Breaking the CAPA Trap by Adopting a Prevent-First Quality Framework

Why closing more CAPAs is not the same as building a system that fails less often

Authors: Aida P. Carfagno[1], Gerald L. Klein, MD[2]; Shengjun Zhang, MD[3]; Freddy Byrth, BA[2]; David Weinstein, MD, PhD[4]

Affiliations: Cedar and Stone Consulting[1]; MedSurgPI, LLC[2]; BIOTrialMed[3]; David Weinstein Consulting Inc[4]

Every Corrective and Preventive Action (CAPA) tells two stories: the problem that occurred and the thinking that allowed it to happen. In many regulated organizations, CAPA has become the place where quality problems go after they happen. Deviations are opened, investigations are written, training is assigned, SOPs are revised, and closure dates are tracked. Months later, there will be an “effectiveness check” to confirm that corrective actions were completed on time. The system looks busy yet produces the same failures repeatedly. The problem isn’t the CAPA process. The problem is relying on CAPA to compensate for weaknesses that should have been prevented through thoughtful process design, effective risk management, and strong operational oversight.

The Prevention Test: Every proposed corrective or preventive action should answer one fundamental question: Will this action make the process more resilient, or will it simply document that we did something? The Prevention Test provides a practical way to distinguish between the two.  If the answer is no, the action may close a CAPA without meaningfully reducing risk or preventing recurrence.

Why Organizations Get Stuck in the CAPA Trap

The recurring problem is usually the operating system, not the quality form.

Nine Warning Signs: Every CAPA process tells a story about how an organization thinks. The health of that process isn't measured by how many investigations are completed or how quickly actions are closed. It's measured by whether the organization is learning, improving, and preventing recurrence. When investigations consistently stop at the obvious, retraining becomes the default answer and recurring issues are accepted as inevitable. The process has stopped driving improvement and started preserving the status quo. If you recognize several of the warning signs below, your CAPA process may be treating symptoms rather than solving problems.

Why the Trap Persists

Closure Pressure: Due dates reward administratively easy actions.

Siloed Signals: Data are not trended across programs, functions, or partners.

QA-Only Ownership: Process owners lack authority or resources to redesign work.

Lagging Metrics: Dashboards count failures and aging, not early warning or control.

What Current Quality Guidance Points Toward

A Prevention-First Quality Operating Model

Move from event closure to prospective control, early warning, and demonstrated learning.

From Reactive CAPA Habit to a Prevention-First Quality System

The question isn't whether an organization has a CAPA process. Every mature quality system does. The real question is whether CAPA is driving organizational learning or simply documenting organizational memory. Prevention-first organizations use CAPA as one source of insight within a broader quality system designed to anticipate risk, strengthen processes, and continuously improve. The distinction is not procedural; it is strategic, cultural, and ultimately shaped by leadership. The comparison below illustrates the differences between these two approaches.

Bottom Line: Prevention starts before the deviation occurs. CAPA should convert what the organization learns into better process and product understanding, new or modified controls, verified improvement, and accountability.

Where Prevention Creates the Most Value

Four High-Value Prevention Domains

Not Every Problem Requires a CAPA

One hallmark of mature organizations is their ability to distinguish between events that require immediate action, issues that call for process improvement, and problems that demand formal investigation. A prevention-first quality system recognizes that not every event requires the same level of investigation or oversight. Applying the appropriate response - whether immediate containment, local correction, preventive improvement, or formal CAPA - helps organizations address risk efficiently while preserving the rigor of the CAPA process for issues that truly warrant it, thereby focusing resources where they create the greatest value.

A 90-Day Plan to Break the CAPA Trap

Make prevention visible, owned, measurable, and part of normal operating governance.

MedSurgPI and Cedar and Stone Consulting can help: Quality-by-design reviews | clinical and safety risk mapping | independent readiness assessments and audits | CAPA/root-cause analysis strengthening | medical and regulatory governance

More Physicians and Dentists Should Participate in Clinical Trials

MedSurgPI, LLC is proud to share our editorial: More Physicians and Dentists Should Participate in Clinical Trials Now! This article has been accepted by Cureus. This piece highlights how research involvement can expand patient options, strengthen clinical relevance, and connect everyday practice to emerging science. A sincere thanks to our outstanding coauthors for their expertise, collaboration, and commitment to advancing clinical research across diverse practice settings.

