ICH

International Council for Harmonisation

InternationalInternationalInternational harmonizer

Harmonizes technical requirements (Q, E, M series) adopted by regulators worldwide.

Browse the ICH standards →Official site ↗

What this page does not claim

SPEQ curates and cross-references these bodies. It is not affiliated with, accredited by, or endorsed by any of them, and a count of decoded standards is a measure of SPEQ’s coverage, not of a body’s importance.

WHAT ICH COVERS

The International Council for Harmonisation brings regulators and industry together to develop harmonised technical guidelines for pharmaceutical development, manufacturing, and registration. Its output is organised in four series: Quality (Q), Safety (S), Efficacy (E), and Multidisciplinary (M) — with the Q series carrying most of what GxP practitioners work with daily.

WHAT ICH PUBLISHES

  1. 01Q series — quality (Q1 stability, Q2 analytical validation, Q5 biotech, Q7 API GMP, Q8–Q12 development, risk, quality systems, and lifecycle)
  2. 02S series — non-clinical safety
  3. 03E series — efficacy and clinical, including E6 Good Clinical Practice
  4. 04M series — multidisciplinary, including MedDRA and the CTD format
  5. 05Q&As and training material that often carry the practical interpretation

HOW ITS REQUIREMENTS BITE

ICH does not inspect or enforce anything. Its guidelines acquire legal force only when a regional regulator adopts them — as the EU does by publishing them in EudraLex, and as FDA does by issuing them as guidance. That adoption step is why the same ICH guideline can be in force in one market and not yet in another.

What practitioners get wrong

  • An ICH guideline is not law until a regulator adopts it — check the status in each market you supply.
  • Q8(R2), Q9(R1), Q10, Q11 and Q12 function as an integrated set; reading one without the others gives a partial picture.
  • The CTD format (M4) is why a single dossier structure works across regions.
  • Revisions matter: Q9(R1) and E6(R3) changed expectations materially over their predecessors.

WHERE IT SITS INTERNATIONALLY

ICH membership spans the major regulators — FDA, EMA, PMDA, Health Canada, MHRA, Swissmedic, NMPA, ANVISA, MFDS and others — which is precisely why its guidelines function as the global technical baseline.

ICH STANDARDS SPEQ DECODES · 28

ICH Q5A(R2)
Viral Safety Evaluation of Biotechnology Products Derived from Cell Lines of Human or Animal Origin
ICH Q9(R1)
Quality Risk Management
ICH Q10
Pharmaceutical Quality System
ICH Q8(R2)
Pharmaceutical Development
ICH Q11
Development and Manufacture of Drug Substances (Chemical and Biotechnological/Biological Entities)
ICH Q12
Technical and Regulatory Considerations for Pharmaceutical Product Lifecycle Management
ICH Q7
Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients
ICH E6(R3)HIGH INSPECTION RISK
Good Clinical Practice (GCP)
ICH E8(R1)
General Considerations for Clinical Studies
ICH E2B(R3)
Electronic Transmission of Individual Case Safety Reports (ICSRs)
ICH E2A
Clinical Safety Data Management: Definitions and Standards for Expedited Reporting
ICH Q3D(R2)
Guideline for Elemental Impurities
ICH Q13HIGH INSPECTION RISK
Continuous Manufacturing of Drug Substances and Drug Products
ICH M7(R2)HIGH INSPECTION RISK
Assessment and Control of DNA Reactive (Mutagenic) Impurities in Pharmaceuticals to Limit Potential Carcinogenic Risk
ICH M10HIGH INSPECTION RISK
Bioanalytical Method Validation and Study Sample Analysis
ICH Q14
Analytical Procedure Development
ICH Q2(R2)HIGH INSPECTION RISK
Validation of Analytical Procedures
ICH Q1A(R2)HIGH INSPECTION RISK
Stability Testing of New Drug Substances and Products
ICH Q3C(R9)HIGH INSPECTION RISK
Impurities: Guideline for Residual Solvents
ICH Q6AHIGH INSPECTION RISK
Specifications: Test Procedures and Acceptance Criteria for New Drug Substances and New Drug Products (Chemical Substances)
ICH Q6BHIGH INSPECTION RISK
Specifications: Test Procedures and Acceptance Criteria for Biotechnological/Biological Products
ICH E9(R1)HIGH INSPECTION RISK
Statistical Principles for Clinical Trials, incl. Addendum on Estimands and Sensitivity Analysis
ICH E3HIGH INSPECTION RISK
Structure and Content of Clinical Study Reports
ICH E2C(R2)HIGH INSPECTION RISK
Periodic Benefit-Risk Evaluation Report (PBRER)
ICH E2D(R1)
Post-Approval Safety Data: Definitions and Standards for Management and Reporting of Individual Case Safety Reports
ICH E2E
Pharmacovigilance Planning
ICH M4(R4)
Organisation of the Common Technical Document for the Registration of Pharmaceuticals for Human Use
ICH M8 (eCTD v4.0)
Electronic Common Technical Document (eCTD)

