Web of Pharma · Pharmaceutical Data Integrity

ALCOA+ Principles in Pharmaceuticals

A practical, audit-ready guide to trustworthy GMP records—from the first data entry and laboratory result to review, retention, and retrieval.

9 data-integrity principlesGMP examplesAudit-ready checklist

Quick answer

ALCOA+ principles are the nine data-integrity expectations used to make pharmaceutical records trustworthy: Attributable, Legible, Contemporaneous, Original, Accurate, Complete, Consistent, Enduring, and Available.

A batch can be manufactured exactly as planned and a laboratory result can be scientifically sound, yet the quality decision is still weak if the supporting record cannot prove what happened. Pharmaceutical data must show who performed an activity, when it occurred, what was observed, which original evidence was generated, and whether anything was changed or omitted. This is the practical purpose of ALCOA+.

ALCOA+ is not a handwriting exercise and it is not limited to electronic systems. It applies to paper worksheets, batch records, logbooks, chromatograms, audit trails, stability files, electronic signatures, spreadsheets, and hybrid workflows. The framework gives production, quality control, quality assurance, engineering, validation, and information-technology teams a common way to design and review reliable records.

When ALCOA+ is embedded in cGMP procedures, training, system controls, and investigations, data can support confident release decisions and withstand regulatory inspection. This article explains each principle with pharmaceutical examples, common failure patterns, implementation controls, and an audit-ready checklist.

5Core ALCOA expectations

+4Lifecycle properties added by “plus”

1Complete record for every critical activity

24/7Availability throughout retention

What Are ALCOA+ Principles in Pharmaceuticals?

ALCOA+ is a structured way to evaluate whether data are trustworthy from creation through final disposal. The first five letters describe how a record is created and captured. The four additional properties protect the record as it moves through review, reporting, archiving, and retrieval.

Featured-snippet definition: In pharmaceutical manufacturing, ALCOA+ means that every GMP record is linked to a responsible person or system, readable, recorded at the right time, preserved in its original form, correct, complete, logically consistent, durable, and retrievable.

For example, a balance printout by itself may show a weight, but an ALCOA+ record also connects that weight to the material lot, balance identity, operator, date and time, approved method, calculation, review, and any correction or repeat measurement. The goal is a reconstructable history—not merely a final number.

ALCOA Versus ALCOA+: What Changes?

Framework	Principles	What it emphasizes
ALCOA	Attributable, Legible, Contemporaneous, Original, Accurate	Reliable capture and truthful representation of data at the point of activity.
ALCOA+	ALCOA plus Complete, Consistent, Enduring, Available	Protection of the full data record throughout review, retention, archiving, and inspection.
Practical application	Paper, electronic, and hybrid records	Controls the data lifecycle, including metadata, audit trails, calculations, changes, failures, and retrieval.

The “plus” does not replace the original five principles. It closes common gaps: a result may be accurate but incomplete, original but not retrievable, or legible but inconsistent with the batch record. A mature pharmaceutical quality system tests all nine properties together.

The Five Core ALCOA Principles

Attributable

The record identifies the person, instrument, system, or process responsible for each action.

Legible

Information remains readable and understandable for the whole retention period.

Contemporaneous

The entry is made when the activity or observation actually occurs.

Original

The first capture or a verified true copy of the first capture is preserved.

Accurate

The record reflects the true result and is free from unexplained alteration.

1. Attributable: Who performed the activity?

Attributable data can be traced to the person, instrument, system, or approved process that created or changed the record. A handwritten signature, controlled initials, secure electronic account, instrument ID, or validated automated source can establish attribution when it is uniquely assigned and protected.

Pharmaceutical example: A dispensing entry identifies the operator, material lot, balance ID, date, time, and independent verifier. A shared “warehouse” login or an unsigned worksheet does not establish individual accountability.

Use unique user IDs and prohibit shared passwords.
Control signatures, initials, delegation, and user-role changes.
Link corrections, approvals, audit-trail actions, and reviews to named individuals.

2. Legible: Can the record be understood later?

Legible records are readable, permanent, and meaningful to a trained reviewer who was not present when the work occurred. Legibility applies to handwriting, labels, scanned pages, chromatograms, electronic displays, database exports, audit trails, and archived files.

Pharmaceutical example: A temperature log is completed in permanent approved ink, with clear units and an unambiguous date format. A faint scan, overwritten value, illegible abbreviation, or cropped signature makes the evidence unreliable.

