Harry Jennings, Partner at VWV, discusses the UK’s new framework governing point of care (POC) and modular manufacturing and its implications for manufacturers and marketing authorisation holders in the UK.
Governments and the pharmaceutical industry have been considering a novel ways of manufacturing that promises to bring medicinal products, such as their excipients, and medications that are fragile or short-lived, closer to patients.
New UK regulations have established the regulatory framework for ‘decentralised’ manufacturing of medicines in the UK. Although this is happening already, it requires a significant duplication of effort that could arguably stifle progress. Streamlining changes are coming.
In the UK, the Human Medicines (Amendment) (Modular Manufacture and Point of Care) Regulations 20241 have passed through the UK legislative procedure and will apply from 23 July 2025. They make changes to two UK regulations2 governing medicines and clinical trials respectively. The changes answer specific problems relating to advanced therapies and other products for which centralised manufacturing is not suitable, but perhaps the decentralised model is generally better.
Are you looking to explore how lipid formulations in softgels can enhance drug absorption and bioavailability. Register for our upcoming webinar to find out!
3 September 2025 | 3:00 PM BST | FREE Webinar
This webinar will delve into the different types of lipid formulations, such as solutions, suspensions, emulsions, and self-(micro)emulsifying systems. Applications span diverse therapeutic areas including HIV therapy, oncology, immunosuppressants, and emerging treatments like medicinal cannabis (eg, CBD).
What You’ll Learn:
Lipid formulation development and screening tools for optimisation
Key steps in scale-up and industrialisation to ensure consistency and efficiency
Impact of lipid-based softgels on drug delivery and patient outcomes.
If a decentralised model is being considered, then detailed governance structures should be designed with a view to achieving robust control of the whole system, accountability and defensible decision making
Under UK blood regulation3 and human tissue regulation,4 licence holders may engage contractors to undertake regulated activities on their behalf. Provided certain requirements are met, those contractors do not themselves need a licence. These hub and spoke models provided inspiration for the creation of the coming UK decentralised manufacturing framework.
In the EU, the EU pharmaceutical package of reform5 includes a proposed new Directive,6 which will replace the current Medicines Directive (2001/83/EC). That proposed Directive contains a similar regulatory framework for decentralised manufacturing (see prospective Articles 142-153). But the UK framework will arrive first.
The decentralised spectrum
Decentralisation comes in different forms, such as at home, where a person makes a medicine in their home, for example using a consumer 3D printer, as well as point of care, where eg, a cancer medicine is manufactured in a facility located in proximity to where a patient is waiting for treatment, such as in hospital. Then there is the modular option, whereby a self-contained facility has all it needs to make and replicate production of a medicine, so modules are efficiently installed as, when and where they are required to meet demand.
Key concepts
These are the important concepts in the new UK framework:
Control site – the main manufacturing site, which acts as the hub for regulatory purposes. Other manufacturing sites are subordinate to the control site and do not need their own separate regulatory approvals.
Master file – the manufacturing dossier in which the main regulatory documents are collected and to which all subordinate sites refer. One file per product. It is kept under review and updated regularly, but the control site has some freedom to update it without requiring approval.
Within the drafting of the new regulation, the concepts of supervision, control of operations, consistency and satisfying the requirements of the master file are repeated. In other words, the control site must have sufficient oversight of the other manufacturing sites (let us call them ‘satellite sites’).
Oversight
This type of system only works if the control site takes full responsibility for the satellite sites. This means robust systems and procedures must be implemented for that purpose. That might be comparatively simple within the same organisation and in relation to sites within a small radius of the control site.
the reality of the decentralised model is more likely to look like a large number of sites within a large radius of the control site, covering the territory of an entire legal jurisdiction
However, the reality of the decentralised model is more likely to look like a large number of sites within a large radius of the control site, covering the territory of an entire legal jurisdiction. It is also likely to involve collections of companies – some related, some not. With that context, it is clear that the major issue to resolve relates to control and reliability. How will the control site be comfortable enough to take the risk of non-compliance and safety issues occurring at satellite sites? The answer is a mix of policies, procedures, staff, technology and contracts.
If a decentralised model is being considered, then detailed governance structures should be designed with a view to achieving robust control of the whole system, accountability and defensible decision making. That should be set out in an internal policy and as a schedule to any relevant contracts. It is important that the control site assumes the responsibility of the regulator.
