How to Get GDP Certified: Framework, Inspection, and Requirements

To get GDP certified, you pass an inspection that confirms your facility meets Good Distribution Practice standards for storing, handling, and transporting medicinal products. In the European Economic Area, that inspection results in a wholesale distribution authorisation issued by your national competent authority. In the United States, there is no single “GDP certificate”; compliance runs through Drug Supply Chain Security Act (DSCSA) obligations enforced by the FDA, state wholesale distributor licensing, and voluntary accreditation such as the NABP Drug Distributor Accreditation. The path differs by jurisdiction, but the preparation looks similar everywhere: a working quality system, a qualified Responsible Person, temperature-controlled storage that has been mapped and validated, and documentation that survives an inspector’s scrutiny.

Do You Actually Need It

Wholesale distributors carry the clearest obligation. In the EEA, anyone engaged in wholesale distribution must hold a wholesale distribution authorisation from the national competent authority of the member state where they operate, and compliance with EU GDP guidelines is a prerequisite for that authorisation.¹ In the United States, the DSCSA requires national licensing standards for wholesale drug distributors, and the FDA has proposed uniform federal rules covering every facility in the country.²

Third-party logistics providers that warehouse or ship medicines on behalf of others are covered too. The FDA’s proposed rule explicitly reaches 3PL facilities, and in states without a compliant licensing program the FDA would license them directly.²

One boundary worth flagging: manufacturers with an existing manufacturing authorisation generally do not need a separate wholesale distribution authorisation for products already covered by that manufacturing licence.¹ The GDP obligation attaches when wholesale distribution is a distinct activity.

Virtual wholesalers, meaning companies that own product rights but outsource all physical storage and shipping, still need a wholesale authorisation and a GDP-compliant quality system. The Responsible Person must approve any subcontracted activities affecting GDP compliance, and the company must maintain a supply chain map showing where products originate, when ownership transfers, and who handles transportation at each stage.³

Brokers who arrange sales or purchases without physically handling medicines have their own path. They must register with the competent authority, maintain a quality system covering complaints, recalls, and verification of supplier and customer authorisations, and keep records of every brokered transaction (product name, quantity, batch numbers, and supplier and customer details) for at least five years.⁴

Which Framework You Apply Under

Your jurisdiction dictates which rules govern the inspection and what document you end up holding.

EU GDP Guidelines

The EU Guidelines on Good Distribution Practice (2013/C 343/01), published under Directive 2001/83/EC, set the standard for wholesale distribution in the EEA. They cover both wholesale distributors and brokers.⁴ The national competent authority in each member state runs the inspections and issues wholesale distribution authorisations.

WHO Good Distribution Practices

The WHO Technical Report Series, No. 957, Annex 5, is the global baseline used in countries that have adopted WHO standards into national law, and it matters for cross-border trade into developing markets. It requires every party in the distribution chain to comply with applicable GDP, good manufacturing practice, and good storage practice principles.⁵

U.S. Drug Supply Chain Security Act

The DSCSA, at 21 U.S.C. § 360eee, takes a different tack: product tracing and serialization rather than a single GDP certificate. Every prescription drug package must carry a product identifier with the National Drug Code, a unique serial number, a lot number, and an expiration date in both human- and machine-readable formats.⁶ Trading partners must exchange transaction information, transaction history, and transaction statements on every sale so that any package can be traced back to the manufacturer.

The enhanced drug distribution security requirements that took effect in November 2023 require that data exchange to happen through secure, interoperable electronic systems capable of package-level verification.⁷ The FDA staged exemptions to let the industry stabilize. Wholesale distributors’ exemption expired in August 2025; small dispensers with 25 or fewer full-time pharmacy employees have an extension through November 2026.⁸

Building What the Inspector Will Check

Designate a Responsible Person

Both the EU and WHO frameworks require a person who is personally accountable for the quality management system. In the EU, the Responsible Person must be permanently available; a pharmacy degree is considered desirable but is not universally mandatory, with specific qualifications set by each member state. The person must demonstrate competence, relevant experience, and training in GDP.⁹ Tasks can be delegated; the underlying legal responsibility cannot. Under the WHO framework, a designated person with defined authority must ensure the quality system is implemented and maintained, with specific qualifications set by national regulations.¹⁰

This role is where certification efforts commonly break down. Inspectors frequently cite deficiencies where the Responsible Person is not sufficiently available or is not fulfilling obligations in practice. Naming someone in title only, without giving them time and authority, will not pass.

Map and Monitor Temperature

Temperature management is the single most scrutinized element of a GDP inspection. Medicines must be stored and transported according to conditions determined by the manufacturer’s stability data; cold-chain products typically require 2°C to 8°C throughout.¹¹

Before any storage area goes into use, EU GDP requires an initial temperature mapping exercise. Monitoring equipment then goes in the areas that experience the greatest fluctuations, and the mapping repeats whenever significant modifications are made to the facility or its climate-control equipment.⁴ The point is to identify hot spots and cold spots and monitor the worst-case locations. Brief excursions outside labeled storage conditions may be acceptable when supported by stability data and scientific justification showing the product’s safety and quality were not affected.¹¹ Without that documentation, an excursion can turn a compliant shipment into a rejected one. All equipment, from refrigerated trucks to warehouse HVAC systems, needs regular validation confirming it functions within specified parameters.

Establish a Quality Management System

EU GDP requires an up-to-date quality manual, written standard operating procedures for every administrative and technical activity, and detailed records of all transactions sufficient to trace any product from source to destination.⁴ Traceability exists mainly to support rapid recalls; the records must be readily available and sufficient to identify every party that handled a product.

