Electronic data capture (EDC)
Electronic data capture (EDC) refers to the software system used to collect, clean and manage clinical trial data electronically, replacing paper case report forms. The EDC system hosts the eCRFs, applies edit checks, manages data queries between data managers and sites, integrates external data from central laboratories, imaging vendors and eCOA platforms, and produces the locked database exported into SDTM for analysis. Widely used platforms include Medidata Rave, Veeva Vault EDC and Oracle Clinical One.
EDC systems must be validated for their intended use, maintain complete and tamper-evident audit trails, support electronic signatures and role-based access, and comply with FDA 21 CFR Part 11, EU Annex 11 principles and the EMA guideline on computerised systems and electronic data in clinical trials. Sponsors remain responsible for vendor oversight, including periodic audits and review of the vendor's own quality system.
From a data protection standpoint, the EDC vendor is a processor to the sponsor (and indirectly to the site), acting under a data processing agreement meeting Art. 28 GDPR. Hosting location and the vendor's sub-processors determine whether standard contractual clauses are needed. Because EDC data is pseudonymised rather than anonymous, the platform must be included in the record of processing activities, covered by the trial's DPIA and configured so that sites cannot enter directly identifying data.
No. A platform’s existing validation does not by itself demonstrate that the study’s configuration works as intended. Check the forms, edit checks, interfaces, user roles and critical workflows relevant to the trial. Document responsibilities between sponsor and provider, including change management and access to records throughout the required retention period.
