GMP Training Under 21 CFR 211.25: Why FDA Warning Letters Start With the Training Record

Training is the quietest part of a quality system until an inspector asks for it. Then it becomes the loudest. When an FDA investigator cannot connect an operator to a current, documented training record for the task they were performing, the finding is not really about a missing signature. It is about whether the firm can assure that its product has the identity, strength, quality and purity it claims. That is why inadequate personnel training under 21 CFR 211.25 has stayed near the top of FDA observation lists year after year.

This article breaks down what 211.25 actually says, why it appears in so many warning letters, what the phrase continuing basis and sufficient frequency means in practice, and how to build a training programme that holds up under inspection. The regulation is short. Meeting it well is not.

What does 21 CFR 211.25 actually require?

In plain terms, 21 CFR 211.25 requires that the right people, properly trained and in adequate numbers, run your operation. It has three parts: qualifications and training for employees, qualifications for supervisors, and enough qualified staff overall. Each part is enforceable on its own.

Section 211.25(a) states that each person engaged in the manufacture, processing, packing or holding of a drug product shall have the education, training and experience, or any combination of them, to perform their assigned functions. It requires training in the particular operations the employee performs and in current good manufacturing practice as it relates to those functions. Critically, that training shall be conducted by qualified individuals on a continuing basis and with sufficient frequency to assure that employees remain familiar with the CGMP requirements applicable to them. Section 211.25(b) applies the same education, training and experience test to supervisors. Section 211.25(c) requires that there be an adequate number of qualified personnel to perform and supervise the work.

Two ideas do most of the work here. First, training is role based: it must match the specific operation a person performs, not just cover general good manufacturing practice. Second, training is never finished: the words continuing basis and sufficient frequency mean a one-time induction session does not satisfy the rule. Both ideas are exactly where firms tend to fall short.

Why does training show up in so many warning letters?

Because training is where a data-integrity, procedure or contamination failure usually traces back to. When an investigator finds an operator who deviated from a procedure, the next question is whether that person was trained on the current version. Inadequate training under 211.25(a) is repeatedly cited in FDA Form 483 observations and warning letters, and the pattern has continued through 2025 and into 2026.

FDA warning letters in 2025 and 2026 have continued to cite firms for failing to ensure that staff have the education, training and experience required by 211.25(a). Named examples in this period include Staska Pharmaceuticals and Exela Pharma Sciences, and current good manufacturing practice warning letters issued in 2026, such as the letter to Ava Inc. dated 14 April 2026, continue to cite parts 210 and 211 violations. The specific wording varies, but the underlying findings cluster into a handful of recurring themes.

The 2025 examples are instructive. Staska Pharmaceuticals received a warning letter dated 5 May 2025 (WL 699291) in which the FDA cited operators who had not received adequate CGMP training for the production of over-the-counter drug products under 211.25(a). Exela Pharma Sciences received a warning letter dated 2 July 2025 (WL 709859) citing a failure to ensure that each person engaged in manufacturing had the education, training and experience required by 211.25(a). In both cases the training deficiency sat alongside broader CGMP failures, which is the usual pattern. A training gap rarely travels alone, and it is often the thread an investigator pulls to reach a larger quality-system problem.

• No training record for the task being performed, or records that are incomplete, undated or unsigned.
• Training delivered once at hire, with no ongoing or refresher training to meet the continuing basis requirement.
• Generic CGMP training that never addresses the particular operation the employee actually performs.
• Training delivered by someone who is not demonstrably qualified to deliver it.
• Retraining that is not triggered when a procedure changes, so operators are working to a superseded version.
• No check that training was effective, so a signature confirms attendance but not competence.

The theme across all six is documentation and evidence. FDA does not accept that training happened simply because a manager says so. If the record does not show who was trained, on what, by whom, when, and to what standard, the training effectively did not happen from a compliance standpoint. This is the same evidentiary logic that drives our guidance on writing SOPs that pass a Health Canada inspection, because a procedure and its training record are read together.

What does continuing basis and sufficient frequency mean?

It means training is a cycle, not an event. The regulation does not set a fixed interval, so the firm must justify its own frequency based on risk, complexity and change. A high-risk aseptic operation needs more frequent reinforcement than a low-risk warehouse task, and any procedure change should trigger retraining before the new method is used.

Because FDA leaves the interval to the firm, you must be able to defend the frequency you chose. That defence lives in your training procedure and your training matrix. A common and defensible approach is to combine scheduled refresher training at a stated interval with event-driven training whenever a procedure is revised, a deviation or CAPA points to a knowledge gap, or a new piece of equipment is introduced. When a CAPA investigation identifies training as a root cause, the retraining and its effectiveness check become part of the corrective action, which is why weak training so often shows up alongside CAPA investigations that fail to hold.

A practical way to defend your frequency is to write it into the training procedure as a rule, not a habit. State the baseline refresher interval, list the events that force retraining ahead of schedule, and record the risk rationale behind both. When an investigator asks why an aseptic operator is retrained twice a year while a warehouse operator is retrained annually, the answer should already be documented. An undocumented frequency, however reasonable it is in practice, is difficult to defend on the day of an inspection, because the inspector can only assess what the record shows.