Use approved ink, controlled forms, readable fonts, and defined units.
Verify scan resolution and page completeness before destroying originals.
Preserve the original value when correcting a paper entry; never use correction fluid.

3. Contemporaneous: Was it recorded at the right time?

Contemporaneous means that an observation, measurement, action, or decision is recorded when it happens. Recording a series of equipment readings from memory at the end of a shift can hide the true sequence of events and may conceal an excursion.

Pharmaceutical example: An operator records a granulation endpoint and the actual mixer time immediately after the check. If a delayed entry is unavoidable, the approved procedure should preserve the event time, entry time, reason, and reviewer assessment.

Use system-generated timestamps where appropriate and control system clocks.
Document delayed entries transparently; never backdate a record.
Investigate identical end-of-shift entries, unusual time gaps, and repeated rounded values.

4. Original: Is the first record or true copy preserved?

Original data are the first capture of information or a verified true copy that preserves the content and meaning of that capture. In computerized systems, the original may include raw signal files, acquisition methods, sequence tables, sample sets, instrument parameters, processing methods, metadata, and audit trails—not only a printed result.

Pharmaceutical example: For an HPLC run, the original record includes the raw data and associated metadata in the validated data system. A selected PDF printout may be useful, but it is not automatically the complete original record.

Define “original data” for each instrument, application, and record type.
Retain raw data, metadata, methods, calculations, and audit trails.
Verify true copies and prevent uncontrolled overwriting or deletion.

5. Accurate: Does the record reflect reality?

Accurate data are correct, truthful, and supported by the process that generated them. Accuracy includes correct transcription, units, calculations, instrument status, sample identity, and approved method version. A neat record can still be inaccurate if a result was copied incorrectly or an unexplained adjustment was made.

Pharmaceutical example: A potency result is calculated using the approved formula, the correct standard potency, the correct dilution factor, and a verified instrument result. Any correction is traceable, justified, and does not obscure the original entry.

Use validated calculations, second-person checks, and controlled templates.
Reconcile transcribed values against the source record.
Record instrument status, reference standards, reagents, and method versions.

The Four “Plus” Principles

The additional four properties keep reliable data reliable after creation. They are especially important when records pass between departments, systems, sites, or long-term archives.

6. Complete: Is anything missing?

Complete data include all information needed to understand what happened, including successful, failed, repeated, aborted, invalid, rejected, and out-of-specification activities where applicable. Metadata, audit trails, calculations, processing history, approvals, and review evidence are part of the complete record.

Pharmaceutical example: A laboratory package retains all injections in a sequence, including an aborted run and reinjection, with the scientific reason and investigation reference. Keeping only the final passing chromatogram creates an incomplete history.

Retain raw data and associated metadata, not just summary reports.
Include failed and repeated work with a documented rationale.
Reconcile source records, calculations, reports, and approvals before closure.

7. Consistent: Do records agree and follow a logical sequence?

Consistent data use understandable dates, times, units, sample numbers, version numbers, and event sequences. The same activity should not appear to occur at two different times or under two different sample identities without an explained reason.

Pharmaceutical example: The batch record, equipment log, electronic batch record, and laboratory worksheet show the same lot number, step sequence, and time zone. A mismatch is investigated rather than silently edited.

Standardize date, time, time-zone, unit, and naming conventions.
Use controlled identifiers and interface checks between systems.
Review sequence gaps, duplicate sample numbers, and unexplained version changes.

8. Enduring: Will the record survive?

Enduring records remain durable, protected, and readable for the approved retention period. Paper needs controlled storage and protection from fading, damage, and loss. Electronic records need access control, backup, validated migration, media management, and tested recovery.

Pharmaceutical example: A stability study remains readable after a laboratory application is retired because raw files, metadata, methods, and reports were migrated or preserved in a validated, accessible format.

Define retention periods by record type and regulatory need.
Test backup restoration, archive retrieval, and data migration.
Preserve audit trails and the ability to interpret old records.

9. Available: Can an authorized reviewer retrieve it?

Available means that authorized personnel can locate, access, review, and provide the complete record when needed—during batch review, an investigation, management review, or regulatory inspection. Availability is more than having a backup; the data must be usable and connected to its context.

