HONG KONG DRUG LICENSING

Hong Kong Drug Licence FAQs

Search 500 Hong Kong drug licence FAQs on applications, personnel, premises, quality systems, ongoing regulation, renewals and acquisitions.

Information status: The original FAQ material dates from 2025 and is provided for topic-based reference; it does not represent an individual verification of all 500 FAQs against current rules. For application, fee, renewal, change, product or prescription requirements, please refer to the current official forms and guidance.

Official information from the Drug Office Official information from the Chinese Medicines Board

找到 50 条结果，第 2／3 页。每页显示 20 条；无需启用 JavaScript。

Thematic illustration for pharmaceutical licensing business queries and document organisation services — Discuss actual operating questions one-to-one to clarify the next decision.

Q321 · 什么是质量风险管理（QRM）？它如何在药品批发业务中应用？独立链接

Quality Risk Management (QRM) is a systematic process for assessing, controlling, communicating and reviewing risks to medicine quality. It goes beyond simply complying with rules: it proactively and prospectively identifies “where things could go wrong” and allocates resources and attention according to the severity, likelihood and detectability of the risks. In pharmaceutical wholesale, QRM can be applied at every stage: assessing compliance risks when selecting suppliers; assessing cross-contamination risks when designing warehouse layouts; assessing the risk of temperature excursions when preparing cold-chain transport plans; and assessing the ultimate impact on product quality when handling deviations. Through QRM, businesses can move from “reactive response” to “proactive management”, concentrating limited resources on the highest-risk areas.

📘 Regulatory basis

The International Council for Harmonisation (ICH) Q9 guideline, Quality Risk Management, is a globally recognised authoritative standard. Although GDP does not mandate a complete QRM system in the same way as GMP, modern regulatory thinking has incorporated risk-based principles in depth. For example, the frequency and scope of internal audits should be determined on the basis of risk assessment.

📗 Drew Tang's recommendations

We recommend that clients do not view QRM as extra paperwork. Start with simple risk assessment tools, such as Failure Mode and Effects Analysis (FMEA) or a risk matrix. Whenever you carry out change control, handle a major deviation or prepare an annual audit plan, ask: “What is the biggest risk here?” Documenting the risk assessment process and its results can show regulators that your decisions are justified.

📕 Risk notice

A lack of risk-management thinking may lead a business to spread its efforts evenly across all issues, overlooking its most critical weaknesses. In a regulator’s view, a company that cannot identify and prioritise its key risks has a blind quality system. If an investigation after an incident finds that the relevant risk could have been foreseen but was not addressed, the company’s liability will be substantially increased.

Q322 · 管理层评审（Management Review）在QMS中扮演什么角色？应该多久进行一次？独立链接

Management review is a core part of a QMS: a formal, periodic meeting at which the company’s senior management reviews the performance of the entire quality management system. Its purpose is not to resolve specific day-to-day issues, but to assess the continuing suitability, adequacy and effectiveness of the QMS at a strategic level and identify areas for improvement and resource needs. Inputs to the review generally include the results of internal and external audits; customer complaints and feedback; trends in key performance indicators (KPIs), such as deviations and CAPA; supplier performance; and changes in the regulatory environment. Outputs include specific decisions and action items, such as approving new quality objectives, allocating resources for equipment upgrades or deciding to restructure a process where problems recur.

📘 Regulatory basis

The Good Distribution Practice (GDP) for Medicinal Products requires management to review the quality system regularly to ensure its continued effectiveness. The review process and its outcomes must be documented. This is a key mechanism for ensuring the involvement of senior management and their accountability for quality.

📗 Drew Tang's recommendations

We recommend that clients hold a formal management review meeting at least once a year. Before the meeting, the quality department should prepare a comprehensive data report and distribute it to all attendees. The meeting should have a formal agenda and minutes clearly recording discussions, decisions and assigned actions. Treat management review as the “engine” driving continual QMS improvement, not merely as a compliance task.

📕 Risk notice

Never conducting a management review, or keeping records that are too brief and lack substance, indicates that senior management is indifferent to quality management. Regulators expect evidence of genuine management involvement, not merely a one-person performance by the quality department. If there are obvious, long-standing problems with the company’s quality system and management reviews do not respond to them, this is a very serious warning sign.

