ICH E6(R3) Changes: What Changed, What It Means, and How to Prepare

What Is ICH E6(R3)?

ICH E6(R3) is the latest revision to the International Council for Harmonisation's guideline on Good Clinical Practice. Known formally as ICH E6(R3): Good Clinical Practice (GCP), this update was developed to address modern clinical trial practices that the previous version — ICH E6(R2), published in 2016 — was never designed to handle.

The clinical research landscape has changed dramatically since 2016. Decentralized trials have become mainstream. Electronic health records and eSource data are now the norm at most investigative sites. Remote monitoring went from experimental to routine during the COVID-19 pandemic and is now expected by sponsors as a standard tool. The volume and complexity of trial data has grown exponentially with adaptive designs, biomarker-driven studies, and global multi-site operations.

ICH E6(R3) was developed to provide a flexible, risk-proportionate framework that accommodates these realities without prescribing a one-size-fits-all approach. The revision is structured around a core principle: quality should be built into trial design and processes, and oversight should be scaled to the actual risks of the trial — not applied uniformly regardless of complexity or risk profile.

The final E6(R3) annex was published in phases, with the core document and Annex 1 (addressing interventional trials) representing the foundation. The framework is designed to be future-proof — accommodating technologies and trial designs that don't yet exist — through its technology-neutral, principle-based approach.

The 6 Major Changes from E6(R2) to E6(R3)

Here are the most consequential updates in ICH E6(R3) that clinical research professionals need to understand:

1. Risk-Based Quality Management (RBQM)

The most fundamental change in ICH E6(R3) is the elevation of risk-based quality management from a recommended practice to a core, systematic requirement. RBQM is now a foundational approach that sponsors must integrate into trial design, conduct, and oversight from the outset — not retrofitted as a compliance checkbox.

In practical terms, this means sponsors are expected to:

• Identify the most critical quality risks to participant safety and data integrity during protocol development
• Design processes and oversight activities that are proportionate to those risks
• Use centralized monitoring and statistical approaches to identify anomalies early
• Document the risk assessment and mitigation approach in a quality management plan

This aligns with TransCelerate BioPharma's Risk-Based Monitoring (RBM) initiative, which many sponsors have already adopted. E6(R3) essentially codifies the RBM best practices that leading sponsors have been implementing since 2013. For sites, this means CRAs may conduct more targeted, risk-driven visits rather than blanket 100% source data verification — and that sites should expect a quality management plan that clearly describes the oversight approach.

2. Technology-Neutral, Remote-Ready Approach

ICH E6(R3) is explicitly technology-neutral — it does not prescribe specific systems, platforms, or methods for conducting clinical trials. Instead, it establishes principles that apply whether trial activities happen on-site, remotely, or in a combination.

This change was driven by the rapid adoption of electronic systems in clinical research. Electronic health records (EHRs), eSource systems, electronic data capture (EDC), and regulatory submission portals are now standard. E6(R3) acknowledges this reality and provides a framework that accommodates these technologies without requiring specific vendors or configurations.

Key implications for remote and hybrid trials:

• Remote source data access: Where local regulations and IRB requirements permit, electronic source data may be reviewed remotely by CRAs without requiring physical presence at the site
• Electronic consent: E6(R3) supports eConsent processes as long as they meet the same requirements as paper consent — complete, legible, attributable, and appropriately documented
• Telemedicine and virtual visits: Remote trial visits conducted via video or telehealth platforms are addressed, with requirements for documentation and investigator oversight
• Direct-to-participant drug supply: Distribution of investigational product directly to participants' homes is explicitly accommodated, with requirements for maintaining the cold chain, tracking receipt, and ensuring participant understanding

3. Proportionate Monitoring Based on Risk

One of the most practically significant changes for sites is the formalization of proportionate monitoring — the principle that the intensity and nature of monitoring activities should reflect the actual risk profile of the trial.

Under E6(R2), monitoring typically defaulted to a model of on-site visits at defined intervals, with a general expectation of 100% source data verification for critical data. E6(R3) reframes this: monitoring plans should be developed based on a systematic risk assessment, and the plan should specify which activities are performed on-site, remotely, or centrally.

This doesn't mean less oversight — it means smarter oversight. A low-risk, well-run site with clean data and consistent enrollment might receive fewer on-site visits in favor of centralized statistical monitoring and targeted remote review. A high-risk site with enrollment challenges, data quality issues, or protocol deviations would receive more intensive support.

For CRCs, this means documentation quality matters more than ever. Since monitoring is increasingly risk-based, sites with clean, well-documented source records can demonstrate lower risk profiles — which can translate to fewer on-site visits and more favorable relationships with sponsors and CROs.