Pharmaceutical example: QA can promptly retrieve the raw HPLC data, method, audit trail, calculations, review comments, and final report for a released batch without depending on one analyst’s personal computer.

Maintain indexed archives with defined ownership and access roles.
Test retrieval using realistic inspection or investigation scenarios.
Document system dependencies, viewer applications, and restoration steps.

How ALCOA+ Controls the Pharmaceutical Data Lifecycle

Data integrity is strongest when controls are designed at every stage rather than added after a deviation. A lifecycle view connects the person doing the work, the system capturing the evidence, the reviewer approving it, and the archive protecting it.

1 · CreateUse trained people, approved methods, unique identities, and suitable equipment.

2 · CaptureRecord observations contemporaneously in the original paper or electronic source.

3 · ReviewCheck calculations, metadata, audit trails, exceptions, and completeness.

4 · RetainProtect records against alteration, loss, deterioration, and technology change.

5 · RetrieveMake the complete, understandable record available to authorized users.

Use the linked ALCOA+ data-integrity resource for a broader checklist and topic-by-topic review. The principle is the same whether the record is a handwritten dispensing sheet or an electronic batch record.

ALCOA+ Applications in GMP Operations

Area	Records to protect	Practical ALCOA+ focus
Quality control laboratory	Worksheets, sample receipt, preparation, instrument output, calculations, reports	Unique sample identity, raw data, failed injections, audit trails, method version, reviewer evidence
Manufacturing and packaging	Batch records, equipment logs, yields, line clearance, reconciliation, in-process checks	Actual entries at the point of work, operator identity, controlled corrections, material and equipment traceability
Stability studies	Protocols, chamber records, pull schedules, test results, excursions, final reports	Traceable time points, storage conditions, chain of custody, missed pulls, OOS/OOT data, complete conclusions
Computerized systems	User accounts, electronic signatures, audit trails, configuration, backups, interfaces	Validated intended use, role-based access, protected audit trails, clock control, recovery and retrieval testing

Data-integrity controls should also connect to investigations and improvement. When a record suggests a systemic weakness, the quality unit should assess product impact, scope, root cause, and appropriate CAPA rather than treating the issue as a cosmetic documentation error.

Common ALCOA+ Failures and Preventive Controls

Failure pattern	Why it is risky	Preventive control
Shared user accounts or uncontrolled initials	Actions cannot be reliably attributed to one person.	Unique accounts, controlled signatures, role review, and access-termination checks.
Late entry or backdating	The true sequence and possible process impact are hidden.	Contemporaneous recording, protected timestamps, approved delayed-entry procedure, and investigation.
Overwriting or correction fluid	The original value and reason for change disappear.	Single-line paper correction or attributable electronic change with reason and audit trail.
Deleting failed or repeated results	The record becomes incomplete and may conceal an investigation trigger.	Retain all runs, status them clearly, and link invalid or repeated work to a documented rationale.
Keeping only a printout from a computerized system	Raw data, metadata, processing history, and audit-trail evidence may be lost.	Define original data and retain the complete electronic record in a validated archive.
Uncontrolled spreadsheets or manual calculations	Formulas, versions, and changes may not be reproducible.	Validate or control spreadsheets, protect formulas, review inputs, and preserve version history.
Archive exists but cannot be opened	Data are technically retained but unavailable to QA or inspectors.	Routine restore tests, viewer controls, migration planning, and documented retrieval drills.

Important: A correct final result does not repair an incomplete or altered data trail. Investigations should evaluate the full record, potential product impact, intentionality, recurrence, and the effectiveness of corrective actions.

ALCOA+ Implementation Roadmap

Map critical data flows. Identify where each GMP record is created, processed, reviewed, transferred, archived, and destroyed.
Define data ownership. Assign process owners, system owners, data stewards, reviewers, and quality-unit responsibilities.
Assess risks. Prioritize records and systems where data influence identity, strength, purity, safety, release, stability, or regulatory reporting.
Build controls. Use approved procedures, unique access, validated systems, audit-trail review, backup, training, and controlled forms.
Test effectiveness. Sample real records, interview users, observe work, review audit trails, test calculations, and perform retrieval drills.
Improve continuously. Trend recurring issues, investigate failures, update training and procedures, and use risk-based CAPA when needed.

Implementation should be proportionate to risk. A low-risk administrative note may need a simple controlled form, while a critical HPLC system requires validated software, protected raw data, audit-trail review, user management, backup, and a documented archive strategy.

