GLP and GCP: How the FDA and EPA Watch Over Science

This week in the Guardrail…

We explore how federal oversight is shifting standards in 2026, making rigorous data integrity the new baseline for every laboratory and clinic.

By Michael Bronfman

The world of making new medicines and chemicals is a very busy place. Every day, scientists are working in labs and clinics to find the next big cure or a safer way to clean our homes. Because these products can affect our health and the planet, the government has very strict rules to ensure everything is done correctly. Two of the most important sets of rules are called GLP and GCP. In 2026, the two main government agencies responsible for these rules, the Food and Drug Administration (FDA) and the Environmental Protection Agency (EPA), are working together more than ever before. This “shaking out” of the rules is changing how companies operate.

What Do These Letters Mean

To understand the future of science, you first have to know what these abbreviations stand for. They are like a specialized language for safety and honesty.

• GLP stands for Good Laboratory Practice. These rules are for the early stages of research. This is the work that happens in a lab with test tubes, plants, or animals before a human ever touches the product. The Environmental Protection Agency uses these rules to ensure that a new pesticide or powerful cleaner will not harm the environment or the people using it.

• GCP stands for Good Clinical Practice. These rules start when the research moves into a clinic and involves human volunteers. The Food and Drug Administration uses GCP to ensure that participants in medical studies are safe and that the results are truthful.

The FDA and the EPA Joining Forces

In the past, these two agencies mostly stayed in their own separate worlds. If a company were making a heart medicine, they would talk to the FDA. If they were making a new bug spray, they would talk to the EPA. But today, many new products fall into both categories. For example, a special soap that kills germs on your skin might be considered both a medicine and a chemical.

Because of this, the FDA and EPA are now sharing their notes. If an EPA inspector finds that a lab is messy or that the scientists are not recording their results correctly, they report it to the FDA. This means companies can no longer be “half good.” They have to follow the rules perfectly for both agencies. This coordination ensures that, no matter what kind of product is being made, the public is protected by the highest standards.Official Federal Register : How these agencies work together

Why Honesty Is the Only Policy

The main goal of both GLP and GCP is to ensure data integrity. Data is just a fancy word for the information and results gathered during an experiment. If a scientist says that a drug worked on ten people, the government wants to see the actual signatures and blood test results to prove it.

If a company is caught lying about its data, it can be fined millions of dollars. They might even be banned from ever making products again. This is why risk management is so important during the middle stages of a study. If a company finds a minor mistake in its lab records, it needs to fix it immediately. Waiting until later to “clean up” the paperwork is a huge risk that can lead to a total failure when the FDA or EPA comes to visit.

Protecting the People in the Studies

While GLP protects the science in the lab, GCP protects the people in the clinics. Every person who joins a clinical trial is a volunteer. They are doing something brave to help others. GCP rules ensure that these volunteers are treated with respect.

Under these rules, every volunteer must sign a form acknowledging the risks. This is called informed consent. The doctors must also closely monitor the volunteers for any side effects. If a patient experiences a headache or dizziness, it must be recorded in the official files. TheNational Institutes of Health provides extensive information on how these rules help keep people safe in medical research.

The Quality Control Revolution

In 2026, many companies are hiring specialized teams just to ensure quality. These teams are like the “referees” of science. They do not do the experiments themselves. Instead, they monitor the other scientists to ensure they follow all GLP and GCP rules.

They check that lab machines are properly calibrated. They check to ensure that every signature on a form is genuine and dated correctly. This might sound like a lot of extra work, but it saves the company from failing an inspection. When a company has a high “quality score,” the FDA and EPA can trust their results much more easily. Organizations like theSociety of Quality Assurance help train these specialized workers to stay up to date on the latest rules.

Using Technology to Stay Safe

Technology is making it easier for the FDA and EPA to do their jobs. In the old days, inspectors had to look through thousands of paper files. Now, most of the data is digital. This allows the government to look at the data in real time.

If a lab in California runs a test, an official in Washington, D.C., can see the results almost instantly. This helps catch mistakes before they become big problems. It also makes it harder for anyone to change their results later to make a drug look better than it really is. This transparency is a big part of why the “shake out” between the two agencies is happening so fast. Digital tools make it impossible to hide in the shadows.

The Global Impact of These Rules

Australia, Europe, and the United States all have their own versions of these rules. However, they are all starting to look very similar. This is good news for the public. It means that a drug tested in Australia can be sold in America as long as it follows the same high standards of GLP and GCP.