Your system must also cover returned products, rejected stock, and suspected falsified medicines. Wholesale distributors verify on a risk-based approach that medicines in their supply chain are genuine, and the system needs a clear procedure for alerting competent authorities and marketing authorisation holders when counterfeits are suspected.

Train Personnel and Document It

All staff involved in distribution must receive initial and continuing training relevant to their roles. The WHO guidelines call for coverage of product security, counterfeit identification, and prevention of counterfeit entry into the supply chain, with additional specialized training for personnel handling controlled substances, radioactive materials, or highly active compounds.¹⁰ Records of all training sessions, including topics covered and participants, must be maintained.

In the United States, qualification requirements for key roles vary by state. Some states require a Designated Representative to have at least one year of paid experience in pharmaceutical distribution or dispensing, plus a training program covering federal and state drug distribution law, quality control systems, and USP storage standards. Background screening typically includes criminal history checks, healthcare sanctions monitoring, and verification against the OIG exclusion list.

Documentation You Need Before You Apply

The specific documents vary by jurisdiction, but the core package is consistent:

Quality manual and SOPs covering receiving, storage, picking, packing, dispatch, returns, and recall execution.⁴
Temperature mapping data for every storage area, with monitoring equipment placement justified by the results.
Training records for every employee who handles medicinal products.
Equipment validation records for refrigerated storage, transport equipment, and HVAC systems.
Transaction and inventory records detailed enough to support recall execution.
Responsible Person credentials, job description, and evidence of GDP training and ongoing competence.
Facility layout plans, geographic coordinates, climate-control specifications, and security measures.

US facilities pursuing NABP Drug Distributor Accreditation must also hold current, active wholesale drug distributor licenses in every jurisdiction where they do business, and must have been operational in all activities for at least 30 days before applying.¹²

The Inspection or Accreditation Process

In the EU, you apply for a wholesale distribution authorisation with your national competent authority. Inspectors visit the facility to verify that physical operations match documented procedures. They review temperature records, walk through receiving and dispatch, interview staff, and examine handling of complaints, returns, and suspected counterfeits. The authority then grants or denies the authorisation based on the findings.¹

In the United States, NABP Drug Distributor Accreditation is a two-phase process. First, the facility completes an NABP Supply Chain Inspection and receives an eligibility letter. Only then can it apply for the accreditation itself, which is valid for three years.¹² Combined costs for the supply chain inspection (application, inspection, and eligibility fees) plus the accreditation phase (application and annual fees) can total roughly $12,000 or more across the three-year period. State wholesale distributor licensing fees are separate and vary widely, as do surety bond requirements, which range from $25,000 to $100,000 depending on jurisdiction and the company’s gross receipts.

Regardless of jurisdiction, the inspection tests whether documentation matches reality. An inspector who finds a gap between what your SOPs say and what your staff actually does will treat it as a deficiency even if the actual practice is reasonable.

Deficiencies That Cost Facilities Their Certification

Published GDP non-compliance data points to a consistent set of failures worth preparing against:

Inadequate supplier qualification, meaning failure to verify that suppliers hold proper authorisations before purchasing. This is the single most common finding.
Missing customer qualification, meaning not confirming that the parties you sell to are legally authorised to receive medicinal products.
Responsible Person failures: not sufficiently available, not fulfilling obligations, or lacking practical authority.
Documentation gaps where procedures exist on paper but staff don’t follow them, or records are incomplete.
Trading in products from outside the legal supply chain, meaning purchases from unlicensed or unverified sources.
Providing misleading or incomplete information to inspectors during the inspection itself.

Supplier and customer qualification failures are entirely preventable with a proper onboarding process. If you cannot produce proof that you verified a trading partner’s licence before your first transaction, that is a deficiency regardless of the partner’s reputation.

What Happens If You Skip It

In the EU, national competent authorities can revoke a wholesale distribution authorisation, which effectively shuts down the operation. Contractual relationships often require GDP compliance as a condition of doing business, so losing authorisation typically cascades into terminated partnerships.

In the United States, criminal penalties under 21 U.S.C. § 333 for knowing violations of drug distribution requirements can reach up to 10 years in prison, a fine of up to $250,000, or both. Failing to submit required reports carries a civil penalty of up to $100,000.¹³ The more immediate risk for most companies is commercial: manufacturers and healthcare systems won’t do business with an unlicensed distributor. Cross-border shipments without proper GDP documentation can be held at customs, and repeated failures can lead to import bans. Companies operating in both EU and US markets need parallel compliance programs.

1
European Medicines Agency. Good Distribution Practice
2
Food and Drug Administration. FDA Announces Proposed Rule – National Standards for the Licensure of Wholesale Drug Distributors and Third-Party Logistics Providers
3
U.S. Pharmacopeia. Rx-360 Good Distribution Practices Overview
4
EUR-Lex. Guidelines of 5 November 2013 on Good Distribution Practice of Medicinal Products for Human Use
5
World Health Organization. WHO Technical Report Series No 957 – WHO Good Distribution Practices for Pharmaceutical Products
6
Office of the Law Revision Counsel. 21 US Code 360eee – Definitions
7
Food and Drug Administration. Enhanced Drug Distribution Security 2023 and Beyond
8
Food and Drug Administration. Waivers and Exemptions Beyond the Stabilization Period
9
European Commission. Commission Guidelines on Good Distribution Practice of Medicinal Products for Human Use
10
World Health Organization. WHO Good Distribution Practices for Pharmaceutical Products – WHO Technical Report Series No 957
11
U.S. Pharmacopeia. Risks and Mitigation Strategies for the Storage and Transportation of Finished Drug Products
12
National Association of Boards of Pharmacy. Drug Distributor Accreditation
13
Office of the Law Revision Counsel. 21 USC 333 – Penalties