ICH E6(R3) in India: What Changed, What CDSCO Has Done, and What Clinical Research Professionals Must Know

The International Council for Harmonisation finalised ICH E6(R3) in May 2023, and regulators in the US, EU, and Japan implemented it through 2024. For clinical research professionals in India, this revision is the most consequential update to Good Clinical Practice in nearly three decades. Most Indian clinical research training programmes have not yet caught up with it. Most domestic CROs running India-only trials are still operating under older frameworks. And CDSCO’s formal position remains in progress.

That gap creates both a compliance risk and a career opportunity. Understanding exactly what changed, where India currently stands, and what CRAs and pharmacovigilance professionals need to do differently is the starting point for being genuinely ready for global trial work in 2026.

Why E6(R3) exists: the limitations of the previous version

ICH E6(R1) was published in 1996. It defined Good Clinical Practice for an era of paper records, physical site files, and in-person monitoring as the dominant quality assurance mechanism. ICH E6(R2), adopted in 2016, added an addendum addressing risk-based approaches and electronic records, but it layered these concepts onto the original text rather than restructuring the guideline around them.

The result was a guidance document that described modern risk-based monitoring and electronic data systems in an addendum while the core text still assumed paper-based, on-site-verification-centric operations. Sponsors and CROs implementing RBQM had to reconcile practices that the addendum endorsed with language in the body that implied on-site SDV was standard.

E6(R3) resolves this by rebuilding the guideline from the ground up. The structure is reorganised into core principles and modular annexes. RBQM is woven throughout the core text, not appended to it. The guideline explicitly accommodates decentralised clinical trials, electronic informed consent, remote monitoring, and the use of technology platforms in ways that the 1996 structure could never cleanly support.

What actually changed in E6(R3)

Risk-Based Quality Management is now the foundation, not an addendum

The most significant structural change in E6(R3) is that Risk-Based Quality Management moves from addendum guidance to core principle. Under E6(R3), sponsors are required to implement a systematic Quality Management System (QMS) that identifies Critical to Quality (CtQ) factors for each trial, prospectively assesses risk to those factors, and designs monitoring plans proportionate to that risk.

For CRAs, this has direct operational consequences. The 100% source data verification model that many CROs used as the default is explicitly de-emphasised. Monitoring plans under E6(R3) must justify the intensity of on-site review based on the risk profile of the trial, not apply a blanket standard. Centralised statistical monitoring, remote SDV, and targeted on-site visits for high-risk sites or data anomalies replace the old schedule-driven approach.

Decentralised clinical trial provisions

E6(R3) is the first ICH GCP revision to explicitly address Decentralised Clinical Trials (DCTs). The guideline includes provisions for:

• Direct-to-patient drug shipment in appropriate trial designs
• Remote consent processes, including electronic informed consent via validated digital platforms
• Digital data collection using wearables, ePRO platforms, and mobile applications
• Remote monitoring and investigator oversight in settings where participants are not physically at the trial site

For CRAs, this means the monitoring role increasingly extends to remote data verification, patient-reported outcome platform oversight, and site coordinator training on digital tool compliance. The physical site visit is not eliminated, but its function changes to quality assurance of the overall site system rather than line-by-line source verification.

Modernised informed consent provisions

E6(R3) expands and modernises the informed consent framework in several ways. The guideline now explicitly permits:

• Electronic informed consent (eIC) through validated digital platforms, where permitted by local regulation
• Multimedia consent materials (video explanations, interactive digital presentations) as supplements to the written consent form
• Remote consent where the investigator or delegate conducts the consent discussion via video call with appropriate documentation

The core ethical requirements remain unchanged: consent must be voluntary, documented, and based on adequate information. The change is that the medium through which consent is obtained and documented is now explicitly flexible.

Computerised systems and electronic records

The treatment of computerised systems in E6(R3) is substantially more detailed than in E6(R2). Sponsors and CROs are required to:

• Validate computerised systems used in trial conduct
• Ensure data integrity across all electronic platforms
• Maintain audit trails that allow reconstruction of the trial chronology
• Address cybersecurity as part of system validation

For clinical data management and CRA professionals, this means that system validation documentation, audit trail review, and electronic records management are GCP competencies, not just IT responsibilities. CRAs monitoring sites using EDC platforms need to understand how to assess audit trail integrity, not just how to enter and review data.

Roles and responsibilities are more clearly separated

E6(R3) tightens the definition of sponsor and investigator responsibilities, particularly around delegation. Sponsors cannot delegate trial design and risk management responsibilities to CROs. Investigators must personally oversee all activities at their site, with documented delegation to sub-investigators and trial coordinators. The guideline is explicit that delegation does not transfer regulatory responsibility.

This has practical implications for monitoring. CRAs working on delegated trials need to verify not just protocol compliance but the adequacy of the delegation structure at each site.

Where CDSCO stands: the current regulatory picture

India’s primary clinical trial framework remains the New Drugs and Clinical Trials Rules 2019 (NDCT Rules). These rules are broadly consistent with ICH E6(R2) principles but predate E6(R3). CDSCO has not issued a formal circular adopting E6(R3) as the binding national standard.

In 2025, CDSCO circulated draft revisions to India’s GCP Guidelines (originally published as Schedule Y and amended in the NDCT Rules) that incorporated several E6(R3) concepts. The draft language addressed risk-based monitoring, electronic records integrity, and remote consent modalities. These drafts were open for stakeholder comment, and as of mid-2026, a final revised GCP notification is expected but has not been issued.

