--- title: "ICH E6 (R3): what it is, what changed from R2, and how GCP compliance works | Qualio" canonical: "https://www.qualio.com/frameworks/ich-e6-r3" updatedDate: "2026-11-03T14:02:20.000Z" description: "ICH E6 (R3) is the current revision of the ICH good clinical practice guideline, the standard sponsors, CROs and trial sites are inspected against. What changed from R2, who must comply, how inspection readiness works, and how Qualio assesses your clinical procedures against it." --- # ICH E6 (R3): what it is, what changed from R2, and how GCP compliance works | Qualio ICH E6 (R3) is the current revision of the ICH good clinical practice guideline, the standard sponsors, CROs and trial sites are inspected against. What changed from R2, who must comply, how inspection readiness works, and how Qualio assesses your clinical procedures against it. ## ICH E6 (R3) The international guideline for good clinical practice in trials with human participants. ## What is ICH E6 (R3)? ICH E6 (R3) is the current revision of the International Council for Harmonisation's good clinical practice guideline, the standard for designing, running, recording and reporting a clinical trial with human participants. Regulators in the ICH regions adopt it into their own rules and run GCP inspections against it. Nobody certifies against it. A sponsor complies with it and is inspected. R3 replaces R2, the 1996 text with its 2016 addendum. The principles and Annex 1 reached ICH Step 4 in January 2025, took effect in the EU in July 2025 and were issued by the FDA as final guidance in September 2025. Annex 2, for trials with decentralised or pragmatic elements, reached Step 4 in June 2026 and applies in the EU from January 2027. ## Who needs to comply with ICH E6 (R3)? Sponsors of interventional clinical trials, from a first-in-human study at a biotech to a phase 3 programme at a pharma company, in any ICH region CROs and the other service providers a sponsor transfers trial work to, since R3 makes the sponsor's oversight of that work something an inspector asks to see Investigator sites, which the data governance section binds beside the sponsor, and the clinical software and data vendors the sponsor is accountable for under its oversight The guideline becomes urgent when a sponsor audit or a GCP inspection goes on the calendar, when the clinical procedures still cite R2, or when a sponsor questionnaire asks how you comply with R3. ## What changed from R2 to R3 R2 was the 1996 guideline with a 2016 addendum on risk-based monitoring. R3 starts again from a set of principles and puts the detail in annexes, so the structure, the vocabulary and the weight on sponsors have all moved. ### Principles-based structure with annexes Overarching principles, Annex 1 for interventional trials with sections on the ethics committee, the investigator, the sponsor and data governance, and Annex 2 for trials with non-traditional elements, in place of R2's prescriptive sections ### Quality by design Quality is built into the protocol. The factors critical to participant safety and the reliability of results are identified at design, and the trial's processes are built around them ### Risk-proportionate processes Monitoring, oversight and documentation are scaled to the risk to participants and to the results, with the reasoning recorded, in place of the same procedure run on every trial ### Data governance and computerised systems A new section covering the data life cycle from capture to archive, validation proportionate to risk, audit trails and the integrity of electronic source data ### Sponsor oversight of service providers "Service provider" replaces "CRO" as the term, the sponsor keeps responsibility for every activity it transfers, and the oversight has to be shown on request ### Media-neutral records "Essential records" replace "essential documents", and the requirements apply to whichever system holds them, paper or electronic ## How GCP compliance under R3 works ### 1. Read your clinical procedures against R3 List which SOPs still cite R2, which processes have no written risk rationale, and where the data governance section finds nothing written down at all. ### 2. Build the quality by design and risk-proportionate processes The critical to quality factors, the risk assessment and the monitoring plan as controlled procedures, with the reasoning where an inspector will look for it. ### 3. Qualify and oversee the service providers A qualification for each CRO and vendor, an audit schedule set by its risk, and a written trail of the oversight meetings and what they found. ### 4. Train the people who run the trial on the revised procedures At the sponsor, the CRO and the site, and keep the training