Building a training system that survives an inspection

A defensible training programme has four moving parts: a role-based curriculum, qualified trainers, effectiveness checks, and complete records tied to a training matrix. Get those four right and 211.25 becomes straightforward to demonstrate. Miss any one and the gap will show at the worst possible moment.

• Map roles to requirements. Build a training matrix that lists every role, the procedures and operations it covers, and the CGMP topics it needs. This is the document an inspector will ask for first.
• Qualify your trainers. Record why each trainer is competent to deliver their material. On-the-job training by an unqualified colleague is a frequent finding.
• Check effectiveness, not attendance. Use an assessment, a supervised task, or a competency sign-off so the record shows the person can do the task, not just that they sat through a session.
• Link training to change control. When a procedure is revised, retraining should be a required step before the revision takes effect, with the record captured automatically.
• Keep records inspection ready. Every record should show the person, the topic, the trainer, the date and the outcome, and should be retrievable quickly during an inspection.

These controls apply just as much in Canada. Health Canada expects trained, qualified personnel under its good manufacturing practices guidance, and the same evidence gaps that draw an FDA observation will draw a Health Canada one. Testing your own programme in advance is the cheapest form of insurance, which is the logic behind our Health Canada GMP self-assessment and our list of the SOPs facilities most often get wrong.

Training compliance checklist

• A current training matrix maps every role to its required procedures and CGMP topics.
• Each employee has a documented record for every task they perform, on the current version.
• Training covers the specific operation, not only general CGMP.
• Trainers are documented as qualified to deliver their material.
• Refresher and event-driven retraining intervals are defined and justified by risk.
• Procedure changes trigger retraining before the new version is used.
• Effectiveness is checked and recorded, not assumed from attendance.
• Supervisors meet the 211.25(b) qualification standard, and staffing levels meet 211.25(c).

Common mistakes to avoid

• Treating induction training as the whole programme. A single session at hire does not meet the continuing basis requirement.
• Confusing attendance with competence. A signature on a sign-in sheet is not evidence that the person can perform the task.
• Letting procedure revisions outrun training. If the SOP changed and the operator was not retrained, they are working to a superseded method.
• Using unqualified trainers for on-the-job training and keeping no record of their qualification.
• Storing records so poorly that they cannot be produced quickly during an inspection, which reads as if they do not exist.

Frequently asked questions

What does 21 CFR 211.25 cover?

It covers personnel qualifications and training for finished pharmaceuticals: education, training and experience for employees who make, process, pack or hold a drug, the same test for supervisors, and an adequate number of qualified staff overall.

How often is GMP training required under 211.25?

The rule says training must be on a continuing basis and with sufficient frequency, but it sets no fixed interval. The firm must choose and justify a frequency based on risk, and must retrain whenever a procedure changes.

Does 211.25 require a training matrix?

The regulation does not name a training matrix, but a matrix that maps roles to required training is the most practical way to demonstrate that role-based training is complete and current, and it is usually the first document an inspector requests.

Who is a qualified trainer under 211.25?

The regulation requires training by qualified individuals but does not define qualified. In practice you should document why each trainer has the education, training or experience to deliver their material, especially for on-the-job training.

Does the same standard apply in Canada?

Yes in substance. Health Canada good manufacturing practices also require trained, qualified personnel and documented training. The evidence gaps that trigger an FDA observation will typically trigger a Health Canada one as well.

How do I fix a training finding on a 483 or warning letter?

Investigate the root cause, retrain the affected staff, check effectiveness, correct the underlying system gap such as a missing matrix or change-control link, and document the whole corrective action. A response that only retrains the individuals rarely satisfies FDA.

How MFLRC can help

MFLRC helps regulated manufacturers build training programmes that stand up to inspection. We design role-based training matrices, write and remediate SOPs, qualify trainers, and add effectiveness checks so a signature means competence. Through our quality control and quality assurance services and audit services, we run gap assessments and mock inspections against 21 CFR 211.25 and the equivalent Health Canada expectations, and we help teams respond when a finding lands through our guidance on responding to an FDA Form 483 or Health Canada observation. Training gaps rarely travel alone, so we also review the connected systems such as supplier qualification and change control. See our pharmaceuticals page for the full picture.

Not sure your training programme would survive an inspection? MFLRC will test it against 21 CFR 211.25 and close the gaps before an investigator finds them.

Conclusion

21 CFR 211.25 is only a few sentences long, but it carries a heavy compliance load. It asks a firm to prove, on paper and in practice, that the right people are trained for the right tasks and kept current over time. FDA cites training so often not because the requirement is obscure, but because the evidence is easy to let slip. Build a role-based programme, qualify your trainers, check effectiveness, tie training to change control, and keep records an inspector can follow, and the training record stops being the place your inspection goes wrong.

Sources and references

• eCFR, 21 CFR 211.25, Personnel qualifications
• FDA, Warning Letters index
• FDA, Warning Letter to Ava Inc. (721180), 14 April 2026
• FDA, Warning Letter to Staska Pharmaceuticals, Inc. (699291), 5 May 2025
• FDA, Warning Letter to Exela Pharma Sciences, LLC (709859), 2 July 2025
• eCFR, 21 CFR part 211, Current Good Manufacturing Practice for Finished Pharmaceuticals