GMP training requirements under 21 CFR 211.25

The short answer: US GMP training requirements for drug makers sit in 21 CFR 211.25. Every person who manufactures, processes, packs or holds a drug product needs training in the operations they perform and in CGMP as it applies to their job, delivered by qualified people "on a continuing basis and with sufficient frequency." FDA sets no hour count, so you define the frequency, prove effectiveness and keep dated records by role.

In LMS Advisor, a QA lead builds each role's curriculum as a group, assigns SOP courses with due dates and a mandatory flag, follows the procedure with a scored knowledge check and exports completions for the eQMS. LMS Advisor is not a validated system and has no Part 11 electronic signature, so your signed GxP record may still live elsewhere. We say where that line falls below.

This guide is for QA managers, training coordinators and site heads at drug manufacturers, CDMOs, 503B outsourcing facilities and contract labs. We opened every source in September 2026. It is a working map of the rule and how inspectors read it, not legal advice.

What does 21 CFR 211.25 actually say?

Paragraph (a) of 21 CFR 211.25 on eCFR is short enough to read in full, and most arguments about GMP training come back to its wording:

"Each person engaged in the manufacture, processing, packing, or holding of a drug product shall have education, training, and experience, or any combination thereof, to enable that person to perform the assigned functions. Training shall be in the particular operations that the employee performs and in current good manufacturing practice (including the current good manufacturing practice regulations in this chapter and written procedures required by these regulations) as they relate to the employee's functions. Training in current good manufacturing practice shall be conducted by qualified individuals on a continuing basis and with sufficient frequency to assure that employees remain familiar with CGMP requirements applicable to them."

Operations, CGMP and your own SOPs

The paragraph asks for three layers of training. The first is the operation itself: running a tablet press, performing line clearance, sampling raw materials, reading a plate count. The second is the CGMP regulations as they touch that job. The third is easy to miss: "written procedures required by these regulations" means your own SOPs. SOP training is part of the rule, not an add-on your quality manual invented.

Supervisors and an adequate number of qualified personnel

Paragraph (b) applies the same education, training and experience test to supervisors. Paragraph (c) requires "an adequate number of qualified personnel" to perform and supervise the work. In practice that means a shift schedule where every step has a qualified person on it, and a record that proves it when an investigator picks a batch record and asks who signed each step.

Qualified trainers

CGMP training must be "conducted by qualified individuals." The rule does not define qualified, so your training SOP should. Common criteria are ownership of the SOP, documented experience in the operation and a train-the-trainer course. Whatever you pick, keep a trainer qualification record, because "who trained this operator, and why were they qualified?" is a routine inspection question.

How often is GMP training required?

No fixed hours in the rule

The regulation names no annual hour count and no calendar frequency. "Sufficient frequency" is a performance standard: your people must "remain familiar with CGMP requirements applicable to them." That puts the burden on you to choose a frequency and defend it.

Why many sites choose annual CGMP refreshers

Annual CGMP refreshers are common practice, not a legal requirement. Sites pick annual because it is easy to schedule, easy to audit and lines up with management review. FDA's Quality Systems Approach to Pharmaceutical CGMP Regulations guidance (2006) calls continued training "critical" so that employees "remain proficient in their operational functions," and lists "Evaluation of effectiveness of training" and "Documentation of training and/or re-training" as program elements. EU GMP Chapter 2, relevant if you export to Europe, adds in 2.11 that "Continuing training should also be given, and its practical effectiveness should be periodically assessed."

Treat annual as a floor, not a ceiling. Aseptic operators, visual inspectors and anyone working in a process with repeat deviations often get shorter cycles. Write the reason for each frequency into your training SOP. An inspector can argue with a number, but a documented rationale tied to risk is much easier to defend than a habit.

Triggers: new SOPs, revisions, deviations and CAPA

Most GMP training is not calendar-driven at all. It is triggered by change:

New or revised SOP. Train affected roles before they perform the new version, not within 30 days after.
New hire or role change. Initial curriculum before independent work, with on-the-job training signed off by a qualified trainer.
Deviation or CAPA. Retraining can be a valid action, but when every root cause says "operator error, retrained" investigators start asking whether the procedure or the training is the real problem.
Return from long absence. Some sites set a gap, such as six months away from an operation, after which the person requalifies.

How do you build a role-based GMP training matrix?