4. Enhanced Data Governance Requirements

E6(R3) introduces more explicit requirements around data governance — the framework of policies, processes, and responsibilities that ensures trial data is accurate, complete, and trustworthy throughout its lifecycle.

Key additions include:

• Trial Master File (TMF) expectations: More explicit guidance on what constitutes a complete, organized TMF and who is responsible for maintaining it
• Audit trail requirements: Clearer expectations for electronic systems used in clinical trials — who accessed records, when, and what changes were made
• Data attribution: Stronger emphasis on ensuring that all data entries in trial records can be attributed to a specific individual with appropriate training and delegation
• ALCOA+ principles: Implicit in the data governance framework are the ALCOA+ principles (Attributable, Legible, Contemporaneous, Original, Accurate — plus Complete, Consistent, Enduring, Available) that regulatory authorities increasingly expect sites to follow for all source data

For sites, this means investing in systems and processes that support clear data attribution, organized documentation, and audit-ready record-keeping. The days of loosely documented source records are numbered — regulators and sponsors increasingly expect sites to demonstrate data integrity proactively, not retrospectively.

5. Updated Informed Consent Provisions

Informed consent receives significant attention in ICH E6(R3), reflecting how much the consent landscape has evolved with technology, globalized trials, and the recognition that consent is a process, not a one-time event.

The key updates include:

• Electronic consent (eConsent): E6(R3) explicitly supports electronic consent processes as long as they meet the same regulatory and ethical standards as paper — the process must be fully documented, participants must have the opportunity to ask questions, and the electronic record must be attributable and tamper-evident
• Re-consent for new information: The update reinforces that when new information becomes available that might affect a participant's willingness to continue, the investigator has an obligation to re-consent — and that this re-consent must be documented. The update also clarifies that re-consent applies to both safety information and new efficacy findings relevant to the participant's risk-benefit
• Dynamic consent: For trials with long follow-up periods or adaptive designs where participant populations or procedures may change, E6(R3) accommodates a dynamic consent model — where participants can update their consent preferences over time
• Consent for decentralized elements: When trial visits happen remotely or involve home nursing, consent documentation must clearly reflect the logistics of those activities and the participant's agreement to participate in those decentralized procedures

6. Decentralized and Hybrid Trial Flexibility

The most practically visible change in E6(R3) is the explicit framework for decentralized and hybrid clinical trials. While E6(R2) was largely written assuming all trial activities occur at investigative sites, E6(R3) acknowledges that trials can be conducted in multiple configurations:

• Fully decentralized: All or most trial activities happen remotely — telemedicine visits, home nursing visits, direct-to-participant drug supply, remote lab collections
• Hybrid: A combination of on-site visits and remote activities — the most common model as of 2025
• Traditional site-centric: All activities conducted at the investigative site

E6(R3) provides principles that apply across all configurations. The key is that the approach must be documented, IRB-approved, and consistently applied. Sites cannot unilaterally switch to remote visits or home nursing without sponsor approval, protocol amendment, and IRB review.

Side-by-Side: E6(R2) vs E6(R3) Key Differences

This comparison table highlights the most consequential differences for site-level practice:

What ICH E6(R3) Means for Your Role

The impact of E6(R3) varies depending on your position in the clinical research ecosystem. Here's what each role needs to know:

How Coordinare's GCP Training Covers ICH E6(R3)

Coordinare's GCP Training — built by Dan Sfera and the DSCS team — is fully updated for ICH E6(R3). Our 9-module program covers every major R3 change in the context of practical site operations, not just regulatory theory.

The training that Dan and the DSCS team developed over their 3,252+ clinical research videos is now codified in a structured program that specifically addresses:

• Module 3: ICH E6(R3) Deep Dive — The most direct coverage of R3 changes, including RBQM principles, proportionate oversight, and the technology-neutral framework
• Module 4: Informed Consent — Updated for eConsent, re-consent obligations, and dynamic consent processes
• Module 7: Site Operations — DOA documentation, PI oversight, and data governance aligned with ALCOA+ expectations
• Module 9: Monitoring & Closeout — Coverage of risk-based monitoring plans, centralized monitoring indicators, and hybrid trial closeout requirements

Every module ends with a knowledge quiz. Passing the 90-question final exam (80% threshold) earns a PDF certificate valid for 3 years — everything you need for your regulatory binder and delegation log.

And if you ever have a question about how R3 applies to your specific situation, Ask AI on Coordinare — powered by Dan Sfera's complete 3,252-video clinical research knowledge base. Ask questions like \"how does E6(R3) affect my remote monitoring plan?\" or \"what are the new informed consent documentation requirements?\" and get answers grounded in Dan's decades of field experience.

Frequently Asked Questions