DISCIPLINES IN ICH’S REMIT

GMPGood Manufacturing PracticeGCPGood Clinical PracticeGLPGood Laboratory PracticeGVPGood Pharmacovigilance PracticeCSVComputerised System ValidationQMSQuality Management Systems
TOPIC EXPLAINERS CITING ICH STANDARDS
Process Validation Lifecycle →
The three-stage lifecycle — design, qualification, continued verification — and the science behind it.
Quality Risk Management (ICH Q9) →
ICH Q9(R1), the risk-management process, common tools, and the pitfalls the R1 revision targets.
Quality by Design & Pharmaceutical Development →
Building quality in, not testing it in — the QTPP, CQAs and CPPs, the design space, and the control strategy.
The Pharmaceutical Quality System (ICH Q10) →
ICH Q10, the four elements, the two enablers, management responsibility, and the lifecycle model of quality.
Cleaning Validation →
Documented proof that cleaning removes residues below health-based limits — HBEL/PDE, MACO, and the shift from arbitrary limits.
Technology Transfer →
Moving a validated process between sites without losing control — the sending/receiving-unit model, knowledge transfer, and comparability.
Master Batch Record (MBR) & Batch Production Records →
The approved manufacturing template and the contemporaneous execution record — 21 CFR 211.186/211.188, EU GMP Chapter 4, and the move to electronic batch records.
Pharmacovigilance Signal Management →
How a safety signal is detected, validated, assessed, and acted on — the GVP process that turns individual case reports into a change to a medicine’s benefit-risk balance.
Informed Consent & Ethics Oversight →
The two structural safeguards that make a clinical trial ethical — independent ethics review before it starts, and a genuine informed-consent process for every participant — and why consent is a process, not a signature.
CAPA: Corrective & Preventive Action →
The three words the industry uses interchangeably and shouldn’t — correction, corrective action, preventive action — and why most "CAPAs" are none of the last two.
Change Control →
The process that evaluates and approves a change to a validated state before it is made — and why "before, not after" is the entire point that separates it from a deviation.
Deviation Management →
What to do when reality departs from the approved state: how a deviation is classified, investigated to a real root cause, and turned into a CAPA — and the timing that separates it from change control.
Supplier & Vendor Qualification →
Why a certificate of analysis is not qualification, how risk sets the depth from questionnaire to on-site audit, and the reason the excipient supplier and the API supplier are governed by different guides.
Product Quality Review (PQR / APR) →
The annual look back that is supposed to find the trend before it becomes a recall — why PQR and APR are the same idea under two names, and how a real one differs from a copy-paste template.
ICSRs & Expedited Reporting →
The atomic unit of pharmacovigilance and the clock attached to it — the four things that make a case valid, why "serious" is not "severe", and what actually triggers a 15-day report.
Sponsor Oversight of Clinical Trials →
A sponsor can outsource the work of a trial to a CRO but never the responsibility for it — what real oversight looks like beyond signing a contract, and what ICH E6(R3) changed.
RBM vs RBQM: Monitoring vs Quality Management →
Vendors use them as synonyms; they are not. One is how you oversee a trial, the other is the lifecycle discipline that contains it — and ICH E6(R3) put the larger one at the centre of GCP.
Quality Tolerance Limits (QTLs) & KRIs →
A QTL is not a site metric and a KRI breach is not a QTL breach — the two get set at the wrong level constantly, and a QTL crossing is not automatically a protocol deviation.
SDV vs SDR: Source Data Verification & Review →
SDR is not "lite SDV" — they catch different failures. 100% SDV will never find the unreported adverse event sitting in the medical record, because there is no CRF entry to compare against.
Source Data, eSource & Direct Data Capture →
Source data is the information; source documents are the containers — and under direct data capture the eCRF *is* the source, which makes source-data verification conceptually impossible.
Protocol Deviations & Serious Breaches →
Deviation → important deviation → serious breach looks like one escalating ladder. It is not — a serious breach is a different axis with a statutory reporting clock, and a systemic GCP failure with no protocol departure can be one.
