FDA 21 CFR Part 11: Requirements for Electronic Records

Author: Maren Fichtner | October 2, 2026

Definition: What is FDA 21 CFR Part 11?

FDA 21 CFR Part 11 is a U.S. regulation that establishes requirements for electronic records and electronic signatures in FDA-regulated industries. It ensures that digital data – such as batch records, test reports, or release signatures – provide the same level of trust, reliability, and legal validity as their paper-based predecessors.

Issuing Authority: U.S. Food and Drug Administration (FDA)

Legal Basis: 21 CFR Part 11

To whom does FDA 21 CFR Part 11 apply?

The regulation applies to all companies that use electronic records or signatures as part of FDA-regulated processes and intend to market their products in the U.S. – in particular, manufacturers of drugs, medical devices, and biologics. This affects any digital system whose data and signatures are incorporated into a batch release or an FDA submission process.

Overview of core requirements

System validation: documented evidence of the system's reliability and accuracy
Audit trail: a complete, computer-generated record of all changes, including timestamps
Unique electronic signatures: non-transferable, with a clear association to meaning and person
Access controls: restriction of system access to authorized individuals
Retention and availability: records must remain legible and retrievable for the required period
Training records: documentation that system users are qualified for their respective roles

Difference from EU GMP Annex 11

Part 11 and EU GMP Annex 11 share the same fundamental objective – trustworthy, tamper-resistant electronic records and signatures – but differ in their regulatory style: Part 11 is a standalone, more detailed U.S. regulation with specific technical requirements, particularly regarding electronic signatures. Annex 11 is part of the EU GMP guidance and is formulated on a risk-based approach, allowing more leeway for company-specific interpretation. Manufacturers that supply both the U.S. and EU markets therefore typically design their systems to meet both sets of requirements simultaneously.

Consequences of noncompliance

If a system does not meet the requirements of Part 11, the records and signatures generated by it may be deemed invalid during an FDA inspection – resulting in the affected batches or marketing authorization documents being called into question. Documentation-related violations are among the most common findings in FDA warning letters and can result in production halts as well as the loss of market authorization.

Frequently asked questions about FDA 21 CFR Part 11

Is FDA 21 CFR Part 11 required by law?

Yes, this requirement applies to all companies that maintain electronic records in FDA-regulated processes for the U.S. market.

What is the difference from EU GMP Annex 11?

Both require validated, tamper-resistant systems; Part 11 is more detailed regarding electronic signatures, while Annex 11 takes a risk-based approach.

What are the requirements for electronic signatures under Part 11?

A unique, non-transferable association with a specific person, including a timestamp and a clear description of the action.

To which systems does Part 11 apply?

For all systems that generate, modify, or store electronic records in connection with FDA-regulated activities.

Successfully implementing FDA 21 CFR Part 11

For manufacturers that supply both the U.S. and EU markets, the practical advantage lies in a system that covers both regulatory frameworks simultaneously. Connected worker platforms such as weasl generate electronic signatures with unique individual assignment and a complete audit trail as an automatic byproduct of daily production—in compliance with both Part 11 and EU GMP Annex 11.

Learn more about weasl and request our product brochure now.

FDA 21 CFR Part 11