Good Clinical Practice (GCP) is an international ethical and scientific quality standard that governs how clinical trials are designed, conducted, recorded, and reported. It exists for two reasons: to protect the rights, safety, and well-being of people who volunteer for research, and to ensure the data those trials produce is credible. Every major drug or medical device that reaches the market has gone through trials conducted under GCP rules, making it one of the most consequential frameworks in modern medicine.
Where GCP Came From
The roots of GCP trace back to some of the darkest chapters in medical history. The Nuremberg Code, written in 1947 after the Nazi war crimes trials, was one of the first formal statements that human experimentation requires ethical boundaries. In 1964, the World Medical Association issued the Declaration of Helsinki, which addressed clinical research more directly and has since been revised five times. These documents established the foundational idea that a person’s welfare always takes priority over the interests of science or society.
Building on those principles, the International Council for Harmonisation (ICH) published its first GCP guideline, known as E6, in 1996. The goal was to create a single standard that regulators in the United States, Europe, and Japan could all agree on, so that trial data generated in one country would be accepted in another. A revised version, E6(R2), followed in 2016. A third revision, E6(R3), is currently in draft form, with the FDA accepting public comments through early 2025. The update reflects how much clinical trials have changed since 1996, particularly with new trial designs and digital technology.
The 13 Core Principles
GCP is built on 13 principles that apply to every clinical trial, regardless of the drug, device, or disease being studied. They can be grouped into a few key themes:
- Ethics first. Trials must follow ethical principles rooted in the Declaration of Helsinki. The rights, safety, and well-being of participants always outweigh the interests of science and society.
- Risk-benefit balance. Before a trial starts, foreseeable risks must be weighed against anticipated benefits. A trial should only begin and continue if the benefits justify the risks.
- Scientific soundness. Trials must be based on adequate existing evidence about the product being tested and described in a clear, detailed protocol.
- Independent oversight. Every trial protocol must be reviewed and approved by an institutional review board (IRB) or independent ethics committee before enrollment begins.
- Qualified personnel. Everyone involved in a trial, from the lead physician to the data entry staff, must be qualified by education, training, and experience. Medical decisions about participants are always the responsibility of a qualified physician.
- Informed consent. Every participant must give voluntary consent before joining a trial.
- Data integrity and confidentiality. Trial information must be recorded and stored in a way that allows accurate reporting and verification, while records that could identify participants are kept confidential.
- Product handling. Investigational products must be manufactured, stored, and used according to good manufacturing standards and the approved protocol.
- Quality systems. Procedures that assure the quality of every aspect of the trial must be in place.
Who Does What in a Clinical Trial
GCP assigns clear responsibilities to three main parties: the sponsor, the principal investigator, and the ethics committee.
The sponsor is typically the pharmaceutical or biotech company funding the trial. The sponsor designs the protocol, supplies the investigational product, selects qualified research sites, and monitors the trial to ensure it stays on track. Sponsors are also responsible for safety reporting to regulatory authorities and for making sure no unauthorized changes are made to the protocol.
The principal investigator (PI) is the physician or qualified professional who runs the trial at a given site. The PI is responsible for the safe and ethical conduct of the study day to day. That includes selecting eligible participants, obtaining informed consent, supervising all study procedures, ensuring accurate data collection, and reporting safety events. The PI also communicates with both the IRB and the sponsor throughout the trial, submits progress reports, and writes a final report when the study closes.
The IRB or ethics committee serves as an independent watchdog. It reviews the protocol, the consent form, and any recruitment materials before the trial can begin. It continues to review the trial at regular intervals and has the authority to pause or stop a study if participant safety is at risk.
How Informed Consent Works
Informed consent is not just a signature on a form. GCP treats it as a process built on three elements: giving participants enough information to make a real decision, ensuring they actually understand that information, and confirming their participation is entirely voluntary.
The ICH GCP guideline specifies 20 elements that must appear in an informed consent form. Some are universal: the fact that the study involves research, the participant’s right to withdraw at any time without penalty, how their records will be kept confidential, what compensation exists if a trial-related injury occurs, and who to contact with questions. Others are specific to each study: the purpose of the trial, what treatments and procedures are involved, foreseeable risks, expected benefits, available alternatives, how long participation will last, and roughly how many people are enrolled. Participants must also be told that monitors, auditors, ethics committees, and regulators may access their records to verify the study, which is a practical limit on confidentiality.
Data Integrity: The ALCOA+ Standard
Credible trial results depend on trustworthy data. GCP requires that all clinical trial information be recorded, handled, and stored so it can be accurately reported and independently verified. The standard the industry uses to judge data quality is known as ALCOA+, an acronym for nine principles.
The original five: data must be Attributable (traceable to a specific person), Legible (clear and readable), Contemporaneous (recorded in real time, not from memory), Original (the first record or a certified true copy), and Accurate (reflecting exactly what was observed). Four additional criteria round out the framework: Complete (nothing omitted), Consistent (chronological and orderly), Enduring (maintained for as long as regulations require), and Available (accessible for audits and inspections).
In practice, this means every measurement, observation, and participant interaction in a trial has to be documented promptly in source records, typically the medical chart or electronic system. Case report forms then capture that data in a standardized format the sponsor can analyze. Any corrections must preserve the original entry so reviewers can see what changed, when, and why.
Essential Documents for a Trial
GCP requires specific documentation at every phase of a trial, organized into three stages. Before the trial begins, sites must have the investigator’s brochure (a summary of everything known about the product), the signed protocol, the approved consent form, IRB approval, regulatory authorization, investigator credentials, and shipping records for the study drug or device.
During the trial, sites maintain updated versions of those documents plus monitoring visit reports, signed consent forms for every participant, source documents, completed case report forms, and records of any adverse events reported. After the trial ends, the required file includes a final accounting of all investigational product at the site, documentation of product destruction, a close-out monitoring report, and the investigator’s final report to the IRB.
Safety Reporting Requirements
When something goes wrong during a trial, GCP and regulatory rules impose strict reporting timelines. A serious adverse event is defined as any outcome that results in death, is life-threatening, requires hospitalization (or extends an existing stay), causes lasting disability, or leads to a birth defect. Important medical events that don’t meet those criteria can also qualify if they require intervention to prevent a serious outcome.
In the United States, sponsors must report serious and unexpected suspected reactions to the FDA and all participating investigators within 15 calendar days of determining the event qualifies. If the reaction is fatal or life-threatening, the initial report window shrinks to 7 calendar days. Follow-up information must be submitted as soon as it becomes available. If an event that initially seemed non-reportable later turns out to meet the criteria, the 15-day clock restarts from the moment that determination is made.
How GCP Is Enforced Globally
GCP is not just a set of recommendations. Regulatory agencies in major markets have incorporated it into law. The FDA in the United States, the European Medicines Agency (EMA) in Europe, and the Pharmaceuticals and Medical Devices Agency (PMDA) in Japan all conduct GCP inspections to verify the integrity of trial data and confirm that participants were protected. Inspectors may visit research sites, sponsor offices, or contract research organizations at any time, and they review everything from consent forms to drug storage logs.
Historically, these agencies operated independently, but a collaborative pilot program between the FDA, EMA, and PMDA has worked toward more coordinated inspections for drugs under review in multiple countries. The practical effect for anyone running a trial is straightforward: a GCP violation found by any major regulator can delay or block a drug’s approval worldwide, and in serious cases, data from the offending site can be thrown out entirely.