Skip to content
Assyro AI
Back to Glossary
Clinical Development

Good Clinical Practice(GCP)

Good Clinical Practice (GCP) is the international standard governing the design, conduct, recording, and reporting of clinical trials in human participants, binding sponsors and investigators to protect participant rights and safety while making trial data verifiable.

Usage Examples

  • The site took a GCP deviation because consent was signed after the first blood draw.
  • Our CRO runs the monitoring visits, but the GCP obligation stays with us as sponsor.
  • We rewrote the quality section of the protocol to align with ICH E6(R3).

What is Good Clinical Practice (GCP)?

Good Clinical Practice (GCP) is the international standard governing the design, conduct, recording, and reporting of clinical trials in human participants, binding sponsors and investigators to protect participant rights and safety while making trial data verifiable.

Good Clinical Practice exists because two things happen at once: a human being is exposed to an unapproved product, and a regulator later approves that product using data it did not collect. GCP is the standard that makes the first defensible and the second believable, by fixing how a trial is designed, run, recorded, and reported.

Good Clinical Practice covers the full arc of a trial in human participants: design, conduct, recording, and reporting, including consent, ethics review, investigator qualification, monitoring, and records retention. GCP stops where humans stop. Animal and in-vitro safety work sits under Good Laboratory Practice; making the investigational product sits under GMP. GCP is also not US law itself: FDA enforces it through 21 CFR Parts 50, 56, and 312.

Good Clinical Practice is applied through artifacts, not intentions. An inspector reconstructs the trial from signed consent forms, IRB approvals, source data, monitoring reports, deviation logs, and the trial master file, then compares them against the protocol. GCP compliance is judged on what the site documented contemporaneously, so a control that was performed but not recorded counts as a control that did not happen.

Not to be confused with

GLP
GLP governs nonclinical safety studies in animals and in vitro; GCP governs studies in human participants. A lab running toxicology work is under GLP even though the same molecule later enters a GCP trial.
IRB approval
an IRB is one control that GCP requires, not a synonym for it. IRB review covers the ethics of a protocol at the front end; GCP covers the whole lifecycle through final reporting.
CRO
a CRO is a vendor that performs trial activities; GCP is the standard those activities must meet. Contracting a CRO changes who does the work, not what standard applies or who answers for it.
21 CFR Part 11
Part 11 governs electronic records and signatures wherever a record is already required. It shapes how GCP records are kept electronically; it does not define what a trial must do.

GCP obligations come from the ICH guideline plus the FDA regulations that make human-subject protection binding in the US. These are the load-bearing ones.

What you must do

  1. 1Obtain informed consent before involving any human being as a subject in FDA-regulated research21 CFR 50.20
  2. 2Cover every basic element of consent, starting with a statement that the study involves research, the purposes of the research, and the expected duration of the subject's participation21 CFR 50.25
  3. 3Document consent on a written consent form approved by the IRB and signed and dated by the subject21 CFR 50.27
  4. 4Design, conduct, record, and report the trial to the current ICH standard, whose overarching principles and Annex 1 came into effect on 23 July 2025ICH E6(R3), principles and Annex 1 effective 2025-07-23
  5. 5Bring trials covered by the non-traditional-design annex into conformance by its effective date of 15 January 2027ICH E6(R3) Annex 2, effective 2027-01-15

Common mistakes

  • Treating a GCP training certificate as GCP compliance

    a certificate proves someone sat through a course. Inspectors read consent forms, source records, and deviation logs, and a site with current training certificates and a consent signed after the first study procedure still has a finding.

  • Consenting the subject but documenting it late or loosely

    21 CFR 50.27 requires a written form approved by the IRB, signed and dated by the subject. An undated signature, a superseded form version, or a missing page turns every visit that followed into a deviation you have to report and defend.

  • Running the programme against ICH E6(R2)

    the E6(R3) principles and Annex 1 have been in effect since 23 July 2025, and Annex 2 lands on 15 January 2027. SOPs, monitoring plans, and vendor contracts written to the previous revision are already out of date, and the gap surfaces at the worst moment: during an inspection of a completed trial.

When This Matters

  • The site took a GCP deviation because consent was signed after the first blood draw.
  • Our CRO runs the monitoring visits, but the GCP obligation stays with us as sponsor.
  • We rewrote the quality section of the protocol to align with ICH E6(R3).

Frequently Asked Questions

GCP is a guideline, not a statute. The ICH Guideline for Good Clinical Practice establishes an international standard, and FDA makes parts of it binding through regulation: informed consent under 21 CFR Part 50, institutional review boards under Part 56, and investigational new drug conduct under Part 312.

Related Use Cases

Related Regulatory Intelligence

Related Actions

Sources & References

Share this page
Agent CTA Background

Simplify GCP compliance