Curricula by role, not by department

A training matrix maps each role to the SOPs and courses it needs. Build it by role. "Packaging" is a department, but "packaging line operator," "packaging lead" and "packaging mechanic" read different procedures. A department-wide curriculum either overtrains everyone or misses the one SOP only the mechanic uses.

New hire, refresher and change-driven training

For each role and SOP, record three things: what the new hire completes, how often the refresher runs, and which method proves understanding (read-and-understand, quiz or observed demonstration). A spreadsheet with roles as rows, SOPs as columns and the method in each cell is still the clearest design document we know of.

Keeping the matrix current

The matrix goes stale the moment someone changes jobs or document control issues a revision. Give it an owner, review it whenever an SOP is added or retired, and reconcile it against HR's role list each quarter. LMS Advisor has no matrix module. You mirror the matrix with one group per role and course assignments per SOP, and keep the spreadsheet as the source design.

When is SOP read-and-understand training enough?

Read-and-understand (R&U) training records that a person opened the procedure and attested to reading it. It proves exposure, not comprehension. That is fine for some procedures and weak for others.

Procedure risk	Example	Training method	Effectiveness evidence
Low	Administrative SOP, document formatting, visitor sign-in	Read-and-understand	Dated acknowledgment of the current version
Medium	Cleaning procedure, sampling, logbook entries	Read the SOP plus a scored knowledge check	Quiz score against a pass mark, retake history
High	Aseptic gowning, line clearance, visual inspection, batch release	Classroom or video, then observed demonstration	Qualified trainer sign-off, qualification exam, periodic requalification

Adding a knowledge check or demonstration

A good knowledge check asks about decisions, not definitions. "What do you do if the line clearance checklist finds a label from the previous batch?" tells you more than "What does line clearance mean?" Five to ten scenario questions drawn from a pool, so neighbors do not share answers, beat a 30-question recall quiz.

Effectiveness checks FDA and EU GMP expect

Both FDA's 2006 guidance and EU GMP 2.11 expect you to evaluate training effectiveness. At person level, that is the quiz score or observed demonstration. At program level, look at trends: deviations by procedure, repeat retraining, failed first attempts on a question. Put those trends into management review so the record shows someone looked.

What should a GMP training record show?

Who, what, which SOP version, when and by whom

Part 211 does not list training record fields, but other FDA rules show what regulators expect. The dietary supplement CGMP rule, 21 CFR 111.14, requires documentation of training including "the date of the training, the type of training, and the person(s) trained." The GLP rule, 21 CFR 58.29(b), requires "a current summary of training and experience and job description" for each person in a nonclinical study. For drug GMP, add the SOP number and version, because training on revision 4 does not cover revision 5.

Trainer qualifications

Link each session or sign-off to a named trainer whose qualification record exists. For self-paced courses, the "trainer" is the course owner who approved the content, so record that approval and date.

Effectiveness evidence

Keep the score, the pass mark and attempts, or the demonstration checklist. How long you keep all of this depends on the rule and your retention policy. Our training records retention requirements table covers the common US periods.

GMP training element	Where it comes from	Typical evidence
Training in the person's operations	21 CFR 211.25(a)	Role curriculum, SOP training record, on-the-job sign-off
CGMP training on a continuing basis	21 CFR 211.25(a)	Refresher schedule and completions
Qualified trainers	21 CFR 211.25(a)	Trainer qualification record
Effectiveness evaluation	FDA 2006 quality systems guidance, EU GMP 2.11	Quiz scores, observed demonstrations, trend review
Data integrity awareness	FDA data integrity Q&A (2018), question 16	Data integrity module completion and test
Dated record of who was trained on what	211.25 in practice, 111.14 for supplements	Training history per person, exportable on request

What data integrity training does FDA expect?

FDA answered this directly. Question 16 of its Data Integrity and Compliance With Drug CGMP Q&A (December 2018) asks whether personnel should be trained in preventing and detecting data integrity issues as part of routine CGMP training. The answer: "Yes. Training personnel to prevent and detect data integrity issues is consistent with the personnel requirements under §§ 211.25 and 212.10."

Generic ALCOA slides are a start. Better modules use your own systems: what an audit trail entry looks like in your chromatography software, why a trial injection is a problem, what to do when a colleague asks you to "just re-run it." Scenario questions with a pass mark give you effectiveness evidence at the same time.

What have recent FDA warning letters said about training?