Access to documents, sites and staff
Each organisation involved in the process, from triggering an order to administering the medicine, should be subject to contractual obligations that require them to:
follow the requirements of regulation and the master file and comply with the instructions of the control site
do what is necessary to ensure the quality of the manufactured medicines, including helping the qualified person (QP)
report issues relating to manufacturing or affecting the patient
keep records, allow access to those records, and demonstrate their involvement in the process
permit audits and inspections and be ready to answer questions posed by the control site or the regulator.
For the early period in which the new regulations apply, it is reasonable to expect an extra-vigilant and extra-inquisitive regulator, nervous control sites and very busy QPs. Extra time and resources should therefore be devoted to keeping them all happy.
Safety and site regulation
Safety is a concern. It is easy to imagine that a satellite site could have a slightly different approach to the manufacturing process, staff with different attitudes, different environmental conditions, and different customer or patient needs. Could that lead to safety issues?
To comply with post-market safety monitoring and reporting requirements, control sites must ensure they receive reassurance from satellite sites about strict compliance and transparency. They will also need to require satellite sites to report adverse events promptly and react to instructions from the control site when safety issues occur.
Some satellite sites will be more prone to safety and site regulatory issues than others and for some the normal approach taken in large centralised facilities will not be suitable. It is advisable to initiate designing and testing measures early and work out what that additional regulation means in the decentralised context.
If a contractor is involved in a decentralised manufacturing procedure, consider potential disaster scenarios, such as injuries, quality problems, data loss, security incidents, regulatory breaches and property damage. Then use that thinking to inform discussions about liability limits and exclusions, indemnities and insurance.
Technology
For the technical operation of a web of sites, systems must enable them to all share data and communicate with each other. And, given the risks associated with human interpretation, variation (with respect to gaps in standard operating procedures) and error, manufacturers should have detailed conversations with technology vendors or in-house experts about remote monitoring and automation.
Problems relating to technology may result in regulatory breaches, injury, losses relating to diminished sales, and damaged reputation. Start the difficult conversations about liability early and strengthen contract provisions concerning implementation, acceptance, service levels and support.
Super QPs
In large organisations, a qualified person (QP) may be well accustomed to overseeing multiple sites and complex supplier relationships. But if they are required to take responsibility for the satellite sites, of which there may be many, will their challenging role become more difficult? Surely, in many decentralised scenarios it will.
There is some recognition in the new UK regulations that normal QP releases would not be possible in certain scenarios. Otherwise, the QP role is essentially multiplied, and thus QPs are advised to start checking whether they will have the assistance they need (and if their insurance policies are still fit for purpose). The businesses implementing decentralised manufacturing operations should review policies and contracts and consult with the QP as to whether they should secure requisite help internally and/or externally.
Knowledge arising from manufacturing – improvements
If a manufacturing process is not thoroughly tried and tested, it is possible that a person carrying out that process could develop an improvement that makes a big difference to the success of the product being manufactured. That is a risk for the product owner or the owner of manufacturing technology since the person that owns that improvement may decide to prevent use of it or even offer it to a competitor. The context of decentralised manufacturing may increase this risk due to the number of sites involved and the chance of local variations in the finer details of the process used at those sites. It is thus advisable to carefully check the intellectual property provisions of relevant contracts to ensure that blocking technology does not put the business at risk.
Decentralised diagnostics
It is useful to visualise a patient’s journey through the (hypothetical) decentralised system: Patient feels sick; gets tested; receives diagnosis; obtains prescription; doctor has medicine manufactured locally; patient attends local hospital or treatment centre; medicine is administered to the patient. Considering this journey, the diagnostic test could (and should) happen locally too. In January 2021, the Medicines and Healthcare products Regulatory Agency (MHRA) published guidance7 on using in vitro diagnostic devices at the point of care and, also starting in 2021, NHS England has implemented a Community Diagnostic Centre (CDC) programme8 with 170 approved CDC sites (at the time of writing).
For decentralised manufacturing to work, stakeholders should learn lessons from decentralised diagnostic approaches and build links between the two systems. This makes particular sense if the clinical choice of a medicine depends on the results of a diagnostic test or if the manufacturing process involves similar specialist analysis.
There will be opportunities to reach out and start discussions about linking diagnostic and manufacturing operations, premises, equipment and technologies. Start with a confidentiality agreement and then see where it goes!
