What Is ALCOA+ Data Integrity?

ALCOA+ data integrity is a widely used set of attributes that describe trustworthy GxP records: data should be Attributable, Legible, Contemporaneous, Original, and Accurate—plus Complete, Consistent, Enduring, and Available (the “+” attributes commonly taught alongside ALCOA). Laboratories and quality units use ALCOA+ as a practical checklist when designing systems, reviewing batch records, investigating deviations, and answering inspectors who ask whether the record reflects what actually happened.

FDA’s data integrity and compliance with drug CGMP Q&A discusses expectations for reliable data in a CGMP context. The UK MHRA also publishes GxP data integrity guidance. ALCOA+ is not a substitute for those expectations; it is a shared vocabulary that helps teams apply them on the bench and in the QMS.

What does each ALCOA letter mean?

Attributable — You can identify who performed an action and when. Electronic systems use unique user IDs and audit trails; paper systems use signed, dated entries with clear identity. Shared logins break attributability.

Legible — The record can be read and understood for its retention period. Scribbling, poor scans, and unreadable audit-trail exports all fail this test.

Contemporaneous — The record is made at the time of the activity (or as close as the procedure allows), not reconstructed days later from memory. Backdating and “catch-up” batch documentation are classic failures.

Original — The first capture of the data, or a certified true copy defined by procedure. Printing a chromatogram and discarding the electronic original without controls is a common integrity problem.

Accurate — The data correctly reflects the observation or measurement. Calibration, validated methods, and honest recording (including failing results) support accuracy.

These five are the core ALCOA set most auditors expect staff to explain in their own words—not as a memorized slogan.

What does the “+” add?

Training materials and many firm procedures extend ALCOA with:

• Complete — All data, including repeat tests and failing results, are present; nothing material is omitted.
• Consistent — Sequences of events make sense (timestamps, step order, calculated fields).
• Enduring — Records remain intact for the required retention period on durable media.
• Available — Records can be retrieved for review, inspection, or investigation when needed.

Some organizations add further attributes (for example, “traceable”). What matters is that your SOP defines the set you train to, and that systems and behaviors match that definition.

Why does ALCOA+ matter in laboratory practice?

Labs generate high volumes of measurements, metadata, and second-person reviews. Integrity failures often appear as:

• Testing into compliance (repeating until a pass appears, without recording fails)
• Uncontrolled spreadsheet calculations as the “real” result
• Shared instrument accounts
• Delayed notebook entries after the run is finished
• Losing the link between raw data and reported values

ALCOA+ gives supervisors a language for coaching before those patterns become inspection findings. It also guides system selection: does the LIMS or CDS enforce unique users, audit trails, and contemporaneous capture—or can users bypass them?

For how controlled versus unofficial copies affect which record is “original” or effective, see controlled documents vs working copies. For cited retrieval of procedures during investigations, see citations and provenance in enterprise knowledge agents.

How should QA use ALCOA+ in investigations and CAPA?

When a data issue appears, map the failure to specific attributes:

• Missing signature → attributable / complete
• Late entry with no justification → contemporaneous
• Result transcribed without raw data → original / accurate
• File unreadable after migration → enduring / available

That mapping focuses CAPA on system design and behavior, not only on “retrain the analyst.” Retraining may be part of the action; it is rarely the whole action if the system still allows shared passwords or silent reprocessing.

Document the evidence you reviewed (audit-trail excerpts, instrument logs, notebook pages) with identifiers and timestamps. Integrity investigations without preserved evidence recreate the same problem they claim to solve.

What are practical controls mid-market labs can implement?

Without claiming a one-size program, common controls include:

1. Unique user accounts on instruments and software that generate GxP data.
2. Procedures for true copies and hybrid paper/electronic systems.
3. Rules for second-person review of critical data and calculations.
4. Defined windows and justification requirements for late entries.
5. Retention and backup rules that keep records available and enduring.
6. Periodic audit-trail review for high-risk systems—not only during investigations.

Start with the systems that release product or support batch disposition. Expand to supporting tools (spreadsheets, stand-alone meters) with a risk-based inventory.

How does ALCOA+ relate to knowledge search and AI assistants?

If staff query SOPs or lab documents through search or AI tools, the answers they use in GxP work still need provenance: which controlled version, which section, retrieved when. Fluent paraphrases without sources can undermine accuracy and attributability of the decision record, even if the underlying SOP was sound. Keep ALCOA+ thinking on both the primary lab record and any secondary tools that influence quality decisions.

FAQ

Is ALCOA+ a regulation by itself?

No. ALCOA+ is an industry mnemonic aligned with data-integrity expectations discussed in guidance such as FDA’s CGMP data integrity Q&A and MHRA GxP data integrity guidance. Your legal obligations come from applicable regulations and your approved procedures.

Does ALCOA+ apply only to electronic systems?

No. Paper notebooks, printouts, and hybrid systems are fully in scope. Electronic systems add audit-trail and access-control features, but paper still requires attributable, contemporaneous, legible entries.

What is the difference between original data and a true copy?

Original data is the first capture. A true copy is a verified reproduction maintained under procedure so it can stand in for the original when allowed. Your SOP must define how true copies are verified and controlled.