Chapter 17: Post-licensing Compliance Obligations and Day-to-day Oversight
Hello, everyone. I am Drew Tang from RGYS. RGYS may assist with document preparation and project coordination within the written scope of services; personnel qualifications, statutory roles and professional judgments are to be verified and assumed by the respective responsible parties, and approval is decided independently by the competent authority. This marks a solid step forward for your business. However, obtaining a licence is only the beginning. What matters even more is strict adherence to all regulations in day-to-day operations and fulfilment of the licensee's compliance obligations. This affects not only the continued validity of the licence but also, directly, the public's medication safety. In this chapter, I will explain in detail the routine regulatory requirements and compliance obligations you must fulfil after obtaining a licence.
1. Core compliance requirements for day-to-day operations
As a licence holder, you must embed compliance into every aspect of your business. The core requirement is to ensure that all procurement, storage, sale and distribution of pharmaceutical products strictly comply with the Pharmacy and Poisons Ordinance (Cap. 138) and its subsidiary legislation. You must establish a robust Quality Management System (QMS) covering the entire process, from supplier audits and goods-in checks to storage environment controls and sales record tracking.
Among these, medicine storage conditions are a key focus of the Department of Health’s routine oversight. You must provide a suitable environment in accordance with the storage requirements on the medicine label. For example, medicines requiring refrigeration must be stored in a pharmaceutical refrigerator at 2–8°C, equipped with continuous temperature monitoring and an alarm system. Under Good Distribution Practice for Pharmaceutical Products, you must maintain detailed temperature and humidity monitoring logs. These records are routinely checked during Department of Health inspections. Any temperature excursion must be documented together with the corrective action taken.
Drew Tang's tip: Many clients initially overlook the details of temperature and humidity monitoring. I recommend using an automated electronic monitoring system. It not only records data 7x24 hours, but can also send alerts by text message or app when readings are abnormal, helping you respond immediately. This is much more reliable than traditional manual record-keeping and can also give Department of Health officers a professional and meticulous impression.
2. Responding to routine and unannounced Department of Health inspections
Inspectors from the Drug Office, Department of Health have statutory powers to enter licensed premises for inspection at any time. There are two types of inspection: routine annual or half-yearly inspections, and unannounced inspections without prior notice. Both are intended to verify that your day-to-day operations continue to meet licensing standards and regulatory requirements.
During an inspection, inspectors will focus on several areas: whether the physical environment of the premises is clean and orderly; whether storage facilities meet standards; whether all records are complete and accurate; and whether personnel qualifications and training are adequate. In particular, medicine receipt and dispatch records must reconcile across the goods, accounts and documents. Every transaction should have a corresponding invoice, delivery note and stock movement record, and be traceable to the medicine batch number and the supplier or customer. Under the Pharmacy and Poisons Regulations (Cap. 138A), relevant records must be retained for at least two years for inspection.
How can you prepare for an inspection?
- Establish Standard Operating Procedures (SOPs): Translate all compliance requirements into internal SOPs and train all staff to ensure that everyone understands and follows them.
- Appoint a designated compliance lead: Designate a core staff member as the compliance lead to liaise with the Department of Health during inspections and oversee day-to-day compliance.
- Regular internal self-checks: “Inspect” your own operations before the Department of Health visits. Conduct regular internal audits against the official checklist, identify any issues promptly and rectify them.
- Digitise document management: Archive all records electronically, such as stock movement forms, temperature and humidity logs, and training records, to make them easier to retrieve and submit, and to avoid the risk of paper documents being lost or damaged.
III. Medicine safety monitoring and ongoing improvement obligations
As part of the pharmaceutical supply chain, licence holders are responsible for participating in the post-marketing safety surveillance system for medicines. This mainly involves two obligations: reporting adverse reactions and handling recalls. If you receive any report of an adverse drug reaction (ADR), whether from a doctor, patient or another source, you must report it to the Drug Office, Department of Health within the prescribed timeframe, in accordance with its Guidance Notes on the Safety Monitoring of Pharmaceutical Products.
In addition, if the Department of Health or a drug manufacturer initiates a recall, you must cooperate unconditionally. You must immediately quarantine all affected batches in your inventory and, using your complete sales records, promptly notify all downstream customers and assist in recovering drugs already distributed. The entire process must be documented in detail to demonstrate that you have fulfilled your obligation to cooperate with the recall. Failure to cooperate effectively with a recall may have very serious consequences, and may even result in suspension or revocation of the licence.
Risk warning: Under the Dangerous Drugs Ordinance (Cap. 134) and the Antibiotics Ordinance (Cap. 137), stricter requirements apply to the control of certain regulated medicines, such as psychotropic medicines and antibiotics. Relevant prescriptions, records and storage must comply strictly with the requirements; any breach may constitute a criminal offence.
Finally, continuous improvement is at the heart of compliance management. We recommend that all licence holders conduct a comprehensive annual self-inspection at least once a year. It should cover all operational areas, produce a formal report, identify compliance gaps and set out a detailed corrective and preventive action (CAPA) plan. The self-inspection report is not only strong evidence of your management capability for the Department of Health, but also an important safeguard for the sustained success of your business.
Appendix: checklist of core post-licensing compliance obligations
| Compliance obligations | Principal legal and guidance references | Frequency / requirements for implementation | Key points to note |
|---|---|---|---|
| Medicine record-keeping | Pharmacy and Poisons Regulations (Cap. 138A) | Record transactions promptly when they occur and retain the records for at least 2 years | Records must include the medicine name, batch number, quantity, date and supplier/customer information. |
| Temperature and humidity monitoring | Good Distribution Practice for Pharmaceutical Products | Continuous monitoring and recording 24 hours a day | Keep monitoring logs for at least 2 years and record corrective action for any abnormal circumstances. |
| Adverse reaction reporting | Guidance Notes on the Safety Surveillance of Pharmaceutical Products | Submit a report after receiving it, within the timeframe specified in the guidelines (within 15 days for serious incidents). | Establish an internal ADR collection and reporting process, and train staff. |
| Assist with medicine recalls | Pharmacy and Poisons Ordinance (Cap. 138) | Implement immediately upon receipt of the notification. | You must be able to trace the destination of all affected medicines and retain recall records. |
| Managing regulatory inspections | Pharmacy and Poisons Ordinance (Cap. 138) | At any time | Ensure all documents and records are complete and up to date, and readily available for reference. |
| Annual self-inspection | Good Distribution Practice for Pharmaceutical Products | At least once a year | A formal report should be prepared, and a CAPA plan developed in response to the findings. |
| Staff training | Good Distribution Practice for Pharmaceutical Products | Training on commencement and ongoing periodic training | All staff involved in handling medicines must receive training in the relevant SOPs and regulations, and training records must be kept. |
Drew Tang's summary: The path to post-licensing compliance is not smooth, but neither is it an insurmountable mountain. The key is to establish a systematic, process-based compliance management system and make it part of your corporate culture. RGYS may assist with document preparation and project coordination within the written scope of services; personnel qualifications, statutory roles and professional judgments are to be verified and assumed by the respective responsible parties, and approval is decided independently by the competent authority. We are also keen to become your long-term compliance partner, providing ongoing advice and support to ensure the healthy, sustained development of your business under Hong Kong's regulatory framework. If you encounter any compliance difficulties in day-to-day operations, please contact me at any time.