Quality control in pharmaceutical industry: analyst in blue gloves transferring a blue solution from a flask to a test tube

Quality Control in Pharmaceutical Industry: 6 Proven Rules

Quality control in pharmaceutical industry · Revised Schedule M, Part I, section 19

Reviewed by Darshan Singh · first published 25 Feb 2023 · rebuilt and fact-checked 1 Oct 2026

Quality control in pharmaceutical industry: what QC does

Quality control in pharmaceutical industry practice is the part of GMP that handles sampling, specifications and testing, plus the organisation and records that prove those tests were actually done. Its job is to make sure no material is used and no batch is sold until its quality has been judged compliant.[1]

Under India’s Revised Schedule M, the pharmaceutical quality control function must be independent of production, test every batch against its finished-product specification, investigate out-of-specification (OOS) results under an approved procedure and run the stability programme. One thing it does not do on its own: certify a batch for sale. That is the authorised person’s job, and approval by the head of QC is one of the conditions they must check first.[1]

  • 19.2QC’s independence from production is called “fundamental”
  • 1 yearafter expiry: minimum keep period for finished-product retention samples
  • 2 fullre-examinations: the minimum size of every retention sample
  • 1 per yearthe minimum self-inspection frequency (clause 10.4)

6 proven rules that most QC articles still get wrong

The earlier version of this page repeated some of these. Each correction below was checked against the primary text on 1 Oct 2026, so a pharmaceutical quality control team can cite the clause rather than a blog.

  1. “QC issues the batch release certificate.”Revised Schedule M says no batch is released for sale before certification by the authorised person (11.3.8). Approval by the head of QC is one of ten conditions that person must confirm (11.3.9(i)). QC reviews its records before transfer to the authorised person (19.8.1).[1]
  2. “Self-inspection must happen every 3 or 6 months.”Clause 10.4 sets a floor of at least once a year, with the actual frequency written into your procedure. Quarterly audits are a company choice, not a Schedule M rule.[1]
  3. “WHO TRS 957, Annex 1 (2010) is the WHO standard for QC labs.”WHO revised its good practices for pharmaceutical QC laboratories and republished them as Annex 4 of TRS 1052 (2024), citing lessons from inspections of QC labs.[2]
  4. “Schedule M lists the instruments a QC lab must have.”We searched the full notified text and found no general QC-instrument list. Part XIII lists production equipment, and the QC lab is governed by performance clauses (12.7, 13.5, 13.7). WHO’s 2024 equipment list says it does not set any requirements.[1][2]
  5. “Data integrity is the QC department’s responsibility.”WHO’s data-integrity guideline makes senior management responsible for setting up and controlling the data-governance system. QC carries it out at the bench, but the accountability sits higher up.[3]
  6. “Long term 25 ± 2 °C / 60 % RH or 30 °C / 65 % RH, accelerated 40 °C / 75 % RH: that is all of it.”ICH Q1A(R2) also has an intermediate condition (30 °C / 65 % RH, 6 months), and lets the applicant choose between the two long-term options. For India, WHO’s member-state table records 30 °C / 70 % RH as the confirmed long-term condition.[4][5]

Role of quality control in pharmaceutical industry: what Schedule M assigns

Clause 19.3 says every manufacturer must have a QC function, independent of other departments and led by someone with the right qualifications and experience. It also requires enough resources for QC to work reliably. The duties are spread over two clauses:[1]

Basic requirements 19.3 (a)–(g)

  1. Facilities, trained staff and approved procedures for sampling and testing starting materials, packaging materials, intermediate, bulk and finished products, and for environmental monitoring where needed
  2. Samples taken only by methods and people that QC has approved
  3. Qualification and validation
  4. Records showing every sampling and test step was done, and that any deviation was recorded and investigated
  5. Finished products that match the licensed composition, at the required purity, correctly packed and labelled
  6. Results recorded against specifications; product assessment includes a review of production records and deviations
  7. Enough retained samples, kept in the final pack, to allow re-examination later

Other QC responsibilities 19.4.1 (a)–(g)

  1. Establishing, validating and implementing all QC procedures
  2. Evaluating, maintaining and storing reference standards
  3. Making sure containers of materials and products are correctly labelled
  4. Monitoring the stability of APIs and products
  5. Taking part in investigating quality complaints
  6. Taking part in environmental monitoring
  7. Taking part in the quality risk management programme

19.4.2: all of this must follow written procedures. 19.5: QC staff must have access to production areas for sampling and investigation.

