Yunnan Hande Bio-Tech. Co. Ltd.

Recipient: Yunnan Hande Bio-Tech. Co. Ltd..
Product: active pharmaceutical ingredients .
Date: 4/6/2015

Our investigators observed specific deviations during the inspection, including, but not limited to, the following:

1. Failure to prevent unauthorized access or changes to data and to provide adequate controls to prevent omission of data.

You lacked controls to prevent the unauthorized manipulation of your laboratory’s electronic raw data. Specifically, your infrared (IR) spectrometer did not have access controls to prevent deletion or alteration of raw data. Furthermore, the computer software for this equipment lacked active audit trail functions to record changes to data, including information on original results, the identity of the person making the change, and the date of the change. Audit trails that capture such critical data about the quality of your batch production should be reviewed as part of the batch review and release process.

We acknowledge your commitment to upgrade the IR software by adding full audit trail capabilities in compliance with CGMP. In your response, you also commit to obtain information about the (b)(4) archival of all data obtained on laboratory computerized systems, and to evaluate software upgrades to other instrumentation. However, your response is inadequate because you have not specified how you will ensure the integrity of raw analytical data or maintain data before you complete your planned corrective actions and preventive (CAPA) actions.

In response to this letter, provide your comprehensive CAPA plan for ensuring that electronic data generated in your manufacturing operations, including laboratory testing, cannot be deleted or altered. It essential that your firm implement controls that prevent the omission of data, and record information about changes to existing data, such as the date of the change, identity of person who made the change, and an explanation or reason for the change. Any such changes should be made in accordance with an established and appropriate procedure. Your response should address your laboratory equipment and any other manufacturing-related equipment that may be affected by the lack of adequate controls to prevent data manipulation

FDA District Office: CDRH

About the author

Amy enjoys researching and writing about developments in medical technology and how that intersects with US law. She received her J.D. from the University of Florida Levin College of Law in 2020 and now works as a Regulatory Associate for SoftwareCPR®, a general-purpose regulatory consulting firm that is recognized globally for their expertise with standards and national regulations pertaining to medical device, mobile medical app, and HealthIT software.

62304 Software Training Course – February 23-25, 2021

IEC 62304 and Emerging Standards and FDA Expectations for Medical Device and Health IT Software – Virtual

This very popular 3-day course provides a clear understanding of applying IEC 62304 standard for medical device software and much more. The course compares and contrasts 62304 with FDA expectations and discusses approaches for alignment. In addition, participants will learn of other relevant standards and technical reports pertinent to medical device software, HealthIT, medical mobile apps, and Software as a Medical Device (SaMD) products (e.g., 82304, 80002-1, 14971, 80001-2-x, 62366).

Participants will gain practical advice and pragmatic experience with all types of medical software. Participants will leave with a clear understanding of how to effectively and efficiently integrate 62304 compliance into their software development lifecycle (SDLC).

Register (click):  EventZilla Registration Site

Need info?  Email us at

Corporate Office

15148 Springview St
Tampa, FL 33624
Partners located in the US (CA, FL, MA, MN) and Italy.