16.1 Source Documentation Standards (ALCOA-C)

Source Documentation Standards (ALCOA-C)

In clinical research, the integrity of a trial relies entirely on the quality and reliability of its data. This reliance makes source documentation one of the most critical aspects of trial conduct. According to the International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use (ICH) Good Clinical Practice (GCP) guidelines, source data refers to all information in original records and certified copies of original records of clinical findings, observations, or other activities in a clinical trial necessary for the reconstruction and evaluation of the trial.

Source documents are where source data is first recorded. These can include hospital records, clinical and office charts, laboratory notes, memoranda, subjects' diaries or evaluation checklists, pharmacy dispensing records, recorded data from automated instruments, copies or transcriptions certified after verification as being accurate and complete, microfiches, photographic negatives, microfilm or magnetic media, x-rays, subject files, and records kept at the pharmacy, at the laboratories, and at medico-technical departments involved in the clinical trial.

The ALCOA and ALCOA-C (ALCOA+) Principles

To ensure that source documentation is reliable, regulatory authorities (such as the FDA, EMA) and ICH GCP require adherence to the ALCOA principles. The original acronym ALCOA stands for Attributable, Legible, Contemporaneous, Original, and Accurate. Later, it was expanded to ALCOA-C or ALCOA+ to include Complete, Consistent, Enduring, and Available.

1. Attributable

Attributable means that any data generated or collected must be traceable to the person who recorded it. It should also be clear when the data was collected and who the subject is.

• Paper Records: This is typically achieved through signatures, initials, and dates on paper forms. A site delegation log is used to match initials/signatures to specific personnel and ensure they were authorized to perform the task.
• Electronic Records: In Electronic Health Records (EHR) or Electronic Data Capture (EDC) systems, traceability is maintained through unique, individualized user logins and secure passwords, combined with an automatic, computer-generated audit trail. Passwords must never be shared.

Real-World Example: A Clinical Research Coordinator (CRC) takes a subject's blood pressure. The CRC must write their initials and the date next to the blood pressure reading in the source document. If an auditor reviews the chart three years later, they can use the site delegation log to confirm that the CRC who took the reading was appropriately trained and authorized by the Principal Investigator (PI).

2. Legible

Legible means the data must be readable. This applies not only to the initial entry but also to any subsequent corrections or changes.

• Good Practices: Write clearly in dark ink (usually blue or black) that photocopies well.
• Corrections: If an error is made, the CRC must draw a single line through the incorrect entry (so it remains visible), write the correct entry, and add their initials and the date. Depending on site policy, a brief reason for the change (e.g., "ME" for math error, "WE" for writing error) may be required.
• Prohibited Practices: Never use correction fluid (white-out), correction tape, or multiple scribble lines that obscure the original entry. Pencils should never be used as the data can be erased and altered.

3. Contemporaneous

Contemporaneous documentation means the data is recorded at the time the observation or activity occurs. Relying on memory and writing notes days later is a severe GCP violation.

• Real-Time Entry: If a subject reports a headache starting at 10:00 AM, this should be noted during the visit.
• Late Entries: If a data point is genuinely missed and needs to be added later, it must be clearly marked as a "late entry." The entry should be dated with the current date, not backdated to the time of the event, and a justification for the delay should be provided.

4. Original

Original means the first place the data is recorded. This first record is the "source."

• Direct Data Entry: Sometimes, data is entered directly into an EDC system (e.g., an electronic Case Report Form) without prior paper documentation. In this case, the eCRF is the source document.
• Certified Copies: If the original source document cannot be retained (for example, a subject brings an outside medical record, and the site needs a copy), a "certified copy" can be made. A member of the site staff must verify that the copy is an exact, complete, and legible representation of the original, then sign and date the copy to certify it. Transcribing data to a "cleaner" piece of paper destroys the originality of the record.

5. Accurate

Accurate means the data reflects the truth and is error-free. It should accurately describe what happened, when, and to whom.

• Verification: Instruments used to collect data (e.g., scales, sphygmomanometers, thermometers, centrifuges) must be regularly calibrated and maintained according to the manufacturer's specifications to ensure accurate readings.
• Consistency: The data must be consistent with other records. For example, if the source notes a subject took study medication at 9:00 AM, but the site's visitor log shows the subject didn't arrive at the clinic until 10:30 AM, there is an accuracy issue.

6. Complete (ALCOA-C / ALCOA+)

Complete means all required data points are documented. There should be no blank spaces on forms where data is expected.

• If a test was not performed, the source document should state "Not Done" (ND) rather than being left blank. A blank space creates ambiguity: was it forgotten, not done, or lost?
• Complete also means the overall clinical picture is clear. A note that says "Subject is fine" is incomplete. A better note is: "Subject reports no new adverse events, concomitant medications reviewed and unchanged, vital signs within normal limits."

Other Additions (Consistent, Enduring, Available)

• Consistent: Data elements agree with each other. Sequence of events should follow chronological order.
• Enduring: Data must be recorded on media that lasts throughout the required retention period (which can be 15-25 years or more depending on regulatory requirements). Thermal paper (like some ECG printouts) fades over time and must be photocopied and certified to be enduring.
• Available: Source documents must be readily available for review by CRAs (Monitors), auditors, and regulatory inspectors.

Clinical Trial Implications and Best Practices

When a Clinical Research Associate (CRA) performs Source Data Verification (SDV), they are confirming that the data in the Case Report Form (CRF) matches the source document and that the source adheres to ALCOA-C standards. If a site fails to maintain proper source documentation, the sponsor may reject the data, the FDA may issue an inspectional observation (Form 483), or the data may be deemed unreliable, potentially jeopardizing the approval of a new drug or device.

CRCs should adopt the mindset: "If it wasn't documented, it wasn't done." Training all site staff—from the Principal Investigator to the phlebotomist—on ALCOA-C is a fundamental responsibility of the CRC to ensure compliance and data integrity.