Three years after its release, the revised EU GMP Annex 1 stands as an industry watershed, redefining sterile medicine manufacturing. Navigating this update requires manufacturers to transition from fragmented contamination control procedures toward a holistic, risk-based operational approach to contamination control. Ian Hudson, Senior Director of Sterility Assurance, sat down with Pharmaceutical Technology to discuss its significance and how the industry is adapting.
Hi Ian. Could you tell me a little about yourself and your background?
Ian Hudson: I work within a Contamination Control and Microbial Excellence team. My day-to-day role is sterility assurance, acting as an Annex 1 SME for our sterile medicine manufacturing sites. Over my 34-year career, I’ve moved between the micro lab, operations, and QA. Right now, I find myself in global quality, part of a team looking after sterility assurance.

What main drivers and industry concerns made the revision of EU GMP Annex 1 necessary?
IH: The main driver was that the 2008 version of Annex 1 was outdated. Ironically, GMPs require manufacturers to stay up to date, but the regulations themselves hadn’t. The older version failed to address many modern technologies in use today, such as RABS, isolators, single-use, closed, and disposable systems, alongside innovations like robotics. Closing this gap led to a wider scope in the new version, reflected by the integration of Quality Risk Management (QRM). Because regulators cannot update Annex 1 as fast as technology changes, QRM provides a framework within the rules that allows us to adopt new innovations safely in the interim.
There is also the human factor. If we go back 30 years or so, operators generally knew what procedures to do and why. We’ve lost some of that knowledge to modern efficiencies. More recently, we have given operators Standard Operating Procedures (SOPs) telling them what to do without necessarily explaining the microbiological ‘why’. The revision supports an educationally driven culture where operators understand aseptic manufacturing risks. Consequently, they buy into the importance of doing tasks correctly because they appreciate the consequences if they don’t.
What are the main obstacles and industry-wide struggles with Annex 1 compliance?
IH: The revision accelerated the upgrading of older legacy technologies and processes. Perhaps a company bought a manufacturing line 15 or 20 years ago thinking it would last for 30, but now it must be replaced/upgraded to meet compliance.
Another major challenge is PUPSIT, testing the sterilising filters after sterilisation before use and again after use. While regularly practised in Europe, this requirement came as a bit of a shock to those beyond our borders, leading to some pushback.
Then there is the Contamination Control Strategy (CCS). Suddenly there was this new requirement for a document that the industry was unfamiliar with. Despite its brief description in the annex, the format and contents of the document were not fully clear. While industry bodies later provided additional guidance that helped address many of these uncertainties, there was considerable discussion and concern during the period between the publication of the first draft of the annex in 2017 and the release of its final version in 2022.
Following on from the CCS, what are the practical implications of its holistic coverage compared to past, isolated SOPs?
IH: Previously, the industry had fragmented procedures dealing with isolated aspects of contamination control without a holistic outlook of how things interacted. The CCS effectively looks to pull things together in one place so you can see the big picture and identify gaps. It also mandates a holistic risk assessment, making sure that nothing has been missed, and driving continuous improvement. It’s not enough just to bring data together; you must leverage it and identify where improvements can be made. You may have been doing something the same way for 20 years, but it is important to consider – is there a better way now that reduces contamination risk in light of newer technologies and a deeper understanding of processes?
Crucially, the CCS must be a living document, not something you generate once and put on a shelf. It requires review and where necessary, ongoing updates based on signals from your quality management system, changes in technology, and evolving best practice. Ultimately, this living document helps you understand your risks, identify gaps, and improve processes. It also serves as a great tool for helping new employees, visitors, or auditors understand the site’s overall approach to contamination control.
Does replacing the ‘<1 CFU’ threshold with a strict ‘No Growth’ standard for Grade A zones create a compliance burden that bottlenecks production?
IH: I don’t see it as a compliance burden or a production bottleneck; rather, it goes hand in hand with advancements in manufacturing technology. For instance, two decades ago, when the previous version of Annex 1 was written, the contamination levels permitted during a media fill reflected the technical manufacturing capabilities of the time. Whereas today, manufacturing processes are far more capable, so the limits have been tightened. What this threshold does is match the EM standard to that increased manufacturing capability, as opposed to tolerating a level of contamination that can now be avoided using better manufacturing processes. Fundamentally, from a patient’s perspective, that’s the right thing to do.
The real question as to why a level of contamination was tolerated by the regulators to begin with, and the answer lies in the technical limitations of the past that no longer apply.
Beyond regulatory compliance, what is the true operational role of Environmental Monitoring (EM) in ensuring patient safety?
IH: My view is that EM itself doesn’t drive patient safety; rather, it is how we design and operate our facilities, equipment, and processes. If everything is engineered and operated well and risks are minimised, that is what protects the patient. In fact, we should already be confident in the outcome of any tests we perform before we even test. When we swab a grade A surface, execute a media fill, or run a sterility test, we should expect zero contamination because we know our processes are completely capable.
Therefore, EM is effectively a final check confirming everything you did was right. True sterility assurance comes from good process design and is confirmed by the data built up over months or years of production. Annex 1 is promoting a culture focused on understanding risk and leveraging good technology, and that is what ultimately protects the patient.
Learn how leading biopharma manufacturers design, validate, and optimise sterile environments with risk-based contamination control and data-driven monitoring practices.
