4.3 Case Report Forms (CRFs) & Source Documentation

Key Takeaways

  • ALCOA-C is the regulatory acronym representing data integrity: Attributable, Legible, Contemporaneous, Original, Accurate, and Complete.
  • Under 21 CFR Part 11, electronic data capture systems must maintain secure, computer-generated, time-stamped audit trails.
  • Source data refers to the original records of clinical observations; Case Report Forms (CRFs) transcribe this data for sponsor analysis.
  • Paper document corrections require a single line strike-through, the correct value, initials, date, and a reason, without obscuring the original.
  • A Certified Copy must be verified with a dated signature or a validated process to confirm it has the exact information as the original.
Last updated: July 2026

4.3 Case Report Forms (CRFs) & Source Documentation

Definitions and Data Flow

Data integrity is the foundation of any clinical trial. To evaluate the safety and efficacy of an investigational product, regulatory agencies rely on a clear, unbroken line of evidence. This line starts with Source Data, is recorded in Source Documents, is transcribed into the Case Report Form (CRF) or Electronic Case Report Form (eCRF), and is ultimately analyzed in the clinical database.

Source Data vs. Source Documents

It is vital to distinguish between data and the media on which they are recorded:

  • Source Data: All information in original records and certified copies of original records of clinical findings, observations, or other activities in a clinical trial necessary for the reconstruction and evaluation of the trial.
  • Source Documents: The physical or electronic media where source data are first recorded. Under ICH E6, source documents include hospital records, clinical and office charts, laboratory notes, memoranda, subjects' diaries or evaluation checklists, pharmacy dispensing records, recorded data from automated instruments, and copies or transcriptions certified after verification as being accurate copies.

The Case Report Form (CRF) is a printed, optical, or electronic document designed to record all protocol-required information to be reported to the sponsor on each trial subject. The CRF is not a source document unless specifically defined as such in the protocol or a written site agreement (e.g., when a subject-completed quality of life questionnaire is completed directly on a tablet, making the electronic record the source).


CRF Design and Best Practices

The design of the CRF is critical to both trial efficiency and data quality. Poorly designed CRFs lead to data entry errors, high query rates, and protocol deviations. Best practices in CRF design include:

  • Objective-Driven Design: Every data field on the CRF must correspond directly to a protocol objective, endpoint, or safety parameter. Collecting unnecessary "nice-to-know" data increases site burden and the risk of data entry errors.
  • Structured Data Collection: Minimizing free-text fields in favor of check boxes, radio buttons, drop-down menus, and standardized date/time formats. This ensures data consistency and simplifies statistical analysis.
  • Data Validation Rules: For eCRFs, implementing real-time edit checks (e.g., range checks that prevent entering a diastolic blood pressure of 800 mmHg, or logical checks that prevent a male subject from having a recorded pregnancy test).

Compliance with 21 CFR Part 11

Modern clinical trials utilize electronic data capture (EDC) systems. These systems must comply with 21 CFR Part 11, the FDA's regulations governing electronic records and electronic signatures. Under Part 11, the EDC system must provide:

  1. System Validation: Proof that the software performs accurately, reliably, and consistently.
  2. Audit Trails: A secure, computer-generated, time-stamped audit trail that records the date, time, and operator of any entry, modification, or deletion of data. The original data must never be overwritten or obscured.
  3. Security Controls: Limited system access restricted to authorized users via unique username and password combinations.
  4. Electronic Signatures: Signatures that are legally binding, unique to the individual, and linked to their respective electronic records. PIs must electronically sign CRFs to attest to data accuracy.

The Document Trail and ALCOA-C Principles

To ensure data quality, all source documentation and CRF entries must adhere to the ALCOA-C principles. This acronym represents the gold standard for clinical data integrity:

PrincipleMeaningClinical Site Application
AttributableEvery entry is traceably linked to the person who recorded it.Signatures, initials, and dates on paper records; unique logins in electronic systems.
LegibleAll records must be easy to read and understand.Writing clearly in blue or black ink (never pencil); avoiding shorthand that is not standard.
ContemporaneousData must be recorded at the time the activity occurs.Recording vitals during the visit, not from memory at the end of the day. No back-dating.
OriginalThe first, raw recording of the data is preserved.Using the actual paper log or electronic record; utilizing certified copies if originals are duplicated.
AccurateData must be true, honest, and free from errors.Verifying entries against source notes; correcting mistakes transparently.
CompleteAll required data points are present with no unexplained gaps.Documenting why a laboratory test was missed or why a subject skipped a question.

Resolving Data Queries and Correcting Records

During the trial, the sponsor's clinical monitor (CRA) or data manager will review the CRF data against the source documents (a process known as Source Data Verification or SDV). Discrepancies generate a data query.

The Query Resolution Process

  1. Query Generation: The monitor or data manager flags a discrepancy (e.g., CRF shows a heart rate of 72 bpm, but source notes show 172 bpm).
  2. Site Review: Only authorized site staff (usually the coordinator or investigator) can review the query and make changes. The sponsor's monitor is legally forbidden from altering site data.
  3. Data Correction: If an error is confirmed, the site staff updates the record.
    • In paper records: The staff draws a single line through the error, writes the correct value nearby, and initials and dates the change. Correction fluid (Wite-Out) or erasing is strictly prohibited. The original entry must remain visible.
    • In electronic records: The staff updates the field in the EDC system. The system automatically updates the electronic audit trail, prompting the user to select or enter a reason for the change (e.g., "transcription error").
  4. Query Closure: The monitor reviews the correction and closes the query.

Certified Copies

When an original source document cannot be retained at the site (e.g., a patient's medical records from an external hospital), a Certified Copy must be created. Under ICH E6, a certified copy is a copy (irrespective of the type of media used) of the original record that has been verified (i.e., by a dated signature or by a generation through a validated process) to have the same information, including data that describe the context, content, and structure, as the original.

Loading diagram...
ALCOA-C Data Integrity Framework
Test Your Knowledge

Under 21 CFR Part 11, what is a mandatory feature of an Electronic Data Capture (EDC) system to ensure that any modification or deletion of clinical trial data is trackable?

A
B
C
D
Test Your Knowledge

A study coordinator realizes they made a transcription error on a paper source document. According to GCP, how should this error be corrected?

A
B
C
D
Test Your Knowledge

Under the ALCOA-C principles of data integrity, what does the letter 'C' in contemporaneous require?

A
B
C
D