ICH E6(R3) Good Clinical Practice: What Has Changed and What It Means for Sponsors

Back to Knowledge Hub

ICH E6(R3), adopted in January 2025 and subsequently adopted by the FDA as final guidance for industry in September 2025, is the most substantial revision to the global GCP framework since 1996. This overview examines the new modular structure, the growing role of risk-based quality management, and the key implications for sponsors, investigators, and CROs transitioning from ICH E6(R2).

A Framework Overdue for Modernisation

The ICH Good Clinical Practice guideline has underpinned the design, conduct, and oversight of interventional clinical trials across regulatory regions for nearly three decades. The core framework — ICH E6 — was originally adopted in 1996. Its last meaningful structural update, the ICH E6(R2) addendum, addressed risk-based monitoring when it was adopted in 2016. In the decade that followed, the clinical trial landscape changed substantially: decentralised and hybrid trial approaches gained considerable traction, electronic data capture became the norm in most clinical trials, and digital health technologies began generating trial-relevant data in ways the original guideline could not anticipate.

ICH E6(R3) is the response to that gap. The ICH Assembly adopted the revised guideline on 6 January 2025.¹ The EMA set an effective date of 23 July 2025 for clinical trials in the EU,² and the FDA published its final guidance for industry in September 2025.³ The regulatory framework has evolved substantially. The question for those working in clinical development is how.

A New Structure: Principles, Annex 1, and Annex 2

The most visible change in ICH E6(R3) is architectural. Rather than a single consolidated document, the guideline now comprises three components:

• Principles: An overarching set of GCP principles applicable to all interventional clinical trials, intended to be stable regardless of technology or trial design. These cover participant protection, data reliability, sponsor and investigator accountability, and ethics committee oversight.
• Annex 1: Operational guidance for standard interventional trials — covering sponsor and investigator responsibilities, the trial master file, informed consent, data governance, monitoring, and safety reporting. Finalised as part of the January 2025 adoption.
• Annex 2: Guidance specific to non-traditional designs — decentralised trials, pragmatic trials, platform trials, and trials incorporating real-world data. Annex 2 reached Step 4 — final adoption by the ICH Assembly — on 3 June 2026, completing the three-part structure.⁴ The EMA's CHMP adopted Annex 2 on 25 June 2026, with an EU effective date of 15 January 2027;² a corresponding FDA guidance document and compliance date remain pending.

This modular architecture is deliberate: the principles remain stable while the annexes can be updated as trial methodologies evolve, without requiring a full guideline revision.

Risk-Based Quality Management: From Addendum to Core Requirement

In ICH E6(R2), risk-based monitoring was introduced as an addendum — an important addition, but structurally separate from the main body of the guideline. In ICH E6(R3), risk-based quality management (RBQM) is embedded throughout Annex 1 as a foundational sponsor obligation.

The guideline builds on the quality by design (QbD) framework introduced in ICH E8(R1).⁵ Sponsors are required to identify critical data and processes early in trial design, assess risks to participant safety and data integrity, and implement proportionate controls — within the framework of a documented quality management system appropriate to the trial’s scope and complexity.

A central guiding principle of ICH E6(R3) is proportionality: the extent and intensity of quality measures, monitoring, and documentation should be commensurate with the risks relevant to participant protection and data reliability, rather than applied uniformly across all trials regardless of risk.

Monitoring is explicitly proportionate: on-site visits, centralised monitoring, and appropriate forms of remote monitoring may together constitute a compliant monitoring programme, provided the rationale is documented. This is not merely a shift in monitoring practice; it is a design-phase obligation that affects how protocols are written, how data systems are specified, and how oversight responsibilities are allocated between sponsors and CROs.

Data Governance, Consent, and Terminology

• Data governance: Annex 1 sets out updated requirements for data integrity, traceability, and security across all systems involved in data capture, processing, and storage. The shift to the term “source records” — replacing “source documents and data” — reflects the regulatory acknowledgement that source data may now originate from a wide range of digital and non-traditional sources, rather than existing solely as traditional paper records.
• Informed consent: The guideline acknowledges electronic and remote consent processes as potentially appropriate, subject to applicable regulatory and ethics committee requirements. Consent materials must be concise and understandable, and the process should be proportionate to the complexity of the trial.
• Terminology: Participant language has been updated throughout — “trial participant” replaces “subject,” a change that reflects both ethical evolution and the increasing emphasis on participant-centred trial design.

What This Means Operationally

For sponsors, CROs, and investigators, transitioning from ICH E6(R2) to ICH E6(R3) requires concrete review of:

• SOPs governing trial design, quality risk assessment, monitoring, and TMF management
• Monitoring plans, which must now be formally risk-justified rather than tied to fixed visit schedules
• Informed consent templates, particularly where electronic or remote consent is used or planned
• GCP training programmes, which must be updated to reflect the revised guideline; ICH E6(R3) itself sets no fixed retraining interval, but many sponsors, academic institutions, and research organisations continue to require refresher GCP training at intervals of approximately three years

Sponsors conducting decentralised, pragmatic, or platform trials should now review their trial designs directly against the finalised Annex 2 text, while continuing to track regional adoption timelines in their operating jurisdictions.

Closing

ICH E6(R3) does not alter the fundamental purpose of GCP — protecting participants and ensuring data reliability. What it does is provide a framework better matched to how clinical trials are actually conducted today: with distributed data, digital tools, flexible designs, and an expectation that quality is built in rather than inspected for retrospectively.

Understanding the new framework in depth — how risk assessment integrates with protocol design, how Annex 1 changes investigator obligations, and how data governance requirements apply across modern trial architectures — requires more than a high-level overview.

Bradford Hill Academy’s GCP Foundations course covers the complete ICH E6(R3) framework in structured depth, with practical guidance on applying the updated requirements to trial design and conduct.

The information in this article reflects the regulatory landscape and published guidance available at the time of writing. Regulatory guidance evolves; readers should verify the current status of all documents cited before relying on them in a professional context.