Pharmaceutical quality control tests, stage by stage

The specific quality control tests come from the pharmacopoeial monograph or your registered specification. What Schedule M fixes is when QC must test, and what has to be on record before a material or batch moves on. Pick a stage:

Quality control tests on starting and packaging materials

  • 19.7.1Before a starting or packaging material is released for use, the QC in-charge must make sure it has been tested for identity, strength, purity and other quality parameters.[1]
  • 19.7.2An identity test on a sample from every container of starting material. Sampling only some containers is allowed only under a validated procedure (see the selector below).
  • 19.7.3Every batch of printed packaging material must be examined after it arrives.
  • 19.6.2–19.6.6Samples must be representative and taken without contaminating the material. Sampled containers are marked and resealed. Each sample label shows the material, batch, container number, sample number, the sampler’s signature and the date.

Typical quality control tests on an API are description, identification (IR or HPLC), assay, related substances, water content (KF) or loss on drying, and residual solvents where the monograph requires them. For a sampling plan and a sampling-booth procedure, see our guide to sampling raw materials in pharma.

From goods receipt to market release: who signs what

The sequence below shows where QC’s signature sits and where it hands over. Each step names the clause that governs it.[1]

  1. Receipt and samplingMaterial is sampled by methods and people QC has approved. Sampled containers are marked and resealed. QC · 19.3(b), 19.6.3
  2. Material testingIdentity is tested on every container (unless a validated exemption applies), plus strength and purity. QC · 19.7.1–19.7.2
  3. Release for use or rejectionA supervisor checks the result, then the material is released or rejected. QC · 19.6.1
  4. In-process checksIPC results are recorded in the batch record. Tablet checks run at every compression station. Production + QC · 19.7.5
  5. Finished-product testingThe laboratory confirms the batch meets its finished-product specification. QC · 19.7.6
  6. Batch record reviewQC records are reviewed, and any failure is investigated, before the batch is handed over. QC · 19.8.1
  7. Certification for saleThe authorised person confirms all ten conditions, including head-of-QC approval. Authorised person · 11.3.8–11.3.9
  8. Retention and stabilityRetention samples are stored and batches go into the ongoing-stability programme. QC · 19.8.2, 19.9

QC vs QA in pharmaceutical quality control

Schedule M groups QA and QC together as the “quality units”, which must be independent of production. It also allows QA and QC to be combined in one department in some cases (11.3.1).[1] The US regulation works the same way. 21 CFR 211.22 gives a single “quality control unit” the authority to approve or reject components, in-process materials, labelling and drug products, and to review production records. Plants that run separate QA and QC departments split those jobs between them.[6]

In the table, the QC column and the Basis column follow Schedule M. The QA column describes common practice, because Schedule M leaves each company to divide the work.

Scroll the table sideways →

ActivityQCQABasis
Sampling and testing of materials and productsPerformsOversees the systemSch. M 19.3, 19.6–19.7
Specifications and test proceduresEstablishes, validates, implementsApproves within document control19.4.1(a)
Reference standardsEvaluates, maintains, stores—19.4.1(b)
Batch record reviewReviews QC records before hand-overReviews the full batch documentation19.8.1
Certification of a batch for saleHead of QC approval is a preconditionUsually where the authorised person sits11.3.8–11.3.9
OOS investigationInvestigates under an approved procedureApproves conclusions and CAPA19.6.7
Stability programme and expiry datingRuns and evaluatesOversees change control19.9
Complaints, environmental monitoring, QRMTakes partUsually leads19.4.1(e)–(g)
Self-inspectionIs inspected and takes partUsually coordinates10.4 (at least yearly)
Basis column: Revised Schedule M, Part I.[1] QA column: common practice, not a legal rule.

Can you release a starting material on the supplier’s CoA?

Every QC lab faces this question, and Schedule M answers it in two separate clauses. 19.7.4 decides whether a supplier’s certificate can replace your full testing. 19.7.2 decides whether identity has to be tested on every container. Answer three questions:[1]

1. Have you validated the supplier’s test results periodically and audited their lab on site?

2. Where does the material come from?

3. What will it be used in?

Answer all three questions to see the ruling

The ruling combines clause 19.7.4 (the CoA) with clauses 19.7.2.2 and 19.7.2.3 (identity sampling).

Under 19.7.4, a supplier CoA must be an original (or otherwise authenticated). It must show the supplier’s name and address, a signature with the signer’s qualifications, the material and batch, the specifications and methods, the results, and the test date.