The Trial Master File (TMF) & TMF Reference Model →
The document set that lets a trial be reconstructed and its GCP compliance proven — why "the TMF was complete at the end" misses the point, and who actually stewards the Reference Model now.
OOS & OOT Investigations →
A result outside specification is not a failing batch — it is a question. The two-phase investigation that decides whether the result or the process was wrong, and why "invalidate and retest" is the classic finding.
Stability Testing & Shelf Life →
How a shelf life is actually justified — real-time and accelerated conditions, the ICH climatic zones, and why you cannot simply average three batches to a number.
Analytical Method Lifecycle (ICH Q2/Q14) →
Validation is not a one-time gate at the end — ICH Q14 reframed a method as something developed, validated, and managed across a lifecycle, and it changed what a post-approval method change requires.
Literature Monitoring in Pharmacovigilance →
The scientific literature is a legally-mandated source of adverse-event cases — a systematic, documented search with defined databases and a weekly rhythm, not an occasional look.
Nitrosamine Impurities →
The contamination saga that has run since 2018 — why nitrosamines forced a whole-industry risk assessment, where they come from, and why this is a living page tied to the intelligence feeds, not a fixed limit.
ATMPs: Cell & Gene Therapy Manufacturing →
When the batch is one patient, the process is the product, and starting material is a living donation, the classical GMP model bends — why advanced therapies needed their own rulebook.
Established Conditions (ICH Q12) →
The line between what legally binds your marketing application and what your quality system can change on its own — and why drawing it well is worth months of approval time.
PACMP: Post-Approval Change Management Protocol →
A regulatory agreement you make before a change — describe it, agree the tests and the lower reporting category up front, then execute later at speed instead of waiting on a supplement.
ICH E6(R3): The 2025 GCP Overhaul →
The restructured Good Clinical Practice guideline — Principles + Annex 1, quality-by-design, RBQM, and what changes for sponsors and sites.
Decentralized Clinical Trials →
How DCT elements — remote visits, telehealth, DTP shipping and eConsent — fit the GCP quality-by-design framework.
AI/ML Validation in GxP →
Validating machine-learning and AI systems in regulated environments — data provenance, model lifecycle, and the static-vs-adaptive distinction.
Elemental Impurities (ICH Q3D) →
Controlling metal impurities in drug products through PDE-based risk assessment across identified elements and routes of administration.
Viral Safety (ICH Q5A) →
The three-pillar viral-safety framework for biotech products — cell-line testing, raw-material control, and validated clearance.
Single-Use Systems →
Disposable process equipment in biomanufacturing — extractables/leachables, integrity, and supply-chain qualification.
Continued Process Verification →
Stage 3 of process validation — ongoing monitoring, trending and statistical control that proves the process stays validated.
The EU Risk Management Plan (RMP) →
The structure of the EU-RMP — safety specification, pharmacovigilance plan, risk-minimisation — and how it evolves across a product’s life.
Additional Monitoring & Black Triangle →
The inverted black triangle, the EU additional-monitoring list, and why "▼" means report every suspected reaction.
PV Audits & Inspections →
How the PV system is assured — risk-based internal audit, the CAPA loop, and what a GVP inspection actually examines.
Bioanalytical Method Validation →
Validating the assays that measure drug in biological matrices — selectivity, calibration, accuracy, precision, and stability.
GEP: Engineering Behind Qualification →
The engineering foundation beneath qualification — science- and risk-based design, documentation, and the GEP/GxP boundary.
API GMP Under ICH Q7 →
The GMP standard for active pharmaceutical ingredient manufacture, from the point a starting material becomes an API intermediate through final release.
Genotoxic and Mutagenic Impurities Under ICH M7 →
How ICH M7 classifies, assesses, and controls DNA-reactive impurities using structure-activity analysis and a Threshold of Toxicological Concern.
Residual Solvents Under ICH Q3C →
The three-class system and Permitted Daily Exposure limits ICH Q3C uses to control organic solvents left over from API synthesis and drug-product manufacture.
