When a regulatory inspector cites a laboratory for sample management deficiencies, the observation rarely reads as “samples were mishandled.” It reads as a specific clause violation — a breakdown in chain of custody traceability, a gap in retention records, an undocumented deviation in sample condition at receipt. The citation is regulatory. The root cause is operational. And the consequences — warning letters, lost accreditation, invalidated study data, product recalls — are severe enough to shut down programs and end careers.
This article maps specific sample management failures to the regulatory citations they actually generate, from FDA 483 observations to ISO 17025 nonconformances to GLP inspection deficiencies. The goal is not to review best practices. It is to show what happens when those practices fail — from the perspective of the regulator reading your records.
Why Regulators Focus on Sample Management
Sample management sits at the intersection of data integrity, chain of custody, and evidentiary control. For a regulator, a properly managed sample is proof that a result is trustworthy. A sample with broken traceability, questionable storage conditions, or missing handling records is not just an administrative failure — it is a question mark over every result associated with it.
FDA, ISO accreditation bodies, EPA, and GLP inspection authorities have all, in recent years, sharpened their focus on sample management as a leading indicator of overall laboratory quality. When sample management systems are weak, the assumption is that data integrity problems are likely close behind.
Failure 1: Broken or Undocumented Chain of Custody
What Goes Wrong
Chain of custody (COC) breaks happen when samples change hands, move between departments or facilities, or are transferred without documented authorization and timestamps. Common triggers include verbal handoffs between technicians, unlocked sample storage accessible to multiple personnel, and batch transfers logged only at origin — not at receipt.
The Regulatory Citation It Generates
ISO 17025:2017 — Clause 7.4 (Handling of Test and Calibration Items) ISO 17025 requires that laboratories maintain documented procedures for the receipt, handling, protection, storage, retention, and disposal of items. Clause 7.4.1 specifically requires that laboratories have a system for the unambiguous identification of items throughout their lifecycle. A COC gap — particularly one where sample custody cannot be reconstructed from receipt to result — is a direct nonconformance against this clause.
During ILAC-accredited audits, inspectors routinely pull sample logs and cross-reference them against analyst records, instrument run logs, and storage access records. If the chain cannot be reconstructed, the finding is typically a major nonconformance that triggers a corrective action requirement before accreditation can be maintained.
FDA 21 CFR Part 211.68 / 211.80 (Pharmaceutical CGMPs) In pharmaceutical laboratories, broken COC for retained samples or stability samples generates observations under 21 CFR 211.80, which requires written procedures for the receipt, identification, storage, handling, sampling, examination, and testing of components, drug product containers, and closures. A 483 observation in this area often reads: “The laboratory failed to maintain adequate documentation of sample chain of custody for retained samples of [Product X] manufactured between [dates].”
Downstream Consequences
Broken COC findings at accredited labs can result in the suspension of specific test scopes pending corrective action verification. In pharmaceutical inspections, repeated COC deficiencies contribute to data integrity findings, which are among the most serious categories of FDA enforcement action. Warning letters citing data integrity issues frequently trace their earliest evidence to sample handling records.
How a Digital Sample Management System Prevents It
Digital sample management systems enforce COC documentation at every transfer event through mandatory custody transfer logs with timestamped electronic signatures. No sample can move between custodians, storage locations, or departments without a recorded transfer event — eliminating the undocumented verbal handoff entirely.
Failure 2: Missing or Incomplete Sample Retention Records
What Goes Wrong
Retention records fail in two distinct ways. The first is absence: samples are discarded before the required retention period without authorization or documentation. The second is incompleteness: samples are retained, but the records linking them to specific lots, batches, or test events are missing or degraded.
Both failures are common in high-throughput labs where sample volume creates physical storage pressure and retention schedules are managed manually.
The Regulatory Citation It Generates
FDA 21 CFR 211.170 (Reserve Samples) For finished pharmaceutical products, 21 CFR 211.170 mandates specific reserve sample quantities, storage conditions, and retention durations. 483 observations in this area frequently cite failures to retain adequate quantities, failures to maintain samples under conditions simulating those of the label, and — critically — failures to document that retained samples exist and where they are stored.
