Clinical trial agreement (CTA)
A clinical trial agreement (CTA), also called a clinical study agreement or site agreement, is the contract between the sponsor (or the CRO acting on its behalf) and the institution and principal investigator conducting a clinical trial at a site. It sets out the parties' obligations for conducting the trial according to the protocol and GCP, the budget and payment schedule, insurance and indemnification, publication rights, intellectual property, confidentiality, record retention, audit and inspection access, termination and governing law. The acronym CTA is also used for the clinical trial application submitted to regulators, so context matters.
Several countries prescribe or strongly recommend national CTA templates that may not be materially altered: France's convention unique for public hospitals, Spain's model contract, the UK's model Clinical Trial Agreement (mCTA) and its Clinical Research Organisation version (CRO-mCTA), Belgian and Italian hospital templates, and the Nordic countries' standard agreements. Where templates exist, negotiation is limited to specific annexes, and sponsors must check whether prior iliomad reviews of the same template exist before proposing changes.
The data protection annex or clause is now one of the most negotiated parts of a CTA. It should allocate controller roles for each processing operation (site as controller for medical care and source documents, sponsor as controller for the coded trial dataset, or joint controllership where national practice requires), identify the sponsor's EU Data Protection Representative where applicable, describe pseudonymisation and prohibit transmission of directly identifying data, list categories of recipients and international transfers with their mechanisms (attaching SCCs where the sponsor is outside the EEA), set out cooperation on data subject requests and breach notification, address access to source documents by monitors, auditors and inspectors, and specify retention consistent with Art. 58 CTR. It must be consistent with the informed consent form and the DPIA. iliomad reviews CTAs against country templates and the GDPR checklist; see contractual review services.
