In This Article
- Executive Summary
- What Direct Data Capture Actually Changes
- The Source Data Question Is the Whole Question
- Audit Trails, Timestamps, and Attribution
- What Happens to Monitoring: Redistribution, Not Savings
- The Site Burden Reality
- Queries and Data Cleaning Without a Document to Consult
- Where Direct Capture Fits and Where EDC Still Makes Sense
- Regulatory Expectations You Should Plan Against
- Conclusion
- For Further Reading
- References & Sources
Executive Summary
Traditional electronic data capture rests on a simple assumption: site staff observe something, write it in a source document, and later transcribe it into a case report form. A monitor then compares the two. Direct data capture removes the middle step by making the electronic record itself the source. The technology change is modest. Most EDC platforms have permitted direct entry for years, and the European Medicines Agency has stated plainly that an eSource system can be considered an EDC system. The process consequences are anything but modest.
Once the eCRF is the source, there is no separate document to verify against. Source data verification does not become easier. It becomes impossible, and it is replaced by a harder assurance question: can you prove the record was created correctly at the moment of capture? That question is answered by audit trails, timestamps, attribution, and investigator control, not by a monitor with a highlighter. Everything downstream shifts with it: monitoring plans, query practice, data correction workflows, site training, and the definition of what an inspector will ask to see.
This article works through what actually changes. It covers how to declare source data before the first participant is enrolled, what ALCOA+ and 21 CFR Part 11 demand of a system that holds the only copy of an observation, why removing source data verification redistributes monitoring effort rather than removing it, why direct capture often fails to reduce site burden when the site must still maintain a medical record, how query and correction practice has to be rewritten when the audit trail becomes the arbiter, and where direct capture fits today against the study types where conventional EDC remains the sensible choice.
What Direct Data Capture Actually Changes
Start with what does not change. Direct data capture is not a new category of software. The European Medicines Agency addressed this directly in its 2019 qualification opinion on eSource direct data capture, noting that an eSource system can be considered an EDC system and that EDC systems already allow for direct data entry when this is defined and approved in the trial protocol.2 The regulatory foundation is older still. The FDA published its guidance on electronic source data in clinical investigations in September 2013, and that document already anticipated data entered directly into the eCRF with no prior paper or electronic record.1
So the vendor pitch that direct data capture represents a technological leap is overstated. What is understated is the process consequence. A trial that declares certain eCRF fields to be the source record has changed its record model, and the record model is what every downstream clinical operations and data management process is built on.
The transcription model and the assumptions inside it
In the conventional model, a study coordinator observes a blood pressure, records it on a worksheet or in the electronic medical record, and later enters it into the eCRF. The worksheet or medical record entry is the source. The eCRF entry is a report of the source. Two records exist for the same observation, and they are created by different acts at different times.
This structure carries three assumptions that most clinical teams have stopped noticing. First, an independent copy of the observation exists outside the sponsor’s control, so an error introduced during transfer to the sponsor can be detected by comparison. Second, a monitor can determine whether the reported value is right by looking at a document. Third, a query about a value can be resolved by consulting that same document. The whole apparatus of source data verification, query resolution against source, and the standard data management plan is built on those three assumptions.
The direct capture model
In direct capture, the coordinator enters the blood pressure into a validated form at the point of care, and that entry is the first and only recording of the observation. There is no antecedent document. The record and the report are the same act. All three assumptions above fail at once.
This is why the change is larger than it looks. You have not simply removed a keystroke. You have removed the independent second record that a large part of clinical quality control was designed to exploit.
| Dimension | Transcription model (conventional EDC) | Direct capture model |
|---|---|---|
| Where the source lives | Site worksheet, paper chart, or electronic medical record | The data acquisition tool itself, as declared in the protocol |
| Number of records per observation | Two, created at different times | One, created once |
| Primary assurance activity | Compare the eCRF against the source document | Prove correct creation at the point of capture |
| Evidence a monitor examines | Documents and the eCRF side by side | Audit trail, metadata, access log, delegation log |
| Query resolution basis | Consult the source document | Audit trail plus a documented reason for change |
| Timing of edit checks | At data entry, days or weeks after the visit | During the visit, while the participant is present |
| Who holds an independent copy | The site, by default | Nobody, unless the design deliberately creates one |
| Effect of a system outage | Data entry is delayed; source is unaffected | Source capture itself is blocked |
Read the last two rows carefully. They are where most implementations get into trouble, and they are almost never covered in a vendor demonstration.