Q323 · 在药品批发牌照下，对“关键人员”（Key Personnel）例如“负责人”（Responsible Person, RP）有何资质和职责要求？独立链接

Under GDP requirements, licensed wholesalers must appoint a sufficient number of key personnel with appropriate competence and experience to carry out their duties. The Responsible Person (RP) is a core role and bears personal responsibility for ensuring that the company’s operations continue to comply with GDP requirements. The RP is generally required to be a registered pharmacist or to hold a relevant degree and have sufficient practical experience. Core duties include ensuring that an effective QMS is implemented and maintained; overseeing initial and continuing staff training; coordinating and carrying out medicine recalls; ensuring that customers and suppliers are qualified; and approving the final disposition of returned medicines. The RP must have sufficient authority and resources to perform these duties and should make quality decisions independently of commercial pressure.

📘 Regulatory basis

Chapter 2, “Personnel”, of the Good Distribution Practice (GDP) for Medicinal Products describes in detail the requirements for key personnel, particularly the person-in-charge. The licensee is responsible for ensuring that the RP has the authority and resources needed to fulfil their duties. The RP’s name and qualifications must be submitted with a licence application or change notification.

📗 Drew Tang's recommendations

Choosing the RP is one of the key factors in whether a licence application succeeds. We recommend that clients assess not only the candidate's academic qualifications and certificates when appointing an RP, but also their practical experience and leadership in pharmaceutical quality management. The RP's responsibilities should be clearly defined in the documents. If the RP is part-time, you must ensure they have sufficient time and capacity to perform the role and can respond to emergencies at any time.

📕 Risk notice

A nominal RP without real authority or sufficient capability is a major deficiency in the eyes of the regulator. If the RP knows nothing about the company’s quality operations, or if the sales department can easily override the RP’s quality decisions, the entire QMS will be regarded as ineffective. In the event of a serious quality incident, the RP may bear personal legal liability.

Q324 · 什么是场地主文件（Site Master File, SMF）？药品批发商需要准备吗？独立链接

A Site Master File (SMF) is a document prepared by a licence holder describing how its activities related to licensed operations (such as medicine wholesale) comply with GDP. It is like a “CV for the premises”, giving the regulatory authority a concise, comprehensive overview of the company’s quality management policy, personnel, facilities, equipment, documentation system and specific operations. Its contents usually follow a standard format, including company information, an overview of the QMS, personnel and organisation, a description of the factory premises and equipment, document management, and summaries of key operating procedures (such as procurement, storage, distribution and recall). An SMF is mandatory for medicine manufacturers. Although it is not legally mandatory for wholesalers in Hong Kong, preparing one is strongly recommended as best practice.

📘 Regulatory basis

The PIC/S GMP Guide sets out detailed requirements for the format and contents of an SMF (PE 008-4). Although this document is directed at manufacturers, its framework and principles are also highly relevant to wholesalers seeking to demonstrate their GDP compliance clearly to regulators.

📗 Drew Tang's recommendations

We strongly recommend that our clients proactively prepare and maintain an SMF. When applying for a licence or undergoing an inspection, proactively submitting a detailed and well-structured SMF can greatly help inspectors understand your operations quickly and demonstrate your professionalism and transparency, creating a good first impression. It is also a useful self-assessment tool that helps you review your compliance status systematically.

📕 Risk notice

Although failure to prepare an SMF will not itself directly result in a penalty, the absence of such a guiding document may make communication difficult and inefficient during a complex inspection. If inspectors spend too much time establishing basic facts, this may affect their overall assessment of your company’s management maturity.

Q325 · 在GDP中，“验证”（Validation）和“确认”（Qualification）有何区别？哪些系统或设备需要做？独立链接

“Qualification” and “validation” both demonstrate that a system, equipment or process can consistently achieve its intended results, but they have different emphases. “Qualification” is usually applied to equipment, facilities and systems. It demonstrates that the “hardware” itself has been installed correctly, operates correctly and is suitable for its intended use. It usually comprises four stages: design qualification (DQ), installation qualification (IQ), operational qualification (OQ) and performance qualification (PQ). Qualification of a new refrigerator is one example. “Validation” focuses more on the “process”: it demonstrates that a complete process or method can consistently produce results that meet predetermined standards. Examples include transport validation of a cold-chain packaging solution and validation of a computerised system. In short, qualification is the foundation for validation: equipment is usually qualified first, followed by validation of the processes that use it.

📘 Regulatory basis

The Good Distribution Practice (GDP) for Medicinal Products requires critical equipment affecting the quality of medicines (such as cold rooms and refrigerators) and computerised systems to be qualified or validated before use, to demonstrate their suitability. Requalification or revalidation may be required after any significant change.

📗 Drew Tang's recommendations

We recommend that clients use a risk-based approach to determine the scope and depth of validation/qualification. Critical systems that directly affect product quality, such as temperature control systems and warehouse management systems (WMS), must undergo rigorous validation/qualification. All activities should be planned in advance in a protocol, followed by a report, with a complete documentary record. As this work requires specialist expertise, you may wish to engage a specialist third-party service provider to assist.