Biobanking: The Hidden Infrastructure Behind Precision Medicine

The East Carolina University (ECU) School of Dental Medicine is building its research enterprise.

This spotlight features a saliva Biobank at the ECU School of Dental Medicine as it builds its research enterprise under Dr. Alexandre R. Vieira, DDS, MS, PhD, Dean for Research

Authors: Gerald L. Klein, MD[1]; Freddy Byrth, BS[1]; Michael Fath, PhD[2]; Aida Carfagno, BS[3]; David Weinstein, MD, PhD[4]; Patrick Loebs, MSW, MSH[1]

Affiliation: MedSurgPI[1]; Cavabio Consulting[2]; Cedar and Stone Consulting[3]; David Weinstein Consulting[4]

Technology Innovation Spotlight features a saliva Biobank at the ECU School of Dental Medicine.   Behind nearly every modern biomarker, companion diagnostic, and target-validation program sits an asset that seldom appears in the press release: well-characterized biospecimens, collected under controlled conditions and linked to longitudinal clinical data. Biobanking, the systematic collection, processing, storage, annotation, and distribution of biological specimens and their associated data, has quietly become one of the most consequential enabling technologies in drug, biologic, device, and diagnostic development. What was once thought of as “a freezer in the basement” is now a data-rich, standards-governed, increasingly automated infrastructure layer for precision medicine. Modern biobanks are therefore not only technical infrastructure; they are also trust infrastructure, dependent on transparent consent, privacy protections, and participant confidence that specimens and data will be used responsibly.

THE OPPORTUNITY

Saliva is among the most practical biofluids for population-scale collection. It can be gathered noninvasively, at low cost, and without specialized phlebotomy, and it carries a rich repertoire of analytes, including cells, nucleic acids, extracellular vesicles, metabolites, and proteins. Because oral and systemic health are increasingly understood to be connected, saliva offers a window not only into caries and periodontal disease but also into systemic conditions, with the added advantage of supporting repeated, longitudinal sampling at minimal patient burden.

THE INNOVATION

The center of gravity in biobanking has shifted from the specimen to the specimen plus the data wrapped around it. Three converging developments explain the change.

First, scale. Population-scale biobanks now operate at a size that was impractical a decade ago. The UK Biobank enrolled roughly 500,000 participants with linked genomic, imaging, and health-record data,[1] while the U.S. All of Us Research Program was designed explicitly to build a large, diverse cohort that mirrors the populations medicine actually serves.[2]

Second, data linkage. The research value of a biobank today depends heavily on how richly its specimens connect to electronic health records that can be queried in depth; robust phenotyping, and multi-omic readouts. The combination, not the specimen in isolation, is what enables agnostic and unbiased discovery across thousands of associations among diseases, genes, and exposures.[3]

Third, quality as a discipline. Preanalytical variables such as time to processing, freeze and thaw cycles, fixation, and storage temperature can materially alter the molecular characteristics of a sample and, with it, the validity of any downstream result. Reporting frameworks such as BRISQ (Biospecimen Reporting for Improved Study Quality) were created to make those variables transparent and reproducible,[4] and the international standard ISO 20387 now defines general requirements for biobanking competence and consistency.[5] Alongside scale and linkage, this quality science is what turns a collection of tubes into an extensive and rich research asset.

WHY IT MATTERS

•    Noninvasive, low-cost collection enables large, diverse cohorts and repeat sampling that blood-based biobanks struggle to match.

•    Chart-linked saliva supports biomarker discovery for oral conditions such as caries and periodontitis, as well as for systemic disease through the oral-systemic axis.

•    A newer school building its portfolio can design consent scope, quality systems, and annotation for partnering from the outset rather than retrofitting them later.

