11.1 Stakeholders, Regulatory Institutions & Global Frameworks in Clinical Research

Stakeholders, Regulatory Institutions & Global Frameworks

Quick Reference — read this before anything else in the chapter: ACRP states on the ACRP-CP certification page that the exam "is referenced only to the International Conference on Harmonization (ICH) Guidelines. No other regulatory framework is tested, including country-specific regulations (i.e, FDA or EMA)." The permitted reference set is ICH E6(R3), E2A, E8(R1), E9, E9(R1), E11(R1) and the Declaration of Helsinki. Learn national statutes for your job; answer exam items from ICH.

Why this is tested

The ACRP-CP Exam Content Outline opens Domain 2 with 2A, "Stakeholders and regulatory institutions and frameworks in clinical research." It is a map question: can you say who does what, who answers to whom, and which document governs which relationship.

---

Part 1 — The standards bodies

The International Council for Harmonisation (ICH)

Exam Watchout: ACRP's own website still writes "International Conference on Harmonization" — the pre-2015 name. Do not let that mislead you: the body is the Council, and the acronym was deliberately retained through the rename.

The four guideline categories

The Efficacy guidelines ACRP names

The formal ICH procedure

Step 1  Consensus building — the Expert Working Group drafts a technical document
Step 2  Confirmation of consensus (2a) and adoption of the draft guideline by the
        regulatory members (2b), then release for public consultation
Step 3  Regulatory consultation and discussion — comments received and addressed
Step 4  ADOPTION of the harmonised guideline, recommended to the regulatory
        bodies of the ICH regions for implementation
Step 5  Implementation — each authority incorporates it into its own framework

Step 4 is the milestone to remember. ICH E6(R3) Principles and Annex 1 reached Step 4 on 6 January 2025; Annex 2 reached Step 4 on 3 June 2026. Step 5 dates then vary by region, which is why a guideline can be "adopted" globally but come into force on different dates in different countries.

The World Medical Association

The WMA is a physicians' organisation, not a regulator. It issues the Declaration of Helsinki – Ethical Principles for Medical Research Involving Human Participants, first adopted in 1964 and most recently revised at the 75th WMA General Assembly, Helsinki, October 2024. ICH E6(R3) Principle 1 anchors GCP directly in it.

---

Part 2 — Regulatory authorities as a category

You are not tested on any single authority's statutes, but you are expected to know what an authority does: it reviews applications to begin trials, inspects for compliance, receives safety reports, and grants or refuses marketing authorisation.

ICH E6(R3) Annex 1 3.8.1 puts the obligation generically: before initiating a trial, the sponsor (or sponsor and investigator) "should submit any required application(s) to the appropriate regulatory authority(ies) for review, acceptance and/or permission to begin."

---

Part 3 — The operational parties

The rule that ties the map together

ICH E6(R3) Principle 10.1: "The sponsor may transfer or the investigator may delegate their tasks, duties or functions (hereafter referred to as activities), but they retain overall responsibility for their respective activities."

Principle 10.2 adds that where activities have been transferred or delegated to service providers, "the responsibility for the conduct of the trial, including quality and integrity of the trial data, resides with the sponsor or investigator, respectively."

Exam Watchout: This is the single most reliable answer stem in the domain. Whenever an item asks who is accountable after work has been outsourced or delegated — CRO, central laboratory, sub-investigator, study nurse — the accountable party is the one who transferred or delegated it. A contract can move the work; it cannot move the responsibility.

---

Realistic exam scenario

Scenario: A sponsor contracts a CRO for monitoring and a separate vendor for interactive response technology handling randomisation and drug supply. Twelve weeks into enrolment, an inspection finds that the CRO has not visited two sites since initiation, that randomisation at one site assigned three participants to a stratum for which they were not eligible, and that neither issue was picked up by the sponsor. The sponsor's position is that both failures belong to its vendors and that its own systems were sound.

Evaluation:

• Principle 10.1 and 10.2 defeat the sponsor's position. Transfer of monitoring and randomisation activities does not transfer responsibility for the conduct of the trial or for the quality and integrity of the data.
• Principle 10.3 requires the sponsor to maintain appropriate oversight of transferred activities. Not detecting a missed monitoring schedule for twelve weeks is itself the finding — the absence of oversight, not merely the vendors' errors.
• Annex 1 3.12 governs what happens next: noncompliance affecting the reliability of results triggers root cause analysis and CAPA, and if it is serious, notification of the regulatory authority and/or IRB/IEC.
• The stratification errors also raise a participant-level question under Principle 1: were those three participants placed at risk or treated outside the protocol's safety framework?

Correct actions: the sponsor performs a root cause analysis covering its own oversight process as well as the vendors' performance; assesses the impact on the three misallocated participants and on the analysis; documents deviations; implements CAPA that includes defined oversight metrics, escalation triggers and a review cadence for vendor performance; and reports as required. Terminating a vendor is available under 3.12.3 where significant noncompliance persists after remediation, but it does not retrospectively relieve the sponsor of accountability.