Published on 17/12/2025
How to Pass PMDA GMP Inspections and Secure FMA as a Foreign Manufacturing Site
The Legal and Operational Backbone: How Japan Enforces GMP and Why It’s Different
Japan’s current Good Manufacturing Practice (GMP) expectations are anchored in the Pharmaceuticals and Medical Devices Act (PMD Act) and ministerial ordinances that set the legal foundation for manufacturing authorization, quality systems, and lifecycle controls. Scientific review and inspection coordination are carried out by the Pharmaceuticals and Medical Devices Agency (PMDA), while policy, market authorization, and reimbursement decisions rest with the Ministry of Health, Labour and Welfare (MHLW). This separation—policy at MHLW, scientific/technical oversight at PMDA—creates a clear but demanding pathway: companies must be flawless on both the science and the operational control that proves quality and data integrity in the real world.
Two features distinguish the Japanese approach. First, GMP is not viewed in isolation; it is intertwined with GQP (Good Quality Practice) and GVP (pharmacovigilance) obligations. The Marketing Authorization Holder (MAH) must show end-to-end control—from supplier qualification and release to distribution, complaint handling, and post-market safety actions. Second, Japan’s regime is deeply harmonized with ICH quality concepts (Q8 design
Practically, sponsors should map compliance across three planes: (1) dossier truth—Module 3 claims (established conditions, PARs/design space, stability) must mirror what the factory can actually do; (2) operational truth—deviations, OOS/OOT management, and cleaning validation are executed as written; and (3) documentary truth—records are contemporaneous, attributable, and tamper-evident. Where many programs stumble is not science but identity and consistency: manufacturer names/addresses, equipment IDs, spec/method titles, and batch release roles must match across forms, labels, certificates, and batch records exactly. Japan treats these as signals of control; mismatches invite questions that expand the inspection scope and slow approvals.
Finally, remember that pre-approval inspections (PAIs) often coincide with technical review. If your PPQ narrative, stability overlays, impurity control (M7/Q3D), and cleaning validation are clear in the submission and reproducible at site, inspectors can follow the thread from dossier to line in minutes. When the thread breaks—unclear acceptance criteria, missing raw data traceability, or inconsistent equipment qualification—the benefit of a strong CTD evaporates into CAPA firefighting.
Foreign Manufacturer Accreditation (FMA): Scope, Eligibility, and When It’s Mandatory
What FMA is: Foreign Manufacturer Accreditation is the formal recognition that an overseas manufacturing site meets Japan’s regulatory standards for the specific categories and operations it performs (drug substance, drug product, packaging, testing, sterilization, etc.). Without FMA, the site cannot legally manufacture or test products destined for the Japanese market. FMA sits alongside—rather than replacing—your home-country authorization and any other international approvals; it is Japan’s way of asserting jurisdictional assurance over foreign sites.
Who needs it: Any non-Japanese facility that manufactures, packages, labels, tests, or otherwise participates in the finished product supply chain for the Japanese MAH requires FMA at the appropriate scope. Contract manufacturers, testing labs (including stability/quality control labs), and sterilization vendors typically come into scope. Even when a site has US/EU licenses and a perfect inspection history, Japan expects Japan-fit governance: Japanese labeling naming conventions in specs, supplier lists that reflect Japan supply, and GQP interfaces that prove the MAH is in control.
What’s in the application: Expect to submit facility identifiers and legal addresses, manufacturing categories and processes, flow diagrams with CCPs, equipment and utilities summaries, HVAC/cleanroom classifications, computerized systems inventory (GxP-relevant), validation/qualification status (URS→DQ→IQ→OQ→PQ), cleaning validation/line clearance strategy, stability program synopsis, and headcount/organizational charts (quality vs manufacturing independence). You will also declare data integrity controls (ALCOA+), document retention, and archiving. Japan places weight on identity fidelity: the manufacturing site name and address must match exactly across FMA forms, Module 1/3, CoAs, GMP certificates, and contracts.
