Good clinical practice (GCP)
Good clinical practice (GCP) is a set of detailed ethical and scientific quality requirements for designing, conducting, performing, monitoring, auditing, recording, analysing and reporting clinical trials, ensuring that the rights, safety and well-being of subjects are protected and that the data generated are reliable and robust (Art. 2(2)(30) EU Clinical Trials Regulation 536/2014). The international reference is the ICH E6 guideline, whose third revision, ICH E6(R3), was adopted in 2025 and introduces a principles-based, risk-proportionate approach adapted to decentralised and technology-enabled trials.
GCP allocates responsibilities between the sponsor, the investigator and the ethics committee, and sets expectations on informed consent, protocol compliance, safety reporting, quality management, computerised systems, essential documents in the trial master file, monitoring and record retention. GCP inspections by the EMA network, national competent authorities and the FDA verify compliance at sponsors, CROs and sites.
GCP and the GDPR overlap but do not coincide. GCP requires confidentiality of subject records and coding of data, which supports pseudonymisation; GDPR adds a legal basis analysis, data subject rights, DPIAs, transfer mechanisms and breach notification that GCP does not address. Conversely, GCP's data integrity and 25-year retention requirements constrain the GDPR rights to erasure and rectification. iliomad's resource centre offers a visual comparison of ICH GCP and the GDPR.
No. GCP protects participants and supports reliable trial results, but it does not replace the applicable data-protection framework. Alongside trial-quality controls, assess the lawful processing of personal information, transparency and handling of individual rights. Align the two workstreams so consent materials and operational procedures do not make conflicting promises.