Relationships
For a system involving many different stakeholders and users in many different locations, there are key relationships to build and maintain. For example, clinicians and hospitals. Depending on the degree of decentralisation, it may be critical to have well-trained individuals on site who collaborate with manufacturers. If the manufacturing takes place on that site, then rights to use facilities and intellectual property will need to be negotiated, and a robust system of oversight (possibly across organisations) will be needed.
Secondly, marketing authorisation holders (MAH) have a lot at stake in a decentralised system and will need to rely heavily on all those organisations and individuals that are closer to the patient. The manufacturer will want the MAA to provide sufficient information to ensure the master file is consistent with the marketing authorization, highlighting the critical importance of an efficient flow of information.
Sustainability
At a basic level, fewer miles equals fewer tons of CO2. This suggests that decentralised manufacturing must be better for the planet as the medicine is closer to the patient. However, the reality may be different. A sprawling network of sites will require input materials to be delivered to them and each site will produce waste and, potentially, effluent. Serious consideration must therefore be given to whether decentralised manufacturing is sustainable when compared to the current system.
The NHS is working towards being Net Zero by 2050 and that agenda is being aggressively pursued. All those who touch the NHS supply chain are affected and will be challenged to demonstrate their green credentials. It is a complex task for most businesses to collect data and confidently calculate their carbon footprint. Serious questions remain regarding the impact of decentralised manufacturing approaches on the road to Net Zero for any business in the medicines supply chain and on the task of reporting up that chain.
While lawyers do not have the answers to these questions, one thing is certain: the laws relating to sustainability, and the impact those laws have as the requirements they impose flow down supply chains, are likely to get tougher.
What’s next?
With the eyes of other regulators (including the EMA) watching, the MHRA is likely to be very sensitive about strict compliance and transparency. It will also want the system to be seen to work well. But, even if the regulation works as it should, attitudes and infrastructure need to be made ready for decentralised manufacturing. In this sense, the conversation has started but it needs momentum, which ought to come from patients, patient groups, clinicians, hospitals, NHS procurement and commissioning, those responsible for NHS facilities, and local authorities, as well as MAHs and manufacturers.
The rest of the world will be interested to see how decentralised manufacturing works in practice and whether there is scope for fixing some of the supply issues around the world. For those in the lead, there is an opportunity to improve global health equity and better prepare for major health incidents.
Harry Jennings
Harry Jennings, Partner at law firm VWV, is an experienced UK commercial lawyer working predominantly in the life sciences sector. He has worked for law firms, in house for a CDMO and as a legal knowledge expert.
Human Medicines Regulations 2012 and Medicines for Human Use (Clinical Trials) Regulations 2004.
Under the Blood Safety and Quality Regulations 2005.
Under the Human Tissue Act 2004.
Revision Of The EU’s Basic Pharmaceutical Legislation, Including Medicines For Children And For Rare Diseases. [Internet] European Parliament. Available from: https://www.europarl.europa.eu/legislative-train/theme-promoting-our-european-way-of-life/file-revision-of-the-pharmaceutical-legislation
Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on The Union Code Relating To Medicinal Products For Human Use, And Repealing Directive 2001/83/EC And Directive 2009/35/EC.
In Vitro Diagnostic Point-Of-Care Test Devices. [Internet] UK Government. Available from: https://www.gov.uk/government/publications/in-vitro-diagnostic-point-of-care-test-devices
Community Diagnostic Centres – Guidance For Planning, Design And Implementation. [Internet] NHS England. Available from: https://www.england.nhs.uk/long-read/community-diagnostic-centres/
This website uses cookies to enable, optimise and analyse site operations, as well as to provide personalised content and allow you to connect to social media. By clicking "I agree" you consent to the use of cookies for non-essential functions and the related processing of personal data. You can adjust your cookie and associated data processing preferences at any time via our "Cookie Settings". Please view our Cookie Policy to learn more about the use of cookies on our website.
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorised as ”Necessary” are stored on your browser as they are as essential for the working of basic functionalities of the website. For our other types of cookies “Advertising & Targeting”, “Analytics” and “Performance”, these help us analyse and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these different types of cookies. But opting out of some of these cookies may have an effect on your browsing experience. You can adjust the available sliders to ‘Enabled’ or ‘Disabled’, then click ‘Save and Accept’. View our Cookie Policy page.
