• Newsroom
  • Join us!
  • Newsletter
  • Kontakt
  • English English English en
  • Deutsch Deutsch German de
Experts Institut
  • Business Consulting
    • Business Solutions
      • Digitization
      • Sustainability Corporate strategy
      • Management systems
      • Project management
      • Strategy & Performance
      • Transformation & Leadership
  • GXP Consulting
    • GMP Beratung
      • Audits & inspections
      • GMP/GXP training courses
      • GMP Aircheck4
      • Continuous Manufacturing
  • Industries
    • Pharma
    • Service providers & trade
    • Automotive
    • FOOD & BEVERAGES
    • Financial service providers & insurances
    • Informationstechnik (IT)
    • Aerospace
  • Academy
    • Individuelle Inhouse-Schulungen
      • GMP/GXP training courses
    • Experts Institut Events
      • Academy
    • Direkt buchen
      • Live-Events
      • On-Demand Webinar
  • Kunden
  • Über uns
    • Über uns
      • Guideline
      • Portrait
      • Team
      • Geschäftsführung
      • Vision
      • Events
      • History Experts Institute
      • Sustainability at the Experts Institute
      • Social responsibility
    • Wissen
      • GMP Glossary
      • FAQ – Frequently asked questions in the GMP environment
      • Videos
    • Blog
      • Newsroom
  • Click to open the search input field Click to open the search input field Search
  • Menu Menu
  • Link to LinkedIn
  • Link to Xing
Sustainability

CSRD in the omnibus procedure: Basics, terms and what companies should know now

The Corporate Sustainability Reporting Directive (CSRD) has significantly increased the demands placed on sustainability reporting by companies. Many organizations are currently faced with the question: What does CSRD actually mean – and what is the omnibus procedure all about?
This article provides an understandable introduction to the basics, classifies key terms and shows why there is a need for action, even if not all details have been finally clarified.

CSRD

What is the CSRD – and why does it affect so many companies?

The CSRD is an EU directive that obliges companies to report comprehensively, comparably and verifiably on sustainability. The aim is to integrate environmental, social and governance (ESG) aspects more strongly into business decisions and external transparency.

Compared to previous regulations (e.g. NFRD), the scope of application is significantly wider:

  • more companies subject to reporting requirements
  • deeper content requirements
  • Stronger auditing and documentation obligations

CSRD is therefore no longer just a reporting issue, but touches on management, processes, IT and governance.

The omnibus procedure: Why the rules are evolving

The so-called omnibus procedure describes adjustments and bundling of regulatory requirements at EU level. The CSRD and the associated ESRS (European Sustainability Reporting Standards) are also affected by this.

For companies, this means

  • The objectives and structure of the CSRD are clear
  • Detailed designs continue to evolve
  • Individual requirements are specified or sharpened

Despite this dynamic, the implementation obligation remains. Waiting is therefore not an option – what is needed is a pragmatic approach to uncertainty.

Key terms briefly explained

Double materiality analysis

Companies must evaluate:

  1. Impact materiality: What impact does the company have on the environment and society?
  2. Financial materiality: Which sustainability issues have an impact on the financial situation?

This analysis forms the basis for the content of CSRD reporting.

ESRS compared to CSRD

The European Sustainability Reporting Standards (ESRS) specify the content that companies must report and how this information must be prepared. They define key figures, qualitative information, the structure and level of detail of sustainability reporting and make it comparable and verifiable throughout Europe.

The CSRD (Corporate Sustainability Reporting Directive), on the other hand, is the overarching legal framework. It determines who is obliged to report, when reporting is required and under what legal conditions. The CSRD therefore provides the legal framework, while the ESRS fills out this framework in terms of content.

In short: The CSRD requires reporting – the ESRS explain how it is to be implemented in practice.

Scope 1, 2 and 3

  • Scope 1 – direct emissions: Emissions from own or controlled sources, e.g. from company-owned heating systems, production processes, emergency generators or the company’s own vehicle fleet
  • Scope 2 – indirect emissions from energy: emissions from the generation of purchased energy, such as electricity, district heating, steam or cooling, which are used in the company
  • Scope 3 – Emissions along the entire value chain: All other indirect emissions, e.g. from purchased raw materials, transportation and logistics, employee commuting, use and disposal of products or from upstream supply chains

Scope 3 in particular poses major operational challenges for many companies.

Why Scope 3 is so complex – and at the same time so relevant

Scope 3 emissions make up the largest part of the carbon footprint in many industries. At the same time, the relevant data is often outside the direct sphere of influence, for example at suppliers or logistics partners.

