EU-GMP Annex 15 Revision: What the Move Toward December 2026 Means for API Manufacturers

For the first time, the European Union's central guideline on qualification and validation is set to apply directly to the companies that make active pharmaceutical ingredients. EU-GMP Annex 15 has long guided manufacturers of finished medicines. A targeted revision now under way will extend it to manufacturers of chemical and biological active substances, and move it from optional supplementary guidance to a formal expectation that inspectors can enforce.

The change did not come from nowhere. After N-nitrosamine impurities were found in sartan blood-pressure medicines in 2018, regulators traced part of the cause to weak process knowledge and validation at the active substance level. The Annex 15 revision is one of the direct regulatory answers to that crisis.

This guide explains what Annex 15 is, what the revision changes, what the December 2026 milestone really means, who is affected, and the practical steps active substance manufacturers should take now. It is written for quality and regulatory leaders who need a clear, defensible plan rather than a headline. MFLRC supports this work directly through its pharmaceutical validation services.

Executive summary: the Annex 15 revision at a glance

Here is the revision in brief:

• What changed: A joint EMA and PIC/S concept paper, dated 19 January 2026, proposes a targeted revision of Annex 15, Qualification and Validation.
• Headline impact: Annex 15 becomes mandatory in scope for manufacturers of chemical and biological active substances, verified during European Union and PIC/S inspections.
• Why it is happening: It implements recommendations from the 2020 lessons-learnt report on N-nitrosamine impurities in sartan medicines, and aligns Annex 15 with ICH Q9(R1) on quality risk management.
• Timeline: Consultation closed on 9 April 2026. Publication by the European Commission and adoption by PIC/S are targeted for December 2026, with operational compliance expected to follow in 2027.
• What to do: Treat the transition as already started, and build validation, qualification, cleaning, change-control, and contamination-control evidence to finished-product GMP standards.

What is EU-GMP Annex 15?

Annex 15, titled Qualification and Validation, is part of EudraLex Volume 4, the European Union's Good Manufacturing Practice guide. It sets out how manufacturers should plan, document, and demonstrate that their facilities, equipment, utilities, processes, cleaning procedures, and computerized systems are fit for purpose and consistently produce quality product. The current version was published in 2015 and came into operation on 1 October 2015.

Annex 15 covers the core building blocks of validation: the validation master plan, user requirements specifications, design qualification, installation, operational and performance qualification (DQ, IQ, OQ, and PQ), process validation, cleaning validation, and change control. Until now, it applied as a binding standard mainly to manufacturers of finished medicinal products. For active substance manufacturers it was treated as optional supplementary guidance, referenced through Part II of EudraLex Volume 4 but not a formal requirement.

What is changing in the Annex 15 revision?

The revision does two main things. First, it extends the scope of Annex 15 to manufacturers of chemical and biological active substances, making its qualification and validation expectations mandatory and inspectable for those sites. Second, it updates the text to align with ICH Q9(R1) on quality risk management and to strengthen the specific areas that the sartans investigation exposed.

Why now? The nitrosamine sartans driver

The revision traces directly to the contamination of sartan blood-pressure medicines with N-nitrosamine impurities, discovered in 2018. In June 2020, the European Medicines Agency and the Heads of Medicines Agencies published Lessons learnt from presence of N-nitrosamine impurities in sartan medicines.

That report found that a key reason the impurities were present was insufficient process and product knowledge during development, together with GMP deficiencies at active substance manufacturers, including inadequate investigation of quality issues and insufficient contamination control. It recommended making Annex 15 mandatory for active substance manufacturers. In September 2024, the EMA GMP/GDP Inspectors Working Group agreed to act on that recommendation through a targeted Annex 15 revision, and to update the annex in line with ICH Q9(R1).

What "December 2026" actually means

December 2026 is not the date by which active substance sites must be fully compliant. According to the concept paper's published timetable, December 2026 is the target for the European Commission to publish the final revised Annex 15 and for PIC/S to adopt it. The operational compliance date comes after publication.

