GCP stands for Good Clinical Practice, an international standard that governs how clinical trials involving human participants are designed, conducted, recorded, and reported. It exists to accomplish two things: protect the people who volunteer for trials, and ensure the data those trials produce is credible. Every pharmaceutical company running a clinical trial, whether testing a new cancer drug or a reformulated painkiller, must follow GCP guidelines to get regulatory approval.
Where GCP Comes From
GCP’s ethical roots trace back to the Nuremberg Code, written after World War II in response to horrific medical experiments conducted without consent. That code influenced the Declaration of Helsinki, which the World Medical Association first adopted in 1964 and has revised multiple times since. The Declaration of Helsinki has been called the “cornerstone” document of medical research ethics and “the most widely recognized source of ethical guidance for biomedical research.” GCP builds on that ethical foundation, turning broad principles into specific, enforceable rules for clinical trials.
The guidelines themselves are developed by the International Council for Harmonisation (ICH), a body that brings together regulatory authorities and the pharmaceutical industry from Europe, Japan, and the United States. The current version, known as ICH E6, was most recently updated in 2025 as E6(R3). In the U.S., GCP principles are also written into federal law through the Code of Federal Regulations, making them legally binding rather than just aspirational.
The 13 Core Principles
ICH GCP lays out 13 principles that apply to every clinical trial. They cover a lot of ground, but a few themes run through all of them:
- Ethics first. Trials must follow ethical principles rooted in the Declaration of Helsinki. The rights, safety, and well-being of participants always take priority over the interests of science or society.
- Risk-benefit balance. Before a trial starts, foreseeable risks must be weighed against anticipated benefits. A trial should only begin and continue if the expected benefits justify those risks.
- Scientific soundness. Every trial needs a clear, detailed protocol, and sufficient existing data on the drug or treatment must be available to justify testing it in people.
- Qualified personnel. Everyone involved in running a trial, from the lead physician to the data managers, must have appropriate education, training, and experience. Medical decisions about participants must be made by a qualified physician or dentist.
- Informed consent. Every participant must freely agree to take part, with full knowledge of what the trial involves.
- Data integrity. All trial information must be recorded, handled, and stored so it can be accurately reported, interpreted, and verified later.
- Confidentiality. Records that could identify participants must be protected according to applicable privacy rules.
- Quality systems. Procedures that assure quality across every aspect of the trial must be in place from start to finish.
Two additional principles require that investigational products follow Good Manufacturing Practice (GMP) standards and that every trial receives prior approval from an ethics committee before enrollment begins.
Who Does What Under GCP
GCP assigns clear responsibilities to three key players: the sponsor, the investigator, and the ethics committee.
The sponsor is typically the pharmaceutical company funding the trial. Sponsors must ensure the study complies with informed consent regulations and ethics committee requirements. They select investigators, provide the investigational product, and oversee data collection. They also have the authority to terminate a study that isn’t being conducted properly.
The investigator is the physician or researcher running the trial at a specific site. Investigators serve as the communication link between the sponsor and the ethics committee, passing along information in both directions. They’re responsible for following the protocol, obtaining informed consent from each participant, and making all medical decisions about participant care.
The ethics committee (called an Institutional Review Board in the U.S. or Independent Ethics Committee elsewhere) reviews and approves the trial before it starts. Their primary responsibility is protecting participants. They evaluate the study design, the consent process, and whether the risks are acceptable. They must notify investigators in writing of their decision to approve, reject, or require changes to a proposed study. They also ensure that consent documents clearly explain how participant confidentiality will be maintained.
What Informed Consent Actually Requires
Informed consent under GCP is far more than getting a signature on a form. The guidelines spell out specific information that participants must receive before they agree to take part. This includes the purpose of the trial, what treatments and procedures are involved, which aspects are experimental, the foreseeable risks, the expected benefits, and what alternative treatments exist outside the trial.
Participants must also be told the expected duration of their involvement, the approximate number of people in the trial, whether they’ll be compensated, and what happens if they’re injured during the study. Critically, the consent document must make clear that participation is voluntary and that a person can withdraw at any time without penalty. It must also explain that monitors, auditors, the ethics committee, and regulatory authorities will have access to their records for verification purposes, even though their identity will otherwise be kept confidential.
Consent isn’t a one-time event. If new findings emerge during the trial that could affect a participant’s willingness to continue, they must be informed promptly.
Monitoring, Audits, and Inspections
GCP requires multiple layers of oversight to catch problems before they compromise participant safety or data quality.
Monitoring is the most frequent layer. It’s an ongoing activity carried out at predefined intervals according to a monitoring plan. For industry-sponsored trials, the pharmaceutical company is responsible for monitoring. For academic studies, the principal investigator takes on that role. Monitors visit trial sites to verify that the study is being conducted according to the protocol, that data is being recorded accurately, and that participants’ rights are being respected. Think of monitoring as quality control: catching and correcting issues in real time.
Audits are less frequent and more independent. An audit is a systematic examination of trial activities and documents, conducted by personnel who are not involved in running the trial. Audits can happen at any point during a study, either on a scheduled basis or “for cause” when something raises concern. They function as quality assurance, providing an independent check on whether the trial’s own quality control is working.
Inspections are regulatory audits conducted by agencies like the FDA or EMA. Unlike monitoring and audits, inspections can arrive with little or no warning. They assess whether investigators and sponsors are meeting all applicable legal and regulatory requirements. Sites need to be prepared at all times, because an inspector can show up unannounced.
Essential Documentation
GCP requires a substantial paper trail, organized into three phases: documents needed before the trial begins, documents generated during the trial, and documents compiled after the trial ends or is terminated. These records must be maintained separately for each study protocol.
Before the trial starts, this includes the approved protocol, ethics committee approval letters, signed consent form templates, and investigator qualifications. During the trial, sites must maintain updated consent forms, records of adverse events, monitoring visit reports, and any protocol amendments. After the trial concludes, final reports, data summaries, and records of how long documents will be retained all become part of the permanent file. This documentation exists so that anyone, whether a sponsor’s auditor or a government inspector, can reconstruct exactly what happened during the trial and verify that it was done properly.
The 2025 Update: E6(R3)
The most recent revision of GCP, designated E6(R3), represents a major overhaul rather than a minor refresh. Regulatory agencies began adopting it in mid-2025, with the European Medicines Agency implementing it in July, followed by Swissmedic in August and the FDA in September.
The biggest shift is toward risk-proportionate oversight. Rather than applying identical procedures to every trial regardless of complexity, E6(R3) expects sponsors to tailor their quality measures to the specific risks each trial presents. Two concepts central to this approach are Quality by Design, which means building quality into the trial from the planning stage, and identifying factors that are Critical to Quality, so resources focus on what matters most for participant safety and data reliability.
The revision also reflects how much clinical trials have changed technologically. It includes updated guidance on digital data handling, encryption, and secure storage. And it places greater emphasis on participant involvement in trial design, encouraging sponsors to seek feedback from participants and incorporate their perspectives into protocols. The goal is trials that are not only scientifically rigorous but also practical and responsive to the people who volunteer for them.