures, and risk controls.
Four Data Integrity Foundations
People
Every record identifies the person or system responsible for the action.
Time
Entries are made when work occurs, with protected date and time information.
Evidence
Original data, metadata, calculations, audit trails, and changes remain traceable.
Access
Records remain readable, retrievable, protected, and available throughout retention.
ALCOA+ Principles at a Glance
The cards appear in sequence as the page loads. The animation is subtle and turns off when reduced motion is preferred.
Attributable
The record shows who performed the action or entered the data.
Legible
The information is readable, permanent, and understandable.
Contemporaneous
The entry is recorded when the activity occurs.
Original
The first capture or a verified true copy is preserved.
Accurate
The data reflect what actually happened without undocumented alteration.
Complete
Relevant data, metadata, changes, repeats, and failures are retained.
Consistent
Sequences, dates, units, and records follow an understandable order.
Enduring
The record remains durable and protected for the retention period.
Available
Authorized users can retrieve and review records when needed.
20 ALCOA+ Topics
1. ALCOA+ Principles in Pharmaceuticals
Pharmaceutical companies use ALCOA+ to help ensure that records supporting product quality, patient safety, and regulatory decisions are trustworthy. The principles apply across the data lifecycle—from planning and acquisition through review, reporting, storage, retrieval, and eventual disposition. Controls should match the data’s intended use and risk.
2. What Is ALCOA+ in Data Integrity?
Data integrity means that data are complete, consistent, and accurate throughout their lifecycle. ALCOA+ translates that broad expectation into practical qualities for records. It includes the information needed to reconstruct and understand an activity, which may include metadata, audit trails, instrument files, calculations, and review history—not only a final value or printed report.
3. ALCOA Principles Explained With Examples
Attributable: an analyst signs into a system with an individual account. Legible: a result can be read and understood years later. Contemporaneous: a measurement is recorded as it is made. Original: the source instrument file is retained or a verified true copy is controlled. Accurate: the reported value matches the verified source data and approved calculation.
4. ALCOA vs ALCOA+ in Pharmaceuticals
ALCOA describes five core qualities: attributable, legible, contemporaneous, original, and accurate. The “plus” extends the framework with completeness, consistency, endurance, and availability. In practice, ALCOA+ emphasizes that a correct final result is not enough if relevant records are missing, the sequence is unclear, the data cannot be preserved, or authorized reviewers cannot retrieve them.
5. Attributable Principle in Data Integrity
Attribution makes it possible to identify who performed, observed, reviewed, or changed a record and when. Use individual accounts, signatures, or other approved identification controls, and ensure changes retain an attributable history. Shared logins, unsigned entries, and signing for another person weaken accountability and make investigations difficult.
6. Legible Principle in Data Integrity
Legible records are readable, understandable, and preserved in a form that remains usable for the full retention period. Handwritten entries should be clear and permanent under the site procedure; electronic displays, reports, metadata, and audit-trail information should also remain interpretable. A record that exists but cannot be read or understood is not useful evidence.
7. Contemporaneous Principle in Data Integrity
Contemporaneous recording means documenting an activity at the time it happens or as soon as the approved process allows. Prompt recording reduces reliance on memory and helps establish the true sequence of events. If a controlled exception is necessary, document the actual event time, the entry time, the reason for delay, and any required review—never make an entry appear earlier than it was.
8. Original Principle in Data Integrity
The original record is the first capture of information or a verified true copy that preserves the content and meaning of the source. For computerized instruments, the original may include electronic raw data, associated metadata, methods, processing parameters, and audit trails. A printout or summary may not replace dynamic electronic records when it omits information needed to review or reconstruct the work.
9. Accurate Principle in Data Integrity
Accurate data correctly represent the observation, measurement, calculation, or action. Accuracy is supported by suitable methods, qualified equipment, controlled calculations, appropriate review, and clear correction practices. Corrections should preserve the original entry, show who made the change and when, and include a reason when required by procedure; unexplained overwriting obscures the record’s history.
10. Complete Principle in ALCOA+
A complete record includes all data needed to reconstruct and understand the work, not only results that passed acceptance criteria. Depending on the process, this can include original readings, repeat tests, aborted or invalid runs, calculations, relevant metadata, audit trails, and documented decisions. Omitting inconvenient or unexpected data can distort the scientific and quality record.
