Impact of Culture and Behaviors on Data Integrity Compliance in Pharmaceuticals

Pharmaceutical quality systems rely heavily on data integrity as a fundamental element. The accuracy, reliability, and completeness of data are mandatory requirements under regulatory expectations and will impact the safety of patients, the quality of product(s), and the reputation of the pharmaceutical industry as a whole.

Although there are established regulatory requirements that clearly define expectations for how to maintain data integrity (e.g. FDA 21 CFR Part 11; EMA Guidance; ICH Q7 and Q10), many organizations continue to struggle with compliance due to the cultural and behavioral aspects of their organizations being one of the most predominant contributors to these compliance challenges.

Understanding Data Integrity in Pharmaceuticals

Data integrity is comprised of the principles defined by the ALCOA acronym — Attributable, Legible, Contemporaneous, Original, and Accurate — as well as those defined within the extended form called ALCOA+ (Complete, Consistent, Enduring, and Available). By adhering to these principles, we are ensuring that research, manufacturing, testing and quality control data generated within the pharmaceutical environment can be relied upon for making regulatory submissions and determining whether to release product.

Failure to maintain the data integrity of any type of data may result in various actions being taken by regulatory authorities such as the issuance of warning letters or potentially the enforcement of criminal charges against responsible organizations. In addition to failures resulting from a technical systems and procedural controls standpoint, it is critical that the people involved in the data management process and the organizational culture surrounding the data provide a level of responsibility for the accuracy of the data.

The Role of Organizational Culture

The organizational culture is comprised of all the values, norms, and behaviors that guide the decisions made by employees within the company. When a culture has a primary emphasis on quickness, cost-cutting, or obedience within hierarchical structures, it may create the type of environment where there is a significant potential for compromising the integrity of the data. The following types of cultural variables may influence the integrity of the collected data:

1. Accountability and Transparency

Creating a culture that supports openness will cause workers to report errors, irregularities or deviations quickly. When workers know that there are no sanctions for honest mistakes, they will document their work accurately and report issues they discover. On the other hand, organizations with a blame culture will have workers hiding, falsifying or manipulating records in order to avoid consequences.

2. Quality-First Mindset

When corporate leaders clearly communicate that quality and compliance are not up for negotiation, employees will understand what is expected of them. Organizations that align quality with employee performance, rewards and career development reinforce their commitment to accurate data.

3. Continuous Learning and Improvement

Organizations that are willing to invest time in training, sharing knowledge and hosting lessons learned create a culture where employees are able to understand complex regulatory requirements and the importance of data integrity and develop potential solutions before they are created by a reactive approach.

4. Leadership Example

Leaders of the Company are responsible for establishing a culture of acceptable workplace behaviours. If senior management encourages adherence to deadlines and output rather than following the rules, employees may be compelled to take shortcuts to meet management expectations. Senior management must Exhibit their strong commitment to data integrity in order to establish a culture of compliance.

Behavioral Drivers of Data Integrity Compliance

Although culture sets the overall guidelines, it is the individual behaviors that ultimately impact the level of compliance on a day to day basis. There are a number of behavioral factors that directly affect how well data integrity is maintained:

1. Risk Awareness and Perception

Employees should have an understanding of the ramifications of data manipulation — when it comes to patient safety as well as regulatory compliance. Through awareness programs that provide examples of real-life failure when it comes to maintaining data integrity, employees will continue to be vigilant.

2. Workload and Time Pressure

The high-pressure nature of many organizations and time constraints create an atmosphere conducive to shortcuts. The ability to accomplish retrospective data entry or to amend batch records is encouraged by the demands of the job. Recognizing the effect of workload on compliance will lead to designing realistic schedules that would minimize these types of risks.

3. Competence and Training

Employees who do not have a working knowledge of the pertinent technical aspects of their jobs and the applicable regulations will most likely create unintentional errors in data (i.e. typographical). Providing comprehensive and role-specific training, employees will understand what constitutes compliant data practices as well as the significance of those practices.

4. Peer Influence

As a result of peer influence in a team environment, immoral compliance may become the norm and as such, employees could be likely to conform even though they know it’s not compliant. The best method for preventing peer pressure to commit atrocities against compliant data is to promote ethical behavior and give employees a means to report on a confidential basis.

5. Perceived Consequences

The perception of the likelihood of being caught and/or the perception of the seriousness of the consequences of non-compliance will affect the likelihood of the individual performing the transgression. Organizations that demonstrate continuous monitoring and follow-up on non-compliance reinforce the significance of accurate data processing.

Case Studies Illustrating Cultural Impact

Regulatory agencies have reported numerous occasions where cultural issues were a major factor in data integrity violations. Examples of pervasive themes from warning letters show that:
1. Management Pressure to Satisfy Targets: Facilities have been cited where the employees had altered stability data or testing results to prevent delay of batch releases or rejection of product.
2. Failure to Report Errors: There are instances where operators did not report malfunctions of instruments or out-of-specification results out of fear of being disciplined.
3. Insufficient Oversight: Supervisory and quality units have failed to recognize repeated anomalies because of the lack of questioning attitude or complacency.