An observation might read: “Reserve samples of [Product] were not retained for the required period. The firm was unable to provide documentation that reserve samples were retained or subsequently disposed of according to written procedures.”
EPA SESDPROC-011 and SW-846 (Environmental Laboratories) Environmental labs operating under EPA methods face explicit sample preservation and holding time requirements. Inspectors and data validators routinely flag missing chain of custody forms and undocumented retention as grounds for data qualifier flags — up to and including data rejection. For labs operating under state certification programs, these findings can trigger certificate suspension.
21 CFR Part 58.190 (GLP — Specimen and Data Retention) GLP regulations governing nonclinical laboratory studies require that all specimens collected in the conduct of a study be retained. The absence of retention records — or evidence that specimens were disposed of without authorization — is a GLP inspection finding that can lead to the disqualification of an entire study, requiring repeat testing.
Downstream Consequences
Missing retention records in a pharmaceutical context can invalidate a product release, trigger a retrospective investigation across multiple lots, and generate a CAPA that extends into the supply chain. In GLP environments, disqualified study data has caused drug development programs to be set back by years when the affected studies were pivotal.
How a Digital Sample Management System Prevents It
Digital systems assign retention schedules at sample registration, generate alerts before retention deadlines, and require documented authorization for any early disposal. Every retained sample carries a digital record linking it to the originating lot, study, or test event — regardless of how much time has passed.
Failure 3: Inadequate Sample Condition Assessment at Receipt
What Goes Wrong
Laboratories receive samples that do not meet acceptance criteria — wrong temperature, broken seals, insufficient volume, compromised containers — and proceed to test them without documenting the condition or triggering a formal deviation. Sometimes this happens under turnaround time pressure. Sometimes the discrepancy is noticed but not considered significant enough to record.
The Regulatory Citation It Generates
ISO 17025:2017 — Clause 7.4.3 This clause requires that laboratories document any abnormalities or deviations from normal or specified conditions when items are received. If a sample arrived warm, damaged, or outside specification and that condition was not recorded, the subsequent test result is of questionable validity — and the audit finding reflects that. Nonconformances under Clause 7.4.3 typically note: “The laboratory did not have evidence that sample condition at receipt was assessed or documented for samples received on [dates].”
FDA 21 CFR 211.84(b) (Testing of Components and Drug Product Containers) FDA regulations require that samples be examined on receipt for conformance with written specifications, including condition and labeling. When labs test samples received in compromised condition without documented receipt inspection or deviation reporting, 483 observations cite failures to follow written procedures for receipt examination.
Downstream Consequences
A test result generated from a sample of unknown or compromised integrity is scientifically indefensible. In pharmaceutical contexts, this can invalidate a release decision and require re-sampling. In clinical labs, it can affect patient results. In environmental monitoring, it can compromise permit compliance data.
How a Digital Sample Management System Prevents It
Receipt inspection checklists are built into the sample login workflow. Technicians cannot advance a sample to testing without completing a condition assessment. Any deviation from acceptance criteria automatically triggers a notification to QA and creates a documented deviation record, with the receiving technician’s electronic signature and timestamp.
Failure 4: Inadequate Sample Storage Condition Monitoring
What Goes Wrong
Samples are stored in refrigerators, freezers, and controlled-temperature environments that experience excursions — brief or extended — without being detected, documented, or escalated. Manual temperature logs are filled in inconsistently, and no one is alerted when a storage unit fails overnight or over a weekend.
The Regulatory Citation It Generates
ISO 17025:2017 — Clause 6.3 (Facilities and Environmental Conditions) ISO 17025 requires that laboratory facilities and environmental conditions be suitable for the work performed and that relevant specifications are documented, monitored, controlled, and recorded. Inadequate temperature monitoring of sample storage — including gaps in records, missing calibration of monitoring equipment, or undocumented excursions — generates findings under Clause 6.3 and, where sample integrity is affected, under Clause 7.4.
