Safety Norms: Pharmaceutical and Medical Device Manufacturing

1Purpose, Scope, and Safety Principles

These norms protect three groups: the people doing the work, the patients and clinicians who depend on the product or device, and the wider community exposed to contamination or uncontrolled materials. In this subject, product quality and worker safety are closely linked. A contaminated vial, a mislabeled device component, or an uncontrolled solvent release can each cause harm, and each usually traces back to a missed control step.

Scope covers drug substance and drug product operations, sterile and nonsterile manufacturing, device assembly, sterilization handling, packaging, labeling, quality testing, and warehouse release. It applies to employees, contractors, temporary staff, and visitors entering controlled areas. In this document, must marks a mandatory rule and should marks a recommendation.

• Mandatory: no one enters a controlled area without current authorization and gowning completed per the approved procedure.
• Mandatory: when a safety rule conflicts with a production target, stop and escalate. Production pressure is never a reason to skip a control.
• Recommendation: review these norms with each new product, equipment change, or facility modification.

2Roles, Competence, and Accountability

Site leadership provides resources and owns the quality system. The quality unit has independent authority to approve, reject, or hold materials and batches and to stop operations that threaten product or patient safety. Production supervisors make sure operators follow approved instructions. Engineering maintains utilities, equipment, and environmental controls under documented maintenance programs. Environment, health, and safety staff manage chemical handling, fire protection, and occupational exposure. Microbiology and environmental monitoring staff run sampling programs and trend results.

Competence is task and equipment specific. An operator is authorized only after documented training, observed practical demonstration, and qualification on each machine or procedure. Scope of practice is strictly limited. No one adjusts validated parameters, bypasses an interlock, changes a formulation, or alters a device design without approved change control and quality approval.

• Mandatory: maintain a current training matrix that lists each person's authorized tasks and the date of their last requalification.
• Mandatory: unqualified staff must not operate sterilizers, lyophilizers, filling lines, or pressurized systems.
• Recommendation: name a backup for every critical role so that absence does not lead to unqualified operation.

3Hazards and Risk Assessment

Realistic hazards include microbial and particulate contamination introduced by people, gowning breaches, water systems, or poorly maintained air handling. Cross contamination between products is a risk where shared equipment or tooling is used. Potent and cytotoxic compounds can cause harm through inhalation or skin contact. Solvents and fine powders create fire and explosion hazards. Autoclaves, lyophilizers, and high-pressure homogenizers store energy and can release steam, gas, or hot liquid. Device assembly exposes workers to sharps, small moving parts, and repetitive motion. Dry ice, liquid nitrogen, and cold storage create asphyxiation and cold injury risks. Automated lines bring electrical and entanglement hazards.

Risk is rated by severity and likelihood using a simple matrix with high, medium, and low levels. High-risk tasks require a documented risk assessment, approval before work starts, and review after any change. Where biological materials, human-derived inputs, or clinical trial supplies are handled, staff follow the approved biosafety and study procedures. Manufacturing staff do not obtain patient consent, but they must not alter, relabel, or release clinical supplies unless the study documents confirm the required identifiers and blinding status. Consent-linked records are controlled documents and must be protected from unauthorized change.

Control decisions must rest on evidence: validated data, environmental monitoring trends, deviation history, supplier information, and manufacturer instructions. Habit and past practice are not sufficient justification.

• Mandatory: each high-risk task has a written risk assessment reviewed by the quality unit and the responsible supervisor.
• Mandatory: any new substance, equipment, or process step triggers a risk review before first use.
• Recommendation: rate risks again after every deviation, near miss, or significant environmental excursion.

4Preventive Controls and Safe Work Practices

Contamination control is the central preventive measure. Staff must follow the approved gowning sequence, perform hand hygiene at each required point, and avoid jewelry, cosmetics, and loose clothing in gowned areas. Movement in aseptic zones is limited to what the task requires. Aseptic interventions are minimized and carried out only under approved technique. Any glove breach, tear, or gown contact with a non-sterile surface requires an immediate stop, change of protection, and report to the supervisor. Sharps are handled with approved devices, never recapped, and disposed of in puncture-resistant containers placed at the point of use.

Hazardous substance work uses engineering controls first. Potent compounds are handled in isolators, containment enclosures, or closed transfer systems. Safety data sheets are reviewed before first use and their exposure limits and handling instructions are posted at the workstation. Eating, drinking, and applying cosmetics are prohibited in production and laboratory areas. Waste is segregated by hazard class and labeled. Decontamination is verified by the approved method before equipment leaves a containment area.

Maintenance and energy control follow lockout and tagout procedures. Before opening any pressurized, heated, or moving equipment, the responsible person confirms isolation and zero energy with a documented check. Interlocks and emergency stops are tested on the approved schedule and never taped, jumpered, or disabled. Sterilization cycles are confirmed with the validated monitoring program, including indicators where specified. Cylinders are secured, dry ice is used only in ventilated areas, and solvents are kept in approved flammable storage.

Critical process steps use second-person verification. Line clearance is completed before each run to confirm that no materials, documents, or equipment from a previous batch remain. Weighing, component counts, and label reconciliation are checked independently. Any discrepancy in identity, quantity, or expiry stops the operation. Rejected and quarantined materials are physically segregated and clearly identified.