Typical challenges:

  • Different data quality from suppliers
  • Lack of standards and methods
  • Manual surveys and approximations

In practice, it is clear that perfect data is unrealistic at the beginning. The decisive factor is a step-by-step, prioritized approach that creates transparency and can be continuously improved.

CSRD as an organizational and system issue

A common mistake is to view CSRD solely as a reporting project. In fact, it concerns:

  • Existing IT and ERP systems
  • Quality and management systems
  • Roles, responsibilities and governance

A lot of CSRD-relevant information already exists – for example in purchasing, HR, compliance or energy management. The key is to bring this data together in a structured way instead of creating parallel isolated solutions.

Why early prioritization is crucial

Not all CSRD requirements can be implemented at the same time or are equally relevant. Companies that prioritize at an early stage,

  • reduce operational complexity
  • increase auditability
  • create realistic implementation timetables.

The aim is not to ignore requirements, but to structure them according to risk, impact and feasibility.

Conclusion: CSRD needs structure instead of perfection

CSRD in the omnibus process does not demand perfect reporting straight away, but rather comprehensible decisions, robust processes and a clear implementation approach. Companies that understand sustainability as part of their management logic and build it up systematically create a stable foundation, even in an evolving regulatory environment.

How we support you

The Experts Institute supports companies in classifying CSRD and ESRS requirements, setting priorities and developing an auditable, practical implementation. Get ahead and in touch with us: info@expertsinstitut.de

Read our entire blog here: https://experts-institut.de/newsroom/
And feel free to follow us on LinkedIn: https://de.linkedin.com/company/expertsinstitut

4 weeks /by Nadjeschda Ilmberger
https://experts-institut.com/wp-content/uploads/2026/01/LinkedIn-4.jpg 1080 1920 Nadjeschda Ilmberger https://experts-institut.de/wp-content/uploads/2023/02/GEMI_Logo_Slogan_color_RGB.webp Nadjeschda Ilmberger2026-01-21 13:17:462026-01-21 13:18:03CSRD in the omnibus procedure: Basics, terms and what companies should know now
AI, GMP, GXP

AI in the pharmaceutical industry: Annex 22 & EU AI Act – current obligations and practical implementation

The use of artificial intelligence (AI) is rapidly gaining importance in the pharmaceutical industry – from increasing efficiency in everyday office work to complex applications in GMP-relevant processes. At the same time, regulatory requirements are increasing significantly. The EU AI Act and the planned Annex 22 to the EU GMP guidelines will provide a clear regulatory framework for the use of AI in regulated environments for the first time.

This article summarizes the key content of the Experts Talk “AI in the pharmaceutical industry – Annex 22 & EU AI Act as a framework for quality and efficiency”, which took place on 27 November 2025. The discussion focused on what these regulatory developments mean in concrete terms for pharmaceutical companies, what obligations already apply today and how the path from risk analysis to regulatory compliance can be successful.

EU AI Act

Why the EU AI Act and Annex 22 are relevant now

The EU AI Act is the first comprehensive European regulation for the use of AI. It takes a risk-based approach and differentiates between AI applications according to their potential impact on people, safety and fundamental rights. The AI Act is particularly relevant for pharmaceutical companies, as many AI applications can be classified as high-risk.

At the same time, the planned Annex 22 specifies the authorities’ expectations for the use of AI in the GMP environment. Even though Annex 22 had not yet been finally adopted at the time of the Experts Talk, it was clear from the exchange with the speakers that the regulatory direction is clear – and companies should prepare now.

Annex 22 & EU AI Act at a glance: Which regulations apply to which AI use cases – from office chatbots to AI in the GMP process?

A central topic of the Experts Talk was the clear demarcation of the various regulations and their areas of application. This is because not every AI application is subject to the same requirements. The decisive factors are the context of use, risk potential and impact on product quality, patient safety and human rights.

Two sets of rules – two perspectives

  • EU AI Act: The EU AI Act is a horizontal, cross-sector regulation that addresses the use of AI throughout the entire company. It applies not only to GMP processes, but also to AI applications in HR, IT, office areas and management. The aim is to protect fundamental rights, safety and health and to create trust in AI systems.
  • Annex 22 (Draft): Annex 22 is a vertical, GMP-specific supplement to the EU GMP guideline. It focuses exclusively on AI applications in the regulated manufacturing environment and particularly addresses systems with an impact on product quality, patient safety and data integrity. The annex is strongly oriented towards GAMP 5 principles and supplements existing regulations such as Annex 11 and Chapter 4.

