ALCOA is a five-part framework for data integrity in clinical research. It stands for Attributable, Legible, Contemporaneous, Original, and Accurate. Every piece of data collected during a clinical trial, from a patient’s blood pressure reading to a lab result, is expected to meet all five criteria. The acronym was coined by Stan Woollen, an official in the FDA’s Office of Enforcement, in the early 1990s, and it has since become the universal shorthand for trustworthy research data across the pharmaceutical and medical device industries.
If you work in clinical research, regulatory affairs, or quality assurance, ALCOA is the lens through which inspectors evaluate whether your data can be trusted. Here’s what each principle means in practice and how the framework has expanded over time.
The Five Core ALCOA Principles
Attributable means every data entry, observation, or change can be traced to a specific person. If a nurse records a patient’s weight at a study visit, the record needs to show who entered that number. In electronic systems, this is handled through unique user logins, electronic signatures, and audit trails that automatically log who did what and when. No shared accounts, no unsigned entries.
Legible means the data is clear and readable. This sounds obvious, but illegible handwriting on paper case report forms has been a real and persistent problem in clinical trials. Electronic systems largely solve this by presenting data in standardized formats where there’s no guessing whether someone wrote a 1 or a 7.
Contemporaneous means data is recorded at the time of the observation, not hours or days later from memory. When a clinician measures a patient’s temperature during a study visit, that value should be entered into the record right then. Writing results on a sticky note and transcribing them into the system the following week violates this principle, because the delay introduces the risk of errors, omissions, or fabrication. Electronic systems support this through automatic date and time stamps every time data is entered or modified.
Original means the record is the first place the data was captured, or a verified “certified true copy” of that first record. The goal is to prevent a situation where someone copies data from one document to another and the original is lost or altered along the way. When data is entered directly into an electronic case report form at the point of care, that electronic entry is the original record. Audit trails then track every subsequent query or change.
Accurate means the data reflects exactly what was observed. A blood pressure of 142/88 gets recorded as 142/88, not rounded, not adjusted, not transcribed incorrectly. Accuracy is supported by minimizing manual steps: automatic data capture from instruments, built-in edit checks that flag out-of-range values or missing fields, and audit trails that make any alterations transparent and traceable.
ALCOA+: Four Additional Criteria
Over time, regulators recognized that the original five principles didn’t cover everything. The expanded version, known as ALCOA+ (sometimes written ALCOA-CCEA), adds four more requirements.
- Complete: The record includes all information needed to recreate and understand an event. If a lab test was repeated or reanalyzed, those additional results must be recorded too, not just the final number.
- Consistent: Data is recorded, dated, and time-stamped in the expected sequence. If a sample was collected at 9:00 a.m. and analyzed at 10:00 a.m., the timestamps should reflect that order. Inconsistencies in sequence raise red flags during inspections.
- Enduring: Records must remain intact and accessible for the entire required retention period. Data stored on a format that degrades or becomes unreadable over time doesn’t meet this standard.
- Available: The data can be accessed and retrieved at any point during the retention period. Storing records in a system that’s been decommissioned or in a format no one can open defeats the purpose of keeping them at all.
How ALCOA Fits Into FDA Regulations
ALCOA itself isn’t a regulation. It’s a framework that summarizes what regulations already require. The most relevant U.S. regulation is 21 CFR Part 11, which governs electronic records and electronic signatures. Part 11 sets out the criteria under which the FDA considers electronic records to be “trustworthy, reliable, and generally equivalent to paper records.”
The specific regulatory requirements map closely to each ALCOA principle. Systems must be validated to ensure accuracy and reliability. Secure, computer-generated audit trails must record the date and time of every entry or modification, and changes cannot obscure previously recorded information. Signed electronic records must include the signer’s printed name, the date and time of signing, and the purpose of the signature (review, approval, authorship). Every electronic signature must be unique to one individual and cannot be reused or reassigned.
Signatures must also be linked to their associated records in a way that prevents them from being copied or transferred to falsify a record. These aren’t suggestions. They’re binding requirements that clinical trial sponsors and sites must meet, and FDA inspectors verify compliance during audits.
ALCOA in Electronic Systems
The shift from paper to electronic data collection has changed how ALCOA is applied in practice, mostly for the better. Paper-based trials relied on handwritten entries, carbon copies, and physical signatures. Electronic systems handle many ALCOA requirements automatically.
Audit trails are the backbone of electronic ALCOA compliance. A compliant system automatically tracks who created a record, when it was created, who changed it, when the change was made, and the reason for the change. Role-based permissions prevent unauthorized users from accessing or modifying data. Automatic edit checks flag missing data points or values that fall outside expected ranges the moment they’re entered, catching errors before they propagate.
When data elements like blood pressure, weight, temperature, or pill counts are entered directly into an electronic case report form during a study visit, the electronic entry becomes the original source record. This eliminates the error-prone step of transcribing handwritten notes into a database later. The FDA has explicitly noted that manual transcription of paper records into electronic format at a later time is not good practice, because it introduces opportunities for human error and violates the contemporaneous principle.
Why ALCOA Matters for Drug Approvals
Clinical trial data is the foundation of every drug approval decision. When a pharmaceutical company submits a new drug application, the FDA needs confidence that the underlying data is real, unaltered, and collected properly. ALCOA provides the measuring stick.
During inspections, FDA investigators evaluate whether trial sites maintained data integrity throughout the study. If they find unsigned records, backdated entries, missing audit trails, or evidence that data was transcribed long after collection, those findings can lead to warning letters, data being excluded from the regulatory submission, or in serious cases, rejection of the entire application. For a company that has spent years and hundreds of millions of dollars on a clinical program, a data integrity failure is catastrophic.
For the people working at clinical trial sites, coordinators, investigators, lab technicians, ALCOA translates into everyday habits: entering data promptly, using your own login credentials, never sharing passwords, documenting the reason for any correction, and preserving original records. These aren’t bureaucratic formalities. They’re the practices that determine whether a trial’s results can be trusted and, ultimately, whether a new treatment reaches patients.