When PMDA inspects: PMDA may leverage prior inspection history via reliance/coordination but retains the right to perform on-site inspections (or remote/desktop reviews) at its discretion, particularly for new molecular entities, sterile products/aseptic processing, ATMPs, high-risk APIs, or complex devices in combos. Foreign Manufacturer Accreditation is not static: significant changes (site, equipment train, sterilization method, materials, specs) can trigger updates to the accreditation and, in some cases, re-inspection. Treat FMA as a living credential bound to the current control strategy, not a one-time certificate.
Building a Japan-Ready GMP System: Documentation, Validation, and Risk Management that Withstand Inspection
Japan expects a designed quality system—one that shows line-of-sight from patient risk to control and from claims in the dossier to evidence on the floor. Start with a transparent CQA register that maps attributes to clinical performance and patient safety; connect CQAs to CPPs via formal risk assessment (FMEA/HAZOP, DoE, scale-down models) and declare either a design space or proven acceptable ranges (PARs). Your PPQ narrative should demonstrate commercial-scale execution with capability indices (Cpk/Ppk) for critical attributes, bracketing studies where appropriate, and statistically defensible sample plans. Cleaning validation must cover worst-case actives/equipment trains, swab/rinse recoveries, MACOs with toxicological justification, and visibly enforceable line clearance practices.
Documentation discipline is a hallmark of Japan-ready operations. Batch records should be readable to a Japanese reviewer—clear signatures/initials with role legends, unambiguous step instructions, and timestamps that align across equipment logs and EBRs. SOPs need decision-useful specificity (who, what, when, evidence of completion) rather than generic statements. Deviations, OOS/OOT, and complaints must trace to root cause with proof of CAPA effectiveness (e.g., trend shifts, audit confirmation). Where you manufacture multiple markets, control spec/version drift: the spec and method titles used in Module 3, the site master file, and the batch record must match, or you will spend inspection time reconciling paperwork rather than demonstrating control.
Japan’s inspectors also expect visible Quality Risk Management (QRM) in daily operations: risk registers that are current, KRIs for process and cleaning performance (e.g., yield, bioburden/TOC trends, endotoxin), and governance that escalates signals quickly. Tie your risk signals to a change control engine that uses ICH Q12 concepts—established conditions, reporting categories, and, where possible, pre-agreed comparability protocols for predictable changes (site addition, equipment modernization, method lifecycle). This makes post-approval variations more predictable and shows that control survives evolution.
Data Integrity and Computerized Systems: Making ALCOA+ and CSV Real on the Shop Floor
No topic receives more attention in Japan inspections than data integrity. The expectation is ALCOA+ by design—Attributable, Legible, Contemporaneous, Original, Accurate, plus Complete, Consistent, Enduring, and Available. Inspectors will look for behavioral proof of integrity: uniquely assigned user accounts (no shared logins), role-based access with justification, enforced audit trails (enabled, unalterable, routinely reviewed), time-synchronization across systems, and documented backup/restore tests. For hybrid systems, inspectors expect paper and electronic records to reconcile without gaps; “transcription only” excuses are no longer persuasive. Trending and review of audit trails must be routine, risk-based, and evidenced—not ad-hoc or cosmetic.
Computerized System Validation (CSV) should follow a lifecycle approach: risk-based inventory of GxP systems, supplier assessment (including cloud and SaaS), requirements traceability (URS→FS/DS→IQ/OQ/PQ), security and data-flow diagrams, and periodic review. Where laboratory informatics (LIMS, CDS), MES/EBR, QMS, and environmental monitoring platforms are used, expect inspectors to trace a specific result from sample receipt through instrument, data processing, review/approval, and release decision—checking at each step that roles, privileges, and audit trails match SOPs. Spreadsheets used for GMP decisions must be locked, version-controlled, validated (calculation verification), and governed by change control. If an interface fails, your manual fallback process must be described and proven, including re-entry controls and reconciliation.
