ICH E6(R3) Deep Dive: How Clinical Data Management Is at the Heart of Clinical Trial Conduct

Much of the commentary related to the ICH E6(R3) guidance focuses on what the guidance says—asking sponsors to take a risk-based approach to quality management, incorporate quality into trial design, and align monitoring and oversight activities with the risks that matter most. But while many of these overviews provide useful insight into the latest guidance, they stop short at addressing what it takes to operationalize ICH E6(R3). Sponsors have spent the last decade trying—and often struggling—to implement the guidance in ICH E6(R2) and ICH E8(R1). As they look at the expanding expectations for RBQM in the latest guidance, many are wondering: How is this meant to be put into practice? 

This is where a closer reading of ICH E6(R3) becomes useful. While the guidance emphasizes integration, risk, and quality, it consistently points to something more fundamental: data is central to risk management across all aspects of clinical trial conduct.  

Below, I lay out what ICH E6(R3) says about clinical data management and how this understanding can help organizations seamlessly operationalize RBQM.  

From ICH E6(R2) to ICH E6(R3), What Has Changed at a High Level?  

At its core, ICH E6(R3) redefines how data quality is expected to be managed, and this has implications that go well beyond traditional data management. Before getting into the data difference, it is worth briefly acknowledging the more visible changes in the guidance. 

ICH E6(R3) places greater emphasis on: 

• designing quality into trials from the outset (QbD),  
• identifying critical-to-quality (CTQ) factors to focus on what matters the most, 
• applying proportionate risk controls, 
• balancing between consistency and avoiding a one-size-fits-all approach 
• facilitating cross-functional ownership and monitoring 

These areas of emphasis are not outright changes but are logical extensions of principles that have been building across regulatory guidance for more than a decade. So, what needs to happen in order to operationalize RBQM as defined in the latest guidance? 

Designing quality into a trial, continuously evaluating risk, and targeting monitoring activities all depend on the same underlying capability: the ability to embed risk strategy into every step of the data lifecycle. 

A Data-Centric View of ICH E6(R3): Four Key Shifts 

When ICH E6(R2) and ICH E6(R3) are read side by side, the data expectations are not presented as a single headline change. Data has always been fundamental to clinical trial conduct. What the updated guidance reflects is the growing challenge of managing increasingly large and complex data volumes while maintaining quality and oversight. 

As trials generate more data from more sources, organizations need approaches that help them focus effort where it will have the greatest impact. Across multiple sections, ICH E6(R3) reinforces a risk-based approach to data review, oversight, and decision-making. Taken together, these expectations provide a framework for a risk-based approach to managing data more intelligently throughout the trial lifecycle.  

Four shifts in the guidance are particularly important. 

1. Data Planning in Trial Design 

ICH E6(R3) brings data management into the design and planning of the trial itself. In Section 3, the guidance states that “Quality management includes the design and implementation of efficient clinical trial protocols, including tools and procedures for trial conduct (including for data collection and management).” 

This language places data collection and management within the quality management framework. For sponsors, this means risk-based data management has to be considered when the protocol, systems, tools, procedures, and review model are being designed. Decisions about what data matters most, how it will be collected, and how it will be reviewed need to happen prior to protocol finalization and with periodic re-review if needed. 

2.  From Centralized Monitoring to Risk-Based Data Use 

Under ICH E6(R2), centralized monitoring introduced the concept of reviewing accumulated data in a timely manner to support risk-based oversight activities. ICH E6(R3) builds on that foundation by extending risk-based thinking beyond monitoring and into all aspects of trial conduct, including data management.  

In practice, sponsors need data that is scientifically valid. accurate and usable when it matters. Fragmented views or inconsistent definitions become operational risks because they limit the organization’s ability to identify issues, prioritize effort, and act in line with the expectations outlined in the guidance. 

3. From Data Collection to Data Lifecycle Management 

In ICH E6(R2) the guidance states that clinical trial information should be recorded, handled, and stored in a way that allows “accurate reporting, interpretation, and verification,” and that sponsors should ensure electronic systems are complete, accurate, reliable, and maintain an audit trail.  

ICH E6(R3), by contrast, creates a separate section on “Data Governance – Investigator and Sponsor” and then breaks that section into specific process areas, including “Data Capture,” “Relevant Metadata, Including Audit Trails,” “Review of Data and Metadata,” “Data Corrections,” “Data Transfer, Exchange and Migration,” and “Finalisation of Data Sets Prior to Analysis.”  

The guidance is no longer describing data management only in broad terms like reliability, validation, and recordkeeping. It describes a set of named processes that have to be managed through the full life cycle. The implication is that data must be treated as a continuous system. 

4. From Supporting Quality to Driving Quality With Risk Management 

In ICH E6(R2), data supports monitoring and oversight activities. It is used to verify compliance and identify issues, but it is not explicitly positioned as the mechanism through which risk is managed. 

ICH E6(R3) makes that connection more direct. The guidance requires sponsors to identify risks across “processes and systems… including… data handling and service provider activities,” and to evaluate and review those risks on an ongoing basis. At the same time, it empowers centralized monitoring to identify trends, detect anomalies, and target oversight activities across multiple functions including data management.  

This shifts data from a supporting role to an intelligent, governing one, reducing silos and allowing resources to be allocated to the areas where risk is highest.  

Using Better Clinical Data Management to Operationalize RBQM 

Taken together, these shifts change what is required to execute RBQM. If, according to ICH E6(R3), data must be available in time to support decisions, defined across specific processes, and used continuously to evaluate risk, this means:  

• data from different systems must be accessible together  
• risk must be assessed using consistent logic  
• monitoring must be based on a single source of truth for data

For most organizations, this is easier said than done. Clinical data is still distributed across systems and functions, with different teams working from different views of the data. Risk is often assessed separately from the data used to monitor trial performance. That fragmentation makes it difficult to apply the model described in ICH E6(R3). 

To operationalize the guidance, sponsors need: 

• a single source of truth across study, site, and operational data  
• a consistent framework for risk management starting with planning 
• built-in flexibility throughout the full lifecycle to reflect the dynamic nature of risks 
• the ability to review data and act on signals as the trial progresses  
• holistic oversight across their portfolio 

This is the role of an RBQM system. Platforms like elluminate RBQM are designed to do exactly that—consolidating data into a single environment, enabling cross-functional centralized monitoring and proportionate data review driven by the risk assessment.  

Join the upcoming webinar!

Learn more about the upcoming Summer Series here.

Summer Series

The Ins and Outs of RBQM

Most organizations understand the theory behind RBQM. The challenge is operationalizing it.

In our three-part Summer Series, we break down the latest guidance and explore how teams can employ effective, impactful RBQM strategies.

RBQM 101: What the Latest Guidelines Say and How This Impacts Your RBQM Strategy
June 25 | 11:00 AM ET

From Silos to Synergy: How Tech Can Make or Break RBQM
July 23 | 11:00 AM ET

What’s Next for RBQM? Exploring the Future With elluminate
August 25 | 11:00 AM ET