Compliance
Dejan MurkoICH GCP Guidelines: The 11 Principles as an Operating Model
At a glance
- ICH GCP (the E6 guideline) is the international ethical, scientific, and quality standard for running clinical trials in people. Its job is twofold: protect participants and produce results you can actually trust.
- The current edition, E6(R3), adopted in January 2025, is built on 11 overarching principles plus annexes that show how to apply them. The principles are the operating model; the annexes are the detail.
- GCP is not a checklist. R3 reframes it around quality by design and risk-proportionate conduct, ideas it inherits from ICH E8(R1): decide up front what is critical to a trial’s quality, then put effort there.
- It binds three main parties: sponsors, investigators (and their sites), and IRBs/IECs. The sponsor or investigator can delegate work but keeps overall responsibility.
- Reading GCP as “rules to pass an inspection” misses the point. The principles tell you how to think about a trial, not just what boxes to tick.
If you are new to clinical research, “ICH GCP” can feel like a wall of acronyms and section numbers. The good news is that the heart of it is small: 11 principles that fit on a couple of pages and describe how a trial should be designed and run. This guide explains what GCP is, walks the 11 principles in plain terms, sets out who is on the hook for what, shows how the latest edition is structured, and places GCP in the wider ICH picture. It stays at the level of the standing overview; the deep change-log of what R3 altered, the mechanics of monitoring, audit trails, and Part 11 each have their own dedicated guides.
What ICH GCP is (and what “E6” means)
Good Clinical Practice is an international ethical, scientific, and quality standard for the conduct of trials that involve human participants. Trials run to this standard help assure that the rights, safety, and well-being of participants are protected, that conduct is consistent with the principles originating in the Declaration of Helsinki, and that the results are reliable (ICH E6(R3), Introduction). “E6” is simply the ICH code for the GCP guideline within the ICH family of efficacy guidelines; the current revision is E6(R3), adopted on 6 January 2025.
The two goals: protect participants and produce credible data
Everything in GCP serves one of two ends, and usually both at once. The first is the protection of the people in the trial. The second is the reliability of the data, because an unreliable trial is not only wasteful, it is unethical: it exposes participants to risk without producing trustworthy answers. The stated objective of the guideline is to provide a unified standard so that regulatory authorities across ICH regions can mutually accept clinical trial data (ICH E6(R3), Introduction). That is why GCP looks the way it does. It is the common language that lets a trial run in one region be trusted in another.
A standard, rooted in the Declaration of Helsinki
GCP is a standard rather than a statute in itself. ICH develops the guideline and recommends it for adoption by the regulatory bodies of ICH regions, and each region transposes it into its own legal framework. So in practice, in most jurisdictions, conducting a regulated interventional trial means complying with GCP because local law requires it. The ethical backbone, the primacy of participant rights and safety, traces directly to the Declaration of Helsinki, which both ICH E6 and ICH E8(R1) name as the origin of their ethical principles (ICH E8(R1) §2.1).
The 11 principles of ICH E6(R3), in plain terms
R3 opens with a set of overarching principles that “apply across clinical trial types and settings” and are meant to stay relevant as technology and methods change (ICH E6(R3), Guideline Structure). They are interdependent and meant to be read as a whole, not cherry-picked. Here they are, translated into what they ask you to do (ICH E6(R3) §II, Principles of ICH GCP):
- Run trials ethically. Conduct trials per the ethical principles of the Declaration of Helsinki, designed so the rights, safety, and well-being of participants are ensured, and those interests prevail over the interests of science and society.
- Get genuine informed consent. Consent is integral to ethical conduct; participation is voluntary and based on a process that leaves participants well-informed.
- Submit to independent review. Trials are reviewed by an IRB/IEC, and conducted under a protocol that received prior favourable opinion.
- Be scientifically sound. The trial rests on adequate, current scientific knowledge, with periodic review as new information emerges.
- Use qualified people. Everyone involved is qualified by education, training, and experience for their task.
- Build quality in. Quality is fitness for purpose; identify the factors critical to quality prospectively and design around them rather than inspecting quality in afterward.
- Be proportionate. Processes and controls are proportionate to the risks to participants and to the importance of the data, and avoid unnecessary burden.
- Write a clear protocol. The trial is described in a clear, concise, scientifically sound, and operationally feasible protocol, with its supporting plans (statistical analysis plan, data management plan, monitoring plan).
- Generate reliable results. Systems and processes for capturing and managing data are fit for purpose; records are kept with integrity and traceability; essential records are retained and available.
- Make roles clear and documented. Responsibilities are defined and documented; a sponsor may transfer or an investigator may delegate activities, but each retains overall responsibility for their own.
- Manage investigational product properly. IMP is manufactured to applicable GMP and handled per the protocol and product specifications.
Quality by design and risk-proportionate conduct
Principles 6 and 7 are where R3’s modern thinking lives, and they are the reason the old “check everything, file everything” mindset no longer fits. The guideline treats quality of a trial as fitness for purpose and asks teams to identify, up front, the factors that are critical to that quality, then focus effort there (ICH E6(R3) §II, principle 6). This is the quality by design idea that R3 inherits from ICH E8(R1), where designing quality into the protocol and processes proactively, in proportion to risk, is the central message (ICH E8(R1) §3.1). The companion concept is proportionality: trial processes should match the risks inherent in the trial and the importance of the information collected, and should not pile unnecessary procedures onto participants and sites (ICH E6(R3) §II, principle 7).
