ICH Q3D Elemental Impurities: 6 Steps Auditors Can Verify

ICH Q3D(R2) is a harmonized, risk-based guideline that sets permitted daily exposures for 24 elemental impurities and expects a documented risk assessment before any testing decision. Testing follows only where that assessment shows a real chance of exceeding a limit. Your next step: update each product’s assessment, collect supplier evidence, and record the control strategy before an auditor asks for it.

TL;DR:

• Assess Class 1 elements for every product, Class 2A unless exclusion is justified, and Class 2B only when added or plausibly introduced.
• Use current route specific PDEs, including R2’s corrected values for gold, silver, and nickel, then divide by maximum daily dose to calculate permitted concentration.
• Treat the 30% checkpoint as a trigger for review, not an automatic safe limit; document analytical, source, and batch variability before setting controls.
• Validate the chosen method for specificity, precision, accuracy, and quantitation limits below the control level; instrument sensitivity alone does not establish fitness.
• Use routine testing when an element nears its permitted concentration; periodic verification suits low likelihood only when supplier evidence and trend data support control.

Table of Contents

• What the guideline covers and how it classifies elements
• How to run an ICH Q3D risk assessment that survives an audit
• Analytical approaches and validation expectations
• Practical control strategies and corrective actions
• Practical compliance notes and pitfalls
• Validating cleaning processes to control elemental impurities
• Handling updates and changes in ICH Q3D guidelines
• Case studies of Q3D in the supply chain
• Implications of ICH Q3D compliance for sourcing from China and India
• Integrating Q3D into your pharmaceutical quality system
• How a compliant sourcing partner supports your assessment
• FAQ
• Sources

What the guideline covers and how it classifies elements

The ICH Q3D(R2) guideline defines a harmonized framework for controlling 24 elemental impurities. It provides permitted daily exposures (PDEs) for oral, parenteral and inhalation routes, and it uses element classes to focus the assessment where toxicity and likelihood of occurrence are highest. FDA hosts the Q3D(R2) guidance for industry reference.

The class tells you how much evidence the assessment needs for each element:

• Class 1 elements are assessed for every product, whether or not they were intentionally added.
• Class 2A elements are assessed for every product unless you can justify exclusion.
• Class 2B elements are assessed only when intentionally added or likely to enter through a catalyst, equipment or material.
• Class 3 elements matter mainly for parenteral and inhalation products, where route-specific PDEs are tighter.

A PDE converts to a permitted concentration by dividing it by the maximum daily dose of the drug product. The appendix tables in Q3D(R2) extracts show worked examples, including cutaneous and transcutaneous PDE derivation.

How to run an ICH Q3D risk assessment that survives an audit

The main compliance challenge is documentation. A defensible file shows what you looked at, what you excluded, and why.

1. Identify potential sources: active ingredient, excipients, catalysts, reagents, manufacturing equipment, and container closure.
2. Screen each source against the element classes and the likelihood of that element being present.
3. Quantify exposure by combining each PDE with the maximum daily dose, then compare expected levels from each source with the permitted concentration.
4. Apply a control threshold and document the variability behind it.
5. Record the control strategy: supplier specifications, in-process controls, component limits and a periodic testing plan.
6. Record why each element was included or excluded, so the rationale is traceable.

Many teams use a practical checkpoint below the PDE. Whether extra controls are needed depends on analytical, source and batch variability, so document that analysis rather than relying on a threshold alone.

Pro Tip: Date every assessment and tie it to a product, dose and route. A file that cannot show which dose it assumed will not survive a question about permitted concentration.

Analytical approaches and validation expectations

ICP-MS is widely used for elemental impurities because of its sensitivity and specificity, and ICP-OES is used where analytes and limits allow. Whichever you choose, the method must be justified and validated following ICH Q2 principles. The ICH Q2(R2) guideline sets out the experiments reviewers expect:

• Specificity, shown with spiking studies that demonstrate matrix components such as reagents and excipients do not interfere.
• Precision, covering repeatability and intermediate precision.
• Accuracy, shown by spike recovery or confirmation with an orthogonal procedure.
• Reportable range, including limits of detection and quantitation that sit comfortably below the control level.
• Sample preparation, such as acid digestion, with interference removal where the matrix demands it. Speciation for As or Hg may be needed in some cases.