This distinction matters. When Annex 15 was last revised, the European Commission published the new text in March 2015 and it came into operation on 1 October 2015, roughly six months later. A similar transition period is likely for the revised annex, which would place practical compliance in 2027. Companies should not wait for that date to begin, because building validation evidence and a documented control strategy takes many months of work.

Who is affected by the Annex 15 revision?

The revision reaches further than many API sites expect. The following groups should pay close attention:

• Chemical active substance manufacturers: makers of small-molecule APIs, who move from optional guidance to a mandatory standard.
• Biological active substance manufacturers: the revised annex is intended to apply to biological as well as chemical active substances.
• Finished-product manufacturers: they will need their API suppliers to meet the new standard, and should update supplier qualification and quality agreements accordingly.
• Contract manufacturers and laboratories: third parties that perform validation activities for API sites will face stronger oversight expectations.
• Cannabis and natural health product exporters: companies pursuing EU-GMP certification for export are already expected to meet European validation standards, and will see Annex 15 expectations harden.

What API sites should do now to prepare

Preparation is, in practice, a validation and control-strategy uplift to finished-product GMP standards. The areas below map to the concept paper's proposed changes.

Build or refresh the Validation Master Plan and policy

Establish a current Validation Master Plan, a qualification and validation policy, and a documented control strategy that links critical quality attributes and critical process parameters to the controls that manage them. These documents are the backbone an inspector will ask to see first.

Strengthen process validation and continuous process verification

Confirm that your process validation approach is justified and documented, whether prospective, concurrent, or based on continuous process verification. The revision puts particular weight on robust process development, the variables that affect critical quality attributes, and the validation of recovered materials and solvents, a common weak point at API sites.

Formalize qualification from URS to PQ

Extend formal qualification practices to active substance equipment and systems: user requirements specifications, factory and site acceptance testing, and design, installation, operational, and performance qualification. Each stage should connect logically to the next, and to the validated state of the process.

Tighten cleaning validation and contamination control

Review cleaning validation worst-case selection, maximum allowable carryover limits, and recovery studies, with cross-contamination and nitrosamine-type risks specifically in view. This is exactly the area the sartans investigation found wanting, and it will draw inspector attention.

Control change and investigate failures

Treat change control as a knowledge-management discipline, not a form-filling exercise, so that every process or equipment change is risk-assessed and revalidated where needed. Make sure results that fail predefined acceptance criteria are always investigated to a documented root cause.

Oversee third-party validation and transport

Put quality agreements and active oversight in place for any validation performed by contractors, and extend product knowledge to include the impact of transportation on active substance quality, in line with Good Distribution Practice for active substances.

Embed ICH Q9(R1) quality risk management

Align your quality risk management with ICH Q9(R1), which reached Step 4 in January 2023. That means documenting the formality of each risk assessment, reducing subjectivity, and showing how risk-based decisions support validation, qualification, and monitoring.

Annex 15 readiness checklist for API manufacturers

Use this checklist to scope your gap assessment:

• Confirm whether your site manufactures chemical or biological active substances within the revised scope.
• Map current validation and qualification practices against Annex 15, covering DQ, IQ, OQ, PQ, process, and cleaning.
• Create or update a Validation Master Plan and a qualification and validation policy.
• Document a control strategy that links critical quality attributes, critical process parameters, and controls.
• Justify your process validation approach, including any concurrent validation or continuous process verification.
• Reassess cleaning validation worst-case, carryover limits, and recovery, with nitrosamine risk in mind.
• Strengthen change control and out-of-specification investigation procedures.
• Update quality agreements and oversight for third-party validation and contract testing.
• Add transport verification to product knowledge for active substances.
• Align quality risk management with ICH Q9(R1), including documented formality and risk-based decisions.
• Assemble an inspection-ready evidence file, and run a mock inspection or gap assessment.