When countries agree on the rules, medicines can travel around the world much faster. This helps people in every country get the help they need without waiting years for additional testing. TheWorld Health Organization works to help all countries follow these same high standards for health and safety.

Education Is the Key

For these rules to work, every person in the pharmaceutical industry needs to be educated. It is not just the boss's job. Even the person cleaning the lab or the nurse at the clinic needs to understand why the rules matter.

Education helps people understand that following the rules is about more than just avoiding a fine. It is about making sure that the medicine your grandmother takes, or the soap you use on your children, is 100 percent safe. When everyone knows the “why” behind the rules, they are much more likely to follow them correctly every single day.

Risk Management and Quality Systems

Modern pharmaceutical companies use a Quality Management System (QMS) to track everything. A QMS is like a giant digital brain that stores all the company's rules and records. It helps with risk handling by flagging errors the moment they happen.

In 2026, risk management strategies are no longer just about fixing problems. They are about predicting them. By using clinical data management tools, a biotech firm can detect whether a machine is starting to wear out or whether a lab is experiencing too many small errors. This type of risk management planning helps prevent major disasters that lead to FDA warning letters.

The Role of REMS in Safety

Another way the FDA keeps people safe is through REMS, which stands for Risk Evaluation and Mitigation Strategies. These are extra safety programs for drugs that might be dangerous if not used exactly right. For example, some medicines require a patient to get a blood test every month. TheFDA REMS website tracks these programs to ensure drug companies are doing their part to manage risk.

Final Thoughts on the Future of Quality

The “shaking out” of rules between the FDA and the EPA is a positive step for everyone. It means that science is becoming more open and more honest. Companies are learning that they cannot take shortcuts during any stage of research.

By following the rules of GLP and GCP, we ensure that the future of medicine is bright. We can trust the products we buy because we know the government is watching and the scientists are being careful. Quality is not just a set of letters; it is a promise to the public that their safety is the most important thing of all. Don’t wait for a problem to appear before you start being careful. Start with quality on day one and the rest of the journey will be much smoother for everyone.

Frequently Asked Questions: GLP, GCP, and Regulatory Compliance

• What is the main difference between GLP and GCP?The biggest difference is when they are used. GLP is for the preclinical stage, which is work done in a lab on animals or cells. GCP is for the clinical stage involving human volunteers.

• Why does the EPA care about laboratory rules?The EPA ensures that chemicals like weed killers do not pollute our water. They use GLP to ensure companies are honest about chemical safety. You can find guidelines on theEPA Compliance Monitoring page.

• Can a company fail a trial if they follow the science but miss the paperwork?Yes. In the eyes of the FDA, if a test was not documented correctly, it never happened. “Clean data” is just as important as the medicine itself.

• What happens during an FDA or EPA inspection?Inspectors check original notebooks, computer logs, and even equipment logs. They want to see a clear trail from the study's start to the final report.

• How does Risk Mitigation help with these rules?It means finding small mistakes before the government does. Fixing a mistake early in a study costs much less than fixing it later, when thousands of people are involved.

• Where can I stay updated on these changing rules in 2026?The best place to watch for updates is theFDA Voice blog. This site tracks how the agencies are joining their rules for digital data. https://www.fda.gov/news-events/fda-newsroom/fda-voices. 

The Pre-Inspection Compliance Checklist

When an inspector arrives, they look for a “culture of quality.” If you are preparing for an audit in 2026, here are the top ten things you must have ready.

Item

Description

1. The Master Schedule

A list of every study that has happened in your lab.

2. Current SOPs

Proof that your team is using the newest versions of your rulebooks.

3. Training Logs

Proof that every person was taught how to do their job before starting.

4. Equipment Records

Logs showing that every scale and fridge is checked regularly.

5. Chain of Custody

A record of who touched a sample at every single minute.

6. Raw Data

Original handwritten notes or machine printouts.

7. QA Reports

Reports from your own internal “referees.”

8. CAPA Plans

Records showing how you found and fixed past mistakes.

9. Computer Validation

Proof that your digital data is secure and cannot be changed.

10. Signatures and Dates

Every page must be signed with no blank spaces or whiteout used.

Final Tip: The Clean Room Rule

An inspector will also look at your physical space. If a lab is cluttered, they will assume the data is also messy. A clean and organized lab tells the inspector that you take quality management seriously. For more help, you can check the FDA Inspection Guide for the latest standards. 