•    For sponsors, a well-governed saliva resource offers a practical platform for noninvasive biomarkers and companion-diagnostic work.

Representative large-scale biobanks frequently cited as exemplars:

FEATURED EXAMPLE:

Saliva is among the most practical biofluids for population-scale collection. It can be gathered noninvasively, at low cost, and without specialized phlebotomy, and it carries a rich repertoire of analytes, including cells, nucleic acids, extracellular vesicles, metabolites, and proteins. Because oral and systemic health are increasingly understood to be connected, saliva offers a window not only into caries and periodontal disease but also into systemic conditions, with the added advantage of supporting repeated, longitudinal sampling at minimal patient burden. ECU School of Dental Medicine is building its research enterprise under Dr. Alexandre R. Vieira, DDS, MS, PhD, Dean for Research, a dentist and human molecular geneticist whose work emphasizes characterizing patients’ whole health trajectories rather than studying one disease at a time. At his prior institution, Dr. Vieira established a dental-school registry under which patients entering the building were invited to contribute two things: permission to draw data from their records and a saliva sample. That pairing of biological specimen with chart-linked clinical data is the linkage that gives a modern biobank its translational power, and it is the model now being extended at ECU as the school formalizes a research portfolio supported by its Office of  research facilities, including a Basic Science Laboratory, a Vivarium, and a Clinical Research Center.[1]

Why this matters to sponsors and licensees:

·         Specimen quality is a data-quality problem: undocumented preanalytical variables undermine biomarker and companion-diagnostic claims.

·         Consent scope is a gating factor: commercial and future-use permissions determine whether a collection can support a development program.

·         ISO 20387 accreditation and BRISQ-style reporting are now table stakes in diligence, not nice-to-haves.

Diverse, electronic health record-linked cohorts shorten the path from hypothesis to validated, generalizable evidence.

THE COMMERCIAL AND TRANSLATIONAL OPPORTUNITY

Industry licensees and development partners do not value specimens generically. They value fit-for-purpose specimens. Four attributes drive whether a collection is commercially useful: documented provenance and preanalytical history; the depth and accuracy of clinical annotation; the scope of consent (in particular, whether commercial and future unspecified research use is permitted); and quality accreditation against an industry-recognized standard. Fit for purpose also depends on intended use: a collection that is adequate for exploratory biomarker discovery may not be sufficient for clinical validation, companion diagnostic development, or regulatory submission if chain of custody, preanalytical controls, assay validation, consent scope, or population representativeness are incomplete. A technically impressive collection with ambiguous consent or undocumented handling can be commercially unusable, an avoidable and expensive surprise late in a program.

For institutions that hold biobank assets, including universities, academic medical centers, and federal labs, this creates a real partnering opportunity, provided the asset is positioned in the language sponsors evaluate against. That framing is where many otherwise-strong collections under-realize their value.


REGULATORY, ETHICAL, AND QUALITY CONSIDERATIONS

Biobanking sits at the intersection of human-subjects protection, privacy law, and quality systems. In the United States, the revised Common Rule introduced provisions for broad consent covering storage, maintenance, and secondary research use of identifiable specimens and data,[1] while HIPAA governs the handling of protected health information. In the EU, GDPR imposes its own constraints on personal-data processing. Specimens used to support regulated product validation, particularly diagnostic and companion-diagnostic validation, additionally invite FDA scrutiny of provenance, characterization, and fitness for the intended use. Layered on top are quality and competence standards (ISO 20387)  and BRISQ recognized biorepository best practices. The practical takeaway: governance and documentation decisions made at the moment of collection determine, years later, whether a specimen can be used at all.

MedSurgPI works at the intersection of clinical development, regulatory strategy, and Translational Medical Affairs, the same intersection where biobank value is won or lost. For institutions and inventors, we translate the science of a collection into the terms industry licensees actually evaluate: provenance, consent scope, fitness for purpose, and the regulatory path the specimens can support. For sponsors, we help define fit-for-purpose specimen and annotation requirements up front, scope consent to the development objective, and avoid the late-stage discovery that a collection cannot support the claim it was meant to enable. Medical Affairs adds particular value by defining the clinically meaningful questions a biobank should answer, identifying KOL and sponsor use cases, shaping evidence‑generation plans, and communicating both the potential and the limitations of the asset transparently.