Typical AI use cases and their regulatory classification

1. office and support applications (low to minimal risk)
Examples:

  • Office chatbots for text creation or translation
  • Spelling and formulation aids
  • AI-supported ticket or document sorting

These applications generally have no direct influence on GMP decisions or patient safety. Nevertheless, there are already requirements arising from the EU AI Act, particularly with regard to:

  • Transparency about the use of AI
  • Employee training (AI literacy)
  • Clear internal rules on the use and handling of data

2. decision-supporting AI systems (limited to high risk)
Examples:

  • AI-based decision support in QA or production
  • Forecast models for maintenance, deviations or capacity planning

Regulatory requirements are increasing significantly here. Relevant factors include

  • Structured risk assessment and classification
  • Documentation of models, data basis and decision logics
  • Clear governance structures and responsibilities
  • Concepts for human control (human-in-the-loop)

The more decisions are automated or prepared, the closer these systems come to the high-risk area of the EU AI Act.

3. AI in the GMP core process (high risk / Annex 22 relevant)
Examples:

  • AI-supported process monitoring
  • Automated quality assessments
  • AI systems with influence on approval decisions

These applications are clearly the focus of Annex 22, as the draft makes clear:

  • Critical AI systems must be deterministic, validatable and explainable (XAI)
  • Dynamic learning systems and generative AI are not currently intended for critical GMP applications
  • Human-in-the-loop is absolutely essential
  • Data quality, traceability and life cycle documentation are key success factors

The Experts Talk clearly showed that the EU AI Act and Annex 22 are not alternatives, but complement each other. Companies must consider both perspectives in order to use AI in a compliant and sustainable manner.

What pharmaceutical companies already have to consider today

A key conclusion of the Experts Talk: waiting is not an option. Even without the final adoption of Annex 22, there are already specific requirements from existing GMP regulations, the EU AI Act and general quality assurance principles.

It was particularly emphasized that companies must obtain a structured overview of all AI applications used or planned. Regardless of whether these are used in the GMP core process, in supporting areas or in everyday office work.

The key requirements include in particular

  • Transparency and traceability of AI systems
  • Risk assessment and classification of AI use cases
  • Documentation and governance over the entire life cycle
  • Training and qualification of employees

Shadow AI poses a particular risk here – i.e. the uncontrolled use of generic AI tools such as ChatGPT in day-to-day work. Without clear rules, approvals, training and documentation, this can quickly lead to deviations and compliance risks.

Implementing AI governance in practice: Tool to support regulatory requirements

It became clear that regulatory requirements such as the EU AI Act, Annex 22 (Draft) and ISO/IEC 42001 can only be implemented effectively if they are translated into clear, practicable structures.

This is where an AI governance solution from Goodly Technologies comes in, which is currently being developed specifically for regulated industries. The tool supports companies in managing AI systems in a structured and traceable manner throughout their entire life cycle: from planning and deployment to continuous monitoring.

Among other things, the focus is on:

  • Systematic recording and classification of AI applications
  • Documentation of responsibilities, risks and controls
  • Illustration of key requirements from Annex 22
  • Integration of SOPs, training and proof of audit and inspection capability

The aim is not to limit AI, but to make it usable in a controlled manner as a basis for innovation and regulatory security. If you have any questions about the tool, please contact Robert Hoffmeister: robert.hoffmeister@goodly-technologies.com

Conclusion: Set the course for compliant AI now

The Experts Talk on November 27, 2025 made it clear that the EU AI Act and the planned Annex 22 are not abstract future topics, but are already having a concrete impact on the day-to-day work of pharmaceutical companies.

Companies that already use AI or are planning to use it should act early:

  • Identify AI use cases
  • Assess risks
  • Clarify responsibilities
  • Define processes
  • Train employees

Structured preparation makes it possible to use regulatory requirements not as a brake, but as a foundation for the safe, efficient and sustainable use of AI.

