Key takeaways
- Record the deviation when it happens, not after the batch is released.
- A root cause that blames the operator is usually an incomplete investigation.
- Close the CAPA with evidence that the action worked.
A deviation is any departure from the approved process or specification, and a CAPA is the corrective action that fixes the immediate problem plus the preventive action that stops it recurring. Together they are the mechanism by which a factory learns, and they are the part of a quality system that an auditor examines most closely.
1. What counts as a deviation
A temperature outside the range, a material substituted, a fill weight out of tolerance, a test result outside the limit, a step skipped. Any of these is a deviation and each should be recorded with a reference number at the time it happens, not reconstructed at release.
2. Immediate action
The first question is whether the batch can continue. A pH outside the range can often be adjusted with a documented action; a preservative omitted cannot. The decision belongs to the quality function, not to production under time pressure.
3. The investigation
The investigation establishes what happened, when, and why. It reviews the batch record, the equipment log, the material lots and the operator statements. A conclusion reached without reviewing the raw data is a guess with a signature.
4. Root cause
A root cause of “operator error” is usually an incomplete investigation, because the operator was working within a system that permitted the error. The useful root causes are the ones that can be fixed: a missing check, an unclear instruction, a worn seal, an uncalibrated meter.
5. Corrective action
The corrective action addresses what happened to this batch: rework, reject, re-test. It is documented, approved and recorded against the batch. A rework must be validated, because an unvalidated rework can create a second problem.
6. Preventive action
The preventive action addresses the system: add a check, change an instruction, replace a part, retrain. It needs an owner, a due date and evidence of completion. A preventive action that is a sentence in a report is not an action.
7. Effectiveness check
After the action, verify that the problem does not recur. If the same deviation appears again in three months, the action did not work and the CAPA should be reopened. This step is the one most often skipped, and it is the one that makes the system real.
8. Trending
A single deviation is an event; a pattern is a system problem. Trending deviations by type, by line and by shift reveals the pattern before it becomes a recall. A factory that only handles deviations one at a time never sees the pattern.
9. Communication
If the deviation affects a batch already sold, the brand and the distributor need to know. A deviation that is handled internally and never communicated to the brand is the origin of most product recalls. The notification clause belongs in the quality agreement.
10. Records
Keep the deviation report, the investigation, the root cause, the actions, the effectiveness check and the closure. The file should be readable in two years by someone who was not there. If it is not, the CAPA was a form-filling exercise.
11. Where it fits
Quality systems run across the barrier serum range; the documentation side continues in the batch record entry.
Reference: Deviation reports and CAPA records, 2025