Practical Pointer

A biobank’s translational ceiling is set at the moment of consent, collections built with commercial and future-use permissions from day one avoid the costly retrofitting that sidelines otherwise strong assets.

[1] Office for Human Research Protections, US Department of Health and Human Services. Federal Policy for the Protection of Human Subjects; Final Rule. Fed Regist. 2017;82(12):7149-7274. Codified at 45 CFR part 46.

[2] East Carolina University School of Dental Medicine. Research. Accessed June 9, 2026. https://dental.ecu.edu/research-department/

[3] Sudlow C, Gallacher J, Allen N, Beral V, Burton P, Danesh J, Downey P, Elliott P, Green J, Landray M, Liu B, Matthews P, Ong G, Pell J, Silman A, Young A, Sprosen T, Peakman T, Collins R. UK Biobank: an open access resource for identifying the causes of a wide range of complex diseases of middle and old age. PLoS Med. 2015;12(3):e1001779. doi:10.1371/journal.pmed.1001779.

[4] All of Us Research Program Investigators. The “All of Us” Research Program. N Engl J Med. 2019;381(7):668-676. doi:10.1056/NEJMsr1809937.

[5] Beesley LJ, Salvatore M, Fritsche LG, Pandit A, Rao A, Brummett C, Willer CJ, Lisabeth LD, Mukherjee B. The emerging landscape of health research based on biobanks linked to electronic health records: existing resources, statistical challenges, and potential opportunities. Stat Med. 2020;39(6):773-800. doi:10.1002/sim.8445.

[6] Moore HM, Kelly AB, Jewell SD, McShane LM, Clark DP, Greenspan R, Hayes DF, Hainaut P, Kim P, Mansfield E, Potapova O, Riegman P, Rubinstein Y, Seijo E, Somiari S, Watson P, Weier HU, Zhu C, Vaught J. Biospecimen reporting for improved study quality (BRISQ). J Proteome Res. 2011;10(8):3429-3438. doi:10.1021/pr200021n.

[7] International Organization for Standardization. ISO 20387:2018. Biotechnology, Biobanking, General Requirements for Biobanking. Geneva, Switzerland: International Organization for Standardization; 2018.

Practical Pointers / June 2026

Confirming a Participant Truly Understands the Informed Consent Form Before Signing

Authors:  Gerald L. Klein, MD1; Melissa Palmer2; Freddy Byrth, BA1; Michael Fath, PhD3

Affiliations: MedSurgPI1; Liver Consulting, LLC2; Cavabio Consulting3

Drug Development

The Point: Consent is meaningful only when participants understand it. Since disclosure does not guarantee comprehension, coordinators must verify both decisional capacity and understanding of the specific study before allowing anyone to sign.

A signature on an informed consent form (ICF) documents that disclosure occurred, but it does not prove the participant understood what they agreed to. It is an important ethical and regulatory obligation in clinical research and simply asking, "Do you have any questions?" is not sufficient to confirm comprehension. International oncology trials repeatedly show that most participants cannot correctly answer basic questions about efficacy, risks, and alternatives even after signing.[1] Determining whether someone truly understands the ICF, and therefore whether they should proceed to enrollment requires two separate checks. First, assess decisional capacity: the ability to understand, appreciate, reason about, and express a choice regarding participation. Second, assess comprehension of the specific protocol. Appropriate education, documentation, and, when needed, Institutional Review Board (IRB) approved procedures for a legally authorized representative or additional capacity assessment should support both steps.