📕 Risk notice

Using critical equipment or systems that have not been qualified or validated is a serious GDP breach. For example, if you use an unqualified refrigerator to store vaccines, you will be unable to demonstrate to the regulator that their quality was maintained during storage. This may result in an entire batch being deemed non-conforming and put your licence at risk.

Q326 · 什么是“校准”（Calibration）？哪些仪器设备必须进行校准，频率如何？独立链接

Calibration is the process of comparing the reading of a measuring instrument, such as a thermometer, hygrometer or weighing scale, with a recognised, more accurate standard traceable to international or national standards, in order to determine and record its accuracy. If a deviation beyond the acceptable range is found, the instrument must be adjusted or replaced. In the wholesale of medicines, all instruments used to monitor and control critical parameters that affect medicine quality must be calibrated regularly. These include all probes used to monitor temperature and humidity in warehouses and refrigerators, temperature loggers used in cold-chain transport, and electronic scales used to weigh medicines. Calibration ensures that the data on which you rely to make quality decisions is accurate and reliable.

📘 Regulatory basis

The Good Distribution Practice (GDP) for Medicinal Products expressly requires all critical equipment used to monitor storage conditions to be calibrated in accordance with established procedures. Calibration activities must be recorded, and the calibration status must be clearly identifiable (for example, by means of a calibration label).

📗 Drew Tang's recommendations

We strongly recommend engaging a qualified third-party professional calibration organisation, such as one accredited under the Hong Kong Laboratory Accreditation Scheme (HOKLAS), to carry out calibration. It can provide traceable calibration certificates, which are the strongest evidence of compliance. The calibration frequency should be determined based on a risk assessment, the manufacturer's recommendations and the stability of the instrument, but temperature and humidity probes are usually calibrated at least once a year. Keep all calibration certificates and attach a label to each instrument showing the date of its next calibration.

📕 Risk notice

Data generated using instruments that have not been calibrated or are overdue for calibration is invalid. For example, if all temperature records in your warehouse come from an uncalibrated probe, none of your temperature control measures are supported by evidence. This is a basic but serious deficiency during a regulatory inspection, and inspectors will immediately question the authenticity of all related records.

Q327 · 如何建立一个有效的文件控制（Document Control）系统？独立链接

A document control system is a procedure that ensures the lifecycle of all QMS documents (such as the quality manual, SOPs and forms)—from creation, review, approval, distribution and revision through to obsolescence—is controlled. An effective document control system should ensure that: 1. only authorised personnel can create and revise documents; 2. all documents are appropriately reviewed and approved before issue; 3. all documents used in the workplace are the current, approved versions; 4. obsolete documents are promptly withdrawn from points of use to prevent inadvertent use; 5. every document has a unique identifier (such as a document number, version number and effective date); and 6. historical archives of obsolete documents are retained for traceability. This system is fundamental to maintaining order and consistency in the QMS.

📘 Regulatory basis

Chapter 4, “Documentation”, of the Good Distribution Practice (GDP) for Medicinal Products sets out detailed requirements. All documents must be approved, signed and dated by authorised personnel, and their contents must be clear and unambiguous. A system must be in place to prevent obsolete documents from being used inadvertently.

📗 Drew Tang's recommendations

We recommend that clients establish a Master Document List showing the current version number and effective date of every controlled document. For paper-based document systems, different-coloured stamps (such as “Controlled Copy” and “Obsolete”) can be used for management. For electronic document systems, using the access controls and version control features of document management software is more efficient and less prone to error. Appoint a document controller to manage the system’s day-to-day operation.

📕 Risk notice

If staff are found using an obsolete, handwritten-amended SOP at the workplace, this is a typical document control failure. It indicates poor management and an inability to ensure consistency of operations. If it is not possible to establish which document version was in use at the time when investigating a quality issue, root cause analysis will be exceptionally difficult.

Q328 · 为了实现有效的产品追溯（Traceability），我的记录系统需要捕获哪些关键数据点？独立链接

Product traceability is a core GDP requirement and the basis for a rapid recall. An effective traceability system must work in both directions: forward traceability (knowing who each batch was sold to) and backward traceability (knowing where each batch came from). Your record system, whether paper-based or electronic, must therefore capture key data at every stage. On receipt, record the date received, product name, supplier name, quantity, batch number and expiry date. On sale and dispatch, record the dispatch date, product name, customer name and address, quantity, batch number and expiry date. Linking the “batch number” in the receipt records with that in the dispatch records establishes a complete traceability chain.