Dissolution Testing →
The compendial in-vitro test that measures how much drug substance releases from a dosage form over time, and why it is one of the most heavily inspected assays in pharma.
Blend and Content Uniformity →
The tests and sampling strategy used to demonstrate that active ingredient is distributed evenly through a powder blend and, ultimately, through every finished dosage unit.
Comparability Under ICH Q5E →
The ICH framework for showing that a manufacturing change to a biotechnological or biological product has not adversely affected its quality, safety, or efficacy.
Biosimilar Development →
The abbreviated, comparability-driven development pathway for a biologic shown to be highly similar to an already-licensed reference product.
Continuous Manufacturing Under ICH Q13 →
The ICH framework harmonizing scientific and regulatory expectations for continuous manufacturing of drug substances and drug products, including converting an existing batch process.
Process Analytical Technology (PAT) →
The framework for designing, analyzing, and controlling pharmaceutical manufacturing through timely, in-process measurement of critical quality and performance attributes.
Real-Time Release Testing →
Releasing a batch based on validated in-process monitoring and process data, in place of or alongside finished-product laboratory testing.
Excipient GMP →
Why pharmaceutical excipients — the “inactive” majority of most formulations — are governed by an industry-consensus GMP guide rather than a single binding global regulation.
Bioequivalence and Bioavailability →
The pharmacokinetic comparison used to demonstrate that a test drug product performs the same in the body as a reference product — the scientific foundation of most generic drug approvals.
Analytical Method Transfer →
The documented process of demonstrating a receiving laboratory can execute an already-validated analytical method with equivalent performance to the originating laboratory.
Reference Standards and Reagents →
The characterized materials every identity, purity, and potency result is measured against — and why their qualification and lifecycle management are as GMP-critical as the test method itself.
Impurity Qualification (ICH Q3A/Q3B) →
The dose-scaled threshold structure ICH Q3A and Q3B use to decide which organic impurities merely need reporting, which need structural identification, and which need a safety justification.
Qualified Person Batch Release →
The EU regulatory checkpoint that certifies each batch of medicinal product before it reaches the market.
Management Review →
The periodic, top-management review of quality-system performance that closes the loop from operational data to resourcing and strategy.
Internal Audit and Self-Inspection →
The organisation’s own systematic check on whether it is actually complying with GMP and its own procedures.
GxP Training and Competency →
The documented process that establishes and maintains that personnel are qualified, by education and training, for the GxP tasks they perform.
Quality Metrics Program →
The set of trended indicators an organisation tracks to know whether its quality system is actually working, before a regulator has to tell it otherwise.
Supplier Audit Program →
The structured, risk-based program of on-site and remote audits an organisation runs to verify that its critical suppliers actually meet the quality expectations they were qualified against.
Knowledge Management (ICH Q10) →
The systematic approach to acquiring, analysing, storing, and disseminating product and process knowledge across the entire product lifecycle.
Health-Authority Engagement →
Meetings, scientific advice, questions and responses — and why every undertaking given becomes a commitment the organisation is held to.
Regulatory Submission Strategy & Planning →
The CTD, the eCTD, and how a dossier plan built on dependencies rather than document counts survives contact with a filing date.
Regulatory Policy & Standards Engagement →
Engaging with regulation while it is still being written — consultations, standards development, harmonisation — and routing what you learn back inside.
Cybersecurity Governance in Regulated Organisations →
Who owns cyber risk, what residual risk the business has actually accepted, and how an ISMS meets a pharmaceutical quality system.
Data Privacy & Protection in GxP Environments →
Where GDPR meets GxP record-keeping — the retention-versus-erasure conflict, health data as a special category, and encryption that survives an audit trail.