How the Experts Institute can support you

The Experts Institute supports pharmaceutical companies in the classification of regulatory requirements, the practical implementation of AI governance as well as training courses and workshops on the EU AI Act, Annex 22 and AI in the GMP environment. Get ahead and in touch with us: info@expertsinstitut.de

The Experts Talk series will also be continued. The next Experts Talk will take place on January 22 at 10:30 a.m. on the topic of “Pharmaceutical-grade use of generative AI”. To register for the event:
https://academy.experts-institut.de/ExpertsTalkmitChristophKthRobertSpariPharmatauglicherEinsatzvongenerativerKI

You can find more articles in our newsroom:
https://experts-institut.de/newsroom/

And feel free to follow us on LinkedIn to make sure you don’t miss any more Experts Talks:
https://de.linkedin.com/company/expertsinstitut

1 month /by Christoph Köth
https://experts-institut.com/wp-content/uploads/2026/01/LinkedIn.jpg 1080 1920 Christoph Köth https://experts-institut.de/wp-content/uploads/2023/02/GEMI_Logo_Slogan_color_RGB.webp Christoph Köth2026-01-12 17:59:082026-01-21 13:15:58AI in the pharmaceutical industry: Annex 22 & EU AI Act – current obligations and practical implementation
Recent
  • AI
    Pharmaceutical-grade use of generative AI: regulations,...2 weeks 
  • CSRD
    CSRD in the omnibus procedure: Basics, terms and what companies...4 weeks 
  • KI in der Pharmaindustrie: Annex 22 & EU AI Act
    AI in the pharmaceutical industry: Annex 22 & EU AI...1 month 
  • GMP
    The most important GMP findings for 2025 and forecasts for...15. December 2025 - 15:52
Popular
  • Deviation Management
    Enhancing Process Stability through Effective Deviation...27. March 2025 - 11:07
  • Supplier-Audit Reports
    Untrue Supplier-Audit-Reports: The Danger of Ethnocentric...9. January 2025 - 11:29
  • Qualitätssicherungsvereinbarungen
    Insights into our project experience: Successful implementation...4. December 2024 - 8:59
  • Cannabis
    GMP standards for medicinal cannabis: guaranteeing quality...19. November 2024 - 16:04

Tags

AI AI Annex Annex 11 Annex 22 Artificial Intelligence Audit audits Business Continuity Management Cannabis Certification Clean room Computerized systems Continuous Manufacturing CRA Cultures Cytostatics Data Integrity DORA Draft EU AI Act Germ count Germ count monitoring GMP GXP Health insurance Information security inspections ISMS ISO/IEC 42001 ISO 9001 ISO 27001 ISO standard Laboratory Machine Learning NIS-2 NIS2 Pharmacy QMS Quality management system Reagents Regulations Retaxation Sustainability Transformation

Kategorien

  • AI
  • Business Solutions
  • GMP
  • GXP
  • News
  • Retaxation
  • Sustainability
  • Uncategorized

Archiv

  • February 2026 (1)
  • January 2026 (2)
  • December 2025 (1)
  • November 2025 (1)
  • October 2025 (1)
  • September 2025 (1)
  • July 2025 (2)
  • March 2025 (1)
  • January 2025 (1)
  • December 2024 (1)
  • November 2024 (1)
  • October 2024 (3)
  • September 2024 (2)
  • August 2024 (2)
  • July 2024 (2)
  • May 2024 (1)
  • April 2024 (2)
  • March 2024 (2)
  • February 2023 (10)

Webpräsenz der Allianz für Cyber- Sicherheit
kununu widget

Business Solutions

  • Digitization
  • Sustainability
  • Management systems
  • Project management
  • Strategy & Performance
  • Transformation & Leadership

GMP / GXP Consulting

  • GMP Consulting
  • GMP audits & inspections
  • GMP/GDP training courses
  • GMP/pharmaceutical engineering
  • Continuous Manufacturing

EI Academy

  • GMP / GxP
  • Academy
  • Live events
  • On-demand webinar

New town

Experts Institut Beratungs GmbH
Weinstraße 85

D-67434 Neustadt a. d. Weinstraße

Phone: +49 (0)6321 969210
E-mail: info@expertsinstitut.de

Fax: +49 (0)6321 9692199

Bamberg

Experts Institut Beratungs GmbH
Untere Sandstraße 53

D-96047 Bamberg

Phone: +49 (0)951 51939330
E-mail: info@expertsinstitut.de

St. Gilgen (Austria)

Experts Institut Beratungs GmbH
Helenenstraße 16

A-5340 St. Gilgen, Austria

Tel.: +43 (0)6227 21068
E-Mail: info@expertsinstitut.de

  • Link to LinkedIn
  • Link to Xing

© 2024 Experts Institut Beratungs GmbH
  • Imprint
  • Data protection
  • AGBs
  • Cookie Directive (EU)
Scroll to top Scroll to top Scroll to top