📘 Regulatory basis

The Good Distribution Practice (GDP) for Medicinal Products requires wholesalers to maintain a system that can quickly identify the source and destination of any medicine. Records must make the distribution route of every batch traceable.

📗 Drew Tang's recommendations

We strongly recommend using a computerised inventory management system with batch management functions, such as a WMS or ERP. This can greatly improve traceability efficiency and accuracy and prevent errors in manual records. Conduct regular “mock traceability exercises”; for example, select a batch at random and see how long your team takes to provide accurate, complete information on its source and destination. This is a key indicator of the effectiveness of your traceability system.

📕 Risk notice

A system that cannot provide fast and accurate batch traceability is completely unacceptable to the regulator. If your system cannot produce an accurate distribution list within a few hours when an urgent recall is required, you may be regarded as posing a direct threat to public health. This could warrant the most severe regulatory action, including immediate suspension of your licence.

Q329 · 如何确保我的药品供应链的安全，防止盗窃或被篡改？独立链接

Supply chain security is an increasingly important aspect of GDP, intended to protect medicines in distribution from theft, tampering or the introduction of counterfeit products. This requires a multi-layered security strategy. At your storage facilities, implement strict access controls so that only authorised personnel can enter medicine storage areas; install CCTV and intrusion alarm systems; and store high-value or controlled medicines in areas with additional security measures, such as safes or locked cages. During transport, use vehicles or containers that can be sealed and show signs of tampering; choose reputable transport partners and conduct background checks on their drivers; and consider GPS tracking for high-risk shipments.

📘 Regulatory basis

The Good Distribution Practice (GDP) for Medicinal Products requires appropriate measures to prevent unauthorised persons from entering storage areas. It also requires medicines to be protected from theft and tampering during transportation. Together, these requirements form the basic provisions for supply chain security.

📗 Drew Tang's recommendations

Conduct a comprehensive security risk assessment to identify the weakest points in your supply chain. Do not overlook the risk of internal theft; establish clear stocktaking and reconciliation procedures. Specify each party’s security responsibilities in quality agreements with carriers. Train your staff to check incoming goods for signs of tampering.

📕 Risk notice

The theft of medicines is not only a financial loss but also a public safety issue, as stolen medicines may enter the market through illegal channels, with no assurance of their quality. If the regulatory authority considers your security measures to have major gaps that led to the theft of medicines, you may be penalised for failing to fulfil your duty to protect them.

Q330 · 我的QMS中是否需要包含业务连续性计划（BCP）或应急计划？独立链接

Yes, a mature QMS should include a Business Continuity Plan (BCP) to address unexpected events that may interrupt your critical operations. Such events may include natural disasters (such as a typhoon causing a power failure), fire, serious IT system failures, the collapse of a key supplier or the warehouse becoming unusable. The core purpose of a BCP is to identify these risks in advance and establish an action plan to ensure that critical products and services can continue to be provided at a predetermined, acceptable level during a crisis. This is particularly important for medicine wholesalers, as an interruption to medicine supply may directly affect patient treatment. The plan should include an emergency command structure, internal and external communication arrangements, data backup and recovery procedures, and arrangements for alternative facilities or suppliers.

📘 Regulatory basis

Although GDP does not expressly require a complete BCP in the same way as financial regulation, its principles underpin multiple requirements, such as backup power and alarm systems for cold rooms and reliable data backup procedures. These are all components of a BCP. A quality system that cannot respond to unexpected events is incomplete.

📗 Drew Tang's recommendations

Start by identifying the few key processes that matter most to your business, such as the storage and distribution of cold-chain medicines. Then consider the most likely disruption scenarios for those processes and establish simple, practical response steps. For example, enter into a framework agreement with a backup cold-chain transport company. Test your contingency plan regularly, such as checking that a backup generator starts or that data can be restored from a backup. Treat your BCP as an investment in your business resilience.

📕 Risk notice

In a crisis, a company without an emergency plan can fall into disarray and make poor decisions, potentially worsening the impact on medicine quality and supply. For example, following a prolonged power cut, the entire stock of cold-chain medicines in a warehouse could be lost if there is no backup power supply or emergency relocation plan. Showing the regulatory authorities that you are prepared for foreseeable emergencies will greatly increase their confidence in your management capabilities.

