ǸԹ

Skip to main content
Guidance

Clinical trials for medicines: guidance on quality and risk proportionality

Information on applying quality by design, risk‑based quality management, and proportionate oversight in UK clinical trials.

The amended Clinical Trials Regulations took full effect on 28 April 2026. As such, this guidance should now be considered effective and is no longer in draft.

Part 2 of Schedule 1 to the amended Clinical Trials Regulations requires that the  (and any individual or organisation that the sponsoror investigatordelegates trial-related activities to) have regard to all relevant guidance with respect tocommencingand conducting a clinical trial.

Investigators and sponsors must, therefore, ensure that they are fully aware of the information within this guidance and act accordingly to achieve andmaintainregulatory compliance.

In addition, the following guidelines from the International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use (ICH) are also considered relevant guidance and should be consulted:

Scope

This guidance should be read in conjunction with ICH E8 (R1)General Considerations for Clinical Studies. ICH E8 (R1)establishesthe overarching scientific and quality principles for clinical study design and conduct, including the application of quality by design approaches.

These principles form the basis for the more detailed operational expectations explained in ICH E6 (R3), and organisations are expected to apply ICH E8(R1) and E6(R3) together when planning,conductingand overseeing clinical trials.

ICH E6 (R3)providesprinciplesand detailed guidancewhichareintendedto support sponsorsand investigatorsindeliveringhigh-quality clinical trials.

This guidanceserves to provide anexplanation of the interconnected quality concepts embedded within ICH E6 (R3);quality by design (QbD), risk-based quality management (RBQM), and risk proportionality,and outlines the practical implications for trialconduct,oversightand compliance.

Schedule 1, Part 2paragraph1 of theClinical TrialsRegulations adopts the principles ofgood clinical practiceasset outin ICH E6 making it a requirement to implement thesequality conceptswhen conducting clinical trials in the UK.

This guidance applies to all UK clinical trials of IMPs.

It is not the intention of this document to rewrite the guidance contained in ICH E6 (R3) or ICH E8 (R1) and it is expected that organisations are conversant with these documents.

Note that the concept oftype A, B andCtrialsasintroduced in theMRC/DH/MHRA joint project paper Risk-adapted Approached to theManagement of Clinical Trials of Investigational Medicinal Products(Oct 2011)has been retired.

ICH GCP E6 R3and ICH E8core quality concepts

E8 (R1) introducescritical to quality (CTQ) factorsin Section3.2, describing them as trial attributes fundamental to participant safety and thereliability and interpretability of trialresults.

ICH E6 (R3) Principle6reinforces the concept that’quality should be built into the scientific and operational design and conduct of clinical trials’and more specificallystates:

“Factors critical to the quality of the trial should beidentifiedprospectively.”

These factors are attributes of a trial that are fundamental to the protection of participants, the reliability and interpretability of the trial results and the decisions made based on those trial results. Quality by design involves focusing on critical to quality factors of the trialin order tomaximise the likelihood of the trial meeting its objectives.

QbD requiressponsors to identifytheCTQ factors,which are thetrial attributesessential toclinical trialparticipant protection and the reliability ofthetrial results,early in trial planning.Examples include (but are not limited to):

  • validityof primary endpoint measurement

  • integrity of randomisation and blinding

  • fit-for-purposedecision-making(for example those whichimpactsafety, dose-escalationand/or stopping criteria)

  • correct application of eligibility criteria

  • collection and management of relevant clinical data

  • fit for purpose of validation of computerised systems that are used for clinical data or endpoints

  • informed consent of trial participants

QbD alsorequiressponsors to:

  • design trial processes intentionally to protect theseessentialfactors

  • ensure that scientific and operational feasibility(including investigatorand participant burden)are assessed from the outset

  • establish metricsor key risk indicators(KRI)related to the CTQ toproactivelyidentifyrisk realisation, including the use of quality tolerance limits (QTL)of acceptable values of KRIand those thatinitiatedefinedescalation processes

ICH E6 (R3) Principle 7 states:

“Clinical trial processes, measures and approaches should be implemented in a way that is proportionate to the risks to participants and to the importance of the data collected and that avoids unnecessary burden on participants and investigators.”

