Examples
Worked examples
- Is an instance
A monitoring visit finds an important protocol deviation caused by an unclear screening checklist -- the site retrains the coordinator (correction), revises the checklist (corrective action), rolls the revision out to all active protocols at the site (preventive action), and confirms no recurrence at later visits (effectiveness verification).
- Is an instance
An FDA Form 483 observation cites incomplete batch-record entries traced to an ambiguous template field -- the corrective action redesigns the field, the preventive action extends the fix to other product lines, and an internal audit verifies effectiveness before the CAPA is closed.
Counter-examples
Looks similar, but isn't
- Not an instance
Correcting a single mislabeled sample the moment it's noticed, with no root-cause investigation and no check on whether the same process could produce the error elsewhere, is a correction -- not a CAPA, which requires the root-cause-to-prevention loop.
Editorial commentary
CAPA (Corrective and Preventive Action) is the formal quality-system process an organization uses to investigate a finding — an audit observation, a protocol deviation, an FDA Form 483 observation, or any other nonconformity — determine its root cause, implement a correction and corrective action to eliminate that cause, and take preventive action to stop the same or a similar problem from recurring elsewhere in the system. A documented check that the actions actually worked — effectiveness verification — closes the loop. CAPA did not originate in clinical research: it is a core requirement of general quality-management frameworks (ISO 9001:2015 Section 10.2, ISO 13485:2016 Sections 8.5.2-8.5.3) and of FDA’s device and drug quality regulations, and clinical-research quality systems adopted it from that broader GMP/ISO lineage rather than inventing it independently.
The four steps of a CAPA
- Root-cause analysis — identifying the underlying reason a finding occurred, not just its immediate symptom, using a structured method (e.g., 5-Whys, fishbone/Ishikawa diagrams, or a formal root-cause-analysis template).
- Correction — the immediate fix to the specific instance of the problem (e.g., retraining one staff member, correcting one document).
- Corrective action — the systemic change that addresses the root cause so the same problem doesn’t recur in the same process (e.g., revising the SOP that allowed the error).
- Preventive action — extending that fix, or a related one, to other processes, sites, or products where the same root cause could plausibly cause a similar problem before it actually does.
- Effectiveness verification — a documented follow-up check, after enough time has passed, confirming the corrective and preventive actions actually eliminated recurrence rather than just being closed on paper.
A CAPA record that stops after “correction” — fixing the one instance without root-cause analysis or a systemic/preventive step — has not actually completed the process; this is one of the most common inspection findings against CAPA systems.
Where CAPA sits in clinical-research quality systems
CAPA in clinical trials is not usually a standalone requirement — it functions as the response mechanism sitting underneath other clinical-research quality obligations:
- ICH E6 Good Clinical Practice expects sponsors and investigators to identify and correct noncompliance — CAPA is the operational process organizations use to meet that expectation, though ICH E6 itself does not use the term “CAPA” verbatim the way device/drug manufacturing regulations do.
- ICH Q10 (Pharmaceutical Quality System) formally requires a CAPA system as one of the core process elements of a pharmaceutical quality system, applicable across the product lifecycle including clinical development.
- 21 CFR 820.100 / FDA’s Quality Management System Regulation (QMSR) — the device-manufacturing CAPA requirement. Effective February 2, 2026, FDA’s QMSR replaced most of the legacy 21 CFR Part 820 framework by incorporating ISO 13485:2016 by reference, so device manufacturers’ CAPA obligations now largely run through ISO 13485:2016 Sections 8.5.2 (corrective action) and 8.5.3 (preventive action) rather than the older 820.100 text directly.
- ISO 9001:2015 Section 10.2 is the general-purpose (non-medical) quality-management-system version of the same corrective-action requirement, and is the ultimate common ancestor most sector-specific CAPA requirements trace back to.
CAPA and inspection findings
CAPA is where a finding from oversight activity actually gets resolved, which is why inspectors and auditors look at CAPA records, not just the underlying findings, as evidence of a functioning quality system:
- An FDA Form 483 observation is frequently the trigger for a CAPA — FDA’s own inspection classification (NAI/VAI/OAI) and any follow-up Warning Letter weigh heavily on whether a firm’s response addresses root cause and includes a credible preventive-action plan, not just a correction of the specific instance cited.
- A site’s protocol deviation log, especially clusters of “important” deviations, is a standard trigger for a documented CAPA at the site or sponsor level, and a deviation log with no CAPA history behind repeated similar deviations is itself a recognized inspection finding.
- As part of inspection readiness, sites and sponsors are expected to maintain an accessible, current CAPA log alongside the trial master file — open CAPAs with no documented root-cause analysis, or CAPAs closed without effectiveness verification, are common findings during routine and for-cause inspections.
Worked examples
Example 1: A monitoring visit identifies that a subject was enrolled despite not meeting a screening lab-value inclusion criterion — classified as an important protocol deviation. Root-cause analysis finds the site’s screening checklist did not flag borderline lab values clearly enough. The correction is retraining the coordinator involved; the corrective action is revising the checklist to flag borderline values explicitly; the preventive action is rolling the revised checklist out across all active protocols at that site, not just the one where the deviation occurred; effectiveness is verified by confirming no similar deviation recurs over the next several monitoring visits.
Example 2: An FDA Form 483 observation at a drug manufacturing site cites incomplete batch-record entries. Root-cause analysis traces this to an ambiguous field on the batch-record template. The corrective action redesigns that field; the preventive action extends the redesigned template to other product lines using the same template family; effectiveness is verified through an internal audit of subsequent batch records before the CAPA is closed.
Counter-example
A site corrects a single mislabeled sample the moment it’s noticed, without investigating why the mislabeling happened or checking whether the same labeling process could produce the same error elsewhere. That is a correction, not a CAPA — it fixes the one instance but skips root-cause analysis, the systemic corrective action, and the preventive-action step that would distinguish it from a genuine CAPA.
Related CASRAI Dictionary terms
Protocol Deviation · FDA Form 483 · Inspection Readiness · ICH GCP (Good Clinical Practice)
Machine-readable encodings
Use in your systems
<role vocab="credit"
vocab-identifier="https://casrai.org/dictionary/"
vocab-term="CAPA (Corrective and Preventive Action)"
vocab-term-identifier="https://casrai.org/dictionary/term/capa-corrective-and-preventive-action" />{
"@context": "https://schema.org",
"@type": "DefinedTerm",
"@id": "https://casrai.org/dictionary/term/capa-corrective-and-preventive-action",
"name": "CAPA (Corrective and Preventive Action)",
"identifier": "https://casrai.org/dictionary/term/capa-corrective-and-preventive-action",
"description": "CAPA (Corrective and Preventive Action) is the formal quality-system process an organization uses to investigate a finding -- an audit observation, a protocol deviation, an FDA Form 483 observation, or any other nonconformity -- determine its root cause, implement a correction and corrective action to eliminate that cause, take preventive action to stop the same or a similar problem recurring elsewhere in the system, and verify afterward that those actions actually worked.",
"inDefinedTermSet": "https://casrai.org/dictionary/domain/clinical-research#set",
"url": "https://casrai.org/dictionary/term/capa-corrective-and-preventive-action",
"sameAs": [],
"license": "https://creativecommons.org/licenses/by/4.0/",
"publisher": {
"@id": "https://casrai.org/#organization"
},
"dateModified": "2026-07-18T03:10:25",
"inLanguage": "en"
}
