Why ALCOA++ Matters in Good Documentation Practices (GDP)
In the pharmaceutical supply chain, documentation is more than just paperwork, it is the core of product quality, patient safety, and regulatory compliance.
As we move further into an era of digital records and increasingly complex distribution models, the expectations around data integrity have evolved.
For UK pharmaceutical wholesalers, distributors, and other entities holding a Wholesale Dealers Authorisation WDA (H), understanding ALCOA++ and its significance for Good Distribution Practice (GDP) is no longer optional. It is an essential part of staying compliant and inspection ready at all times.
In this blog we explore the evolution from ALCOA to ALCOA+ and now ALCOA++, the current challenges in documentation practices, examples of common Medicines and Healthcare products Regulatory Agency (MHRA) inspection findings, and practical steps to strengthen your Quality Management System (QMS) to meet today’s regulatory and industry expectations.
From ALCOA to ALCOA++
ALCOA: The Starting Point
ALCOA is the foundation of trusted data, ensuring records are attributable, legible, contemporaneous, original, and accurate.
The original ALCOA (Attributable, Legible, Contemporaneous, Original, Accurate) framework dates back to the 1990s and was designed as simple principles to ensure data could be trusted. For years it has served as the baseline for GDP documentation.
-
- Attributable – the person(s) who performed the action or created the record
- Legible – the document is readable throughout its lifecycle
- Contemporaneous – details and records are recorded at the time the activity was performed
- Original – preserving the first capture or a verified true copy
- Accurate – free from error or manipulation
ALCOA+: Lifecycle and Completeness
As supply chains became more global and records moved from paper to hybrid and in some cases, fully electronic systems, industry regulators recognised that the five original principles were no longer sufficient, and four more attributes were added to ALCOA which then became ALCOA+:
-
- Complete – all data captured with no omissions
- Consistent – chronological order maintained, no conflicting information
- Enduring – records are preserved securely for the entire retention period
- Available – easily and quickly retrievable for review or inspection
ALCOA++: The Era of Traceability
ALCOA++ is the gold standard for electronic records – adding traceability and auditability to ensure data integrity throughout the entire lifecycle.
With digitisation came additional complexity: metadata, multiple users, remote access, and system integrations. ALCOA++ was established to further strengthen data integrity and document control by explicitly requiring:
-
- Traceability / Auditability – the ability to trace and reconstruct the full history of a record, including who changed what, when, and why.
This is critical for GDP compliance because distributors often rely on automated temperature monitoring systems and electronic quality management systems (eQMS). MHRA Inspectors expect these systems to have validated audit trails, controlled access, and documented review processes.
Why This Evolution Matters Now
The MHRA continues to focus on data integrity during GDP inspections, and despite the existence of ALCOA principles for decades, many deficiencies still relate to poor documentation control. According to MHRA’s published GDP inspection data, deficiencies frequently fall into these categories:
-
- Quality Management: Weak or incomplete QMS, poor documentation control
- Premises & Equipment: Temperature mapping issues, lack of calibrated monitoring devices
- Operations: Missing SOPs or poorly followed procedures
- Computerised Systems: Unvalidated systems, missing audit trails, inadequate user access control
- Self-Inspection: No schedule, no follow-up, or ineffective CAPA implementation
Each of these issues represents a failure to meet one or more of the ALCOA++ principles. With increased MHRA focus on data integrity such failures are likely to result in Major deficiencies which can lead to Wholesale Dealer Authorisation (WDA) licence suspensions or revocations if systematic throughout the QMS.
Focusing improvement efforts in these areas will address the majority of recurring inspection findings.
Examples of Documentation Errors and How to Prevent Them
Below are some examples of common GDP documentation issues noted by Paradigm Shift consultants when performing GDP data integrity and document control audits and practical steps you can take to avoid them:
-
Gaps in Temperature Logs
Problem: Manual temperature logs with missing signatures or readings or readings added later from memory.
Solution: Implement continuous, validated temperature monitoring with automatic data capture and tamper-evident storage. If manual logs are unavoidable, ensure entries are made by fully trained personnel in real-time, signed and dated, and any corrections made include an explanation.
-
Pencil or Non Indelible Ink Entries and Erased Data
Problem: Records written in pencil, ink that fades over time or use of Tippex/correction fluid. Alterations made without explanation or altered without ALCOA principles having been applied.
Solution: SOPs should forbid the use of Tippex/correction fluid, pencil or non indelible ink. Corrections must use a single line strikethrough, remain legible, and be initialled, dated, and justified. Provide staff training and retain evidence of such training. Check for ALCOA compliance during self-inspections.
-
Unqualified Suppliers
Problem: Product purchased from an unqualified supplier with no retained evidence of licence status or due diligence having been performed.
Solution: Strengthen supplier qualification procedures, ensure signed agreements are kept, and maintain trading records for the required retention period. Periodic review of supplier files is recommended.
-
Poorly Controlled Computer Systems
Problem: No validation documentation, uncontrolled access rights, and inactive audit trails.
Solution: Maintain system descriptions, perform risk assessments, validate critical systems, enable audit trails, review them periodically, and keep evidence of reviews.
-
Weak Route Cause Analysis
Problem: Human error alone is cited as the cause of the deviation or complaint.
Solution: The use of the 5 Why’s or Fishbone diagrams can help identify any mitigating factors as to why the human error occurred.
Practical Steps to Building an ALCOA++ Culture
To embed ALCOA++ into your organisation:
-
- Update SOPs: incorporate ALCOA++ requirements explicitly.
- Train Staff Regularly: use scenario-based learning so staff understand why contemporaneous and attributable records matter. Check competency levels of staff and maintain evidence-based training records. Explore our GDP training modules.
- Validate Systems: maintain system descriptions, risk assessments, validation protocols and review schedules.
- Enable and Review Audit Trails: Self-Inspect documentation for audit and traceability measures, set risk-based review frequency, record outcomes, and act on findings.
- Run Self-Inspections – check documentation quality, including sampling records for ALCOA++ compliance.
The Paradigm Shift Approach
At Paradigm Shift Consulting, we focus on helping RPs and QMS leads create systems where good documentation becomes second nature. Our GDP training courses cover ALCOA++, data integrity, and auditing. We also offer gap analyses and remediation support to help you close findings before they escalate into regulatory action.
Contact us for more information.