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Cookie
Description
cookielawinfo-checkbox-advertising-targeting
The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Advertising & Targeting".
cookielawinfo-checkbox-analytics
This cookie is set by GDPR Cookie Consent WordPress Plugin. The cookie is used to remember the user consent for the cookies under the category "Analytics".
cookielawinfo-checkbox-necessary
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance
This cookie is set by GDPR Cookie Consent WordPress Plugin. The cookie is used to remember the user consent for the cookies under the category "Performance".
PHPSESSID
This cookie is native to PHP applications. The cookie is used to store and identify a users' unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed.
viewed_cookie_policy
The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
zmember_logged
This session cookie is served by our membership/subscription system and controls whether you are able to see content which is only available to logged in users.
Performance cookies are includes cookies that deliver enhanced functionalities of the website, such as caching. These cookies do not store any personal information.
Cookie
Description
cf_ob_info
This cookie is set by Cloudflare content delivery network and, in conjunction with the cookie 'cf_use_ob', is used to determine whether it should continue serving “Always Online” until the cookie expires.
cf_use_ob
This cookie is set by Cloudflare content delivery network and is used to determine whether it should continue serving “Always Online” until the cookie expires.
free_subscription_only
This session cookie is served by our membership/subscription system and controls which types of content you are able to access.
ls_smartpush
This cookie is set by Litespeed Server and allows the server to store settings to help improve performance of the site.
one_signal_sdk_db
This cookie is set by OneSignal push notifications and is used for storing user preferences in connection with their notification permission status.
YSC
This cookie is set by Youtube and is used to track the views of embedded videos.
Analytics cookies collect information about your use of the content, and in combination with previously collected information, are used to measure, understand, and report on your usage of this website.
Cookie
Description
bcookie
This cookie is set by LinkedIn. The purpose of the cookie is to enable LinkedIn functionalities on the page.
GPS
This cookie is set by YouTube and registers a unique ID for tracking users based on their geographical location
lang
This cookie is set by LinkedIn and is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.
lidc
This cookie is set by LinkedIn and used for routing.
lissc
This cookie is set by LinkedIn share Buttons and ad tags.
vuid
We embed videos from our official Vimeo channel. When you press play, Vimeo will drop third party cookies to enable the video to play and to see how long a viewer has watched the video. This cookie does not track individuals.
wow.anonymousId
This cookie is set by Spotler and tracks an anonymous visitor ID.
wow.schedule
This cookie is set by Spotler and enables it to track the Load Balance Session Queue.
wow.session
This cookie is set by Spotler to track the Internet Information Services (IIS) session state.
wow.utmvalues
This cookie is set by Spotler and stores the UTM values for the session. UTM values are specific text strings that are appended to URLs that allow Communigator to track the URLs and the UTM values when they get clicked on.
_ga
This cookie is set by Google Analytics and is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. It stores information anonymously and assign a randomly generated number to identify unique visitors.
_gat
This cookies is set by Google Universal Analytics to throttle the request rate to limit the collection of data on high traffic sites.
_gid
This cookie is set by Google Analytics and is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visited in an anonymous form.
Advertising and targeting cookies help us provide our visitors with relevant ads and marketing campaigns.
Cookie
Description
advanced_ads_browser_width
This cookie is set by Advanced Ads and measures the browser width.
advanced_ads_page_impressions
This cookie is set by Advanced Ads and measures the number of previous page impressions.
advanced_ads_pro_server_info
This cookie is set by Advanced Ads and sets geo-location, user role and user capabilities. It is used by cache busting in Advanced Ads Pro when the appropriate visitor conditions are used.
advanced_ads_pro_visitor_referrer
This cookie is set by Advanced Ads and sets the referrer URL.
bscookie
This cookie is a browser ID cookie set by LinkedIn share Buttons and ad tags.
IDE
This cookie is set by Google DoubleClick and stores information about how the user uses the website and any other advertisement before visiting the website. This is used to present users with ads that are relevant to them according to the user profile.
li_sugr
This cookie is set by LinkedIn and is used for tracking.
UserMatchHistory
This cookie is set by Linkedin and is used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences.
VISITOR_INFO1_LIVE
This cookie is set by YouTube. Used to track the information of the embedded YouTube videos on a website.