Validation rests on spiking and orthogonal confirmation, not on instrument capability alone. Keep validation reports, SOPs and system suitability data together so an inspector can follow the chain from raw result to reported value. Cross-reference USP <232>/<233> as well when you file in the U.S.

Practical control strategies and corrective actions

Work down the hierarchy: avoid or replace the source, tighten supplier controls, add process or upstream controls, then rely on final-product specifications and periodic testing.

• Set limits on excipients that carry a relevant element.
• Tighten supplier COAs so the element appears with a numeric limit.
• Select a different container closure when it is the contributing source.
• Add a purification step where a catalyst residue is the driver.
• Increase sampling or testing frequency while an element trends toward its limit.

Choose routine testing when an element sits close to its permitted concentration, and periodic verification when the assessment shows low likelihood. Either way, the regulator expects a file containing the risk assessment, supplier evidence, method validations, trend reports and corrective action records.

Practical compliance notes and pitfalls

We see the same weak points repeatedly. Teams treat the 30% threshold as absolute and forget that analytical and material variability can push a real result higher. Some assessments still carry pre-revision figures: the R2 revision corrected PDEs for Au, Ag and Ni, so check that your internal files reflect them. Others skip batch-level traceability, then pay for it in finished-product testing.

Pro Tip: Obtain batch-level traceability and supplier audit evidence early. When an element nears its PDE, document the mitigation, the monitoring frequency and the escalation to regulatory affairs in the same record.

Validating cleaning processes to control elemental impurities

Shared equipment can carry elemental residues from one product to the next, so cleaning belongs inside the assessment as a source to evaluate, not a footnote. Start by identifying which contact surfaces and materials of construction could release a relevant element, such as nickel from stainless steel or a catalyst metal from a prior campaign.

Then decide what the cleaning validation must prove. Set the acceptance limit from the PDE of the element and the maximum daily dose of the next product, so the carryover limit traces back to patient exposure rather than an arbitrary figure. Sampling by swab or rinse should be matched to a validated method with a limit of quantitation well below that acceptance limit.

Document worst-case selection: the hardest-to-clean location, the product with the highest residue risk, and the element most likely to persist. Revalidate or reassess after equipment changes, new catalysts or a change in cleaning agent. Cleaning evidence that links acceptance limits to PDEs gives an inspector a clear line from the risk assessment to the shop floor, and it can justify not testing the finished product for that source.

Handling updates and changes in ICH Q3D guidelines

The guideline is not static. Revision R2 moved through its Step 2 and Step 4 stages, and the extracts appendix shows how PDE tables and the cutaneous derivation were developed. Build a simple change-control routine around that reality.

Assign one owner to monitor the ICH and FDA pages for new revisions. When a revision lands, compare the PDE table with your internal reference values, starting with the elements the R2 revision corrected, Au, Ag and Ni. Reopen only the assessments where an affected element is present or plausible.

Record the effective date, the products reviewed and the conclusion for each, including “no change needed.” That last entry matters: an auditor reading a file that shows you checked and found no impact will trust it more than silence. Pharmacopeial requirements and regional expectations can move on their own schedule, so track those separately from the ICH text and note any difference in the file. A short revision log kept alongside the assessment is usually enough, and it turns a regulatory update from a scramble into a routine entry.

Case studies of Q3D in the supply chain

We do not cite named case studies here, because we will not invent them. What we can describe is the pattern that works in practice, drawn from how the guideline asks you to integrate supplier information with process understanding.

Consider an illustrative scenario. A manufacturer of an oral solid dose has a catalyst-derived Class 2B element flagged as plausible in one intermediate. The team asks the intermediate supplier for batch-level COAs that report the element, along with the synthetic route and any purification step. The supplier data show consistent, low levels, and the assessment concludes the element is controlled through the supplier specification and a periodic verification test, with no routine finished-product test.