Third-Party Cyber Risk in Regulated Supply →
Suppliers hold credentials into the estate and copies of regulated data — and concentration is the risk that appears on nobody’s register.
Security Awareness & Human Factors in GxP →
People are the most-attacked control and the fastest detector — and which one dominates depends entirely on whether reporting a mistake is safe.
Management Accountability & Decision Rights →
Regulators hold an organisation to decisions, not intentions — and "everyone assumed someone else had checked" is a decision-rights failure.
Manufacturing Strategy & Operating Model →
Campaign or dedicated, in-house or contract — each model concentrates a different risk, and the control burden follows the choice.
Operational Excellence in Regulated Manufacturing →
Most waste in regulated manufacturing is rework, investigation and delay caused by poor control — so improvement and compliance rarely trade off.
Operational Readiness, Startup & Ramp-Up →
The deviation rate during ramp-up is the highest the process will ever see — and that is the clearest information about it anyone will get.
Requirements Traceability & Critical Aspects →
Traceability converts a stack of test results into an argument — that the testing covered what mattered, which is the question actually asked.
Maintaining the Validated State →
Validation is a claim about the present, maintained by work nobody sees — and most loss of validated state is cumulative and undramatic.
Candidate Selection & Intended Use →
The intended use written here propagates into classification, clinical design, labelling and the whole control strategy.
Formulation & Product Design →
Design fixes most of the risk and most of the cost before manufacturing begins — and operations carries what design left behind.
Process Characterisation & Design Space →
Process understanding is what makes validation an argument rather than a demonstration.
Clinical Development Strategy →
A trial that runs perfectly against the wrong question wastes years and exposes participants for nothing.
Protocol Design, Estimands & Study Design →
Complexity added in the protocol multiplies across every participant at every visit — and falls on people who had no part in writing it.
Site Feasibility, Startup & Management →
Sites are where the protocol meets reality — and a site activated before it is ready produces the deviations that consume the study.
Study Closeout & Results Disclosure →
Disclosure obligations are legal duties with deadlines, enforced independently of how the trial went.
Safety Governance & Benefit-Risk →
Benefit-risk changes as evidence accumulates — and where safety governance reports into commercial ownership, the structure itself is a finding.
Postauthorisation Studies & Real-World Evidence →
Real-world data were collected for another purpose — whether they can support the question is a judgement that must be made explicitly.
Medical Information & Inquiry Handling →
A high-volume front door through which adverse events and complaints arrive disguised as questions.
Safety Systems & Partner Data Exchange →
Every exchange with a partner is a place a case can be delayed or lost — and reconciliation only works if it is periodic and two-way.
Supply Network Strategy & Resilience →
Qualification lead times mean an alternative source cannot be created during a disruption — you supply from the network you built.
Materials, Components & Packaging Controls →
A specification that omits an attribute the process depends on will be met by material that does not work — and the supplier will be right.
Quality & Technical Agreements →
It decides who does what when something goes wrong — written while nothing has.
Procurement & Contracting for Regulated Supply →
Procurement decisions create quality obligations that quality did not negotiate.
Shortage Prevention & Supply Continuity →
Most shortages trace to a single site or upstream supplier — which makes them foreseeable from the network map long before they occur.
Workforce Planning & Critical Skills →
Qualification takes months, so staffing gaps cannot be closed at the speed they open.
Learning, Training & Effectiveness →
Retraining a person who already knew the procedure addresses nothing — effectiveness evaluation is what separates a capability gap from a convenient CAPA.
Human Performance & Work Design →
Human error is an outcome, not a cause — treating it as a cause ends the investigation where the useful information starts.