ALCOA+ Audit-Ready Checklist

Does every critical record identify the person, system, instrument, or process responsible for the action?
Are paper and electronic records readable, complete, and understandable to an independent reviewer?
Are entries made at the time of activity, with delayed entries transparently documented?
Are original records, raw data, metadata, calculations, and audit trails retained?
Are corrections traceable, justified, attributable, and prevented from obscuring the original?
Are failed, repeated, aborted, rejected, invalid, and out-of-specification activities visible and assessed?
Do dates, times, units, sample IDs, versions, and sequences agree across connected records?
Are retention, backup, migration, and recovery controls defined and periodically tested?
Can authorized QA personnel retrieve the complete record promptly without relying on one individual?
Are computerized systems validated for intended use, with secure access and protected audit trails?
Do training, procedures, deviations, investigations, and CAPA address data-integrity risks?
Can personnel explain how to report a suspected data-integrity issue without fear of retaliation?

cGMP ALCOA+CAPA

Key Takeaways

ALCOA+ applies to paper, electronic, and hybrid GMP records.
The core principles control how data are attributed, read, recorded, preserved, and verified.
The “plus” protects completeness, consistency, durability, and retrieval throughout the lifecycle.
Raw data, metadata, audit trails, calculations, failures, and review evidence may be part of the original record.
Good procedures are necessary, but real assurance also requires trained people, validated systems, access control, testing, and effective investigations.

Conclusion

ALCOA+ principles in pharmaceuticals turn routine entries into credible evidence. They help a reviewer reconstruct an activity, understand the decisions made, identify exceptions, and determine whether the final quality conclusion is supported. When Attributable, Legible, Contemporaneous, Original, Accurate, Complete, Consistent, Enduring, and Available controls are built into daily work, data integrity becomes part of the process—not a last-minute inspection exercise.

Pharmaceutical companies should apply ALCOA+ proportionately across laboratories, manufacturing, packaging, engineering, stability, quality systems, and computerized applications. The strongest programs connect data governance with cGMP, practical training, risk-based review, and evidence-based CAPA.

Frequently Asked Questions

1. What does ALCOA+ mean in pharmaceuticals?

ALCOA+ means Attributable, Legible, Contemporaneous, Original, Accurate, Complete, Consistent, Enduring, and Available. These properties describe trustworthy GMP data throughout its lifecycle.

2. What is the difference between ALCOA and ALCOA+?

ALCOA contains five core principles: Attributable, Legible, Contemporaneous, Original, and Accurate. ALCOA+ adds Complete, Consistent, Enduring, and Available to strengthen lifecycle control.

3. Is ALCOA+ a regulation?

ALCOA+ is a data-integrity framework rather than a single regulation. Regulators expect GMP data to be reliable, complete, traceable, and retrievable, and ALCOA+ provides a practical way to demonstrate those expectations.

4. Does ALCOA+ apply to paper records?

Yes. Paper batch records, logbooks, worksheets, labels, and forms must be attributable, legible, contemporaneous, original, accurate, complete, consistent, enduring, and available.

5. What is original data in an electronic system?

Original electronic data may include raw signal files, methods, sequences, sample sets, instrument parameters, processing history, metadata, audit trails, and associated calculations. A printed report may be only a partial copy.

6. How should a delayed paper entry be corrected?

Follow the approved procedure, enter the actual entry date and time, explain why the entry was delayed, preserve the original context, and obtain required review. Never backdate or conceal the delay.

7. How does ALCOA+ apply to HPLC data?

It applies to sample identity, preparation, raw chromatograms, methods, sequences, integration, calculations, audit trails, failed injections, reinjections, review, and the final report—not only the selected passing result.

8. Who is responsible for ALCOA+ compliance?

Everyone who creates, handles, reviews, approves, transfers, archives, or retrieves GMP data has responsibility. Management, process owners, system owners, QA, and IT must provide the controls and oversight.

9. What is the connection between ALCOA+ and CAPA?

A data-integrity failure may require an investigation, impact assessment, root-cause analysis, and risk-based CAPA. The response should address systemic causes rather than only correcting one record.

10. How can a company test ALCOA+ readiness?

Sample real records, observe work, interview users, review audit trails, check access and timestamps, test calculations, inspect backups, and perform a retrieval drill using a complete record.