The QC lab: what Schedule M requires and what WHO lists

Schedule M rules for the QC lab itself

  • 12.7.1QC labs are separated from production. Biological, microbiological and radioisotope areas are separated from each other.
  • 12.7.2Enough space to avoid mix-ups, and storage for samples, reference standards (cooled if needed), solvents, reagents and records.
  • 12.7.3A separate air supply for labs and production, with separate AHUs for biological, microbiological and radioisotope labs.
  • 13.5 · 13.7Balances and measuring equipment are calibrated on a fixed schedule, and lab instruments must suit the tests run on them.

Schedule M sets no calibration interval. That is for your own calibration SOP to justify. Floor area for the QC lab is a separate question, covered in how Revised Schedule M treats the QC laboratory alongside production areas.[1]

Budget note from WHO. WHO’s 2024 QC lab guidance advises setting aside 10–15 % of the equipment purchase cost every year for maintenance, and says reference materials, reagents, glassware and staff should be costed alongside the instruments.[2]

WHO also gives no universal calibration or service interval. Each QC lab sets its own policy by equipment type.[2]

Instruments WHO considers adequate for a pharmaceutical quality control lab (selected rows)

WHO’s Appendix 1 says the list “does not represent any requirements”.[2] It is written for control laboratories, so a manufacturer’s QC lab also needs whatever its own specifications call for. Tablet plants, for example, need hardness and friability testers under Part XIII, even though WHO lists them only as optional.[1]

Scroll the table sideways →

InstrumentFirst-stage labMedium-sized lab
HPLC with UV/visible detector22 or 3
UV/visible spectrophotometer11 (double-beam)
Infrared spectrophotometer with pellet press11 (MIR, NIR)
Gas chromatograph (FID, direct and static headspace)—1
Karl Fischer titrator1 (semi-micro)2 (semi-micro + coulometric)
Analytical balance, 5 digits1 or 22
pH meter with assorted electrodes12
Polarimeter11
Melting-point apparatus11
Disintegration test equipment11
Dissolution apparatus11 (for 6 units)
Hardness tester · friability tester—Optional
Microscope11 or 2
Source: WHO TRS 1052 (2024), Annex 4, Appendix 1, Table 1. Quantities as printed. The full table also covers glassware, ovens, a microbiology unit and optional detectors.[2]

Each instrument in a QC lab needs its own operation and calibration SOP. Start with our HPLC system suitability limits and operating SOP, which is the instrument most release tests depend on.

OOS results, data integrity and how long QC records are kept

Out-of-specification results

Schedule M 19.6.7 requires every OOS result to be investigated under an approved procedure, with a record kept.[1] It does not spell out the investigation stages. FDA’s OOS guidance (Level 2 revision, May 2022) sets out a phased model: a laboratory investigation first, then a full-scale investigation if no lab error is found. A written procedure can adopt that model.[7]

Note WHO’s wording: a result only becomes an OOS result once it has been “investigated and confirmed” to fall outside specification.[2] For a worked example in the microbiology QC lab, see OOS handling in environmental monitoring.

Data integrity (ALCOA+)

WHO’s 2024 QC lab guidance expects data to be attributable, legible, contemporaneously recorded, original or a true copy, accurate, complete, consistent, enduring and available.[2]

WHO’s data-integrity guideline puts responsibility for the data-governance system on senior management. In practice, the QC lab’s job is to make sure audit trails, raw data and worksheets can actually stand up to that system.[3]

Scroll the table sideways →

What is keptRevised Schedule MWHO QC lab guidance (2024)
RecordsAt least 1 year after the finished product’s expiry (17.2.7)Original observations, calibration and validation records: national rules apply, but not less than 5 years
Finished-product samplesAt least 1 year after expiry, in the final pack (19.8.2)Samples the lab tested: shelf life plus 1 year (15 years for investigational products)
Active starting materialsAt least 1 year beyond the finished product’s expiry (19.8.2)—
Other starting materialsAt least 2 years if stability allows; solvents, gases and water excluded (19.8.2)—
Sample quantityEnough for at least two full re-examinations (19.8.2)—
Where both apply, as for an exporter following WHO norms, plan for the longer period. Sources: Schedule M[1]; WHO TRS 1052 Annex 4.[2] For disposal-date rules by material, see our control and retention sample guidelines.

Where Revised Schedule M enforcement stands

Status checked 1 October 2026

  1. 28 Dec 2023 · Revised Schedule M notified as G.S.R. 922(E). Part I, section 19 is the QC chapter used throughout this page.[1]
  2. Mid-2024 · Compliance date for manufacturers with turnover above ₹250 crore (6 months from notification).[8]
  3. 31 Dec 2025 · Extended deadline for manufacturers at or below ₹250 crore that filed an upgradation plan in Form A. Without that plan, the original 12-month timeline applied.[8]
  4. Nov 2025 · CDSCO asked state regulators to plan inspections and report monthly, as reported in the trade press.[9]

What this means for quality control in pharmaceutical industry today: the deadlines are behind us. An inspector checking section 19 will expect the procedures, records and QC lab separation described above to be in place now, not planned. Confirm the current position on cdsco.gov.in before relying on these dates, because enforcement notices change.