This principle linkstheidentifiedCTQfactors to the quality management activities undertaken to protect them.Risk-based quality managementtranslatesQbDinto operational practice through:

  • systematichazard andrisk identification, evaluation, and prioritisation

  • focused riskmitigation/acceptance,controlmeasuresand monitoring aligned with CTQ factorsand KRIs

  • ongoing, dynamic risk review throughout the trial lifecycle

ICHE6 (R3)Principle7.1 states:

“Trial processes should be proportionate to the risks inherent in the trial and the importance of the information collected. Risks in this context include risks tothe rights,safetyand well-being of trial participants as well as risks to the reliability of the trial results.”

Thisdirectly reflects the E8 (R1) concept thatconduct and reporting of clinical studiesshouldbe tailoredto what is critical.

These bothemphasisethatriskproportionalityshould be applied toensure that:

  • oversight, data controls, and monitoring reflect the likelihood,detectabilityand impact ofidentifiedrisks

  • effort and resources areallocatedwhere they protect participant safety and the reliability of key data.

ICH E6 (R3) Principle 9 states that “Clinical trials should generate reliable results”.

This principle underlines the fundamental expectation that trial outcomes can be trusted, interpreted appropriately, and used confidently in regulatory and scientificdecisionmaking.

Principle 9.1builds on this bystating:

“The quality and amount of the information generated in a clinical trial should befit for purposeand sufficient to provide confidence in the trial’s results and support good decision making.”

This means the data collected should be sufficient, relevant, and proportionate to support robust conclusions about the safety and efficacy of the investigational product.

It encourages sponsors and investigators to focus on critical data and processes,those that directly supportfit-for-purpose decision making during the trial,participant safety, data integrity, and the credibility of trial results.

ICH GCP E6 (R3) 3.10states:

“The sponsor should adopt a proportionate and risk-based approach to quality management, which involves incorporating quality into the design of the clinical trial (i.e., quality by design) and identifying those factors that are likely to have a meaningful impact on participants’ rights, safety and well-being and the reliability of the results (i.e., critical to quality factors as described in ICH E8(R1)).”

Sponsors should therefore move away from a “one size fits all” model ofquality managementas was previously common, and adopt trial-specific proportionate measures based on the intended design of the trialin order to:

• safeguardparticipant safety and rights

• maintainscientific validity and reliability of trial results

• avoid unnecessary complexity or burden

It is essential to recognise that the risks associated with a clinical trial may evolve as planned modifications are executed and as practical experience accumulates during thetrial.

Therefore, systems and processes should allow for the continued assessment ofCTQfactors and related risks withappropriate riskcontrol and mitigation applied whereindicated.

QbDand RBQM work together to ensure that clinical trials focus on what truly matters: protecting participants and generating reliable, fitforpurpose results. Byidentifyingand safeguardingCTQfactors from the outset and adapting controls as risks evolve, sponsors can direct oversight and resources to the areas that have the greatest impact on participant safety,dataintegrityand results reliability.

Risk proportionality is therefore not about reducing effort but about applying it intelligently,reducingoversight where risk is low and strengthening it where aspects of the trial are critical totrialsuccess.

This approach replaces’onesizefitsall’quality models with a responsive,evidencedriven framework that supports efficient, credible, andparticipantcentred trial conduct.

The MHRA’s expectations

Critical to quality factors

These should be defined prior to/alongside protocol development.

These should beintegrated into the trial protocol, risk assessments,qualityplans, data management plansetc.so that they are transparent and consideredcross-functionally.