A practical two-step approach lets a coordinator or investigator make this determination in a few minutes. First, screen decisional capacity with the University of California, San Diego (UCSD) Brief Assessment of Capacity to Consent (UBACC), a validated 10-item instrument scored 0 to 2 per item (0 to 20 total) that takes under five minutes to administer and, at a threshold score of 14.5, flags participants who warrant more thorough capacity assessment or remediation before enrollment.[2] To support compliance, sites should document the participant’s teach-back responses, any remediation provided, and the basis for concluding that adequate understanding was achieved; without this documentation, a site may perform the right steps but be unable to demonstrate them during monitoring, inspection, or later dispute. Second, confirm comprehension of the actual study using a short teach-back set such as the nine questions which were developed by Klein et al.[3] These questions address the purpose of the study, potential benefits, side effects, procedures, visit burden, participant responsibilities, payment, cost of care for a study-related injury, effect of nonparticipation on usual care, and any out-of-pocket costs. To apply these questions effectively, ask the participant to respond in their own words rather than yes or no.1 Anyone who cannot answer correctly should be re-educated and re-tested, and only those who then demonstrate understanding should be allowed to sign. Building both steps into the consent workflow, and pilot-testing the ICF and questions on lay readers beforehand, protects vulnerable participants without excluding them.

Time the Nonclinical Program to the Clinical Plan, Not to a Checklist

A common and costly error is treating the nonclinical safety package as a fixed checklist rather than a set of studies timed to specific clinical milestones. ICH M3(R2) ties the required duration of repeat-dose toxicity studies to the intended duration of clinical dosing: first-in-human and short trials are supported by short repeat-dose studies of corresponding length, while clinical dosing of six months or longer generally requires a six-month rodent and a nine-month non-rodent chronic dosing study.[4] Before the first-in-human trial, the nonclinical package must also include the safety pharmacology core battery covering cardiovascular, respiratory, and central nervous system function, with dedicated assessment of ventricular repolarization and QT prolongation.[5] It must also include genotoxicity screening that begins with a gene mutation assay and expands to the full battery before larger or longer trials,[6] plus adequate toxicokinetic and general toxicology data. Reproductive and developmental toxicity and carcinogenicity studies are staged later; they gate specific populations and marketing rather than early trials.  

Practical Pointer: at program start, map each nonclinical study to the specific clinical milestone it enables, recognizing that gating requirements vary by intended population, dosing duration, therapeutic area, modality, and regional expectations. This keeps an otherwise clean molecule from stalling simply because a study needed for a particular cohort wasn’t initiated in time.

Devices

Use a Predetermined Change Control Plan to update an AI-enabled device without a new submission

The Point: If your device includes an artificial intelligence-enabled software function that you expect to retrain or refine after authorization, a Predetermined Change Control Plan (PCCP) lets you pre-specify and pre-authorize those changes in your original marketing submission, so you can implement them later without a new 510(k), De Novo, or premarket approval submission.  

The FDA’s final guidance issued on 18 August 2025 establishes the framework for PCCPs for AI-enabled device software functions across the 510(k), De Novo, and PMA pathways. The guidance defines three required components: a Description of Modifications that states the changes the manufacturer intends to make, a Modification Protocol that details how each change will be developed, validated, and implemented, and an Impact Assessment that evaluates the effect of the changes on safety and effectiveness. PCCPs are reviewed as part of the marketing submission, and modifications that fall within an approved plan may be implemented without a new submission.[1]

What to do. Keep the plan focused and verifiable, risk-based, evidence-based, transparent, and lifecycle-oriented, in line with the joint FDA, Health Canada, and Medicines and Healthcare products Regulatory Agency guiding principles.[2] Raise the plan early with the review division through a pre-submission, address labeling so users know the device was authorized with such a plan, and do not attempt to include changes to the intended use, which sit outside these plans and still require a new submission. A well-scoped plan converts a series of expensive, sequential submissions into one, and is often the most valuable planning step for a device that will keep learning after it reaches the market.

Practical Pointer: Keep your PCCP narrowly scoped, evidence-based, and transparent, raise it early through a pre-submission, and avoid including intended-use changes, which always require a new submission.

Medical Affairs

Keep the line clear between answering an off-label question and initiating one. 

