MHRA

Medicines and Healthcare products Regulatory Agency

United KingdomEuropeNational / regional regulator

UK regulator; issues GxP guidance and the widely-cited data-integrity guidance for the post-Brexit UK market.

Browse the MHRA standards →Official site ↗

What this page does not claim

SPEQ curates and cross-references these bodies. It is not affiliated with, accredited by, or endorsed by any of them, and a count of decoded standards is a measure of SPEQ’s coverage, not of a body’s importance.

WHAT MHRA COVERS

The Medicines and Healthcare products Regulatory Agency regulates medicines, medical devices, and blood components for the UK under the Human Medicines Regulations 2012 and the Medical Devices Regulations 2002. Since the UK left the EU it operates as a standalone sovereign regulator with its own authorisation routes, while retaining substantial alignment with EU technical standards.

WHAT MHRA PUBLISHES

  1. 01GXP Data Integrity Definitions and Guidance for Industry (2018) — widely used far beyond the UK
  2. 02The "Orange Guide" (Rules and Guidance for Pharmaceutical Manufacturers and Distributors)
  3. 03Drug and device safety alerts, and Field Safety Notices
  4. 04Inspectorate blog posts and deficiency-trend reports that signal current inspection focus
  5. 05Guidance on UK authorisation routes and the Northern Ireland arrangements

HOW ITS REQUIREMENTS BITE

MHRA runs its own inspectorate across GMP, GDP, GCP, GLP, and GPvP, and operates a risk-based inspection programme. Sites are graded by the severity of deficiencies found — critical, major, other — and serious findings can lead to suspension of a manufacturer’s or wholesale dealer’s licence. The agency also publishes its own influential guidance, most notably on data integrity.

What practitioners get wrong

  • MHRA’s 2018 data-integrity guidance is a de facto international reference, not a UK-only document.
  • Post-Brexit, UK and EU requirements are aligned in substance but are legally separate — check both where you supply both.
  • Northern Ireland follows distinct arrangements; do not assume a single UK-wide position.
  • The MHRA inspectorate publishes its common deficiency themes — read them before an inspection, not after.
PROFESSIONAL · INSPECTION INTELLIGENCE · SPEQ SYNTHESIS

What an inspection under this authority actually probes

CHECKING ACCESS

Checking your Professional access…

WHERE IT SITS INTERNATIONALLY

MHRA is an ICH member and a PIC/S participating authority, and has established recognition routes that rely on approvals from trusted regulators. Its GMP expectations remain closely aligned with EU GMP.

MHRA STANDARDS SPEQ DECODES · 3

MHRA GDP
UK Good Distribution Practice (Rules & Guidance for Distributors)
MHRA GxP DI (2018)HIGH INSPECTION RISK
MHRA 'GxP' Data Integrity Guidance and Definitions
BP 2026
British Pharmacopoeia 2026

DISCIPLINES IN MHRA’S REMIT

GMPGood Manufacturing PracticeGDPGood Distribution PracticeGDocPGood Documentation Practice
TOPIC EXPLAINERS CITING MHRA STANDARDS
Data Integrity & ALCOA+ →
ALCOA+, the data lifecycle, and why integrity is the foundation every GxP claim rests on.
Cold Chain & Temperature Control in Distribution →
How Good Distribution Practice keeps a medicine within its qualified temperature range from the factory to the patient — mapping, the qualified cold chain, and what an excursion actually means.
Audit Trail Review →
Having an audit trail is not reviewing it — the distinction regulators built an entire enforcement wave on, and how a risk-based review finds the deleted run instead of drowning in keystrokes.
GDocP: Recording Defensible GxP Data →
The GDocP rules — attributable, legible, permanent records — that turn a GxP activity into defensible evidence.
Contemporaneous Recording →
The "C" in ALCOA — recording at the time of the activity — and why deferred entries are a data-integrity finding.
Correcting GxP Records →
How to change a GxP record defensibly — single-line strike-through, reason, initials, date — on paper and in electronic systems.
Temperature Excursion Management →
Handling a temperature excursion in distribution — stability-budget assessment, quarantine, and the release-or-reject decision.
Transport Qualification in GDP →
Qualifying shipping lanes, packaging, and vehicles so medicines stay in condition from dispatch to delivery.
Returns & Recalls in Distribution →
How distributors handle returned medicines, execute recalls, and keep falsified product out of the legitimate supply chain.
21 CFR Part 11 — Electronic Records and Signatures →
The FDA rule setting the criteria under which electronic records and electronic signatures are considered equivalent to paper records and handwritten signatures.
Identity & Access Management in GxP Systems →
Unique identity, authority checks, segregation of duties, privileged access and periodic review — the controls that make a GxP record attributable.
Cyber Incident Response for Regulated Records →
What happens to GxP records, batch disposition and reporting clocks when a security incident lands — and why containment is only half the response.
Data Privacy & Protection in GxP Environments →
Where GDPR meets GxP record-keeping — the retention-versus-erasure conflict, health data as a special category, and encryption that survives an audit trail.
Integration & Interoperability for GxP Data →
Errors here are silent by construction — a successful transfer looks identical to a correct one.
Analytics & Decision Support in GxP →
Self-service lets a good question be answered quickly and lets a wrong metric spread before anyone checks it.
Records, Content & Retrieval →
A record that cannot be found within the time an inspection allows is functionally missing.

MHRA: frequently asked questions

Reference answers on Medicines and Healthcare products Regulatory Agency’s mandate, what it publishes, and how its requirements acquire force.

What does the MHRA regulate?

The Medicines and Healthcare products Regulatory Agency regulates medicines, medical devices, and blood components for the UK under the Human Medicines Regulations 2012 and the Medical Devices Regulations 2002. Since the UK left the EU it operates as a standalone sovereign regulator with its own authorisation routes.

Is MHRA’s data-integrity guidance UK-only?

No. MHRA’s GXP Data Integrity Definitions and Guidance for Industry (2018) is a de facto international reference used far beyond the UK. MHRA runs its own inspectorate across GMP, GDP, GCP, GLP, and GPvP on a risk-based programme.

Is the MHRA still aligned with EU requirements?

In substance, largely — but they are legally separate. UK and EU requirements are aligned in substance yet distinct in law, so check both where you supply both. Northern Ireland follows distinct arrangements, so do not assume a single UK-wide position.