EMA’s Guidance on Computerised Systems: Ensuring Data Integrity in Clinical Trials
- Sharan Murugan
- 1 day ago
- 3 min read
The integrity, reliability, and robustness of clinical trial data are fundamental to regulatory decision-making, particularly for marketing authorisation applications (MAAs). With the increasing reliance on computerised systems such as electronic case report forms (eCRFs), electronic patient-reported outcomes (ePROs), safety databases, interactive response technologies (eIRT), and clinical trial management systems (CTMS), the role of validated digital systems has become central to clinical research.
This notice, "European Medicines Agency Notice to Sponsors on Validation and Qualification of Computerised Systems Used in Clinical Trials" was released on 08 April 2026, reflecting recent inspection findings and regulatory concerns related to data integrity and system validation practices in clinical trials.
Data integrity is directly linked to system design and validation status. A failure to document validation may result in regulatory authorities rejecting clinical trial data for MAAs.
Qualification:Â Verification of system functionality
Validation: Documented evidence that a system consistently meets predefined requirements throughout its lifecycle—from design to decommissioning—and operates according to standard operating procedures (SOPs) by trained users
Recent inspection findings have raised concerns about the adequacy of validation and qualification practices, highlighting risks to data integrity and regulatory acceptance. In response, the European Medicines Agency (EMA), through its Good Clinical Practice (GCP) Inspectors Working Group (IWG) in collaboration with the Committee for Medicinal Products for Human Use (CHMP), has emphasized the need for strengthened compliance in this area.
Both sponsors and investigators are required to ensure that trials are conducted in accordance with the approved protocol and GCP principles. Furthermore, all clinical trial data must be recorded, handled, and stored in a manner that enables effective inspection by regulatory authorities.
Validation and Qualification of Computerised Systems
ICH E6(R3) outlines critical requirements for sponsors using computerised systems in clinical trials:
Systems must be validated to ensure consistent performance
Audit trails must capture initial data entries and all subsequent changes
Security systems must prevent unauthorized access
Access controls must define authorized users
Systems must maintain trial blinding where applicable
Additionally, three key principles guide system use:
Fit for purpose (Principle 9.1):Â Data generated must be sufficient and reliable for decision-making
Risk-based approach (Principle 9.2):Â Systems should be proportionate to participant risk and data importance
System design and validation (Principle 9.3):Â Systems must ensure data integrity through appropriate validation
Lack of Documentation of Qualification Activities
Inspection findings have revealed significant gaps in documentation related to system qualification and validation. In many cases, sponsors have been unable to provide sufficient evidence during inspections.
Computerised systems may be:
Developed internally by sponsors
Purchased from vendors (licensed software or service-based solutions)
Qualification activities may be conducted by the vendor, sponsor, or jointly. However:
The sponsor remains ultimately responsible for validation
Sponsors must provide documented evidence of validation
Access to documentation must be ensured regardless of who performed the activities
Sponsors may rely on vendor documentation only if it is assessed as adequate. Additional qualification or validation may be required based on a documented risk assessment.
If sponsors perform their own qualification:
They must have access to system requirement specifications
This ensures awareness of all system functionalities and avoids unknown risks to data
Validation and qualification must consider:
System version and configuration
Original requirements and subsequent updates
Insufficient Contractual Arrangements
Clear and formal contractual agreements between sponsors and vendors are essential. These agreements should define responsibilities related to validation and qualification.
Failure to meet these expectations can compromise data integrity and ultimately jeopardize regulatory approval. As clinical trials become increasingly digitized, proactive compliance with these requirements is essential for ensuring both patient safety and the credibility of clinical evidence.