Secure Your Future in Science with Metis Consulting Services

When "good enough" no longer passes the test, your organization needs to turn regulatory pressure into a competitive advantage. Contact Metis Consulting Services today to ensure your next breakthrough is backed by an unbreakable foundation of compliance.

Are You Ready for the ICH E6(R3) Rollout?

By Michael Bronfman, July 7, 2025

At Metis Consulting Services, we are acutely aware that a countdown has begun for a monumental shift in the clinical trial landscape. On July 23, 2025, the International Council for Harmonisation (ICH) E6(R3) Guideline for Good Clinical Practice (GCP) officially comes into effect, ushering in a new era for how clinical trials are conceived, executed, and overseen globally. This fundamental reimagining of GCP, driven by years of stakeholder collaboration and the rapid evolution of technology and scientific approach, is very exciting. This week in "The GuardRail" Michael Bronfman writes below about the pressing question it raises: Are sponsors, Contract Research Organizations (CROs), technology providers, and regulatory teams truly prepared for the profound implications of E6(R3) on compliance strategies, trial design, risk management, and the very future of clinical research?

Implications for Clinical Trials, Sponsors, CROs, and the Future of GCP

The global pharmaceutical and biotech industries are bracing for a major regulatory shift: the official rollout of the ICH E6(R3) Guideline for Good Clinical Practice (GCP) on July 23, 2025. After years of revision, stakeholder consultations, and a changing technological and scientific landscape, E6(R3) marks a significant evolution in how clinical trials are designed, conducted, and overseen.

Are sponsors, contract research organizations (CROs), technology providers, and regulatory teams truly ready for what’s ahead? What are the real-world implications of this transition from compliance strategies and trial design to risk management, digital transformation, and global harmonization?

In this post, we break down:

• What’s changing with ICH E6(R3)

• What sponsors and CROs must do to prepare

• How the update reflects the future of GCP

• Risks and opportunities across the pharma value chain

What Is ICH E6(R3)? A Quick Recap

The International Council for Harmonisation (ICH) first adopted E6 in 1996, introducing a unified standard for Good Clinical Practice. While the 2016 ICH E6(R2) revision improved transparency and oversight, particularly regarding CROs and quality management systems, it still fell short of addressing modern trial complexity and the digitization of data collection.

ICH E6(R3), by contrast, was developed with flexibility, scalability, and technological evolution in mind. It is also structured in two parts:

1. Principles and Annex 1 (finalized and adopted): Applicable to interventional clinical trials.

2. Annex 2 (in development): Will address non-traditional designs like decentralized trials (DCTs), adaptive trials, and real-world data (RWD) use.

The overarching aim is to ensure that clinical trials are fit for purpose, ethically sound, scientifically valid, and operationally efficient for our current global, digitized environment.

What’s Changing? Key Shifts in E6(R3)

The ICH E6(R3) revision doesn’t just tweak processes; it reimagines them. Here are the most critical changes:

1. Quality by Design (QbD) Becomes Non-Negotiable

QbD, the proactive identification and mitigation of risks that threaten participant safety and data integrity, is now a foundational principle. It shifts trial design from a reactive to a predictive approach.

2. Risk-Based Thinking at Every Level

Building on R2’s quality management system, R3 makes risk-based monitoring (RBM) and risk assessment integral to planning, conduct, and oversight, rather than just operational monitoring.

3. Modernization of Sponsor–CRO Oversight

R3 places a clearer, shared responsibility on sponsors and CROs to ensure fit-for-purpose vendor oversight, with less prescriptive language and a greater emphasis on principles and proportionality.

4. Fit-for-Purpose Documentation

E6(R3) rejects the “more is better” mentality. Documentation should demonstrate ethical conduct and data integrity, not create unnecessary administrative burden.

5. Emphasis on Participant-Centricity

Informed consent, trial burden, and participant engagement are brought to the forefront, which supports the shift toward decentralized and hybrid trial models.

6. Technology-Agnostic Principles

Rather than prescribing specific tools, E6(R3) enables the use of digital technologies, eSource, eConsent, and DCT models, provided they uphold core GCP principles.

Timeline:

While July 23, 2025, marks the official adoption date, regulators and industry stakeholders understand that implementation is a process. Regulators such as the FDA, EMA, PMDA, and others are expected to release region-specific guidance on integration into their frameworks. However, organizations conducting global trials should prepare now to meet harmonized expectations across jurisdictions.