FDA 21 CFR 211.68 (Automatic, Mechanical, and Electronic Equipment) For pharmaceutical labs, equipment used in sample storage must be adequately maintained, calibrated, and monitored. An inspection finding in this area typically reads: “Temperature monitoring records for sample refrigerator [ID] contained gaps of [X] hours. The firm had no procedure for addressing or investigating temperature excursions in sample storage areas.”
21 CFR Part 58.61 (GLP — Equipment Maintenance and Calibration) GLP inspectors specifically look for evidence that storage equipment — including temperature-controlled units holding study specimens — is maintained, calibrated, and monitored. Missing alarm logs, undocumented excursions, or inadequate response procedures are cited as GLP deficiencies.
Downstream Consequences
An undocumented temperature excursion affecting stored samples can retroactively invalidate months of test results if the sample integrity cannot be assured. In pharmaceutical stability programs, excursions in stability storage chambers can require an investigation that places products on hold, delays submissions, and triggers regulatory notifications.
How a Digital Sample Management System Prevents It
Integrated environmental monitoring — or direct connection to facility monitoring systems — ensures that storage condition data is captured continuously, logged automatically, and tied to the specific samples stored during any excursion event. Alerts are triggered in real time. Investigations are documented within the same system that holds the sample records.
Failure 5: Sample Identity and Labeling Errors Leading to Misassignment
What Goes Wrong
Samples are mislabeled, relabeled without documentation, or tested under the wrong identifier. In high-volume labs, this happens during repackaging or aliquoting, when handwritten labels are transcribed incorrectly, or when samples are relabeled in the field without updating the corresponding paperwork.
The Regulatory Citation It Generates
ISO 17025:2017 — Clause 7.4.1 and 7.4.2 ISO 17025 requires that laboratories use a unique identification system for all test items and that the identification be maintained throughout the item’s lifecycle. A mislabeled sample — where the physical label does not match the sample log, test request form, or result — is a direct violation of this traceability requirement. Major nonconformances in this area typically require investigation of all results associated with the affected sample identifiers.
FDA 21 CFR 211.68 and 211.186 (Master Production and Control Records) In pharmaceutical labs, sample misidentification is treated with particular seriousness because it can propagate through the entire test and release chain. An observation might read: “Laboratory records for [Product] contained discrepancies between sample container labels and corresponding analytical worksheets, and the firm could not demonstrate that results were correctly attributed to the samples from which they were obtained.”
CLIA 42 CFR 493.1232 (Clinical Laboratories — Specimen Labeling) Clinical labs operating under CLIA are required to have written procedures ensuring that specimens are labeled with the patient’s name or unique identifier and other essential information. A labeling failure in a clinical context is not just a regulatory citation — it is a patient safety event.
Downstream Consequences
Sample misidentification in pharmaceutical release testing can result in incorrect lots being released or rejected. In clinical environments, it can affect patient diagnosis and treatment. In environmental monitoring, it can result in compliance reporting based on results from the wrong sampling location. All of these represent both regulatory exposure and direct harm.
How a Digital Sample Management System Prevents It
Barcode or RFID-based sample identification eliminates manual transcription at every step. Samples are scanned at receipt, repackaging, storage, and testing — with each scan event recorded against the sample record. Any discrepancy between the physical identifier and the system record generates an immediate alert before testing proceeds.
Failure 6: Unauthorized or Undocumented Sample Disposal
What Goes Wrong
Samples are discarded outside their retention window, without documented authorization, or by personnel who do not have the authority to approve disposal. In busy labs, expired samples accumulate until someone makes a judgment call to discard them — without checking retention requirements, obtaining approval, or creating a disposal record.
The Regulatory Citation It Generates
ISO 17025:2017 — Clause 7.4.4 ISO 17025 requires that laboratories have documented procedures for the return, disposal, or destruction of test items and that disposal be documented. An audit finding in this area notes the absence of disposal records or evidence that disposal was conducted without authorization.
