Electronic Record Retention per FDA Requirements - Electronic Data Capture (EDC)

S

SongCoyote

#1
Greetings!

I work for an Electronic Data Capture (EDC) software company serving clinical trials. Our record retention policy for customer data collected via our system mirrors the essential requirements of QSR and ISO.

We just had a customer request that we destroy their data once the study closes and they have collected it. We would of course be willing to make an exception to our internal retention policy at customer request (with that decision documented in the contract, etc.) but I am wondering if that would put us in violation of the FDA retention policies.

What I have been able to find reading through related sections is that under most circumstances the data has to be available where it was created, and that ultimately the sponsor and CRO have responsibility for it. But this doesn't directly answer whether we can, even at customer request, destroy what amounts to our copy of their data.

Any advice on this would be gratefully accepted. Thanks for your time and consideration.

Regards,
Gareth Storm
 
Elsmar Forum Sponsor

Wes Bucey

Quite Involved in Discussions
#2
Re: Electronic record retention per FDA requirements

If I were in your organization's position, I would prefer to request an official ruling from FDA rather than count on us "experts" here in the Cove.

At first blush, my guess would be that your organization is no more responsible for record keeping in the situation you pose than an ISP or telephone utility would be as an adjunct to transmitting data from one point to another. They keep a record of the transaction for billing purposes, but the phone company does not keep a recording of the phone conversation. I can imagine a scenario where a worker in the field collects data and transmits it to the home office - (Is he responsible for keeping an original? I doubt it.)
 
Last edited:
S

SongCoyote

#3
Re: Electronic record retention per FDA requirements

Thank you for the response, Wes - I appreciate your time.

Since we have never been inspected by FDA (knock on wood) and are unlikely to be because of our position in the clinical food chain I am reluctant to seek out their attention. Given how much of an edge case this is I might have to do so, though, unless my educated theory coupled with your "first blush" are accurate.

The data we carry is more sensitive in some ways than most phone conversations, but I think your analogy makes sense. Thanks again!

Cheers,
Gareth
 

Wes Bucey

Quite Involved in Discussions
#4
Re: Electronic record retention per FDA requirements

Thank you for the response, Wes - I appreciate your time.

Since we have never been inspected by FDA (knock on wood) and are unlikely to be because of our position in the clinical food chain I am reluctant to seek out their attention. Given how much of an edge case this is I might have to do so, though, unless my educated theory coupled with your "first blush" are accurate.

The data we carry is more sensitive in some ways than most phone conversations, but I think your analogy makes sense. Thanks again!

Cheers,
Gareth
For the most part, the anecdotal evidence I get from ASQ Section members who are in Big Pharma and Medical Devices here in my geographic area tells me the FDA inspectors are different from FAA inspectors in that higher level FDA officials do not blindly defend a questionable call by an individual inspector, but will listen to a reasoned explanation bolstered with documents (in your case, a customer contract which essentially makes your organization a mere "agent" for your customer versus an independent arm's length transaction where your organization develops data independently and sells it to a third party, retaining responsibility and liability for the accuracy of the data.)

Woe betide, however, the organization which tries to foist off responsibility on an individual or organization just to avoid liability for itself. The biggest pharma in my area tried to lay bad record keeping at the doorstep of some low level employees, citing "job responsibilities" which tried to quarantine responsibility from the organization and its top managers. They ended up paying millions in fines and even more millions implementing safeguards PLUS giant consulting and legal fees PLUS having a major production line closed for over a year by the FDA.

Thus I repeat: "This is a situation which "could" bite you in the butt. Better to take the chance on scrutiny now." The very fact of "hiding your head in the sand" (by saying, "What I don't know can't hurt me.") will incite the ire of FDA more if it is subsequently found the contract clause was against FDA requirements.