Critical thinking over checklists
ICH E8(R1) is explicit that retrospective document review, monitoring, and audits, even combined, are not sufficient to ensure the quality of a study; quality has to be designed in (ICH E8(R1) §3.1). It even cautions against “one size fits all” approaches and sole reliance on tools and checklists, encouraging a culture of open dialogue and critical thinking about what is actually critical for a given trial (ICH E8(R1) §3.3.1). That is the practical heart of modern GCP: judgment applied where it matters, not uniform effort everywhere.
Who GCP applies to, and what each party owes
GCP assigns responsibilities to three parties. ICH E8(R1) puts it cleanly: the investigator and sponsor have responsibilities for the protection of study participants together with the IRB/IEC (ICH E8(R1) §2.1). The annex of E6(R3) then expands each role in detail.
Sponsors
The sponsor designs the trial, secures resources and qualified people, and carries the quality system. Under the principles, the sponsor builds quality in, manages risk proportionately, and keeps oversight of the trial even when activities are handed to a CRO or vendor. The key rule lives in principle 10: where activities are transferred to service providers, the responsibility for the conduct of the trial, including the quality and integrity of the data, still resides with the sponsor (ICH E6(R3) §II, principle 10).
Investigators and site staff
The investigator runs the trial at the site: caring for participants, obtaining consent, following the protocol, and keeping accurate records. The same delegation rule applies in the other direction: an investigator may delegate tasks but retains overall responsibility for them (ICH E6(R3) §II, principle 10). Site staff must be qualified for their roles (principle 5).
IRBs / IECs
The institutional review board or independent ethics committee provides the independent review that principle 3 requires. A trial proceeds under a protocol that the IRB/IEC has approved, and the committee reviews the trial periodically per applicable requirements (ICH E6(R3) §II, principle 3). The IRB/IEC is the structural check that participant protection is judged by someone independent of the people running the trial.
How the E6(R3) guideline is structured
R3 deliberately separates the durable from the detailed. It is composed of the overarching principles, which are meant to apply across trial types and to age well, and annexes that expand on the principles with specifics (ICH E6(R3), Guideline Structure). Annex 1 covers how the principles apply to interventional trials, organized into the IRB/IEC, investigator, sponsor, and data governance, followed by appendices (the investigator’s brochure, the protocol, and essential records) and a glossary. The guideline is written to be “media neutral,” so it accommodates paper and a range of technologies rather than assuming any particular system. The structure itself signals the philosophy: principles first, application second, with room for additional annexes as trial designs evolve. The scope is interventional clinical trials of investigational products intended for submission to regulatory authorities, though the principles may apply more broadly under local requirements (ICH E6(R3), Guideline Scope).
GCP in the wider ICH picture
GCP does not stand alone. E6(R3) explicitly builds on key concepts from ICH E8(R1) General Considerations for Clinical Studies: fostering a quality culture, designing quality in, identifying critical-to-quality factors, and using a proportionate, risk-based approach (ICH E6(R3), Introduction). E8(R1) sits one level up as the general framework for clinical study design and serves as a guide to the whole set of ICH efficacy documents (ICH E8(R1) §1). In short, E8 frames study quality at the planning level, E6 governs how trials are conducted to GCP, and the rest of the efficacy family (statistical principles, safety, study reports, and so on) fills in the specifics. Reading them in an integrated way, as E8 urges, is the point.
Putting GCP into practice without drowning in paperwork
For a small team, the temptation is to treat GCP as a documentation burden and try to file your way to compliance. The principles point the other way. Start by deciding what is actually critical to your trial’s quality and participant safety, and concentrate effort there (principles 6 and 7). Make roles explicit and write them down, especially where a CRO or vendor is involved, because the responsibility stays with you regardless (principle 10). Keep records with integrity and traceability so the trial can be reconstructed and verified later (principle 9). The standard rewards judgment applied where it matters over uniform effort spread thin.
Tooling can help keep the operational side organized. Purpose-built clinical project management software such as TrialTrack can help a small team keep GCP-relevant oversight, tasks, and timelines in one place rather than scattered across spreadsheets. That is an organizational aid, not a compliance guarantee: no tool makes a team GCP-compliant; the responsibility for conduct and data integrity stays with the sponsor and investigator.
The bottom line
ICH GCP is best understood as an operating model, not a rulebook. Its 11 principles describe how to design and run a trial that protects participants and produces reliable data, and E6(R3) frames that work around quality by design and proportionality rather than box-ticking. Know the two goals, know the 11 principles, know who owes what, and you have the working understanding the rest of GCP builds on.
Sources
- ICH E6(R3) Good Clinical Practice
- ICH E8(R1) General Considerations for Clinical Studies
Dejan Murko
Dejan is the co-founder of Mayet, building software for biotech and pharma teams.