ECI / Intelligence / White Paper
White Paper

Preparing for Your First EU GMP Inspection

What inspectors look for, how to prepare your team, documentation requirements, common findings and how to avoid them. A practical guide for cannabis manufacturers approaching their first EU GMP inspection.

Published
July 2026
Reading time
7 min read
Author
European Cannabis Institute
Access
Email required for PDF

Executive Summary

A first EU GMP inspection is one of the most significant events in a cannabis manufacturer's compliance journey. The outcome determines whether the facility can operate as a licensed GMP manufacturer β€” and the preparation invested in the months beforehand largely determines the outcome.

This white paper provides a practical guide to inspection preparation, covering what inspectors look for, how to organise your team and documentation, what the most common findings are and how to avoid them.

Key Principle

Inspectors do not expect perfection. They expect a quality system that identifies problems, investigates them thoroughly, corrects them effectively and prevents recurrence. A facility with a mature deviation management system will perform better in inspection than one with perfect records and no deviations.

1. What EU GMP Inspections Assess

EU GMP inspections are conducted by national competent authorities under the mandate of Directive 2001/83/EC and the associated GMP guidelines in EudraLex Volume 4. The inspection scope covers the entire quality management system, not just documentation or facilities.

Inspectors assess whether the quality system is implemented in practice, not just written down. The key question at every stage of inspection is not "does a procedure exist?" but "does actual practice match the procedure, and is there evidence?"

For pharmaceutical cannabis manufacturers, inspection scope typically includes:

2. The Inspection Timeline

Pre-inspection notification

Routine GMP inspections are typically notified 4–8 weeks in advance. For initial inspections prior to GMP certification, the timeframe may be longer. The notification letter will specify the scope, the inspection team and the documents requested in advance β€” typically including the Site Master File, Validation Master Plan and recent batch records.

Opening meeting

The inspection begins with an opening meeting attended by senior management, QA and technical leads. Inspectors will outline the scope and programme. The facility will typically present a brief overview of operations. This is not the time for lengthy presentations β€” inspectors want to begin the substantive inspection as quickly as possible.

Facility tour

Inspectors will walk through the manufacturing facility, paying particular attention to gowning procedures, material flows, classified zone conditions and actual practice relative to documented procedures. Anything visible during the tour may trigger a documentation request or a deviation finding.

Documentation review

The bulk of most inspections involves document review. Inspectors will select batch records, SOPs, deviation records, CAPA records, training records and qualification documentation for detailed review. Selection is not random β€” inspectors will typically follow the trail from any finding identified during the facility tour.

Closing meeting

Inspectors summarise preliminary findings, categorised as critical, major or other (minor). The facility has the opportunity to provide immediate clarification. Written findings follow within a defined timeframe, and the facility must provide a formal CAPA response.

3. Document Readiness

The following documents should be current, approved, implemented and retrievable before inspection:

DocumentStatus requiredCommon gap
Site Master FileCurrent, approved, reflecting actual operationsOut of date; does not reflect current product portfolio or facility layout
Validation Master PlanCurrent; all referenced validation activities completed or on approved timelineValidation activities listed as planned but not yet executed
Contamination Control StrategyFormally approved; Annex 1 (2022) compliantAbsent; or present but not risk-based or cannabis-specific
EMPQ ReportComplete; limits formally approvedLimits set by reference to grade limits, not EMPQ baseline
Cleaning Validation ReportsComplete for all shared equipment; PDE-based limitsArbitrary 10 ppm limits; recovery not corrected for swab efficiency
Training RecordsComplete; role-specific; current for all personnel with GMP accessGaps in training records for specific individuals; training not competency-assessed
Deviation RecordsAll deviations documented; investigations complete; CAPA closed and effectiveDeviations not raised; investigations superficial; CAPA not verified as effective

4. The Ten Most Common Inspection Findings in Cannabis Manufacturing

  1. Contamination Control Strategy absent or inadequate β€” the most frequently cited finding in post-2022 inspections of cannabis facilities. Annex 1 (2022) requires a formal, risk-based CCS. Many facilities have not produced one.
  2. Environmental monitoring limits not justified β€” alert and action limits set by reference to grade limits rather than EMPQ baseline data.
  3. Cleaning validation limits not health-based β€” arbitrary limits used rather than PDE-derived acceptance criteria.
  4. GACP supplier qualification inadequate β€” no formal qualification, no quality agreement, no incoming testing programme adequate to demonstrate material identity, quality and freedom from contamination.
  5. Training records incomplete β€” missing records for specific personnel; training delivered but not assessed for competency.
  6. Deviations not raised β€” actual practice deviating from procedure but no deviation recorded; out-of-specification results investigated inadequately.
  7. Change control not implemented β€” changes to process, equipment or facility made without formal change control; retrospective documentation of changes.
  8. Data integrity gaps β€” audit trails not enabled or not reviewed; data deletions not justified; access control inadequate.
  9. Site Master File not current β€” SMF does not reflect current operations, product portfolio or facility description.
  10. Self-inspection programme absent or ineffective β€” no internal audit programme; or audits conducted but findings not addressed.

5. Inspection Day Conduct

The quality of inspection day conduct significantly affects inspection outcome. Key principles:

6. Post-Inspection CAPA Response

The written CAPA response to inspection findings is as important as the inspection itself. A weak CAPA response β€” proposing superficial corrective actions, failing to address root cause, or setting unrealistic timelines β€” will extend the inspection cycle and damage the relationship with the authority.

Each finding requires: acknowledgement; root cause analysis; immediate corrective action; preventive action to prevent recurrence; evidence that the action has been implemented; and proposed verification method and timeline.

7. References

Stay ahead with ECI Intelligence

Subscribe for new publications, regulatory commentary and industry intelligence β€” published monthly.

All Publications β†’Book Consultation β†’