The Point:  Medical affairs may respond to an unsolicited request for off-label information, but the rules for firm-initiated scientific exchange are separate and stricter. Treat the two as distinct lanes and never let one drift into the other.

 

For the reactive lane, the FDA guidance on responding to unsolicited requests remains the reference. Answer only the specific question asked, respond privately to the person who asked rather than broadcasting, keep the information truthful, balanced, non-promotional, and science-based, generate it through medical or scientific personnel, never through the sales force, and document the request and the response.[1]

In the proactive lane, the FDA’s January 2025 final Level 1 guidance on firm‑initiated scientific communications for unapproved uses sets a high bar: source publications must be scientifically sound, required disclosures must accompany the communication, and all materials must remain clearly separated from promotional content, both in substance and in channel, using dedicated webpages, emails, and meeting spaces. In contrast, the reactive lane continues to be governed by the FDA’s 2011 draft guidance on responding to unsolicited requests, which permits manufacturers to provide balanced, non-promotional scientific information when the healthcare professional initiates the inquiry. Distinguishing these two lanes is essential: proactive communications must follow the 2025 framework, while reactive responses must follow the 2011 draft. In practice, this means training medical science liaisons (MSLs) to recognize and preserve an unsolicited request rather than converting it into a proactive pitch, keeping medical information responses balanced and fully referenced, and maintaining the firewall in both content and distribution pathways. The compliance risk rarely lies in possessing off-label science; it lies in blurring who initiated the conversation and where that information is housed.

Practical Pointer: Train MSLs to preserve unsolicited requests exactly as received, keep proactive scientific communications in dedicated non-promotional channels, and document both the request and the response so the lane distinction is always visible.

Publications

Build Good Publication Practice (GPP) 2022 and International Committee of Medical Journal Editors (ICMJE) authorship into the publication plan, not the final draft 

Publication integrity failures, guest authorship, ghostwriting, undisclosed conflicts are almost always baked in at the planning stage. Applying GPP and ICMJE authorship criteria early prevents these problems at a fraction of the cost of repairing them later. 

When teams establish clear roles, require transparent disclosures, and document decisions rigorously from the outset, they eliminate the conditions that allow integrity issues to take root, One practical safeguard is to require an authorship/contribution table at project kickoff and update it at each draft milestone; GPP 2022 explicitly adopts ICMJE criteria as the default and emphasizes that named authors are accountable for data integrity, so the planning process should make that accountability visible from the start. 

MedSurgPI: Elevating Medical and Scientific Communication

MedSurgPI advances the practices described in this paper, clear scientific communication, transparent authorship, disciplined lane management, and responsible innovation.  By supporting teams correctly from the start, MedSurgPI helps organizations build credible, compliant, and scientifically sound materials that stand up to scrutiny.


[1] Nusbaum L, Douglas B, Damus K, Paasche-Orlow M, Estrella-Luna N. Communicating Risks and Benefits in Informed Consent for Research: A Qualitative Study. Glob Qual Nurs Res. 2017 Sep 20;4:2333393617732017. doi: 10.1177/2333393617732017. PMID: 28975139; PMCID: PMC5613795

[2] Jeste DV, Palmer BW, Appelbaum PS, Golshan S, Glorioso D, Dunn LB, Kim K, Meeks T, Kraemer HC. A new brief instrument for assessing decisional capacity for clinical research. Arch Gen Psychiatry. 2007;64(8):966-974. doi:10.1001/archpsyc.64.8.966.

[3] Klein G, Morgan R, Zhang, S, et al. Improving Informed Consent Forms (ICFs) in Clinical Trials, Especially for Vulnerable Populations, A Global Need. Presented at: Society of Clinical Research Associates [SOCRA] Annual Conference; September 28-30, 2023; Montreal Canada

[4] International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use. ICH Harmonised Tripartite Guideline M3(R2): Guidance on Nonclinical Safety Studies for the Conduct of Human Clinical Trials and Marketing Authorization for Pharmaceuticals. Geneva, Switzerland: ICH; 2009.