Common mistakes to avoid

• Treating December 2026 as the compliance deadline, and starting remediation too late.
• Assuming Annex 15 applies only to finished-product sites.
• Relying on custom-and-practice validation that is not documented and cannot survive inspection.
• Running concurrent validation without a documented justification or risk assessment.
• Cleaning validation that does not address cross-contamination or nitrosamine-type risks.
• Weak change control, so process changes are not properly assessed or revalidated.
• Leaving third-party validation unsupervised, with no quality agreement or review.
• Quality risk management that is informal, subjective, and not aligned with ICH Q9(R1).

How MFLRC can help

The Annex 15 revision is squarely within MFLRC's pharmaceutical validation services. We help active substance and finished-product manufacturers turn the revision into a clear, prioritized, and defensible plan rather than a scramble before the effective date.

Our support includes:

• Validation master planning and gap assessment against the revised Annex 15 scope.
• Process, equipment, cleaning, analytical method, packaging, and computer system validation.
• Control-strategy development that links critical quality attributes and parameters to controls.
• Cleaning validation with worst-case and carryover support, including nitrosamine-aware risk review.
• Change control, CAPA, and investigation system strengthening.
• ICH Q9(R1) quality risk management implementation.
• Supplier qualification, quality agreements, and third-party validation oversight.
• Mock inspections and inspection readiness for European Union and PIC/S expectations.

Whether you manufacture in Canada, supply pharmaceutical products into the European Union, or are a cannabis or natural health product company pursuing EU-GMP for export, we can help you close gaps before they become inspection findings. Our audit and inspection-readiness services and quality assurance support round out the validation work into a complete program.

Frequently asked questions

Is Annex 15 currently mandatory for API manufacturers?

No. Today, Annex 15 is a binding standard mainly for manufacturers of finished medicines, and only optional supplementary guidance for active substance makers. The revision changes that by making it mandatory and inspectable for manufacturers of chemical and biological active substances.

When does the revised Annex 15 come into force?

Publication by the European Commission and adoption by PIC/S are targeted for December 2026. The operational compliance date follows publication, most likely in 2027, based on the transition period used for the 2015 version. These dates are targets and may shift.

Why is Annex 15 being revised now?

It implements recommendations from the 2020 lessons-learnt report on N-nitrosamine impurities in sartan medicines, and aligns the annex with ICH Q9(R1) on quality risk management.

Does the revision apply to biological active substances?

Yes. The revised Annex 15 is intended to apply to manufacturers of both chemical and biological active substances.

How is this different from EudraLex Part II?

Part II sets out GMP requirements for active substances. The revision links Annex 15's qualification and validation expectations to Part II, and makes them formally applicable and inspectable at the active substance level rather than optional guidance.

What should we do first?

Run a gap assessment of your validation, qualification, cleaning, change-control, and quality risk management systems against the revised scope, then build a prioritized remediation plan aimed at the expected 2027 operational date.

The bottom line

The Annex 15 revision is a structural shift. The European Union and PIC/S are extending finished-product validation discipline to the active substance layer of the supply chain, driven by the lessons of the nitrosamine crisis. December 2026 is the publication and adoption milestone, not the finish line. The work needed to comply, building validation evidence and a documented control strategy, takes far longer than the transition window, so the sites that begin now will be ready, while those that wait for the final text will be remediating under inspection pressure.

Sources and references

• European Medicines Agency, Concept paper on the revision of Annex 15, Qualification and Validation (EMA/INS/GMP/20217/2026), 19 January 2026.
• PIC/S, Concept paper on the revision of EU-PIC/S GMP Annex 15 (Qualification and validation), February 2026.
• European Commission, EudraLex Volume 4, Annex 15: Qualification and Validation, 2015.
• EMA and Heads of Medicines Agencies, Lessons learnt from presence of N-nitrosamine impurities in sartan medicines, June 2020.
• ICH, Q9(R1) Quality Risk Management, Step 4, 18 January 2023.
• European Commission, EudraLex Volume 4, Good Manufacturing Practice guidelines.