Good Distribution Practice for Medical Devices in Thailand: What GDP Requires

Every company holding a Thai FDA import or wholesale license for medical devices operates under a binding obligation most foreign manufacturers underestimate until the first Medical Devices Control Division (MDCD) inspection: Good Distribution Practice. GDP is not a best-practice suggestion layered on top of a license. It is a Ministry of Public Health notification issued under the Medical Device Act B.E. 2551 (2008) and its amendment, the Medical Device Act (No. 2) B.E. 2562 (2019), and it is a binding condition of the license itself. Understanding what GDP demands, from warehouse layout to record retention to who signs off on it, is the difference between a routine renewal inspection and a license suspension.

Who GDP Applies To and Why It Matters

GDP obligations reach two categories of licensee. The first is the licensed importer of record: the entity named on the import license that brings finished devices into Thailand from overseas. The second is any downstream wholesale distributor purchasing from that importer and redistributing to hospitals, clinics, or other wholesale buyers. Retail sellers sit outside the GDP notification itself, though they carry their own storage and handling obligations under related rules. The Act's 2008 foundation created the licensing structure; the 2019 amendment strengthened MDCD's post-market enforcement authority, including the power to inspect, demand corrective action, suspend a license, and in serious cases pursue administrative or criminal penalties. That enforcement authority is what turns GDP from paperwork into operational risk for anyone who treats it loosely.

What the Warehouse Itself Must Look Like

MDCD's premises standards apply to any facility a licensee uses to receive, store, and dispatch devices, including a leased third-party logistics warehouse where the licensee retains legal control over the goods. Where a device's approved labeling specifies a storage temperature range, the facility must hold that range continuously: devices requiring cold chain management at 2 to 8°C or below need validated refrigeration or cold-room equipment, and ambient-sensitive devices with upper temperature limits need air-conditioned space with a documented temperature profile. The facility must also maintain physically distinct, access-controlled, and clearly signed areas for quarantined stock, returned product, and recalled product, so nothing not yet cleared for distribution can be released by accident. Lighting has to be adequate throughout storage and picking areas to allow label and packaging inspection, security has to guard against unauthorized access, and a documented pest control program with retained inspection and treatment records has to be in place and ready for review.

Cold Chain Validation Is Where Inspections Get Serious

Temperature-sensitive devices are the highest-scrutiny part of a GDP inspection. Anything labeled for 2 to 8°C storage, or below 0°C for certain biological or diagnostic devices, needs a validated cold chain from the moment it clears customs through final delivery to the customer. The instruments doing the monitoring matter as much as the storage itself: thermometers, data loggers, and humidity monitors must be calibrated against traceable national or international standards on a defined schedule, with certificates naming the instrument, the calibration date, the next due date, and the traceability chain to a recognized metrology body. When a reading falls outside the validated range, the licensee needs a documented procedure that records the excursion, assesses the impact, and reaches a disposition decision of release, quarantine, or destruction. MDCD inspectors ask for excursion logs routinely, and an importer who cannot produce them, or whose logs show excursions with no documented follow-up, should expect a major finding. The obligation extends past the warehouse door into transport: cold-chain devices delivered to customers must move in validated insulated packaging or refrigerated vehicles, with delivery records documenting the temperature conditions maintained or confirming validated packaging was used for the full shipment.

Records Are the Backbone of the System

Traceability underlies every other GDP obligation. MDCD requires records sufficient to trace any batch from the overseas supplier through to the end customer, in both directions, and this bidirectional traceability is checked at every licensing inspection because it is what makes an effective recall possible in the first place. Incoming goods records need to capture the foreign supplier's name and address, quantity received, batch or lot number, expiry date where applicable, date of receipt, and condition on arrival, with any discrepancy resolved before the product enters releasable stock. Distribution records need the customer's name and address, the device name and registration number, quantity dispatched, batch or lot number, and delivery date. Adverse event reports from users also need to be recorded and retained, independent of whatever separate post-market vigilance reporting threshold applies under the Medical Device Act. All of this has to be kept for at least 5 years or for the product's shelf life, whichever is longer, which for long-service-life devices can mean retention well past 5 years. Electronic records are acceptable provided the system blocks unauthorized alteration and produces a reliable audit trail.

The Responsible Person Carries Personal Accountability

Every licensed importer must name a Responsible Person, and the role is not an administrative formality. Under the Medical Device Act and the GDP notification, the RP carries personal accountability for the licensed operation's GDP compliance, covering premises, documentation, cold chain, and recall procedures. MDCD's qualification bar typically expects a science, engineering, or pharmacy background, varying with the device categories the licensee handles, and MDCD expects the RP to hold valid Thai work authorization, whether as a Thai national or a foreign national with the appropriate visa and work permit for the role. The RP's name sits on the import license itself, and any change requires MDCD notification and approval before the new RP takes over. In practice, the RP is the person MDCD addresses directly during an inspection, expected to speak fluently about the facility layout, the documentation system, and any recent deviation history. An RP who cannot answer those questions creates inspection risk on its own, no matter how solid the underlying records are.

Inspections, Returns, and Recalls

MDCD verifies GDP compliance at the initial licensing inspection and again at each renewal, both against a structured checklist mapped to the notification's requirements, and it retains authority to inspect unannounced at any time, particularly following a complaint or a post-market safety signal. A deficiency triggers a corrective action requirement with a deadline: minor findings typically carry a 30-day window, major findings shorter timelines with evidence of immediate interim controls, and serious quality-risk failures can mean immediate suspension pending investigation. Returns and recalls are related but distinct processes that both need documented procedures in place before a license is even granted. Returned goods, whatever the reason for the return, must go into quarantine, get assessed under a documented procedure, and either return to releasable stock with justification or get dispositioned for destruction; they may never be re-released without that documented assessment. Recalls demand more: the importer must be able to identify every affected batch, in its own stock and in customers' hands, within a defined timeframe, using the traceability records built into the system above. The recall procedure itself must specify who authorizes the decision, how customers are notified, how returned recalled product is segregated and dispositioned, and how MDCD stays informed of progress, and MDCD expects that procedure to have been tested, at minimum through a tabletop exercise, on request.

GDP compliance is a standing operational commitment, not a one-time submission, and it is verified every time a license comes up for inspection. DeeMED Consulting supports foreign manufacturers and their Thai distribution partners through Local License Holder and Responsible Person arrangements, building the premises, cold chain, and traceability systems that MDCD inspects into the operation from day one rather than assembling them under deadline pressure before a renewal.