[5] International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use. ICH Harmonised Tripartite Guideline S7A: Safety Pharmacology Studies for Human Pharmaceuticals. Geneva, Switzerland: ICH; 2000.

[6] International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use. ICH Harmonised Tripartite Guideline S2(R1): Guidance on Genotoxicity Testing and Data Interpretation for Pharmaceuticals Intended for Human Use. Geneva, Switzerland: ICH; 2011.

 [7] US Food and Drug Administration. Marketing Submission Recommendations for a Predetermined Change Control Plan for Artificial Intelligence-Enabled Device Software Functions: Guidance for Industry and Food and Drug Administration Staff. Silver Spring, MD: US Food and Drug Administration; December 2024. Accessed July 2, 2026. https://www.fda.gov/regulatory-information/search-fda-guidance-documents/marketing-submission-recommendations-predetermined-change-control-plan-artificial-intelligence

 [8] US Food and Drug Administration, Health Canada, Medicines and Healthcare products Regulatory Agency. Predetermined Change Control Plans for Machine Learning-Enabled Medical Devices: Guiding Principles. Silver Spring, MD: US Food and Drug Administration; 2025. Accessed July 2, 2026. https://www.fda.gov/medical-devices/software-medical-device-samd/predetermined-change-control-plans-machine-learning-enabled-medical-devices-guiding-principles

[9] US Food and Drug Administration. Responding to Unsolicited Requests for Off-Label Information About Prescription Drugs and Medical Devices: Draft Guidance for Industry. Silver Spring, MD: US Food and Drug Administration; December 2011. Accessed July 2, 2026. https://www.fda.gov/regulatory-information/search-fda-guidance-documents/responding-unsolicited-requests-label-information-about-prescription-drugs-and-medical-devices




Practical Pointers for Drug Development and Medical Affairs

Authors: 

  • MedSurgPI: Gerald L. Klein, MD; Roger E. Morgan, MD; Freddy Byrth; Marion Stamp-Cole, Stephen Haworth, MD

  • SMART BioWorks: Eric Hacherl, PhD

  • Exquisite Biomedical Consulting: Shabnam Vaezzadeh, MD

  • Global Life Sciences Alliance: Denise McNerney

  • Independent DSMB Coordinator: Jamie Lazar

  • LBF BioPharma Consulting: Larry Florin

  • The Brown Group: Gail Brown, MD

Drug Development

New Guidelines from ICH E6(R3)

The International Council for Harmonisation (ICH) Guideline E6(R3), Good Clinical Practice revision represents a pivotal step toward modernizing clinical trial conduct and oversight. This update redefines how sponsors, investigators, and Medical Affairs teams manage quality and risk, emphasizing participant protection, data integrity, and responsible use of digital technologies.

1. Dynamic Risk Assessments (DRA): From Static to Adaptive Oversight

ICH E6(R3) suggests that sponsors develop a risk-based approach to clinical trial/development oversight, with the intensity and focus of activities such as monitoring, data review, and auditing adjusted based on the clinical trial’s complexity and potential impact on the study participants. Importantly, R3 builds upon prior versions of ICH E6 that emphasized Quality by Design (QbD), reinforcing that proactive, design-level quality principles should guide how risks are identified, prioritized, and managed throughout the study lifecycle.

Continuous evolution: These risk assessments should be periodically reviewed and, if needed, updated/changed based on the availability of new/additional data, changes in sites (number, geographic location, operational instructions, etc.), or technology (systems, site-facing interfaces, etc.) that may introduce new risks.

Adaptive monitoring: Replace standardized monitoring plans with real-time, adaptive strategies triggered by defined indicators:

  • Protocol deviations

  • Missing or inconsistent data

  • Emerging safety trends or unexpected adverse events

Independent oversight: Medical monitors and Data Safety Monitoring Boards (DSMBs) play a greater role in interpreting risk signals and ensuring participant safety, extending beyond passive review to include adaptive, data-informed interventions.