records with the procedures they belong to. ### 5. Be ready for the audit and the inspection A sponsor auditor or a GCP inspector asks for procedures, training, deviations and the trial master file by section, and the answer has to be the approved version of each, with the signature on it. ## Qualio assesses your clinical procedures, training and deviations against R3, so you know where the trial stands before the sponsor auditor does Qualio breaks ICH E6 (R3) down section by section and maps your clinical SOPs, training records, deviations and supplier files to the sections they answer. When a procedure changes, it reassesses the sections that procedure touches and recommends a fix for any gap. Copilot drafts the SOP update or the deviation write-up, and your team approves it. When the auditor sends the dates, you export the evidence by section. CROs and vendors qualified once, audited on a schedule set by their risk and sent a SCAR from the deviation they caused, for the sponsor oversight section Retraining sent on the effective date of every revised clinical SOP, so the move from R2 to R3 reaches the people running the trial Protocol deviations logged against the study, the site and the procedure, each traceable to the CAPA that closed it ## Standards that apply alongside ICH E6 (R3) ### 21 CFR Part 11 The FDA's rule for the electronic records and signatures the trial's data governance section expects, from electronic source data to the quality system holding the SOPs ### ICH Q9 Quality risk management, the method R3's risk-proportionate approach rests on ### ICH Q10 The pharmaceutical quality system model, where the deviations and CAPAs a trial raises are managed across the product's life ### cGMP (21 CFR 210 and 211) The manufacturing rule for the investigational product dosed in the trial, read with the FDA's guidance for phase 1 material ### ISO 42001 The AI management system standard, for sponsors and vendors putting AI into trial conduct or data handling ## eClinical eClinical Solutions provides a cloud-based clinical data software platform which makes truly digital clinical trials possible. ## Guides and reading for ICH E6 (R3) ## Questions about ICH E6 (R3) ### What is ICH E6 (R3)? ICH E6 (R3) is the third revision of the ICH good clinical practice guideline, the international standard for the design, conduct, recording and reporting of clinical trials with human participants. Regulators adopt it into their inspection frameworks, so sponsors, CROs and sites are inspected against it. It replaces R2 with a principles-based structure and annexes. ### What changed from ICH E6 R2 to R3? R3 rewrites the guideline. Overarching principles with annexes replace R2's prescriptive sections, quality is designed into the protocol around the factors critical to participants and results, processes are scaled to risk, data governance and computerised systems get their own section, sponsors must show their oversight of service providers, and records requirements no longer assume paper. ### When does ICH E6 (R3) take effect? The principles and Annex 1 reached ICH Step 4 in January 2025. The EU applied them from July 2025 and the FDA issued them as guidance that September. Health Canada and the MHRA followed in April 2026. Annex 2 reached Step 4 in June 2026 and applies in the EU from January 2027. ### Is ICH E6 (R3) legally binding? It is a guideline, so it is binding where a regulator has adopted it. The EU, the FDA and the other ICH members adopt it into their own rules and guidance, and GCP inspections are run against it. In practice a sponsor or CRO working in any ICH region is held to it, by the inspector and by sponsor auditors. ### Is there an ICH GCP certification? No. No body certifies a sponsor, a CRO or a site against ICH E6. GCP training certificates exist for individuals and are not a certification of the organisation. Compliance is shown to a GCP inspector or a sponsor auditor on the procedures, the training records, the deviations and the trial master file. ### What does E6 (R3) require of sponsors overseeing CROs? The sponsor keeps responsibility for every trial activity it transfers to a service provider. ### Can we add ICH E6 (R3) to the standards we already run in Qualio? Yes. Add it from the library and Qualio assesses the clinical SOPs, training records, deviations and supplier files you already hold against every section, beside cGMP, ICH Q10 and Part 11 if you run those too. The first assessment lists what the move from R2 leaves uncovered. ## When is the sponsor audit? Bring the date and your clinical procedures. We will show you R3 assessed against them section by section, with the gaps listed and the evidence exported the way the auditor reads it.