A factor that is critical to quality rarely affects only a single area, so cross‑functional involvement is essential to ensure broad input and holistic assessment. Establishing a common definition and consistent nomenclature forCTQfactorsacross functions helps ensure shared understanding, even when each department’s specific risks or level of interest may differ.

CTQfactors should be reconsideredroutinelyas part ofthe evolution of the trial asprotocols aremodifiedand changesaremadeto trialprocessesandlearning fromexperienceofconducting the trial areintegrated.

Risksidentifiedthrough the assessment ofCTQfactors should be transparent and communicated asappropriate toInvestigators and delegated service providers.

To ensure that CTQ factors are appropriately protected, sponsors should alsoestablishmeaningful metrics, including key risk indicators (KRIs) and quality tolerance limits (QTLs).

KRIs act as early warning indicators of emerging issues that may affect participant safety or the reliability of critical data, while QTLs define the acceptable boundaries of variation for critical parameters.

Exceeding a QTL should trigger predefined review and escalation processes. Together, KRIs and QTLs provide a measurable and proactive mechanism to detect risk realisation and ensuretimelyoversight of what matters most.

Qualitymanagement

ICH E6(R3)provides guidance on the identification ofrisks generally, as well ason how sponsors shoulddeterminewhich risks significantlyimpactCTQfactors. The MHRA does not prescribe a specificmethodologyfor riskmanagementbutexpectsthe following:

  • the establishment and maintenance of a transparent, documented riskmanagement frameworkfrom protocol development through to trial close-outand reporting

  • assurancethat risk managementremainsdynamic and embedded within ongoing trial processes, recognising that risks may change as information accumulates. Previouslyidentifiedrisks may reduce in significance, new risks mayemerge, and certain events,such as protocol amendments, accumulating data trends, deviations from expected recruitment or safety patterns, or a SUSAR thatwarrantsreconsideration of study conduct,may requireare-evaluation of CTQ factors and associated controls. The risk management system should therefore support continuous review andtimelyadjustment of mitigation measures throughout the trial

  • regular review and updating of risk assessments throughout the course of the trial.

  • cross-functional engagement in both riskidentificationand review processes to ensure comprehensive input and holistic evaluation

  • sponsor oversight of the trial,including quality management,shouldbe clearlydemonstrated

Finalisation of the protocol should only take place after allinitialriskassessments involving relevant stakeholders are completedin order toencompassrequired riskcontroland mitigation.

For example, some risk mitigations may require inclusion in the clinical trial protocol such as howeligibilityof trial participants isdeterminedand confirmed.

These assessmentsshouldaim to minimise risks to participants and ensure data integrity, while also reducing burden and inefficiencies forInvestigatorsand participants.

It is expected that sponsors utilise all relevant stakeholders toidentifyand managerisks toCTQfactorswith an emphasis on cross-functional, open,andproactive dialogue.

Stakeholders should also include representatives fromquality assurance(QA)tofacilitateexchange of knowledge from this function.

QAstaff hold significant knowledge of issues associated with the conduct of clinical trials, often acrossmanyfunctional areas/teams,and this information should be considered during the identification and management ofCTQfactors.Care, however,should be taken to ensure the independence of audit activities conducted by the QA function.

Differing incentives among trial team functions can pose significant challenges to conductingtrialsin a riskproportionate manner, with priorities often placed on speed or financial milestones, such as activation ofthe first site or enrolment ofthefirstparticipant, rather than on quality objectives that supportparticipantsafetyand scientific rigour.

It issuggested thatsponsors implement performance goals that emphasise quality, thereby promoting cross-functional alignment, enhancing risk proportionality, safeguarding participant safety, and ensuring the reliability of trial outcomes.

It should be ensured that risk-based quality management which focuses on participant safety, data integrityandresultsreliability is not confused with operational risk assessments which often focus on trial milestones, timing, or cost.

