ICH GCP E6(R3): What Changed, What It Means for Oncology Sites, and How to Prepare

The publication of ICH GCP E6(R3) in May 2023 marked the most significant structural revision to Good Clinical Practice guidance since E6(R2) introduced risk-based monitoring concepts in 2016. While R2 grafted risk-based thinking onto the original 1996 framework as an addendum, R3 is a fundamental rewrite — integrating RBQM as the core operational philosophy and introducing new concepts around critical data, eSource, remote monitoring, and the relationship between sponsors and investigators.

For oncology sites, the implications are substantial. Cancer trials already operate in a high-complexity environment — stringent eligibility criteria, frequent and serious adverse events, biomarker-dependent patient populations, multi-specialist care teams, and demanding biospecimen requirements. E6(R3) does not reduce this complexity; it provides a more proportionate, scientifically grounded framework for managing it. This article works through the key changes and what they mean in day-to-day site practice.

What Changed Structurally

E6(R3) is not an addendum to E6(R2) — it replaces it entirely. The guidance is restructured around four interdependent elements:

1. Principles — overarching ethical and scientific standards that frame the entire guidance
2. Sponsor responsibilities — operational duties in trial design, oversight, and quality management
3. Investigator responsibilities — site-level obligations for conduct, documentation, and subject protection
4. Integrated annexes — specific guidance on electronic systems, decentralised trials, and other implementation topics

The most important structural shift is that risk-based quality management is no longer an appendix — it is woven through sponsor and investigator responsibilities as the expected baseline approach. Sites that have not yet transitioned from traditional 100% SDV to a risk-proportionate quality model will need to update their monitoring agreements, SOPs, and documentation practices accordingly.

Risk-Based Quality Management: Now a Formal Requirement

Under E6(R2), the addendum described risk-based monitoring as an acceptable alternative to traditional on-site monitoring. Under E6(R3), it is formalised as the expected approach — with explicit requirements for a documented RBQM framework that sponsors must implement and sites must understand and cooperate with.

The RBQM cycle under E6(R3) has four stages:

Critical Data and Critical Processes: The New Currency of Monitoring

One of the most operationally significant concepts introduced in E6(R3) is the formal distinction between critical data and non-critical data. This distinction determines where monitoring resource is concentrated and what level of verification is required.

Critical data is defined as data essential to supporting the scientific validity and regulatory acceptability of a trial. In practice, for an oncology trial, critical data typically includes:

• Eligibility criteria confirmation data (including biomarker results, performance status, prior treatment history)
• Primary efficacy endpoint data (response assessment, progression-free survival events)
• Key safety endpoints and serious adverse event data
• Informed consent documentation and dates
• Investigational product dispensing and accountability records
• Biomarker-based stratification data used in randomisation

Critical processes are operational steps whose failure would significantly compromise data integrity or subject protection — including the consent process, randomisation, IP dispensing, AE reporting, and biospecimen collection and handling.

SDV, SDR, and What Changes for Monitors

The traditional expectation of 100% Source Data Verification — in which a CRA compares every eCRF entry against every source document — is not consistent with the risk-proportionate model E6(R3) formalises. E6(R3) clarifies the distinction between two types of monitoring activity:

For oncology sites, the practical implication is that monitors conducting a site visit under E6(R3)-aligned monitoring plans will focus their on-site time on critical data and process review — rather than spending the majority of a visit on line-by-line eCRF verification. Sites should expect shorter, more targeted monitoring visits focused on eligibility documentation, AE records, IP accountability, and consent files — complemented by remote review of non-critical data fields between visits.

Updated PI Oversight Requirements

E6(R3) places renewed and more explicit focus on the accountability of the Principal Investigator as the individual ultimately responsible for the conduct of the trial at site. Key changes that affect how PI oversight is documented and demonstrated include:

Delegation and the Delegation Log

E6(R3) clarifies that the PI retains responsibility for all trial-related activities, regardless of delegation. The delegation log must accurately reflect who is authorised to perform each trial task, when the authorisation was granted, and what training the delegate received. Crucially, delegation does not transfer the PI's accountability — it documents the authorised structure within which the trial is conducted.

For oncology sites running multiple concurrent protocols, this means each delegation log must be protocol-specific, current, and signed by the PI as evidence of active oversight — not simply filed and forgotten after site initiation.

Medical Decisions

E6(R3) reaffirms that all medical decisions about subjects' trial participation — including eligibility confirmation, dose modifications, AE assessment, and withdrawal — must be taken by a qualified medical professional, either the PI or a sub-investigator delegated for that purpose. This is particularly relevant in oncology, where eligibility decisions may depend on biomarker results, haematological parameters, and performance status assessments that require clinical interpretation.

eSource and Electronic Records Under E6(R3)

E6(R3) introduces specific guidance on electronic source data in a dedicated annex — significantly updating the framework for sites that capture data directly into electronic systems rather than on paper first. Key requirements include:

• eSource systems must be validated to ensure data accuracy, reliability, and audit trail integrity consistent with 21 CFR Part 11
• Direct data entry into eCRF can constitute source data where validated and pre-agreed with the sponsor
• Audit trails must capture who entered data, when, and any subsequent changes — with the ability to reconstruct the original entry
• Remote access to electronic source records must be provided to monitors where agreed in the monitoring plan
• Sites using paper-first systems that subsequently transfer data electronically must have documented procedures for transfer verification

For sites transitioning to eSource or decentralised data collection (increasingly common in trials that include remote patient visits or electronic patient-reported outcomes), E6(R3)'s annex provides the regulatory foundation — and the inspection expectations.

Consent Under E6(R3): What's Updated

The informed consent requirements in E6(R3) are broadly consistent with E6(R2) but contain important reinforcements relevant to oncology practice:

• Ongoing consent obligation: E6(R3) emphasises that consent is not a one-time event but an ongoing process. Subjects must be informed of new findings — including protocol amendments, emerging safety signals, and new information about the investigational product — and their consent re-obtained where required.
• Vulnerable populations: Oncology patients facing limited treatment alternatives may be susceptible to therapeutic misconception — conflating trial participation with guaranteed access to effective treatment. E6(R3) reinforces that consent processes must address and mitigate this risk explicitly.
• eConsent: Electronic informed consent is formally recognised as an acceptable approach, subject to IRB/IEC approval, accessibility requirements, and audit trail standards.
• Capacity assessment: Where a patient's decision-making capacity may be compromised (due to disease progression, cognitive effects of treatment, or acute illness), the consent process and the basis for the capacity assessment must be documented.

SOP Gap Analysis Checklist: E6(R2) to E6(R3)

Use the following checklist as a starting point for identifying where your site's existing SOPs and practices may need updating to align with E6(R3). This is not exhaustive — a full gap analysis should be conducted against the published guidance.

Related education on kclgmedical.com: Education Hub · Risk-Based Monitoring in Oncology · Informed Consent in Oncology Trials · KCLG Site Performance Metrics