Data Integrity and Compliance

ALCOA+

Last updated:
October 3, 2026

TL;DR

ALCOA+ is the set of nine attributes regulators use to decide whether lab data can be trusted: Attributable, Legible, Contemporaneous, Original and Accurate, plus Complete, Consistent, Enduring and Available. It applies to paper notebooks and electronic records alike, and the data integrity guidance from the FDA, MHRA and WHO is built around it.

What is ALCOA+?

ALCOA+ is an acronym for the nine attributes that make a record of lab data trustworthy: Attributable, Legible, Contemporaneous, Original, Accurate, Complete, Consistent, Enduring and Available. Regulators use it to judge whether data can support the decisions made with them, and it applies to a paper notebook just as much as to an entry in an electronic lab notebook.

The first five letters came out of the FDA. Stan W. Woollen coined ALCOA in the early 1990s while he was working in the FDA's Office of Enforcement, as a memory aid for his public talks as the agency's bioresearch monitoring coordinator. The four "plus" attributes were added later, once regulators started applying the idea to electronic records. The MHRA's 2018 GxP data integrity guidance lists all nine and says expectations are the same whichever acronym you use, and the WHO's 2021 data integrity guideline uses ALCOA+ throughout.

People often treat ALCOA+ and data integrity as the same thing. Data integrity is the goal, though, and ALCOA+ is what an inspector holds each record up against, one record at a time.

What do the nine attributes mean at the bench?

Each attribute comes down to a habit at the bench or a control in whatever system holds the record.

  • Attributable: you can tell who did the work and who entered the data. On paper that means initials and a date in permanent ink. In an electronic system it means individual logins and an audit trail, so a shared bench account defeats the point.
  • Legible: someone outside the project can read the record and make sense of it years from now.
  • Contemporaneous: data go down when the work happens. A cell count copied three weeks later from a sticky note in a lab coat pocket fails.
  • Original: the first capture of the data is kept, or a verified true copy of it. The raw plate reader export is the original. The summary table you built from it in Excel is derived data.
  • Accurate: the record matches what happened, with no quiet rounding of a value that sat just outside spec.
  • Complete: the failed run gets recorded, and so does the repeat.
  • Consistent: related records agree. If the notebook says the qPCR plate ran on Tuesday and the instrument log says Wednesday, somebody has to explain the difference.
  • Enduring: the record lasts the full retention period, through software upgrades and changes in file format.
  • Available: when an auditor asks for the record, you can find it and produce it in a reasonable time.

Original catches people out more than the others. If you write a cell count on your nitrile glove because there was no paper within reach, the glove is now raw data, strictly speaking.

Where does ALCOA+ show up in the regulations?

Mostly in guidance documents, and in the wording of inspection findings. The FDA's 2018 guidance on data integrity in drug CGMP defines data integrity as "the completeness, consistency, and accuracy of data" and says such data should be ALCOA. The same guidance says it is not acceptable to record data on pieces of paper that will be thrown away once the values are transcribed into a laboratory notebook. That's the glove problem in regulatory language.

GLP has its own version of the same idea. For studies conducted under GLP, 21 CFR 58.130(e) says data are recorded directly, promptly and legibly in ink, dated and signed or initialed by the person who entered them, and changed only in a way that leaves the original entry readable, with a reason and a date.

So when an FDA warning letter cites data integrity, the finding usually maps onto one or more of the nine attributes. Original data that were not retained is a common one. A result nobody can trace to an analyst is another. And outside regulated work, these are the same attributes a PI relies on when a reviewer questions a figure. For records drafted or analyzed with AI tools, see what ALCOA+ means when AI is used in labs.

How do you test your own records against ALCOA+?

Pick one recent experiment, say a western blot from last month, and trace it from the notebook entry to the raw image files and then to the quantification spreadsheet. The gaps tend to show up fast: an image saved only as a cropped PNG or an antibody lot number that never got written down.

Then fix whatever depends on someone remembering. Retire shared logins first. Decide where raw instrument files live and who is allowed to delete them, and write a short correction procedure that keeps the original value visible next to the reason it changed. For electronic records, check that the audit trail is one users can't switch off.

In IGOR, the electronic lab notebook saves every edit as a timestamped version in Document Version History, and the audit trail attributes each change to the user who made it. Files uploaded to the Appendix widget are kept as the original, unaltered file. Approved entries are permanently locked, and correcting one means creating a revision copy with a documented reason.

Frequently asked questions

What does ALCOA+ stand for?

ALCOA+ stands for Attributable, Legible, Contemporaneous, Original and Accurate, plus Complete, Consistent, Enduring and Available. The first five are the original ALCOA.

What's the difference between ALCOA and ALCOA+?

ALCOA+ adds four attributes to the original five: Complete, Consistent, Enduring and Available. They reflect problems that became more visible once labs moved to electronic records, deleted runs being the obvious example. The MHRA's 2018 guidance says expectations are the same whichever acronym is used.

Does ALCOA+ apply to academic labs that don't work under GLP or GMP?

Not as a regulatory requirement. ALCOA+ is an expectation for regulated work, such as studies conducted under GLP or manufacturing under GMP. But a journal editor or a patent attorney looks for the same attributes when a result is questioned, so academic labs gain from following it anyway.

Is a photo of a handwritten notebook page an original record?

No, a photo of a notebook page is a copy. It can stand in for the original only if it is verified as a true copy that keeps the full content and context of the page. The IGOR mobile app uploads photos of handwritten notes directly to the matching notebook entry.

Who came up with ALCOA?

Stan W. Woollen coined ALCOA in the early 1990s, while he was working in the FDA's Office of Enforcement. He used it as a memory aid in his talks as the FDA's bioresearch monitoring coordinator, and it spread through the quality assurance community from there.

Related terms

References

  1. U.S. Food and Drug Administration. Data Integrity and Compliance With Drug CGMP: Questions and Answers. Guidance for Industry, December 2018.
  2. Medicines and Healthcare products Regulatory Agency (MHRA). 'GXP' Data Integrity Guidance and Definitions, Revision 1, March 2018.
  3. World Health Organization. Guideline on data integrity. WHO Technical Report Series No. 1033, Annex 4, 2021.
  4. 21 CFR 58.130, Conduct of a nonclinical laboratory study (Good Laboratory Practice), eCFR.
  5. Woollen, S. W. Data Quality and the Origin of ALCOA, 2010.

This page is a general overview of ALCOA+ for lab scientists. It is not formal compliance or legal advice, and requirements for a specific study or product depend on the regulations that apply to it and on your organization's own procedures.