These examples illustrate that despite having good systems and SOPs in place, they will not be effective if the people operating the systems are in a culture that either tolerates or condones cutting corners or lacks an emphasis on accountability.

Building a Culture that Supports Data Integrity

Pharmaceutical organizations need to create a culture that aligns with regulatory expectations in order to achieve data integrity compliance. Here are some strategies:

1. Commit to leadership and visibility

Today’s organizations expect senior leaders to visibly lead data integrity initiatives; they should champion initiatives, participate in training, and appear during audits. This example set by top leaders will help to create a culture of compliance and accountability amongst employees.

2. Engagement and Empower Employees

Encourage all employees to provide input concerning data-related issues without fear of retaliation. Confidential reporting mechanisms, as well as a culture of “speaking up,” can help ensure that even minor issues do not grow into regulatory violations.

3. Daily Incorporation into Compliance Practices

Compliance should not be treated as a separate project but should be embedded into the normal operating processes of the organization. As an illustration, current electronic laboratory systems that include audit trails, real-time monitoring, and automated checks naturally promote compliant behavior.

4. Teaching More than Just Procedures

Education related to Data Integrity should help people understand why Data Integrity is critical for patient safety, adhering to regulatory requirements and meeting ethical obligations instead of solely providing education on Standard Operating Procedure.

5. Regular Auditing and Feedback Process

Performing regular internal audits and/or Data Integrity Assessments should serve a purpose other than identifying non-compliance – they should nourish a Culture of continued improvements. Feedback sessions should encourage learning and generating corrective action, rather than assigning blame.

6. Recognition and Reward

Acknowledging personnel that consistently exhibit good data handling practices provides recognition to the individual for what is considered to be the ‘right’ behavior and also communicates the values of an organization.

Challenges in Changing Culture

It can be difficult to alter the culture of an organization and the process of doing so is a long-term commitment. Challenges in terms of shifting an organization’s culture include:
1. Workers` established habits - Those who have experienced working in an organization with a noncompliance culture will often resist change.
2. Conflicting business priorities - There often exist competing pressures from the company to meet production requirements versus to be compliant; this is especially relevant in large-volume manufacturing settings.
3. Cultural Change Measurement - Cultural compliance is very difficult to measure, unlike that of SOP Compliance. Measuring cultural compliance and tracking progress is thus difficult.
To overcome these challenges to change an organization's culture will take several approaches working together, including: leadership, training, policy enforcement, and monitoring.

Pharmaceutical companies must comply with regulations, but an organization’s culture and how people behave are bigger contributors to their data integrity than a company’s sophisticated IT systems, validated instruments or documented processes. No matter how robust the above, if an organization has a culture that allows for taking shortcuts or punishes openness, then the above don’t mean anything. Organizations that create a quality based culture that promotes transparency and accountability will ensure that they remain compliant, protect patient safety and build trust in the pharmaceutical industry.

The responsibility for data integrity cannot be relegated to any one leader or function; it is the responsibility of every individual in the organization from organizational leaders who set the direction and tone of the organization to operators who consistently document their observations. Every action taken within the organization contributes to the overall integrity of data, and ultimately contributes to the safety and effectiveness of the medicines that are provided to patients.

Frequently Asked Question (FAQs) on Impact of Culture and Behaviors on Data Integrity Compliance

Q1. What is the meaning of data integrity within the pharmaceutical industry?

Answer: Pharmaceutical Data Integrity is defined as having data recorded and maintained in an accurate manner that has been subject to comprehensive, consistent and dependable procedures. Throughout the entire life span of the data, its validity will be maintained.

Q2. How does culture impact data integrity?

Answer: Cultural attitudes influence activities such as; behavior and reporting. These attitudes then impact how well quality standards are adhered to.

Q3. What impact does leadership have? 

Answer: Establishing the culture of an organization comes down to leadership. Leaders create the tone of transparency, accountability and compliance as a priority.

Q4. What effect do workloads have on data integrity?

Answer: High-pressure work environments can lead to and/or encourage employees to take shortcuts, make mistakes or maybe falsify data.

Q5. What are the principles of ALCOA+?

Answer: Attributable, Legible, Contemporaneous, Original, Accurate, Complete, Consistent, Enduring, and Available.

Q6. What effect does peer behavior have on compliance?

Answer: Employees will often conform to the group norm, therefore, if manipulating of data is discounted by their peers there increase in risk of employees manipulating data.

Q7. What type of training promotes data integrity?

Answer: Training programs should address specific regulations, ethical obligations, and key aspects of how to maintain data integrity on a practical basis.

Q8. What can companies do to foster compliant culture?

Answer: Leadership support, open reporting, integrated compliance processes and acknowledging compliant behavior.

Get editable audit documentsView List