Skip to content
McCullochRegulatory Compliance
All practices

Clinical Trials & GCP

GCP compliance and inspection readiness across the trial lifecycle, from protocol design through close-out, aligned to ICH E6(R3) and E8(R1), with direct health-authority experience.

ICH E6(R3)ICH E8(R1)RBQM · QbDLife Sciences

Governing framework

  • E6(R3)

    Good Clinical Practice, Principles & Annex 1

    In effect (EU, 23 Jul 2025)
  • E6(R3) Annex 2

    Decentralised, pragmatic & real-world designs

    Finalising
  • E8(R1)

    General considerations, quality by design

    In effect
  • FDA / EMA / MHRA

    Regional adoption & inspection practice

    Current
Aligned toICHFDAEMA / CHMPMHRADeclaration of Helsinki21 CFR Part 11

What changed

The GCP standard has been rebuilt, not just revised.

ICH E6(R3) replaces a process-heavy, monitoring-centric rulebook with a principles-led framework. Quality is no longer something you inspect for at the end; it is designed in from protocol planning and managed in proportion to risk throughout the trial.

We translate that shift into the artefacts inspectors now expect to see: critical-to-quality factors, risk decision logs, and data governance that holds across every system and vendor in the trial.

13 principles11 consolidated principles, two genuinely newPrinciples 1-11
Risk-based monitoringRisk-based quality management across the lifecycleAnnex 1, 3.10
Scattered data rulesA dedicated data governance sectionAnnex 1, 4
Error-free dataFit-for-purpose data proportionate to its impactPrinciple 7

How we work

Across the full trial lifecycle.

One thread of GCP accountability from the first protocol draft to the closed-out, inspection-ready file. We embed where the risk is, scaled to the stage.

01 / Design

Protocol & planning

Quality by design

  • Critical-to-quality factor identification
  • Risk assessment & proportionate controls
  • Protocol & IB review against E6(R3) appendices
  • Cross-functional design review facilitation

E8(R1) 3 · E6(R3) Principles 6

02 / Set-up

Systems & oversight

Sponsor accountability

  • Quality management system & SOP alignment
  • Vendor & CRO oversight frameworks
  • Computerised systems validation & Part 11
  • Data governance plan across the data lifecycle

Annex 1, 2 & 4

03 / Conduct

Monitoring & control

Risk-based quality management

  • Centralised & remote monitoring strategy
  • Quality tolerance limits & signal review
  • Issue management & CAPA
  • Informed consent & participant-burden review

Annex 1, 3.10

04 / Close-out

Reporting & readiness

Inspection readiness

  • Essential records & TMF completeness
  • Data reliability & traceability review
  • Mock inspections & response preparation
  • CSR & submission GCP statements

Annex 1, Appendix C

The operating model

Quality designed in, risk managed in proportion.

The through-line connecting E8(R1) and E6(R3) is a single idea: decide what truly matters to participant safety and data reliability, then protect those things deliberately. Three mechanisms make it real.

01, Quality by Design

Critical-to-quality factors

We work with your teams to identify, early in planning, the factors essential to participant protection and reliable results, then design processes that prevent errors rather than detect them after the fact.

E8(R1) 3.2 · E6(R3) 6

02, Proportionality

Risk-proportionate effort

Oversight, documentation and data collection scaled to actual risk and importance, removing burden on participants and investigators where it adds no protection, and concentrating it where it does.

E6(R3) Principle 7

03, Data Governance

Reliable across the lifecycle

Defined data flows, traceability across systems and vendors, and quality control at each stage, proportionate to how much each dataset matters to safety and endpoints.

E6(R3) Annex 1, 4

Where we are different

Built for the inspection you will actually face.

Under E6(R3), inspectors increasingly want to see how quality was reasoned about, not just that procedures were followed. That means the evidence file looks different. We prepare the file regulators now ask for, drawing on direct experience inside health authorities.

CtQ matrix

Critical-to-quality factors, documented

A defensible record of what mattered and why, traceable to the protocol.

Risk log

Risk & decision log

Identification, control, review and rationale: the reasoning, captured.

RBQM plan

Quality management plan & QTLs

Pre-specified tolerances and the actions taken when signals breached them.

Mock

Mock inspection & readiness review

Story-board the file, rehearse the narrative, close gaps before the authority arrives.

Engagements

Ways we help.

Scoped to your stage and risk, from a focused gap assessment to standing GCP advisory across a programme.

E6(R3) readiness

Gap assessment & remediation

A structured review of SOPs, QMS and trial documentation against E6(R3) Principles and Annex 1, with a prioritised, risk-proportionate remediation plan.

QbD facilitation

Quality-by-design workshops

Cross-functional sessions to identify critical-to-quality factors and design risk controls into the protocol before first patient in.

Inspection

Inspection readiness & mock audits

Pre-inspection review, narrative preparation and mock inspections led by advisers with health-authority experience.

Oversight

Vendor & CRO oversight design

Oversight frameworks and data governance that keep sponsor accountability intact across every delegated party and system.

Specialists in this area

Bring us your protocol, your programme, or your next inspection.

Tell us about your product or programme and we will come back to you promptly.