Sponsor oversight under ICH E6(R3): what you can transfer and what you keep
A sponsor can hand a CRO every operational activity in a trial. It cannot hand over the responsibility for any of them. ICH E6(R3) says so in plain terms, and it now describes what oversight has to look like. For sponsors that run lean and outsource most of the work, the gap between the contract and the evidence of oversight is where GCP inspections find their observations.
Where E6(R3) stands
| Part | Status |
|---|---|
| Principles and Annex 1 | Adopted by ICH on January 6, 2025 |
| European Union | Principles and Annex 1 in effect since July 23, 2025 |
| United States | FDA published E6(R3) as final guidance in September 2025 |
| Annex 2 | Adopted by ICH in June 2026. Covers decentralized and pragmatic elements and real-world data |
SOURCES: ICH, EMA AND FEDERAL REGISTER NOTICES. SEE BELOW.
What the sponsor keeps
- Responsibility (Annex 1, section 3.6). A sponsor may transfer any or all trial-related activities to a service provider. Ultimate responsibility for those activities, including participant protection and the reliability of trial data, stays with the sponsor.
- Anything not written down. Transferred activities have to be documented in an agreement. Activities not specifically transferred remain with the sponsor. US regulation says the same in 21 CFR 312.52: an obligation not described in writing is deemed not transferred.
- Oversight (section 3.9). The sponsor ensures that trial design, conduct, processes and data are of sufficient quality. Oversight is tailored to the trial's complexity and risks, and covers investigators and service providers, including work that is subcontracted further.
- Quality management (section 3.10). The sponsor identifies the factors critical to quality, manages the risks to them, and where relevant sets acceptable ranges in advance. Results outside a range call for an evaluation of whether there is a systemic issue.
Where sponsor oversight breaks
| This document says | That record shows | What an inspector concludes |
|---|---|---|
| Agreement transfers monitoring to the CRO | No sponsor review of monitoring reports or metrics | The activity was transferred and the oversight went with it |
| Vendor oversight SOP requires qualification before use | A subcontracted lab with no qualification record | A service provider the sponsor did not know about |
| Risk assessment names three critical to quality factors | Monitoring plan does not mention two of them | Risk assessment was a document, not a control |
| Protocol deviation plan defines "important" | CRO's deviation listings use a different classification | Important deviations may not be reaching the sponsor |
| Acceptable range set for missed primary endpoint assessments | Range exceeded, with no documented evaluation | A known signal that nobody acted on |
| Agreement requires the CRO to escalate serious incidents | Issue log shows escalation weeks after the event | Oversight depended on being told |
ILLUSTRATIVE EXAMPLES. NOT DRAWN FROM ANY ONE COMPANY.
Each document can pass a quality review by itself. The observation is in the pair.
What oversight evidence looks like
- One list of who does what. Every trial activity, the party it sits with, and the agreement clause that puts it there.
- Qualification records for every service provider, including those your CRO brought in.
- A monitoring plan that traces to the risk assessment. Each critical to quality factor has a named control.
- Sponsor review on a stated cadence, with minutes that show what was looked at and what was decided.
- An escalation path that has been used, and a record of what happened next.
Where Clinplex fits
Clinplex is the AI regulatory intelligence layer that augments your quality systems. It reads clinical procedures, oversight plans and agreements together, read-only, against ICH E6(R3) and 21 CFR 312, and shows where they stop agreeing with each other or with the guideline. Each finding cites the section. Clinical QA decides what to do about it. How it works is on the platform page.
Sources
- ICH E6(R3), Guideline for Good Clinical Practice. Principles and Annex 1, sections 3.6, 3.9, 3.10 and 3.11. ema.europa.eu
- FDA, E6(R3) Good Clinical Practice. Guidance for industry, September 2025. fda.gov
- Federal Register, September 9, 2025. Notice of availability, E6(R3) Good Clinical Practice. federalregister.gov
- 21 CFR Part 312. Sections 312.50, 312.52 and 312.56. ecfr.gov
Frequently asked questions
Can a sponsor transfer responsibility for a trial to a CRO?
A sponsor can transfer activities. Under ICH E6(R3) Annex 1, section 3.6, ultimate responsibility for those activities stays with the sponsor, including participant protection and data reliability.
When did ICH E6(R3) take effect?
ICH adopted the Principles and Annex 1 on January 6, 2025. They have applied in the European Union since July 23, 2025, and FDA published E6(R3) as final guidance in September 2025.
What is a critical to quality factor?
A factor whose integrity matters to participant rights, safety and wellbeing or to the reliability of trial results. E6(R3) expects sponsors to identify these at the design stage and aim oversight at them.
Does the sponsor have to oversee a CRO's subcontractors?
Yes. Sponsor oversight under E6(R3) extends to service providers and to activities they subcontract further.
Read your oversight file the way an inspector will.
Send three records. We return the gaps with the clause attached in 48 business hours, under a mutual NDA.
Run an Inspection Stress Test