Organisational Change & Adoption →
A change implemented but not adopted prohibits the old way without establishing the new one — and people improvise in the gap.
Cross-Functional Collaboration & Escalation →
Most regulated failures cross a functional boundary — the organisation had the information and never assembled it in one place.
Network, Capacity & Capital Strategy →
Capacity that is technically available but concentrated in one site is a supply risk no downstream quality work can offset.
Laboratory Network & Operating Model →
Testing scattered across laboratories with different quality systems produces results that are individually defensible and collectively inconsistent.
Sampling Plans, Specifications & Standards →
A result describes the sample — and the sample describes the batch only if the plan makes it representative.
Laboratory Capacity, Flow & Turnaround →
A laboratory running permanently at capacity has no slack for an investigation — which is exactly when it will be asked to do one.
Digital Strategy & Application Portfolio →
Regulated organisations accumulate systems faster than they retire them, and each carries a validation obligation for life.
Analytics & Decision Support in GxP →
Self-service lets a good question be answered quickly and lets a wrong metric spread before anyone checks it.
Records, Content & Retrieval →
A record that cannot be found within the time an inspection allows is functionally missing.
Portfolio Strategy & Prioritisation →
A programme approved without the capacity to support it fails during scale-up, when the alternatives have expired.
Business Cases & Investment Decisions →
A business case is a set of assumptions that become commitments — and the optimistic ones are absorbed by functions that were not consulted.
Capital Planning & Project Economics →
Contingency cut at approval reappears as scope reduction during execution — and the scope cut is usually qualification and spares.
Demand, Capacity & Scenario Planning →
Forecast error becomes either shortage or write-off — and the shortage side carries patient harm.
Insurance, Liability & Risk Transfer →
Insurance is a control with conditions attached — and cover voided by a control you did not maintain transfers nothing.
EHS Governance in Regulated Sites →
A site can be fully GMP-compliant while operating an unpermitted discharge — the two systems share rooms and people and need one view.
Occupational Safety in Regulated Manufacturing →
Personal protection and product protection are the same gowning decision made for two reasons — and they can conflict.
Process Safety in Pharmaceutical Operations →
The leading indicators are ordinary — deferred maintenance, bypassed interlocks, changes assessed for product and not for hazard.
Potent Compounds & Specialised Hazards →
One toxicological assessment, two obligations — the limits driving cleaning validation and containment come from the same work.
Environmental Compliance & Permits →
A permit breach can stop production as effectively as a quality event — and pharmaceutical effluent carries specific scrutiny.
Sustainability in Regulated Operations →
Every meaningful sustainability change in a regulated plant is a GMP change — and public claims are now regulated in their own right.
Emergency Management & Crisis Response →
An evacuation that abandons a batch mid-process creates a quality decision — far easier to make if it was anticipated.

ICH: frequently asked questions

Reference answers on International Council for Harmonisation’s mandate, what it publishes, and how its requirements acquire force.

What does ICH do?

The International Council for Harmonisation brings regulators and industry together to develop harmonised technical guidelines for pharmaceutical development, manufacturing, and registration. Its output is organised in four series: Quality (Q), Safety (S), Efficacy (E), and Multidisciplinary (M).

Are ICH guidelines legally binding?

Not by themselves. ICH does not inspect or enforce anything; its guidelines acquire legal force only when a regional regulator adopts them — as the EU does by publishing them in EudraLex, and FDA by issuing them as guidance. Check the status in each market.

Which regulators are ICH members?

ICH membership spans the major regulators — FDA, EMA, PMDA, Health Canada, MHRA, Swissmedic, NMPA, ANVISA, MFDS and others — which is why its guidelines function as the global technical baseline. The CTD format (M4) is why one dossier structure works across regions.