Two letters on fda.gov show the two most common failures: training that does not happen as your own procedure says, and people without the training for their job.

FDA's March 16, 2026 warning letter to Microbiological Testing & Consulting, LLC, a contract testing laboratory, includes a "Training Program" subsection under its quality control unit citation (21 CFR 211.22):

"Your training program is inadequate. CGMP training is not regularly performed at your firm as required by your established procedure. During the inspection, you could not provide records of CGMP training."

The firm answered that a consultant would assess its training procedure. FDA called the response inadequate and asked, among other corrective actions, for "Documentation of training for all relevant personnel on revised policies, procedures, and other associated items."

FDA's July 2, 2025 warning letter to Exela Pharma Sciences, LLC cites 211.25(a) itself. It says the firm "failed to ensure" each person engaged in the manufacture, processing, packing, or holding of a drug product "has the education, training, and experience, or any combination thereof, to enable that person to perform his or her assigned functions (21 CFR 211.25(a))."

The lesson from both is practical. Write a training procedure you can actually follow, follow it, and be able to print the record for any person during the inspection, not after it.

GMP training checklist

List every role and the SOPs each role performs.
Define initial, refresher and change-triggered training per role.
Pick read-and-understand, quiz or observed demonstration by risk.
Qualify and record your trainers.
Set a CGMP refresher frequency and write down why.
Include data integrity in routine training.
Record SOP version, date, trainer and result for every completion.
Review effectiveness trends in management review.
Reassign training whenever an SOP changes, before people use the new version.
Test that you can produce any person's full history in minutes.

How to run GMP training in LMS Advisor

LMS Advisor works best for the part of GMP training that needs teaching and testing, alongside the eQMS or paper system that holds your signed records. Here is how the checklist maps:

Role curricula. One group per role, organization course assignments with due dates and mandatory flags, and an overdue report you can review weekly.
SOP training with a time floor and a check. Upload the SOP PDF as a lesson, set a lesson minimum time and add required blocks, then a scored knowledge check from a question pool. See assessments and quizzes.
Demonstrations. Record gowning or line clearance in the Recording Studio, or add questions at timestamps with interactive video so a wrong answer rewinds to the step.
Qualification exams. The Test Center runs proctored exams with image hotspot questions, useful for visual inspection defect recognition.
Refreshers. Course certificates carry a validity period in months and an expiring-soon status. Email automation nudges people who never started or stalled.
Records. Audit logs, CSV, Excel or PDF exports, and webhooks or the REST API to send completions to your eQMS.

The limits matter in GMP. There is no Part 11 e-signature on completions, no validation package, no automatic retraining when document control revises an SOP (you reassign by hand or through the API), no automatic overdue email to the learner (deadline reminders exist but ship switched off) and no ready-made GMP course library. Our GxP training software guide explains the two-system setup, and the pharmaceutical LMS page covers the wider use cases. To test your own SOP course, book a demo.

Frequently asked questions

How many hours of GMP training are required each year?

None are specified. 21 CFR 211.25 requires CGMP training "on a continuing basis and with sufficient frequency," with no hour count. Set your own frequency by role and risk, and document the rationale in your training SOP.

Is annual GMP training mandatory?

Not by the wording of the rule, but annual CGMP refreshers are the common baseline and the easiest to defend. Higher-risk roles such as aseptic operators often get more frequent training and requalification.

Is read-and-understand training acceptable to FDA?

For low-risk procedures, usually yes, as long as the record names the SOP version and date. For critical operations, add a knowledge check or an observed demonstration, because FDA guidance expects you to evaluate training effectiveness.

What should a GMP training record include?

At minimum: the person, the SOP or course and its version, the date, the trainer or course owner, the method and the result. Keep effectiveness evidence such as scores or demonstration sign-offs with it.

Do contractors need GMP training?

Yes, if they perform or supervise work covered by Part 211. 211.25 applies to "each person engaged" in the work, not only employees, so temps and contractors need the same role training and records.

Can LMS Advisor run GMP training?

Yes, LMS Advisor runs GMP onboarding, SOP courses with knowledge checks, proctored qualification exams and refresher certificates, with exports for your eQMS. It is not a validated system and has no Part 11 e-signature, so keep signed records where your procedures require them. Our Part 11 and training records guide explains how to decide.

GMP training requirements under 21 CFR 211.25, explained