Q331 · CAPA系统（纠正和预防措施）与偏差处理有何不同？如何有效管理CAPA？独立链接

A CAPA system is the engine for continuous improvement in a QMS, going beyond simple deviation handling. Deviation handling may focus only on “correction” of an event that has already occurred—that is, fixing the current problem. A complete CAPA process, by contrast, emphasises: 1. “Corrective Action”: conducting an in-depth root cause analysis and taking action to eliminate the cause and prevent the “same” problem from recurring; and 2. “Preventive Action”: proactively analysing potential problems and taking action to prevent “similar” or “potential” problems from occurring in the first place. Effective CAPA management requires a structured process: clearly recording the source of the problem (such as a deviation or audit finding), conducting a thorough root cause analysis, drawing up a clear and actionable plan with assigned owners and deadlines, implementing the actions, and finally verifying CAPA effectiveness to ensure that the actions have genuinely resolved the problem without introducing new risks.

📘 Regulatory basis

Both GDP and GMP emphasise the importance of investigating deviations and non-conformities and taking corrective and preventive action. ICH Q10, Pharmaceutical Quality System, identifies the CAPA system as one of its four core elements and a key tool for achieving product realisation, maintaining a state of control and facilitating continuous improvement.

📗 Drew Tang's recommendations

We recommend that clients use a centralised CAPA log to track the progress of all CAPAs. Avoid simply attributing root causes to “human error”. An effective CAPA management system is indicated by a declining rate of recurrence of similar issues over time. Regularly reviewing CAPA trends and effectiveness in management reviews is key to ensuring that the system receives sufficient attention and resources.

📕 Risk notice

A system that provides for “correction” but not “corrective action” and “preventive action” treats symptoms rather than underlying causes. During a review, the regulator will pay particular attention to recurring deviations. If it finds that you have not taken effective CAPA in response to repeated problems, it may consider your quality system ineffective and incapable of learning from and correcting mistakes.

Q332 · 除了首次资质审核外，应如何对现有供应商进行持续的绩效管理和重新评估？独立链接

Supplier management is an ongoing process, not a one-off approval activity. Initial qualification is only the starting point; ongoing performance management and periodic re-qualification are equally important. Performance management should be based on a range of key performance indicators (KPIs), such as on-time delivery rate, order accuracy, temperature excursion rate during transport, product damage rate, and efficiency in responding to complaints and enquiries. You should compile this data regularly (for example, quarterly or annually) into a supplier performance report. Use the report and risk assessment to grade suppliers (for example, “excellent”, “qualified” or “requires improvement”). For critical suppliers, conduct regular on-site audits or request up-to-date compliance documents as part of the re-qualification process.

📘 Regulatory basis

The Good Distribution Practice (GDP) for Medicinal Products requires ongoing monitoring of suppliers both before and after approval. You must demonstrate that the medicines you procure consistently come from approved suppliers that comply with GDP requirements. This entails a responsibility to supervise suppliers on an ongoing basis.

📗 Drew Tang's recommendations

Build strategic partnerships with your key suppliers, hold regular quality meetings, share performance data and discuss improvement opportunities together. Set out your expectations clearly in quality agreements. A formal supplier management procedure not only reduces supply chain risks but also improves the efficiency and quality of the entire supply chain through incentives and collaboration.

📕 Risk notice

Failing to monitor existing suppliers on an ongoing basis is a common oversight. A supplier that was once qualified may see its quality system deteriorate over time. If you cannot provide evidence of ongoing supplier oversight, you may be held jointly liable for failing to discharge your supervisory responsibilities if that supplier has a serious quality problem. Relying on a qualification assessment document from several years ago is far from sufficient.

Q333 · 什么是运输验证（Transportation Validation）？对于非冷链的常温药品运输，也需要做吗？独立链接

Transport validation is a documented testing activity designed to demonstrate that the transport process can consistently and reliably protect medicines so that they still meet their specified quality standards at their destination. This is not limited to temperature control. For cold-chain transport, validation is mandatory and must demonstrate that the packaging solution maintains the temperature within the 2-8°C range under a range of external conditions. For medicines stored at room temperature (for example, those labelled “store below 30°C”), full transport validation is not always mandatory, but a risk assessment is necessary. You need to assess whether the temperature during transport could exceed the range specified on the medicine label under worst-case conditions, such as hot summer weather, prolonged exposure of the vehicle to direct sunlight or transport delays. If the risk assessment identifies a risk of exceeding the specified range, control measures are required, such as using insulated vehicles or some form of temperature monitoring or validation.

📘 Regulatory basis

GDP requires acceptable storage conditions for medicines to be maintained during transport. For temperature-sensitive products, validated equipment and procedures must be used. For products stored at ambient temperature, a risk-based assessment is also required to ensure that transport conditions do not adversely affect product quality.

📗 Drew Tang's recommendations

We recommend that clients carry out a one-off “Lane Risk Assessment” for their main transport routes. During the hottest and coldest seasons, place temperature loggers in the shipping containers to collect actual temperature data. This data will provide a scientific basis for deciding whether additional protection is needed for ambient-temperature medicines, or for demonstrating that your current transport method is adequate. This proactive, data-based approach will make a very professional impression on regulators.