The practical consequence is a two-tier situation in India:

Global multi-regional trials conducted in India for US or EU sponsors must comply with E6(R3) because the sponsor’s protocol, monitoring plan, and audit expectations are built around it. CROs running these trials (IQVIA, ICON, Parexel, Syngene, Lambda) have already updated their SOPs and training accordingly.

India-only trials under domestic sponsors regulated by CDSCO continue to operate under NDCT Rules and legacy GCP frameworks. These sponsors will need to adapt when CDSCO finalises its GCP revision, but as of today, strict E6(R3) compliance is not mandatory for this category.

For clinical research professionals, this means that E6(R3) fluency is a prerequisite for working on global trials in India, and will increasingly become the standard for domestic trials as CDSCO aligns.

The gap between Indian GCP practice and E6(R3) expectations

Several specific practice gaps are common in India’s clinical research ecosystem when measured against E6(R3):

Monitoring plan design. Many Indian CROs still use monitoring plans that specify fixed on-site visit frequencies regardless of site risk profile. E6(R3) requires risk-stratified monitoring with documented rationale. CRAs trained under older models will need to understand how to interpret centralised monitoring signals and apply them to visit planning.

Centralised monitoring infrastructure. E6(R3) assumes sponsors have centralised statistical monitoring capabilities. Many smaller Indian CROs and domestic sponsors have not yet invested in CTMS platforms with risk signal reporting. The gap between global CRO practice and domestic CRO practice on this is material.

Electronic informed consent. eIC adoption in India is very early. Most sites still use paper consent processes, and the regulatory framework for eIC in India is not yet fully defined. E6(R3)‘s flexibility around consent modalities will be realised in India more slowly than in the US and EU.

Quality Management System documentation. E6(R3)‘s QMS requirement means sponsors and CROs need documented, prospective risk assessment processes for each trial. This is well-established at global CROs with ISO-certified quality systems but less common at smaller domestic operators.

What CRAs need to know to be future-ready

For a CRA working in India today, or planning to enter the field, E6(R3) literacy is a concrete career differentiator. The following capabilities matter:

RBQM theory and application. This means understanding how risk assessments are constructed for a trial, what Key Risk Indicators (KRIs) are, how centralised monitoring generates risk signals, and how to act on those signals during site oversight. CRAs who can read a CTMS risk dashboard and design a targeted monitoring visit based on it are more valuable than those who execute fixed monitoring schedules.

Remote monitoring competence. Remote SDV, remote site file review, and oversight of site staff via video platform are now standard components of the monitoring toolkit. CRAs who have only conducted on-site monitoring face a real skills gap.

Electronic records and audit trail assessment. Being able to verify that an EDC system’s audit trail is intact, that ePRO data timestamps are consistent, and that electronic records meet the ALCOA+ standards (Attributable, Legible, Contemporaneous, Original, Accurate, Complete, Consistent, Enduring, Available) is now a core CRA competency under E6(R3).

Informed consent verification for digital modalities. As eIC becomes more common, CRAs need to know how to verify consent documentation in digital platforms, including audit trails for consent conversations, version history for consent forms, and site-level procedures for participants with limited digital access.

What pharmacovigilance professionals need to know

E6(R3)‘s most direct implications for pharmacovigilance professionals relate to adverse event reporting and data integrity requirements during trials.

The guideline strengthens requirements for integrated safety data management across trial data sources, including data from remote patient monitoring tools, wearables, and ePRO platforms. PV professionals working on clinical trial safety need to understand how adverse event data flows from these digital sources, and how audit trail requirements apply to safety data.

The decentralised trial provisions also mean that site-level adverse event identification may now come from sources other than investigator-reported encounters. PV teams need processes for integrating adverse event signals from ePRO data, remote monitoring alerts, and wearable device data into standard ICSR workflows.

Training implications for 2026

The E6(R3) transition creates specific training requirements for clinical research professionals in India:

1. Understanding the QMS and RBQM framework. Not just as a regulatory concept but as a practical tool. CRAs need to read monitoring plans that are risk-stratified and understand why site visit decisions are being made the way they are.

2. Hands-on CTMS exposure. Platforms like Veeva Vault CTMS, Oracle Clinical One, and Medidata Rave have built-in risk signal dashboards. Training on these platforms, specifically on the centralised monitoring features, is increasingly prerequisite for global trial work.

3. Electronic records compliance. Understanding ALCOA+ principles as applied to EDC systems, ePRO platforms, and remote monitoring tools.

4. Decentralised trial modalities. Direct-to-patient logistics, remote site coordinator support, and digital consent documentation are operational areas that did not exist in most CRA training programmes before E6(R3).

iLearn CRI’s Clinical Research Associate programme and Pharmacovigilance programme have been updated to incorporate E6(R3) principles, including RBQM, remote monitoring, and electronic records compliance, so graduates are calibrated to the standards that global trial sponsors and large CROs are already operating under.

The career case for E6(R3) fluency

Most Indian clinical research training programmes have not yet updated their curricula to reflect E6(R3). Most domestic-only CRO experience will not expose CRAs to RBQM, centralised monitoring, or decentralised trial modalities in the near term.

This creates a genuine differentiator. CRAs and PV professionals who understand E6(R3) specifically, who can speak to RBQM concepts, KRI interpretation, and audit trail review in interviews, are better positioned for roles at global CROs and sponsor-side positions than those with equivalent experience under older frameworks.

The guideline shift is permanent. CDSCO will align with E6(R3) when it finalises its GCP revision. Sponsors running global trials in India are already applying it. The professionals who build E6(R3) competence now, rather than waiting for formal regulatory mandate, will be the ones hired into senior monitoring and quality roles first.