Japan also scrutinizes metadata and reference standards: chromatographic processing rules, integration events, and reprocessing must be predefined and justified; system suitability failures must trigger documented decisions; and electronic raw data must be enduring and accessible for the full retention period. For contract testing labs, ensure the MAH has visibility—remote read-only access or scheduled data reviews—and that data corrections are dual-verified with second-person review. Ultimately, your story must show that the system makes the right behavior the easy behavior—that integrity is engineered, not merely asserted.
MAH Oversight, GQP, and the Supply Chain: Proving Control Beyond the Factory Gate
Under Japanese law, the Marketing Authorization Holder carries legal responsibility for product quality and information supplied to the market. That accountability is operationalized through GQP, which bridges manufacturing release and distribution. For foreign sites, this means the MAH must demonstrate real oversight of suppliers and CMOs: formal technical/quality agreements; qualification/audit programs that sample risk-relevant processes; approval of master batch records and change controls; and release under MAH authority with documented review of critical data (PPQ, deviations, OOS/OOT, stability). Japan expects evidence that the MAH didn’t just receive a CoA—it evaluated the basis for the CoA against approved specs and the current control strategy.
Distribution control is part of the inspection narrative. Temperature-controlled logistics must be validated with lane mapping, shipper qualification, and excursion management that ties to label claims and Module 3 stability. Complaint handling and recalls require time-stamped traceability from distributor to batch genealogy; mock recalls should demonstrate achievable timelines. Where serialization or anti-counterfeit features exist, the MAH must show processes for verification, reconciliation, and investigation. Artwork and labeling control matter, too: the Japanese package insert and external packaging must match current authorization, and change implementation must be synchronized across wholesalers and digital PI repositories.
Finally, contract testing labs and sterilization vendors are often overlooked weak links. Ensure contracts specify data ownership, audit rights, method lifecycle responsibilities, and deviation/CAPA expectations. The MAH should have a single source of truth for methods/specs to prevent version drift across partners. Where multiple markets are supplied, Japan-specific controls (e.g., method title language, sampling size conventions, compendial cross-references) must be documented to avoid errors at release.
Inspection Playbook, CAPA Mastery, and Sustaining FMA: From First Cycle to Re-Inspection
Japan rewards preparedness and transparency. A practical inspection playbook includes: a bilingual site tour script tied to process maps and CCPs; ready access to PPQ summaries, stability trending, and impurity fate/purge rationales; a data integrity workstation where inspectors can witness audit trail reviews; and pre-staged examples of deviation investigations that show cause analysis and CAPA effectiveness (metrics before/after, audit confirmation). Train SMEs to answer succinctly, in scope, and with documentary proof. Maintain a commitment log during the inspection—each promise gets an owner, deadline, and follow-up artifact.
Post-inspection, treat observations as an opportunity to prove your quality system works. Effective responses are root-cause driven (human, system, or knowledge), specific (what changed in SOPs/equipment/training), and verifiable (evidence packages, effectiveness checks, and due dates). Tie corrective actions to risk: show how you reassessed process risk and updated monitoring or acceptance criteria. If findings implicate the submission (e.g., spec or method mismatches), update Module 3 and labeling promptly through the appropriate variation path and notify the MAH/GQP to align field materials.
To sustain FMA, shift from projects to governance. Run a quarterly management review that integrates KQIs (right-first-time, deviation aging, OOS/OOT rates), data integrity indicators (audit trail review timeliness, invalidation rates), cleaning/bioburden trends, and supplier performance. Use ICH Q12 tools to pre-negotiate comparability protocols for expected changes (site addition, equipment modernization, method lifecycle), and keep an established conditions table current so post-approval changes flow predictably. Before re-inspection, perform a mock audit against PIC/S-style checklists and verify that Japanese identities (site names/addresses, spec/method titles) still match across FMA, Module 1/3, CoAs, and artwork. When the file reads itself, and the floor matches the file, re-accreditation becomes a formality rather than a crisis.