📕 Risk notice

Do not assume that “room temperature” means “no need to worry”. Many medicines stored at room temperature are also sensitive to heat. If medicines are exposed for a prolonged period during transport to temperatures above those specified on their labels (for example, 50°C inside a lorry in summer), their stability and efficacy may be affected. If you cannot demonstrate that you have assessed and controlled this risk, you may be considered to have failed to fulfil your responsibility to protect product quality.

Q334 · 在处理和储存受管制的“危险药物”（Dangerous Drugs）时，有哪些额外的安保和记录要求？独立链接

In Hong Kong, medicines controlled under the Dangerous Drugs Ordinance (Cap. 134), such as certain potent painkillers and psychiatric medicines, are subject to stricter controls than ordinary prescription medicines. Security: these medicines must be stored in a sturdy, locked metal cabinet or safe, securely fixed to the building structure. Only authorised designated personnel (usually pharmacists) may hold the key or combination. Records: every transaction must be recorded by hand, in real time, in a dedicated, firmly bound Dangerous Drug Register. Each entry must include the date; the name and address of the person or organisation from whom the drugs are received or to whom they are supplied; details of the authorising document (such as a doctor’s prescription); and the quantity involved and balance remaining. Records must not be altered. Errors should be corrected by drawing a line through them and signing the correction.

📘 Regulatory basis

The Dangerous Drugs Ordinance (Cap. 134) and its regulations set out extremely detailed and stringent legal requirements for the possession, storage, supply and record-keeping of dangerous drugs. Any breach of the Ordinance may constitute a criminal offence.

📗 Drew Tang's recommendations

We recommend conducting independent stocktakes of all dangerous drugs at least quarterly, reconciling the physical quantities against the balances in the register. Any discrepancies must be investigated immediately. Provide specific training and conduct background checks for staff authorised to handle dangerous drugs. Keep all related prescription and order documents safely with the register. Strictly observe the principle of “dedicated personnel, dedicated cabinet and dedicated register”.

📕 Risk notice

Any discrepancy in records, security lapse or illegal supply involving dangerous drugs is an extremely serious offence and is highly likely to result in criminal prosecution and imprisonment. Regulators apply a zero-tolerance policy to the control of these medicines. Any minor clerical error, such as a missing signature or a late entry, could be used as evidence against you in court.

Q335 · GDP对员工的“个人卫生”（Personal Hygiene）有哪些具体要求？应如何体现在SOP中？独立链接

Although pharmaceutical wholesale does not have the extreme environmental requirements of sterile manufacturing, good personal hygiene remains a basic element in preventing medicine contamination. GDP requires companies to establish and implement relevant hygiene procedures. Your hygiene SOP should specify that: 1. All employees entering medicine storage and handling areas must wear clean work clothes; 2. Hands must be cleaned appropriately before handling medicines; 3. Employees who have an infectious disease that could contaminate medicines or open skin wounds must report it to a supervisor immediately and be temporarily removed from duties involving direct contact with medicines; 4. Eating, drinking, smoking or keeping personal food and belongings in medicine storage and handling areas is strictly prohibited; and 5. Personal clothing must be kept clean. These requirements are intended to minimise the risk of medicine contamination from human factors.

📘 Regulatory basis

Chapter 2, “Personnel”, of the Good Distribution Practice (GDP) for Medicinal Products requires appropriate hygiene procedures to be established. It also requires that anyone whose health condition could adversely affect product quality must not participate in the relevant activities.

📗 Drew Tang's recommendations

Make personal hygiene a compulsory part of new-employee induction training. Put reminder posters in prominent places, such as warehouse entrances, with messages such as “Clean your hands” and “No food or drink in work areas”. Provide staff with the necessary facilities, such as hand sanitiser, hand towels and suitable workwear. Management should lead by example in observing hygiene requirements and foster a culture that values cleanliness and professionalism.

📕 Risk notice

Although cases of medicine contamination directly caused by personal hygiene issues are uncommon in the wholesale sector, they reflect the company’s overall quality culture and management standards. If inspectors see staff in dirty clothes eating snacks in the warehouse, they may immediately have serious doubts about your company’s discipline and professionalism and may intensify their scrutiny of other areas as a result.