I recall a recurrent line in liability lawsuits: "Knew or should have known." The point is: certain crafts and professions are held to a standard of conduct which includes keeping up to date on the changes in requirements. Thus, a real estate broker can't claim freedom from liability for abetting racial bias by saying, "I didn't know you couldn't refuse to sell to someone because of his/her race or ethnicity." Similarly, an organization engaged in a regulated industry can't claim, "We didn't know that rule applied to us." as a defense when violating that rule.
 

v9991

Trusted Information Resource
#5
I am not much into clinical trials&GLPs but here's few thoughts based on my little exposure to the GMPs and part11s of pharma..

just in case if you have not already seen this...
not really sure if you can simply do away with the mirror which you are holding...
here's one reference i could trace from FDA...
http://www.fda.gov/downloads/Drugs/GuidanceComplianceRegulatoryInformation/Guidances/UCM070266.pdf

C. Source Documentation and Retention
When original observations are entered directly into a computerized system, the electronic record is the source document. Under 21 CFR 312.62, 511.1(b)(7)(ii) and 812.140, the clinical investigator must retain records required to be maintained under part 312, § 511.1(b), and part 812, for a period of time specified in these regulations. This requirement applies to the retention
of the original source document, or a copy of the source document.

When source data are transmitted from one system to another (e.g., from a personal data assistant to a sponsor’s server), or entered directly into a remote computerized system (e.g., data are entered into a remote server via a computer terminal that is located at the clinical site), or an electrocardiogram at the clinical site is transmitted to the sponsor’s computerized system, a copy of the data should be maintained at another location, typically at the clinical site but possibly at some other designated site. Copies should be made contemporaneously with data entry and
should be preserved in an appropriate format, such as XML, PDF or paper formats.
I completely agree with Wes''s point there, the solution ought to be approached with lot more caution... however, before we work out a alternative/solution, we need to explore how requirements/compliance is assured...
if client has certain apprehension/policy of holding data at your-location... you can possibly make a two-copies for one each of investigator & sponsor...supported by technical/legal agreement, that they will be made available for any regulatory inspection/investigation initiated at your end, if any.. BUT once again word of caution about your responsibilities&liabilities in the clinical study of which you are part to...(see Wes's point ...ignorance of law OR transferring the risk/ownership through set of documentation doesnt help you wash your own responsibilities of study requirements)

hope that it helps...
 
