What a GDP-compliant distribution chain actually requires

Ask a distribution partner what Good Distribution Practice requires and you will usually hear about temperature. Temperature control is necessary, well understood and comparatively easy to buy. It is rarely where an inspection finding comes from.

Findings come from the parts that are administrative rather than technical: who was qualified, what was written down, who was responsible, and whether anyone has ever tested the procedure that exists on paper.

The responsible person is a role, not a title

GDP requires a designated responsible person with defined authority — including the authority to stop a shipment. That authority has to be real. If the responsible person’s decision can be overridden by a commercial deadline, the role does not exist regardless of what the org chart says.

Two questions an auditor will ask, in some form:

• Who signed the last deviation, and what were they empowered to do about it?
• Show me a case where a release was refused.

An organisation that cannot answer the second question has usually not been operating the first.

A quality system is only worth the records it produces.

Qualification is written, before the fact

Every supplier, carrier, warehouse and onward customer in the chain must be assessed and approved in writing before goods move, and re-evaluated periodically afterwards. The assessment is not a certificate on file — it is a documented judgement about whether the party can meet the requirements, made by someone competent to make it.

The common failure is retrospective: goods moved, the relationship worked, and the paperwork was assembled later when an audit was announced. That is visible in the records, because approval dates trail first-shipment dates.

The quality agreement decides the arguments in advance

Where two parties touch the same product, a written quality agreement allocates responsibilities: who releases, who investigates a deviation, who holds the retention samples, who notifies whom within what period, who owns the recall decision.

The value of this document is not compliance. It is that every genuinely difficult conversation in a supply chain — a temperature excursion at 2am, a suspected counterfeit, an out-of-spec result on retained stock — happens under time pressure, and the parties will do whatever the agreement says because there is no time to negotiate.

An agreement drafted after the first incident is always worse than one drafted before it.

Storage, transport and the excursion you will actually have

Temperature mapping of every storage area, monitored and alarmed, with calibrated devices and retained records. Transport under defined conditions with documented handover. None of this is controversial.

What separates a system that survives an audit is the excursion procedure: a defined temperature and duration limit beyond which stock is quarantined, a documented assessment against stability data, and a decision recorded by a named person. Every real distribution chain has excursions. A chain with no excursions in its records is not a chain without excursions — it is a chain that is not recording them, and an auditor will read it that way.

Falsified medicines and the chain of custody

Under the EU falsified-medicines framework, wholesalers must verify that they source only from authorised parties and must be able to demonstrate it. Practically this means:

• Verified authorisation status of every supplier and every customer, on file and current.
• Batch-level traceability forward and backward, reconstructable years later.
• A defined route for reporting a suspected falsification, with the notification period known in advance rather than researched during the incident.

Recall readiness, rehearsed

The recall procedure is the part of a GDP system most often written and least often tested. A useful test is unannounced and timed: pick a batch, and see how long it takes to produce a complete list of every party who received it and reach each one out of hours.

Organisations that run this exercise discover the same two things — an out-of-date contact list, and one link in the chain that cannot be reached at all outside business hours. Both are cheap to fix in a drill and expensive to discover in an incident.

---

Partners can review the operating model under Regulatory & Quality and request the documents relevant to their product and territory. Our standard quality agreement is available for review before any technical discussion.