Q336 · 对于已经评估为合格的退货药品，在重新入库销售前，还需要完成哪些步骤？独立链接

Even if a batch of returned medicines is initially assessed as ‘possibly’ suitable for resale, it must never be returned directly to the shelves. A series of strict steps must still be completed. First, the decision must be formally approved in writing by an authorised person in the quality department (usually the ‘Responsible Person’ (RP)), and the approval document must set out the basis for the assessment in detail. Second, the stock status of the batch must be correctly updated in the inventory management system, from ‘quarantine/returned’ to ‘released/available for sale’, to ensure that the system record matches the physical status. Its traceability records must also be complete. If the medicine requires serialisation, its serial number status must also be correctly reactivated in the national system. Only after all these document and system steps have been completed may the batch be physically moved back into saleable stock.

📘 Regulatory basis

The Good Distribution Practice (GDP) for Medicinal Products provides that returned medicines may only be considered for return to stock after the designated person has assessed them and confirmed that their quality has not been affected. The entire process must be fully documented to demonstrate that the decision was justified and the handling compliant.

📗 Drew Tang's recommendations

We reiterate that the criteria for reselling returned medicines should be extremely strict. We recommend establishing a “restocking inspection checklist” in your SOP to ensure that every step is carried out and recorded. Treat the RP's written approval as an absolute requirement. In practice, unless you are completely certain, destroying returned goods is the safer and simpler option, as it avoids potential risks and complex paperwork altogether.

📕 Risk notice

Taking shortcuts in any procedure for handling returns may have disastrous consequences. If returned medicines are resold in error without formal approval from the RP and those medicines happen to have a quality issue, the company will face the most serious legal and reputational repercussions. When reviewing returns records, the regulatory authorities will closely scrutinise whether decisions to return goods to stock were made rigorously and whether the documentation is complete.

Q337 · 模拟召回（Mock Recall）的目的是什么？如何评估一次模拟召回的有效性？独立链接

A mock recall is a “fire drill” to test how your recall procedure and traceability system perform under real-world pressure. The purpose is not to recall products, but to test in a controlled setting whether you can complete all the key steps required for a real recall quickly and accurately within the specified time. The effectiveness of a mock recall can be assessed using the following key indicators: 1. **Speed**: How long did it take from starting the exercise to producing a complete, accurate list of distribution customers? (The usual target is within a few hours); 2. **Accuracy**: Is the distribution list 100% accurate? Does it include every customer who bought the target batch? Are the quantities correct? 3. **Coverage**: Can you successfully “contact” every customer on the list? (In an exercise, this could involve sending a simulated notification email); 4. **Completeness**: Was the recall SOP followed throughout the exercise? Were all required records and forms completed correctly?

📘 Regulatory basis

GDP requires recall procedures to be capable of being initiated promptly and effectively. Although the regulations do not prescribe how often mock recalls must be conducted, regular exercises are the best way to demonstrate to regulators that your recall procedure is genuinely “effective”.

📗 Drew Tang's recommendations

We recommend that clients conduct a mock recall exercise at least once a year. After the exercise, hold a review meeting to assess performance honestly, identify bottlenecks and opportunities for improvement, and document the findings. For example, if retrieving distribution data took too long, this may indicate that your IT system or record-keeping process needs to be improved. Keep the exercise report as an important quality record.

📕 Risk notice

A recall procedure that has never been tested in a drill is likely to fail when a real crisis occurs. If you cannot demonstrate to the regulator that your traceability system and recall procedure are rapid and effective, it may reasonably conclude that you would be delayed in responding to a real recall, putting the public at risk. A failed drill is not the problem; never conducting a drill is.

Q338 · 我与我的运输商或第三方仓储服务商签订的“质量协议”（Quality Agreement）应包含哪些核心条款？独立链接

A quality agreement is a legal document that clearly defines and divides the specific responsibilities of you, as the licensed wholesaler, and your outsourced service provider for activities related to GDP. It is not a commercial contract and does not cover prices; it deals only with quality and compliance responsibilities. A detailed quality agreement should include at least the following core terms: 1. The scope of each party’s responsibilities, clearly stating who does what; 2. Requirements for personnel qualifications and training; 3. Requirements for facilities and equipment, such as vehicle requirements and calibration of temperature-control equipment; 4. Key operating procedures, such as handover, temperature control and security; 5. Requirements for data recording and sharing, such as provision of transport temperature data; 6. Joint procedures for handling and investigating deviations; 7. A mechanism for notification and approval of changes; 8. Your right to audit the service provider; 9. Joint procedures for handling complaints, returns and recalls; 10. Confidentiality arrangements and the term of the agreement.

📘 Regulatory basis

Chapter 7, “Outsourced Activities”, of the Good Distribution Practice (GDP) for Medicinal Products expressly provides that all outsourced activities must be covered by a written contract (with the quality agreement being the most important part). The contract should clearly define each party’s responsibilities, particularly those relating to quality.