11. Consistent Principle in ALCOA+
Consistent records follow a clear, coherent sequence and use controlled conventions for dates, times, units, identifiers, and terminology. Timestamps should be reliable and their time-zone context understood where relevant. Entries, system events, and review steps should make the order of work clear enough for another qualified person to follow.
12. Enduring Principle in ALCOA+
Enduring records remain intact, protected, readable, and retrievable for the required retention period. Paper and electronic records need suitable storage, access controls, backup, and protection against loss or unauthorized alteration. When systems or file formats change, a controlled migration and verification process should preserve the content, context, and usability of records.
13. Available Principle in ALCOA+
Available records can be located and accessed by authorized people when needed for routine review, deviation or OOS investigations, product disposition, regulatory inspection, or other legitimate quality activities. Retrieval should preserve appropriate security and auditability. A backup alone is not sufficient if the organization cannot restore and read the records within a suitable time.
14. ALCOA+ Checklist for Pharmaceutical Companies
Use this starter checklist as a prompt for a site-specific, risk-based review:
- Are critical data, systems, and processes identified and risk-assessed?
- Do procedures define recording, review, correction, retention, and retrieval practices?
- Are user accounts individual, access appropriate, and audit trails enabled and reviewed where needed?
- Are raw data, metadata, repeat and invalid results, and review decisions retained?
- Are instruments, calculations, spreadsheets, and computerized systems appropriately qualified or validated for intended use?
- Are backups, restoration, archival, migration, and record access periodically checked?
- Are staff trained and are concerns investigated and corrected through the quality system?
15. Common ALCOA+ Violations in GMP
Examples of practices that can undermine data integrity include shared user accounts, delayed or backdated entries, undocumented changes, discarded or hidden failed results, unofficial worksheets, incomplete audit trails, uncontrolled spreadsheets, and retaining only a summary when source data are needed. Each observation should be assessed on its evidence and context; a data-integrity concern should be investigated and addressed through the quality system rather than assumed from appearance alone.
16. ALCOA+ Compliance in Laboratory Records
A laboratory record should connect the sample to the analyst, method, equipment, reagents or standards, preparation, observations, raw data, calculations, review, and reported result. The record should show what happened when a test was repeated, invalidated, or investigated. Reviewers should be able to trace the reported result back to source records and understand any changes or decisions.
17. ALCOA+ Compliance in HPLC Data
HPLC data should preserve the full analytical record: sample and sequence details, methods, instrument conditions, injections, chromatograms, integration and processing parameters, calculations, audit-trail history, and review. Retain and assess all relevant runs, including blanks, standards, repeats, aborted sequences, and unexpected results. Changes to integration or processing should be attributable, justified, traceable, and reviewed under approved procedures.
18. ALCOA+ Compliance in Manufacturing Records
Manufacturing records should document who performed and checked each critical activity, what materials and equipment were used, when steps occurred, and what results or adjustments were observed. Entries should be made at the point of performance according to approved batch records and procedures. Deviations, corrections, yield calculations, reconciliations, and in-process results should remain traceable and complete.
19. ALCOA+ Compliance in Stability Studies
Stability records should link each batch and sample to the approved protocol, storage condition, time point, pull and testing dates, analytical results, and review. Preserve chamber monitoring data and document excursions, sample handling, retests, investigations, and decisions. A clear chain of records allows reviewers to confirm that results are associated with the correct samples and conditions over time.
20. ALCOA+ Audit Checklist
During a system or record review, consider asking:
- Can the record be traced to a specific person, activity, date, and time?
- Can the reviewer access the source data and relevant metadata, not only the final report?
- Are original entries and later changes visible, attributable, and explained?
- Are repeats, invalid tests, exceptions, and unexpected results accounted for?
- Does the record tell a clear and chronological story consistent with related records?
- Can the organization retrieve, read, and restore the record for the entire retention period?
- Are access, audit-trail review, backup, and archival controls working as intended?
Document objective evidence, assess the impact and scope of any gaps, and route findings through the site’s approved quality processes.
Further reading: FDA: Data Integrity and Compliance With Drug CGMP | PIC/S publications: Good Practices for Data Management and Integrity (PI 041-1)
.webp)