This shift aligns with regulatory trends emphasizing quality by design (QbD), risk-based monitoring (RBM), and fit-for-purpose quality systems—concepts central to ICH E8(R1) and E6(R3) alignment. At the heart of this evolution is a focus on “Critical-to-Quality” (CtQ) factors, as oversight activities should concentrate on the processes and data that are essential to assuring participant safety and the accumulation of reliable, interpretable patient data. A key crux of E6(R3) is the shift away from traditional, exhaustive source data verification (SDV) toward data-driven, centralized (statistical) monitoring strategies with a keen focus on critical data.

 2. Reaffirming Participant Safety, Rights, and Well-Being

ICH E6(R3) reaffirms its ethical foundation: participant protection is paramount. Beyond compliance, sponsors must ensure participants are fully informed, empowered, and respected throughout the trial.

Transparency and accessibility: Investigators must have real-time access to new safety data, protocol amendments, and risk communications to ensure timely action at the site level.

Participant communication: Sponsors and Clinical Research Organizations (CROs) must provide safety information that is clear, understandable, and culturally appropriate, supporting autonomy and continued informed consent.

Ethical obligation: Sponsors are responsible not only for data collection but for safeguarding trust which is crucial for sustaining public confidence in research.

 3. Digital Tools: From Operational Efficiency to Ethical Rigor

The guideline acknowledges the growing role of digital and decentralized technologies but reframes their purpose beyond efficiency and cost containment to ensure scientific validity and ethical implementation.

Fit-for-purpose validation: All digital tools (ePRO, wearables, AI analytics) must undergo formal validation to confirm they accurately capture, store, and transmit data as intended.

Ethical use and governance: Establish clear frameworks for data privacy, participant consent, and system reliability, particularly when technology intermediates participant interaction.

Integration with quality management: Digital systems should integrate seamlessly into the trial's risk-based quality framework to reinforce, not replace, scientific and ethical rigor.

Medical Affairs

Upholding Oversight and Quality

 

1.      Medical Affairs (MA) teams serve as the interface between science, ethics, and communication, ensuring post-marketing and real-world activities align with ICH E6(R3) expectations. As AI becomes embedded in literature surveillance, scientific communication, medical review, and real-world data workflows, MA teams must ensure these tools are used responsibly, transparently, and in alignment with ICH E6(R3)’s quality and data-integrity principles.

 2.      System validation and data integrity: All computerized systems under MA control must be fully validated with robust audit trails, user-access controls, and metadata capture (author, reviewer, approver, time/date stamps). This applies to:

  • Key Opinion Leader (KOL) and stakeholder tracking (Customer Relationship Management) platforms

  • Publication planning and review systems

  • Real-world evidence and registry databases

  • AI-assisted content generation, literature monitoring, and medical insight analytics tools

 3.      Vendor oversight and accountability: Contracts with scientific vendors, communications agencies, and publication partners should clearly define:

  • Scope of work and deliverables

  • Delegated responsibilities and accountability

  • Oversight structure (Medical Affairs vs. vendor roles)

  • Performance metrics: timeliness, data accuracy, conflict-of-interest management, GxP compliance

  • Vendor training requirements: GCP, data privacy, and quality expectations

  • Clearly define Intellectual Property (IP) and practices to maintain IP protections

 4.      Documentation and training: Maintain oversight logs documenting all delegated activities and ensure team members receive training in essential areas, including, but not limited to:

  • Vendor selection and qualification criteria

  • Delegation and accountability management

  • Vendor audits and quality oversight procedures ensuring that participant care and safety decisions are made by competent professionals

  • Scope of work, deliverables, and agreed Key Performance Indicators (KPI)s

These practices demonstrate due diligence and establish clear traceability—key principles reinforced in ICH E6(R3).

Key Takeaway

ICH E6(R3) is not merely a compliance exercise; it's a call to rethink trial oversight as a living system. The guideline promotes balance between flexibility and accountability, urging organizations to align quality, ethics, and innovation at every stage of the trial lifecycle. For sponsors, CROs, and Medical Affairs teams, success depends on transparency, adaptability, and a proactive approach to risk management—hallmarks of modern, patient-centered research.