ICH E6 (R3): The new GCP guideline at a glance

Why the revision from R2 to R3 is a turning point

The revision of ICH E6 from version R2 to R3 marks a significant turning point: The guideline is being fundamentally modernized – with a stronger patient focus, digitalized processes, risk-based quality assurance, and clearly defined roles. The guideline will serve as a global reference framework for the EMA, FDA, and many other authorities in the future. Those who adapt their processes now will significantly reduce subsequent change and audit costs.

The new ethical foundation in eleven principles

R3 condenses the previous 13 GCP principles into eleven concise guiding principles. New additions include:

The principle of risk proportionality: Measures are based on the actual risk and the importance of the data.

The principle of clear distribution of roles and responsibilities: Delegation is permitted, but overall responsibility for implementation at the center remains with the sponsor or investigator.

At the same time, R3 consistently embeds patient participation, transparency and openness to new technologies as key requirements.

The new structuring logic of ICH E6 (R3) a modular system

Instead of a linear capital structure, R3 relies on a modular system. All IRB/IEC, investigator, sponsor, and data governance obligations are now consolidated in Annex 1. There are also three separate appendices, A, B, and C:

• Investigator's Brochure
• Protocol structure
• Function-based Essential Records (replace the previously rigid document list)

This compact, flexible structure allows new technologies or study types to be easily integrated later – without having to redraft the entire guideline.

What changes specifically for the individual actors

• Ethics committees receive more flexible submission procedures, can reassess on a risk-based basis rather than annually, and must actively review eConsent processes. Reimbursement of travel and accommodation expenses is explicitly not considered an incentive. Compensation should be pro rata and independent of degree completion.
• Investigators/Study Centers receive a separate subsection "Responsibilities." A delegation log, documented oversight evidence, and qualified personnel are mandatory. SAE reports must be made immediately upon discovery – even if the event occurs during screening. When shipping investigational medicinal products directly to patients or pharmacies, the investigator remains responsible for supervision.
• Sponsors Resources, contracts, and oversight measures must be documented risk-appropriately before the start of the study. An integrated quality system with Quality Tolerance Limits (QTLs) becomes mandatory. All service providers – from the central laboratory to the IDMC – are now subject to clearly defined contracts. Furthermore, R3 requires a consolidated safety review process that integrates SAE signals, IDMC recommendations, and regulatory requirements.
• Data Governance is a new chapter. It describes the entire data lifecycle: from collection and audit trails to archiving and deletion. R3 requires continuous validation of computerized systems, strict user and role management, and measures to ensure blinding.
• Essential Records are defined on a function-based basis in Appendix C. A recording is considered "essential" if it is critical to participant rights, safety, or data quality. The sponsor and trial site must allow mutual access while ensuring data protection and blinding.

Cross-cutting issues that deserve special attention

R3 transmits the risk-based approach from the monitoring strategy to the entire study ecosystem. Design, processes, data, and systems are planned and monitored based on critical quality factors (CtQ). At the same time, the guideline calls for a noticeable Patient orientation: reduced visit load, inclusion of underrepresented groups and openness to decentralized and adaptive study designs.

Six steps for a smooth implementation

1. Gap analysis: Systematically check your SOP landscape against Annex 1 and Appendix C.
2. Risk management: Define CtQ factors per study, derive QTLs and establish escalation pathways.
3. Contract review: Update all service provider contracts to the new quality and reporting requirements.
4. System validation: Ensure that eTMF, EDC & Co. meet the extended data governance requirements.
5. Role-specific training: Train study centers on delegation and safety reporting, sponsor teams on oversight and QTL utilization.
6. Communication: Establish clear processes for re-consent, safety signal workflow and real-time data access.

Typical pitfalls – and how to avoid them

Many organizations still document "everything" instead of focusing on CtQ-relevant aspects. A CtQ matrix helps identify less critical processes and organize them efficiently. Ambiguous service provider delegation can be avoided with KPI dashboards with clear responsibilities. Delayed SAE notifications often occur when screening events are not clearly described in the protocol – workflows should be adjusted here. And don't forget: System validation is not a one-time event, but a cyclical process that must be initiated anew with every major update.

Conclusion

ICH E6 (R3) does not ask the question: “What else do we need to do?” but rather: “What is really crucial for participants and for data quality?” Those who plan risk-based now, consistently validate digital systems, and actively involve patients will conduct studies more efficiently and pass audits with confidence.

As of July 2025. We will update this guide as soon as the EMA and FDA finalize their implementation plans.