OnceCTQfactors and any risks to those areidentified, it is important that sponsors employ astructured approach to management ofthose duringthe lifecycle of the trialensuring continuous reassessment of theCTQfactors and RBQM.

Organisations should ensure thattimelyproactive actions are taken when issues associated withCTQfactors areidentified.

Essential record requirements

Essential records should align with the essentiality criteria described inICH E6 (R3)Appendix C3.1, and sponsors may use structuredtrial master file (TMF)content lists to prospectivelyidentifyessential records.

The TMF consists of repositories, usually with a principle or key repository that contains the majority of essential records. The TMF should be used to retain documentation to demonstrate proactive, prospective quality planning; QbD decision making, identification of CTQ factors and RBQM activities.

Documentation should describe the critical to quality (CTQ) factors identified for the trial, the associated risks, and the strategies implemented to mitigate those risks. This information should be readily accessible and may be documented within the protocol, or in the TMF as described in ICH GCP E6 (R3) B.12.1.

Retained evidenceshould enableeffective evaluationof key discussions and decision making but avoid excessive or unnecessary record-keeping.

The focus should be on capturing what is necessary todemonstratethat the sponsoridentifiedkey risks in the trialand any processes put in place tocontrol andmitigate those risks.

Certain decisions may be taken at the programmeor product level rather than at the trial level. Appropriate consideration should be given to how these decisions are referenced, documented, and presented within the TMF.

Evidence should beretainedto demonstrate the structured risk management process implemented:

  • initial risk assessmentidentifyingrisks to CTQ factors

  • risk evaluation outputs (likelihood, detectability, impact)

  • rationale forprioritising or deprioritisingrisksconsideredas ‘important’

  • version history of risk assessments (updated as needed duringtrialconduct)

  • personnelandfunctions involved in the risk management process

  • evidence thattherisk controlsdeveloped areproportionate to risk severity

Evidence should also be retained todemonstratethattheriskcontrolswere implementedandmonitored, including:

  • retained documentation that should clearlydemonstratecompletion of activities put in place to detected and mitigate risks.Forexample,evidence of central monitoring outputs and necessary escalations

  • evidence todemonstratecontinuous assessment ofCTQfactorsandRBQM activities

  • use of meeting minutes, oversight logs, key risk indicator (KRI) review and qualitytolerancelimit (QTL) assessments to show continuous oversight anddecision-making

It should be clear that riskshighlighted are communicated to stakeholders, such asinvestigators or delegated service providers.

Recordsshould allow a reader to clearly trace each CTQ factor to associated risks, corresponding controls, and evidence of lifecycle oversighttherebypresenting a coherent narrative anddemonstratingeffective safeguarding of theCTQfactor.

For instance, a single CTQ factor can be exposed to several types of risk, eachpossibly requiringdifferent controls. Risks A, B, and C have beenidentifiedfor CTQfactor1; these are managed by processes X, Y, and Z, detectedviaKRIsi, ii, and iiand where aKRIexceedsthe QTL, action α istaken.

Regular reviews, audits, and oversight logs are essential, and sponsor oversight should be clear, especially when third parties are involved. The emphasis is on efficient, effective, and proportionate documentation that supports compliance throughout the trial lifecycle.

Records related tothe risk management processmay berequested andreviewed during inspections.Inspections are likely to include review of such recordsandinterviewswith relevant personnelrelated to, but not limited to:

  • the processfor identification of CTQ factors

  • established risk management framework activities, such astherisk assessment process

  • review of any mitigations or controls implemented to safeguard CTQs

  • effectiveness of mitigations and controls

  • review and updates to the above

  • associated record-keeping

Updates to this page

Published 27 March 2026
Last updated 28 April 2026 show all updates
  1. The amended Clinical Trials Regulations took full effect on 28 April 2026. As such, this guidance should now be considered effective and is no longer in draft.

  2. Updated to remove questionnaire feedback panel as it has now expired

  3. First published.

Sign up for emails or print this page