Is your QC lab ready for a Schedule M inspection?

Take the 2-minute readiness check, see the latest CDSCO developments, and request a gap assessment of your pharmaceutical quality control systems against section 19.

Check Revised Schedule M readiness

Frequently asked questions

Related on Laafon

References

  1. Ministry of Health and Family Welfare (India). G.S.R. 922(E): Drugs (Amendment) Rules, 2023, Schedule M, Good Manufacturing Practices and Requirements of Premises, Plant and Equipment for Pharmaceutical Products. Gazette of India, Extraordinary, Part II, Section 3(i). New Delhi; 28 Dec 2023. Clauses cited: Part I 10.4, 11.3.1, 11.3.8–11.3.9, 12.7, 13.5, 13.7, 17.2.7, 19.1–19.9; Part VIII 3.4; Part XIII. Text read from a third-party reprint of the gazette notification: gazette reprint (PDF). Official copy: e-Gazette of India. Accessed Oct 2026.
  2. World Health Organization. WHO good practices for pharmaceutical quality control laboratories. Annex 4 in: WHO Expert Committee on Specifications for Pharmaceutical Preparations, fifty-seventh report. WHO Technical Report Series No. 1052. Geneva: WHO; 2024. Available from: cdn.who.int (PDF). Accessed Oct 2026.
  3. World Health Organization. Guideline on data integrity. Annex 4 in: WHO Technical Report Series No. 1033. Geneva: WHO; 2021. Available from: cdn.who.int (PDF). Accessed Oct 2026.
  4. International Council for Harmonisation. ICH Q1A(R2): Stability testing of new drug substances and products. Geneva: ICH; 2003. Section 2.2.7.1. Available from: database.ich.org (PDF). Accessed Oct 2026.
  5. World Health Organization. Stability testing of active pharmaceutical ingredients and finished pharmaceutical products: stability conditions for WHO Member States by region (update March 2021). Geneva: WHO; 2021. Available from: cdn.who.int (PDF). Accessed Oct 2026.
  6. US Code of Federal Regulations. 21 CFR 211.22: Responsibilities of quality control unit. Washington DC: Office of the Federal Register. Available from: ecfr.gov. Accessed Oct 2026.
  7. US Food and Drug Administration. Investigating out-of-specification (OOS) test results for pharmaceutical production: guidance for industry, Level 2 revision. Silver Spring MD: FDA; May 2022. Docket FDA-1998-D-0019. Available from: fda.gov. Accessed Oct 2026.
  8. Press Information Bureau, Ministry of Health and Family Welfare. Conditional extension of timeline to small and medium pharmaceutical manufacturers for compliance with revised Schedule M notification. New Delhi: PIB; 12 Feb 2025. Available from: pib.gov.in. Accessed Oct 2026.
  9. Business Standard. CDSCO asks state units to start inspections under Schedule M norms [trade press, secondary source]. New Delhi; 8 Nov 2025. Available from: business-standard.com. Accessed Oct 2026.

Darshan Singh, co-founder and regulatory consultant, Laafon Galaxy Pharmaceuticals

23+ years in pharmaceutical quality control, quality assurance and drug regulatory affairs. He has served as Quality Control Head, Quality Assurance Head and Plant Head in pharmaceutical manufacturing companies. M.Sc. Organic Chemistry, D.Pharm.

This page on quality control in pharmaceutical industry is technical and educational content. It is not legal, medical or investment advice. Revised Schedule M, pharmacopoeial texts and Indian statutory instruments are amended often, so check the current official text and your licensing authority’s position before acting on any clause quoted here. Clause numbers refer to Schedule M as notified on 28 Dec 2023.

Darshan Singh
Darshan Singh

Author is a pharmaceutical quality and regulatory professional with more than 23 years in drug manufacturing. He holds an M.Sc. in Organic Chemistry and a Diploma in Pharmacy. He has served as Quality Control Head, Quality Assurance Head and Plant Head, overseeing all manufacturing operations. He is co-founder and regulatory consultant at Laafon Galaxy Pharmaceuticals. He writes on SOPs, manufacturing processes, Schedule M compliance and drug pharmacology, and checks each claim against pharmacopoeial and regulatory sources.

Articles: 233