GMP vs cGMP: What Is the Difference? Table and Example

GMP (good manufacturing practice) is the set of rules that ensures medicines are consistently produced and controlled to the quality appropriate for their intended use. cGMP means "current good manufacturing practice", the term used by the US FDA, and it stresses that manufacturers must use up-to-date systems, science and technology, not simply what was acceptable when the rules were written.

In practice the two terms describe the same discipline. GMP is the name used by WHO, the EU, PIC/S, India and most GCC regulators, while cGMP (written CGMP in FDA documents) is tied to US law. For a plant that supplies several markets, knowing which text each inspector reads from is what turns a surprise observation into a planned fix.

What GMP means

GMP is the part of quality assurance that covers manufacture and control: premises, equipment, materials, personnel, documentation, production, quality control, complaints and recalls. Its purpose is to control risks that testing the finished product cannot reliably detect, such as cross-contamination, mix-ups and gradual process drift.

The core principles are the same in every major framework:

• Trained staff with clear responsibilities, and a quality unit independent of production.
• Suitable premises and qualified equipment, cleaned and maintained to written procedures.
• Validated processes, cleaning procedures and analytical methods.
• Contemporaneous records that allow any batch to be reconstructed.
• Controlled materials, from supplier approval to finished product release.
• Working systems for deviations, change control, complaints, recalls and self-inspection.

What the "c" in cGMP adds

Under section 501(a)(2)(B) of the US Federal Food, Drug, and Cosmetic Act, a drug is deemed adulterated if the methods, facilities or controls used to make it do not conform to current good manufacturing practice. The detailed requirements for finished pharmaceuticals are in 21 CFR Part 210 and Part 211, with further parts covering areas such as biologics, PET drugs and medical devices.

The word "current" is deliberate. FDA expects firms to keep pace with modern science and technology, so a control that was adequate decades ago may not satisfy an inspector today. Examples include electronic records with reviewed audit trails, modern environmental monitoring, and the risk-based quality systems described in ICH Q9(R1) and ICH Q10.

FDA sets out its current thinking in guidance documents. Guidance is not legally binding, but inspectors use it as the benchmark for what counts as current.

The main GMP frameworks you will meet

WHO GMP

WHO publishes its GMP texts in the WHO Technical Report Series, including the main principles for pharmaceutical products and annexes on validation, water and sterile products. Many national regulators in Asia, Africa and the Middle East base their requirements on WHO GMP.

EU GMP and PIC/S

EU GMP is published in EudraLex Volume 4. Part I covers medicinal products, Part II covers active substances and mirrors ICH Q7, and the annexes cover areas such as sterile manufacture (Annex 1), computerised systems (Annex 11) and qualification and validation (Annex 15). The PIC/S GMP Guide is closely aligned with EU GMP and is used by participating inspectorates worldwide.

India: the revised Schedule M

In India, GMP for pharmaceutical products is set out in Schedule M of the Drugs Rules, 1945. The revised Schedule M notified at the end of 2023 brought Indian requirements much closer to WHO and PIC/S expectations, including a pharmaceutical quality system, quality risk management and product quality review. Compliance dates were phased by company size, so check current CDSCO notifications.

GCC regulators

In the GCC, authorities such as the Saudi Food and Drug Authority (SFDA) and the UAE's federal medicines regulator assess GMP as part of site and product registration. They may inspect manufacturing sites, including sites abroad, or rely on certificates from recognised reference authorities. Pathways differ and change, so confirm current requirements with each regulator.

GMP vs cGMP at a glance

Is cGMP stricter than GMP?

Not in principle. A plant that genuinely meets EU or PIC/S GMP will usually meet the substance of 21 CFR Part 211, and vice versa. The differences that cause trouble are in detail and inspection focus:

• FDA investigators often concentrate on laboratory controls, out-of-specification (OOS) investigations and data integrity, reviewing raw data and audit trails directly.
• EU and PIC/S texts are more prescriptive in some areas, such as contamination control under Annex 1.
• The EU requires batch certification by a Qualified Person, a role with no direct US equivalent.

Worked example: one Indian plant, two inspections

An oral solid dosage plant near Ahmedabad holds a WHO GMP certificate and supplies tablets to African and GCC markets. It has filed its first US generic application and expects a WHO GMP renewal inspection and a US FDA pre-approval inspection in the same year. The head of QA runs a single gap assessment against both sets of texts.

1. Map the requirements: a matrix links each SOP to the revised Schedule M, the WHO main principles and 21 CFR Part 211, so one procedure satisfies all three.
2. Fix data integrity first: two older HPLCs have shared logins and unreviewed audit trails. Unique accounts are created and audit trail review is built into batch release, in line with ALCOA+ principles.
3. Strengthen investigations: several past OOS results were closed as analyst error without evidence. The procedure is rewritten to follow FDA's OOS guidance, with a laboratory phase and a full-scale phase.
4. Align product reviews: the product quality review template is extended to meet 21 CFR 211.180(e) as well.
5. Plan validation: the US product follows the life-cycle approach in FDA's 2011 process validation guidance.
6. Rehearse: an external auditor runs one WHO-style and one FDA-style mock inspection. US-specific items become additions to one quality system, not a parallel one.

Common mistakes

• Running parallel quality systems for each market instead of one system that meets the strictest text.
• Assuming a WHO GMP certificate means a site is ready for an FDA or EU inspection.
• Quoting superseded versions of EU GMP annexes or the old Schedule M.
• Ignoring FDA guidance because it is not legally binding.
• Polishing premises and SOPs while neglecting laboratory raw data and audit trails.

Key takeaway: GMP and cGMP share the same principles. cGMP is the US legal term and adds an explicit expectation to stay current, so build one quality system that meets the strictest relevant text and keep checking the latest versions of each.

Frequently Asked Questions

What does the c in cGMP stand for?

The c stands for current. It signals that manufacturers must use systems, equipment and controls that reflect current science and technology, not just the minimum that was acceptable when the regulations were written. FDA usually writes it as CGMP, and inspectors judge what is current against present industry practice and FDA guidance.

Is GMP the same as cGMP?

They describe the same discipline and share the same principles: qualified people, suitable premises, validated processes, good documentation and an independent quality unit. GMP is the general international term used by WHO, the EU, PIC/S, India and GCC regulators. cGMP is the US FDA term. Differences lie mostly in legal wording and inspection focus.

What is 21 CFR Part 211?

21 CFR Part 211 is the US regulation setting current good manufacturing practice requirements for finished pharmaceuticals. It covers personnel, buildings, equipment, component control, production and process controls, packaging and labelling, laboratory controls, and records and reports. Part 210 sets out how these rules apply and defines key terms.

Which regulators follow PIC/S GMP?

PIC/S participating authorities include most EU and EEA inspectorates, the UK, Canada, Australia and the US FDA, among many others. Membership grows as new authorities complete accession. Check the PIC/S website for the current list, and confirm with the national regulator how it applies the guide in practice.

Next steps

Our Good Documentation Practices & Data Integrity Essentials course builds the record-keeping habits every GMP inspector looks for, and Regulatory Affairs for Pharma & Medical Devices in the GCC explains how GMP evidence supports registration. For related reading, see HACCP vs GMP vs GHP: key differences, pharmaceutical product registration in the UAE and Saudi Arabia and the annual product quality review. Not sure where to begin? Speak to a counsellor.