Overview. Laboratory data integrity requires complete, consistent and accurate records throughout the data lifecycle. Cannabis laboratories are particularly exposed where manual integration, repeated testing, standalone instruments and spreadsheet calculations influence potency or contaminant results.
ALCOA+ in laboratory practice
Records should be attributable, legible, contemporaneous, original and accurate, as well as complete, consistent, enduring and available. These principles apply from sample receipt through final approval.
Chromatography data systems
User roles, secure time settings, audit trails, method version control, backup and controlled processing should be implemented. Shared accounts and unrestricted analyst privileges undermine attribution.
Manual integration
Manual integration is not automatically prohibited, but it should follow approved rules, be scientifically justified and independently reviewed. Repeated reintegration to obtain a desirable result is unacceptable.
Standalone and hybrid systems
Balances, incubators, spectrometers and other standalone systems may store limited electronic data. Printed records and manual transcription create hybrid systems that require specific controls.
Spreadsheets and calculations
Potency conversions, total cannabinoid calculations and specification assessments may be performed in spreadsheets. Formula protection, version control, validation and access management are necessary.
Audit trail review
Review should focus on deleted injections, repeated sequences, method changes, reprocessing, user changes and unusual timestamps. It should be linked to the primary data review.
Culture and governance
Technical controls cannot compensate for pressure to hide failures. Leadership should support transparent reporting and investigation.
Practical reference table
| Data risk | Cannabis example | Expected control |
|---|---|---|
| Shared login | Analyst actions not attributable | Unique user accounts |
| Uncontrolled integration | Potency peak altered | Approved integration rules |
| Spreadsheet error | Incorrect total THC calculation | Validated protected template |
| Deleted injection | Failed result omitted | Audit trail review |
| Local-only storage | Raw data lost | Validated backup and archive |
Control and decision path
Frequently asked questions
What does ALCOA+ mean?
It describes the core attributes of trustworthy records.
Are manual integrations banned?
No, but they must be justified, controlled and reviewed.
Can analysts share accounts?
No. Shared credentials undermine traceability.
Why are spreadsheets risky?
Formulas, versions and changes may be uncontrolled.
What should audit trail review cover?
Critical changes to methods, results, integrations, sequences and user access.
Primary references and guidance
- EU GMP Annex 11
- EU GMP Part I, Chapter 4
- MHRA GxP Data Integrity Guidance
- FDA Data Integrity Guidance
- PIC/S PI 041
- GAMP 5
- EU GMP Part I, Chapter 6
Confirm the current effective revision and national applicability before operational or regulatory use.