The reverse also happens. A supplier cannot provide element-level data, so the manufacturer sets an incoming specification and tests each lot until trend data justify relaxing it. Both outcomes share the same strengths: supplier impurity profiles combined with process knowledge, a written rationale for the monitoring choice, and a defined trigger for revisiting it. That combination is what reviewers look for, and it is what turns supplier documentation into a real reduction in testing burden.

Implications of ICH Q3D compliance for sourcing from China and India

Sourcing from suppliers in China and India does not change the PDEs, but it changes how much evidence you must collect. Q3D applies to the finished drug product regardless of where each material originates, so your assessment has to reach back through the supply chain.

Ask each supplier for element-level COAs, a description of the manufacturing route including catalysts and reagents, and audit reports or qualification records. Where a supplier does not test for relevant elements, set an incoming specification and test until you have trend data. Multi-step routes with metal catalysts deserve closer questions than simple physical processing.

Dual-country supply can help with continuity, but each source needs its own impurity profile, because a route or equipment difference can alter which elements appear. Keep documentation consistent with both U.S. and EU expectations so one assessment supports multiple filings.

This is where we work with buyers. We source food, technical and pharmaceutical-grade chemicals from vetted suppliers in China and India, with compliance documentation to US and EU standards, and our USP grade compliance checklist covers the audit-readiness side of that documentation. For material selection near the finished product, container-closure choices also matter; one useful reference on medical-grade glass and traceability is this ISO 10993 guidance.

Integrating Q3D into your pharmaceutical quality system

Q3D works best when it lives inside existing quality processes rather than beside them. Link the risk assessment to change control so a new supplier, catalyst, equipment item or container closure triggers a review automatically. Link it to supplier qualification so element-level questions are part of the standard questionnaire, not an afterthought.

Tie the testing plan to your specifications and stability program, and feed results into trending so a drift toward a PDE is visible before it becomes a deviation. Deviations and out-of-trend results should route back to the assessment owner, who decides whether the conclusion still holds.

Training matters too. Analysts, buyers and QA reviewers each touch a different part of the chain, and each needs to know what evidence the assessment depends on. Management review should see a short summary of open elemental-impurity risks and any pending guideline changes.

Finally, keep the file audit-ready by default: the assessment, supplier evidence, validated methods, trend reports and corrective actions stored together and versioned. When the quality system carries the Q3D logic, inspections become a matter of showing records rather than reconstructing decisions.

How a compliant sourcing partner supports your assessment

A sourcing partner cannot do your risk assessment, but it can supply the evidence that feeds it. We provide pharmaceutical-grade materials with documentation that supports supplier-side controls. When you evaluate any supplier, ask for batch-level COAs, manufacturing process provenance, audit reports, and any elemental-impurity testing already performed.

Good supplier documentation can reduce finished-product testing when the assessment shows a low likelihood of a relevant element. You keep the decision, and we supply the records behind it. If you need documentation or want to plan supply continuity, contact our sourcing team through the Chemical Sourcing Division.

— RJR Worldwide

FAQ

What is the classification of impurities under ICH Q3D?

The element’s class decides how much evidence the risk assessment needs for each element, as set out in the ICH Q3D(R2) guideline.

What is the ICH Q9(R1) guideline?

ICH Q* is the quality risk management guideline that supplies the general principles behind a risk-based approach. Q3D applies that approach to elemental impurities, so your assessment should show how identified risks were evaluated and controlled.

How do you calculate impurity limits as per ICH Q3D?

Divide the element’s PDE by the maximum daily dose of the drug product to get the permitted concentration. Worked examples appear in the Q3D(R2) appendix extracts, and route-specific PDEs apply for oral, parenteral and inhalation products.

What analytical methods are used to test elemental impurities?

ICP-MS is commonly used for its sensitivity and specificity, and ICP-OES is used where analytes and limits allow. Either method must be validated following the principles in ICH Q2(R2).

Sources

• Q3D(R2)
• (PDF) ICH Q3D (R2): Guidelines for Elemental Impurities
• Q3D(R2) – Guideline for Elemental Impurities | FDA

Recommended

• Sodium Metabisulfite (Na₂S₂O₅)
• Calcium Hypochlorite (Ca(ClO)₂)