Implications Across the Pharma Landscape

1. For Sponsors: New Responsibilities, New Strategies

Sponsors can no longer treat GCP compliance as a check-the-box activity. E6(R3) demands:

• End-to-end risk assessments: not just site monitoring, but risk identification in protocol design, vendor selection, and data flow.

• Cross-functional collaboration: Medical, regulatory, data management, and clinical ops must break silos.

• Fit-for-purpose technology: From eConsent to central monitoring dashboards, tools must enable, not burden, quality.

Forward-looking sponsors will view R3 not as a hurdle, but as a framework for smarter trial design and cost-effective compliance.

2. For CROs: Oversight, Not Just Execution

CROs are no longer “just vendors.” Under R3, vendors share responsibility for risk management, data integrity, and participant safety. Key implications:

• Clearer contracts and delegation of duties

• Risk-sharing models in quality oversight

• Stronger internal QMS to align with R3 principles

Expect CRO audits and partnership models to evolve as sponsors seek R3-aligned vendors with proactive quality systems and digital maturity.

3. For Sites: Less Paper, More Empowerment

While R3 doesn’t directly regulate sites, the ripple effects are clear:

• A reduced administrative burden if sponsors streamline documentation expectations.

• More support for site-centric technology like eISF, eSource, and remote monitoring.

• Clearer definitions of roles and expectations.

Sites that embrace digital workflows and risk-based cooperation will thrive in the new paradigm.

4. For Technology Providers: It’s Time to Grow Up

Tech vendors must move from “tools” to compliance partners. E6(R3) does not mandate specific platforms, but sponsors will seek:

• Validation and audit-ready documentation

• Interoperability with existing systems (e.g., EDC, CTMS, eTMF)

• Support for RBM and real-time oversight

Those who deliver not just features but fit-for-purpose, compliant solutions will rise above the noise.

Strategic Considerations: How to Prepare Now

With less than a month to go, it’s not too late, and preparation must be strategic.

1. Assess Your Current GCP Framework

Use the ICH E6(R3) principles as a benchmark. Ask:

• Do we have a documented, cross-functional risk management plan in place?

• Is our QMS aligned with the spirit (not just the letter) of GCP?

• Are our SOPs technology-agnostic but principle-driven?

2. Upskill Your Teams

Clinical, data, regulatory, QA, and vendor management teams must understand E6(R3) in both theory and practice. Invest in:

• Targeted training

• Risk assessment workshops

• Change management programs

3. Engage with Regulators and Peers

Leverage regulator-hosted webinars, ICH training, and industry forums. Align with evolving expectations before inspection time comes.

4. Run Pilot Projects

• Test R3 principles in live trials now:

• Apply QbD in protocol design

• Practice proportional documentation

• Use RBM dashboards

This helps teams build confidence before full adoption.

The Broader Vision: Future-Proofing GCP

E6(R3) is not only a regulatory upgrade; it is a cultural reset. It reflects the convergence of ethics, science, and technology in a world where:

• Clinical trials are decentralized and global

• Data is streaming in from wearables, apps, and EMRs

• Patients are participants, not subjects

In this landscape, rigid rules give way to flexible principles, allowing innovation while safeguarding quality.

The broader implication? Sponsors and CROs that fully internalize E6(R3) will be best positioned to:

• Embrace decentralized, real-world, and adaptive trial models

• Reduce trial costs through smarter design and oversight

• Deliver faster, more ethical, more reliable results to regulators and participants

Conclusion: Ready or Not, R3 Is Here

The July 23, 2025, ICH E6(R3) rollout is not a finish line; it is a starting point. For sponsors, CROs, and clinical technology providers, R3 represents a long-overdue shift toward smarter, more scalable, and participant-centric trial operations.

While the transition will require investment and cultural change, the benefits, ranging from improved trial quality to regulatory readiness and operational efficiency, are significant.

The question is not “Will we comply?” It is “How can we lead?”

Suggested CTA for Pharma Companies

If you have not already begun aligning your SOPs, vendor oversight models, and risk management strategies with ICH E6(R3), the time to start is now. A proactive approach will help ensure both compliance and a competitive advantage in a rapidly changing research environment.

If you are interested in starting a conversation about how you or your organization can lead in this environment, email us at: hello@metisconsultingservices.com or visit our website at www.metisconsultingservices.com