📗 Drew Tang's recommendations

When drafting a quality agreement, ensure that your quality department and legal adviser are both involved. The agreement should be as specific as possible and avoid vague language. For example, do not simply state ‘temperature must be maintained’; specify ‘temperature must be maintained between 2°C and 8°C, with temperature records provided for the entire period’. A quality agreement should be treated as a ‘living document’ and updated promptly when the business relationship or regulatory requirements change.

📕 Risk notice

Without a quality agreement, or if its terms are ambiguous, it will be extremely difficult to allocate responsibility if a problem arises, which can lead to disputes. For example, if the temperature of a batch of cold-chain medicines exceeds limits during transport, without an agreement defining the carrier’s responsibilities and data-provision obligations, it will be difficult to hold the carrier accountable and conduct an effective investigation. In the regulator’s view, this amounts to outsourcing quality responsibility without effective control.

Q339 · 什么是年度产品质量回顾（Annual Product Quality Review, PQR）？批发商需要做吗？独立链接

The annual Product Quality Review (PQR) is a core GMP requirement that applies mainly to medicine manufacturers. Manufacturers must review each medicine annually, compiling and analysing all data from the previous year on production controls, test results, deviations, changes, complaints and recalls, among other matters. This enables them to assess process consistency and the suitability of current specifications, and to identify trends for improvement. Medicine wholesalers are not required to conduct a PQR as detailed as that performed by a manufacturer. However, adopting the concept of an ‘annual review’ and conducting a comprehensive, data-based annual ‘health check’ of their own quality system is a highly valuable best practice.

📘 Regulatory basis

PQR is an express requirement for manufacturers under Chapter 1 of the PIC/S GMP Guide. For wholesalers, GDP places greater emphasis on “management review”, which has a similar purpose to PQR in systematically reviewing and improving the quality system. However, PQR focuses more on specific “products”, while management review focuses more on the overall “system”.

📗 Drew Tang's recommendations

We recommend that wholesale clients incorporate the principles of PQR into their management review preparations. For example, before a management review, prepare an annual quality report containing trend analyses of key quality indicators from the past year, such as the types and frequency of customer complaints, categorised statistics on deviation root causes, changes in supplier performance, and recall or return trends. This data-based review can add depth to management reviews and make the resulting decisions more targeted.

📕 Risk notice

Although a wholesaler’s failure to conduct a PQR will not directly constitute a breach, if your quality system has no annual, systematic review mechanism of any kind, whether a PQR or an in-depth management review, your QMS may be in a state of “keeping your head down and working without looking up”. This may lead to systemic problems being overlooked for a long time until they develop into serious compliance incidents.

Q340 · 如何对员工进行GDP相关SOP的培训有效性进行评估？独立链接

Completing training does not mean that it has been effective. It is not enough for staff simply to sign a training record; you must assess whether they have genuinely understood the SOP and can follow it correctly. A range of methods can be used to assess training effectiveness, and they should be used in combination: 1. **Knowledge tests**: conduct a brief written test or ask oral questions after training to check staff understanding of key points. 2. **Observation of performance**: have a supervisor or quality staff member directly observe employees at work to check whether they follow the SOP steps. This is the most direct and effective method. 3. **Performance indicators**: check whether performance indicators related to the training content have improved. For example, after training on the SOP for picking accuracy, has the picking error rate fallen? 4. **Interviews**: speak to trained employees and ask them to explain, in their own words, the key requirements of the SOP and the reasons for them. Record all assessment results as evidence of training effectiveness.

📘 Regulatory basis

Chapter 2, “Personnel”, of the Good Distribution Practice (GDP) for Medicinal Products expressly states that “the effectiveness of training should be periodically assessed”. This shows that the regulator is concerned not only with whether you have provided training, but also whether it has achieved the intended results.

📗 Drew Tang's recommendations

Formalise the assessment of training effectiveness. For example, set the assessment methods and criteria in advance in the SOP training plan. Staff found to be unsatisfactory or to have insufficient understanding should be retrained until they have mastered the material. Appropriately linking assessment results to staff performance reviews can increase the importance staff attach to training. Remember that adults learn by doing, so observation of work practices and feedback are particularly important assessment elements.

📕 Risk notice

If your company has a thick stack of training records, but staff follow procedures during an on-site inspection that differ significantly from the SOPs, this is a major “red flag”. It not only exposes the ineffectiveness of your training, but also shows inspectors that your document system and actual operations are “two different things”. In the eyes of regulators, training without an effective assessment may be considered ineffective.

Hong Kong Drug Licence FAQs

Plan Your Hong Kong Pharmaceutical Licensing Project with Drew Tang