21 CFR Part 58.190(e) (GLP — Specimen Retention and Disposal) Under GLP, specimens from completed studies must be retained for specified periods and may only be disposed of after the required period or with documented authorization from the study sponsor. Unauthorized disposal of GLP specimens is a serious inspection finding that can lead to study disqualification and, in repeated cases, laboratory disqualification by FDA.
FDA 21 CFR 211.170(b) Reserve samples of drug products may be discarded only after the product’s expiration date or after one year, whichever is longer. Disposal before this period, without documentation, is directly citable.
Downstream Consequences
Undocumented sample disposal eliminates the possibility of re-testing in the event of a complaint, recall, or regulatory inquiry. It is frequently cited as an aggravating factor in FDA enforcement actions — not just because the samples are gone, but because the absence of disposal records raises questions about whether the disposal was intentional.
How a Digital Sample Management System Prevents It
Digital systems enforce retention schedules and prevent disposal events from being initiated by unauthorized personnel. Disposal requests require electronic approval from designated QA or management roles. Every approved disposal generates an automatic record with the approver’s identity, timestamp, and authorization basis.
Failure 7: Inadequate Handling of Subsamples and Aliquots
What Goes Wrong
When samples are divided into aliquots for multiple tests or sent to external laboratories, the traceability chain between the parent sample and its derivatives is often poorly documented. Test results come back linked to an aliquot identifier that cannot be reliably traced back to the parent lot, collection event, or original COC.
The Regulatory Citation It Generates
ISO 17025:2017 — Clause 7.4.1 The requirement for unique, maintained identification extends to all sub-samples and aliquots. If an aliquot’s test result cannot be traced back to the primary sample from which it was derived — including all handling, storage, and transfer events — the traceability is broken and the result is not fully defensible.
FDA 483 Observations — Pharmaceutical Contract Labs In pharmaceutical contract laboratory settings, FDA investigators specifically look at how aliquots are tracked when samples are divided for method development, re-testing, or outsourcing to secondary labs. 483 observations in this area have cited: “The laboratory’s records did not allow for the unambiguous tracing of subsamples used in [Assay X] back to the original retained sample lot.”
Downstream Consequences
When a result is challenged — by a customer, a regulator, or an internal investigation — and the lab cannot demonstrate a complete chain from the original sample through every aliquot to the result, the finding is functionally the same as a data integrity failure. The result cannot be relied upon.
How a Digital Sample Management System Prevents It
Parent-child sample relationships are maintained in the system from the moment an aliquot is created. Every aliquot inherits and retains the identification, custody history, and storage records of its parent. Test results are linked to both the aliquot and the parent sample record, maintaining full traceability across the entire sample lifecycle.
The Pattern Regulators Recognize
Across all of these failure types, regulators are looking for the same underlying condition: a laboratory that manages samples through informal practices, manual systems, and individual judgment rather than enforced, documented, and auditable procedures.
When FDA investigators, ISO accreditation auditors, and GLP inspectors see paper COC forms, handwritten temperature logs, manual retention schedules, and verbal disposal approvals, they draw a predictable conclusion: the sample management system depends on people doing the right thing consistently, and there is no mechanism to verify that they do. That conclusion is the precursor to citations, warning letters, and — in the most serious cases — suspension of accreditation or laboratory disqualification.
The laboratories that consistently perform well in regulatory inspections and accreditation audits are not those with more conscientious staff. They are those with systems that make the correct action the only available action — where every sample event is captured, every requirement is enforced, and every record is complete before the next step can proceed.
Sample Management Built for Regulatory Defensibility
QISS LAB is a purpose-built laboratory quality management system that closes the sample management gaps regulators cite most often. From electronic chain of custody and automated retention scheduling to real-time storage monitoring and full aliquot traceability, QISS LAB ensures that your sample records are complete, auditable, and defensible — before the inspector walks in the door.
See how QISS LAB maps to your regulatory requirements. Request a demo.
