ICH E6(R3): What Changed From R2, and What It Means for You

ICH E6 is Good Clinical Practice: the standard for designing, conducting, recording and reporting trials involving human subjects. R3 is the current revision, and it is a genuine restructure rather than an amendment.

The most common question about it, from sponsors and their auditors, is how much has to change. The honest answer is less than the size of the document suggests, if you were already applying R2 thoughtfully, and considerably more if you were applying it as a checklist.

What R3 actually changes

A principles-first structure. R3 leads with overarching principles and then sets out responsibilities. The principles are meant to be applied to circumstances the guideline does not enumerate, which is the point: R2 was increasingly being read as an exhaustive list.

Quality by design. Quality is to be built into trial design rather than inspected in afterwards. That means identifying the factors critical to reliability of results and safety of participants at the design stage, and concentrating effort there.

Critical to quality factors. The explicit expectation that you identify what actually matters in your trial and focus your monitoring and controls there, rather than applying uniform effort to everything.

Proportionality. Controls should be proportionate to the risks. A low-risk, low-complexity trial is not expected to carry the apparatus of a large multi-regional one.

Modern data governance. R3 addresses the reality that trials now run on electronic systems and decentralised elements, with expectations for data integrity across the data lifecycle rather than assuming paper.

An annex structure. R3 is built to be extended by annexes, which is how ICH intends to address specific trial types without reopening the core guideline.

Where the real work is

If your quality system already reflected risk-based monitoring and data integrity expectations, the gap is mostly documentation: showing that you identified critical to quality factors and that your controls follow from them.

Where it bites:

• SOPs written as procedure without rationale. R3 expects proportionality, which requires you to be able to say why a control exists.
• Uniform monitoring. 100% source data verification everywhere is the opposite of what R3 asks for, and it was already the opposite of what R2 asked for after the addendum.
• Vendor oversight. Sponsor responsibility for delegated activities is unchanged and stated more directly.
• Computerised systems. Expectations around validation and access control apply to the systems holding trial data.

Doing an R2 to R3 gap assessment

The useful version is not a clause-by-clause mapping. It is:

1. Can you point to your critical to quality factors for each ongoing trial?
2. Do your monitoring and control decisions follow from those factors, in writing?
3. Are your computerised systems governed, with access control and audit trails that hold?
4. Is your vendor oversight documented as oversight, not as contracting?

A sponsor answering all four can usually show compliance. One that cannot will find the gap is real regardless of how thick the SOP manual is.