Last edited:
Thread starter Similar threads Forum Replies Date
A Transition to Electronic Paperless System - How is Record Retention Addressed Records and Data - Quality, Legal and Other Evidence 11
J Electronic Device History Record (eDHR) Software Recommendations 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 1
D How to approach Paper and Electronic Record Control for ISO 9001:2008 Records and Data - Quality, Legal and Other Evidence 7
P Electronic Record Control (Specifically editable records not fixed documents!) ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
B Electronic Record File Format (Pdf & Tiff) - Acceptance by FDA? Qualification and Validation (including 21 CFR Part 11) 4
R Electronic Training Record Form (Template) Document Control Systems, Procedures, Forms and Templates 6
D Transferring Paper Records to Electronic Record Archival Records and Data - Quality, Legal and Other Evidence 4
sagai Automated System's Signature on Electronic Record - PART11 Qualification and Validation (including 21 CFR Part 11) 4
W Physician Documentation System vs. Electronic Medical Record 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 5
A Electronic forms QMS Document Control Systems, Procedures, Forms and Templates 7
S Reporting REACH - Electronic components distributor REACH and RoHS Conversations 5
K ISO 13485 and compliance of electronic signature ISO 13485:2016 - Medical Device Quality Management Systems 5
M MDR - eIFU - When you can supply an electronic IFU instead of a paper IFU EU Medical Device Regulations 5
D Advice on capturing electronic signatures ISO 13485:2016 - Medical Device Quality Management Systems 8
C Shelf life electronic components 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 2
C Cleaning of electronic transmitter Other Medical Device Related Standards 2
D Preservation of Electronic Data / Information Technology ISO 13485:2016 - Medical Device Quality Management Systems 5
M Is IEC 60601-1-2 required by FDA for all electronic medical devices? IEC 60601 - Medical Electrical Equipment Safety Standards Series 1
Anonymous16-2 21 CFR Part 11 - Steps to take if we want to validate an electronic system Pharmaceuticals (21 CFR Part 210, 21 CFR Part 211 and related Regulations) 2
R Electronic and hand-written footnotes for GDP Document Control Systems, Procedures, Forms and Templates 1
A 21 CFR part 11 - section 11.100 - Electronic Signature Certification Other US Medical Device Regulations 6
qualprod From paper to Electronic (records) in the QMS ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
S FDA's E submitter - For clinical electronic thermometer Medical Device and FDA Regulations and Standards News 6
J Integrity of electronic digital records - Medical Devices ISO 13485:2016 - Medical Device Quality Management Systems 4
T Electronic ECO/ECR Process - Software recommendations Document Control Systems, Procedures, Forms and Templates 3
M Informational EU – DSVG 03 – Cardiac Implantable Electronic Devices (CIED) – Guidance on the vigilance system for CE-marked medical devices Medical Device and FDA Regulations and Standards News 0
D Benefits of electronic QMS software Software Quality Assurance 5
M Informational US FDA Draft Guidance – Providing Regulatory Submissions for Medical Devices in Electronic Format – Submissions Under Section 745A(b) of the Federal F Medical Device and FDA Regulations and Standards News 0
R Electronic handwritten signatures for approvals - Signed with a Stylus or a Finger Document Control Systems, Procedures, Forms and Templates 2
WEAVER Electronic Weighing Scale Calibration Tolerance Manufacturing and Related Processes 1
S ISO 10993 Biocompatibility Evaluation - Electronic thermometer Other Medical Device Related Standards 3
P FDA inspections and electronic signatures Other US Medical Device Regulations 2
S Need Assistance in Visual Inspection - Tiny electronic components AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 11
G Looking to move to an electronic QMS software Software Quality Assurance 11
QIE Electronic IFU - new project, need input Other Medical Device and Orthopedic Related Topics 0
U Electronic templates for making paper control charts Reliability Analysis - Predictions, Testing and Standards 2
M Informational USFDA – Radiological Health Regulations; Amendments to Records and Reports for Radiation Emitting Electronic Products; Amendments to Performance Stand Medical Device and FDA Regulations and Standards News 0
P Electronic component failure analysis turnaround time Reliability Analysis - Predictions, Testing and Standards 0
W Part Change Request - Standard (OTS) electronic parts (resistors, capacitors etc.) IATF 16949 - Automotive Quality Systems Standard 3
C In cases where users of an electronic system change their names Qualification and Validation (including 21 CFR Part 11) 6
A How a test flow can be build for a car electronic sunroof control Reliability Analysis - Predictions, Testing and Standards 6
M Electronic signature - name.lastname or equal to handwritten Document Control Systems, Procedures, Forms and Templates 3
N Electronic Instructions for use (eIFU) EU Medical Device Regulations 2
M Electronic Signature - Certificate Qualification and Validation (including 21 CFR Part 11) 8
I GMP 21 CFR Part 11 Electronic Records Compliance Project Help Qualification and Validation (including 21 CFR Part 11) 9
M Medical Device News FDA News - 12-09-18 - MD Submissions to Electronic Format to Improve Efficiency Other US Medical Device Regulations 0
Q Real Time Electronic SPC/Control Charting Statistical Analysis Tools, Techniques and SPC 4
M Suggestions for Electronic Signature Software (FDA 21 CFR Part 11 Compliant) Qualification and Validation (including 21 CFR Part 11) 12
L Inspection Process for Electronic Parts from Brokers Supplier Quality Assurance and other Supplier Issues 1
N How is documentation affected moving to an electronic system? ISO 13485:2016 - Medical Device Quality Management Systems 13

Similar threads

Top Bottom