Manual handling is controlled by a documented assessment. Heavy containers, drums, and component trays are moved with mechanical aids where specified, and workers do not lift beyond limits set by the assessment.

• Mandatory: follow the approved gowning and hand hygiene sequence without shortcuts, including during peak production.
• Mandatory: never disable an interlock, guard, or emergency stop, even temporarily.
• Mandatory: perform second-person verification on every step the procedure designates as critical.
• Mandatory: stop work if a discrepancy, unexpected alarm, or unknown material is found.
• Recommendation: use visual job aids at workstations for the most error-prone steps.

5Equipment, Environment, Information, and Protective Safeguards

Personal protective equipment is selected from the task risk assessment. Gloves must be chemically compatible with the substances used and changed at approved intervals. Respirators are used only within a fit-testing program and medical clearance process where required by local rules. Eye protection, hearing protection, and cut-resistant gloves are provided where assessments identify them. Protective equipment supplements engineering controls and never replaces them. Environmental controls include pressure cascades, air change rates, temperature and humidity monitoring, and water quality testing. Excursions outside limits are investigated, not ignored.

Information safeguards protect data integrity. Batch records, device history records, and laboratory data must follow the principles of attributable, legible, contemporaneous, original, and accurate records. Corrections are made with a single line, initials, date, and reason. Electronic systems use unique user accounts, role-based access, and audit trails. Shared logins are prohibited. Privacy is maintained for patient and clinical information encountered in complaint files, adverse event reports, or study supplies. Such information is shared only with authorized staff. Cameras and personal phones are prohibited in gowned or controlled areas unless the site has an approved exception.

• Mandatory: report any damaged or missing PPE immediately and replace it before continuing work.
• Mandatory: never record data in advance or reconstruct it from memory.
• Mandatory: do not share passwords or badge access with anyone else.
• Recommendation: review audit trails periodically for unusual access or late entries.

6Incident Reporting, Emergency Response, and Escalation

Every injury, exposure, spill, contamination event, equipment failure, and near miss must be reported to the supervisor immediately and recorded in the site system within the time limit defined by local procedure. The first priority is to make the area safe. Stop the process, secure the equipment, and keep the affected material in place unless moving it is necessary to prevent harm. Quarantine any product or component that may be affected. The quality unit decides on disposition after investigation. Retesting until a result passes is not acceptable.

For chemical spills, staff act only within their training. Those without spill response training evacuate the area and call the designated responders. Fire, serious injury, and exposure to unknown substances require calling local emergency services and following posted emergency instructions. First aid is given only by trained persons. Product complaints and suspected adverse events are forwarded to the designated complaint or safety reporting unit within the timeframe in local procedure, along with any available patient-related information that is needed for follow-up, handled under privacy controls.

Escalate immediately to the quality unit and site management when there is a suspected sterility failure, a device malfunction associated with injury or risk, an unapproved change, falsified or missing data, or a regulatory inspection finding. Escalation is never a sign of weakness. Staff who raise safety concerns in good faith must be protected from retaliation under site policy.

• Mandatory: report every near miss, including those with no harm.
• Mandatory: do not release or move quarantined material without written quality approval.
• Mandatory: call emergency services before attempting rescue from confined spaces, gas exposure, or electrical hazards.
• Recommendation: run a short drill for each emergency scenario at least on the schedule set by local procedure.

7Records, Training, Inspection, and Review

Records provide evidence that controls work. Maintain training records, authorization lists, batch and device history records, maintenance logs, calibration records, environmental monitoring results, deviations, and corrective and preventive actions. Retention periods are jurisdiction dependent and must be confirmed with the quality unit and the competent authority requirements that apply to the site. Records must be retrievable, legible, and protected from unauthorized change.

Training is refreshed on a scheduled basis and after any deviation, procedure change, new equipment, or extended absence. Competence is reassessed through observation rather than assumed from attendance. Inspections include daily line checks, periodic housekeeping audits, gowning observations, and equipment checks against the approved schedule. Management reviews key indicators such as deviation trends, environmental excursions, near miss reports, training currency, and audit findings. Each review produces assigned actions with owners and due dates. Continuous improvement works through change control, so that every procedure change is assessed, approved, and communicated before use.

• Mandatory: keep authorization records current and remove access for anyone whose qualification has lapsed.
• Mandatory: close deviations and corrective actions with documented verification of effectiveness.
• Recommendation: publish trends from safety and quality data to staff so that they can see how their reports drive change.

Implementation checklist

• Confirm that every operator holds current, task-specific authorization before entering a controlled area.
• Follow the approved gowning and hand hygiene sequence without shortcuts, and stop at any glove breach.
• Complete line clearance and independent verification at every critical step before continuing.
• Keep all interlocks, guards, and emergency stops active and tested on the approved schedule.
• Review the safety data sheet and risk assessment before handling any new hazardous substance.
• Store, label, and segregate rejected, quarantined, and waste materials as the procedure requires.
• Record data contemporaneously with correct attribution, and never share login credentials.
• Report every injury, spill, contamination, or near miss immediately, and escalate suspected sterility or device safety failures to quality.
• Protect patient and clinical information, and keep unauthorized devices out of controlled areas.
• Verify current regulations, standards, and manufacturer instructions with competent authorities and qualified professionals.