The Source Data Question Is the Whole Question
Every downstream consequence in this article follows from a single decision: which data elements are source, and where do they live. Under ICH E6(R3), that decision is not optional and not implicit. The investigator is required to define what is considered to be a source record, the methods of data capture, and their location before the trial starts, and to update that definition when needed.3 The same guideline adds that unnecessary transcription steps between the source record and the data acquisition tool should be avoided, which is the closest thing to regulatory encouragement for direct capture that currently exists.
E6(R3) goes further in its protocol content appendix. Among the data handling items a protocol must address is the identification of data to be recorded directly into the data acquisition tools, meaning data with no prior written or electronic record, and treated as the source record.3 That is a protocol-level declaration. It is reviewed, approved, and inspectable. If your team is treating the source data declaration as a data management plan detail to be resolved during startup, you have already put it in the wrong document.
Declaring the source before the first participant
The practical work here is a field-level inventory. For each variable the protocol collects, the team decides whether it originates in routine care documentation, in a trial-specific worksheet, in a device or laboratory system, or directly in the data acquisition tool. The FDA eSource guidance frames this as identifying the authorized originators of data, and it expects data element identifiers that allow an inspector to trace who or what created each element and when.1 The originator may be a person, a machine such as a wearable or sensor, or another computer system, a definition E6(R3) carries into its glossary.3
Doing this properly takes longer than teams expect, and it surfaces disagreements that were previously invisible. A vital sign captured by a monitor and read aloud to a coordinator has a different originator from one entered by a device interface. A concomitant medication history reconstructed from a hospital chart is not directly captured, no matter which screen it is typed into.
Very few studies are entirely direct capture. The realistic design has some fields declared as source in the data acquisition tool, some transcribed from the medical record, and some transferred from external systems. That mixture is acceptable, and E6(R3) explicitly contemplates verification effort scaled to data criticality when data captured on paper or in an electronic health record are manually transcribed into a computerized system. What is not acceptable is a monitoring plan and a data management plan that treat every field the same way. If your monitoring plan cannot state, field by field, whether verification applies, the plan is not implementable at the site.
What replaces verification
When the eCRF is the source, the assurance question changes from a comparison to a construction question. Nobody can tell you whether the recorded systolic pressure matches an independent record, because there is no independent record. What can be established is whether the record was created under conditions that make it trustworthy: by an authorized person acting under a documented delegation, at the time of the observation, in a validated system, with a complete audit trail, with the reason for any later change captured, and with the investigator retaining continuous access and control.
That is a different discipline. It is closer to computerized system assurance and data integrity practice than to conventional clinical monitoring, and it draws on skills that sit in quality and IT functions rather than in clinical operations. Organizations that treat direct capture as a clinical operations initiative and leave quality and IT out of the design tend to discover the gap during an inspection.
Audit Trails, Timestamps, and Attribution
If the audit trail is now the evidence that the source record is trustworthy, the audit trail has to be built to carry that weight. Most are not. The requirements below are specific, and they are the ones that separate a system suitable for direct capture from an EDC system that merely permits direct entry.
Field-level, not form-level
The EMA qualification opinion is unusually blunt on this point. Good clinical practice requires that all entries, changes, and deletions in a system are fully audit trailed, and in the case of eSource the audit trail should be per field. An audit trail at the end of a submitted form is not sufficient.2 Any change resulting from an automated data entry check must be visible as well, which means the system cannot silently normalize or correct an entry on the way to storage.
E6(R3) reinforces this from the sponsor side. Systems must be designed so that initial data entry and any subsequent changes or deletions are documented, including the reason for change where appropriate; audit trails, reports, and logs must not be disabled; and audit trails must not be modified except in rare circumstances such as inadvertent inclusion of personal information, and only with a logged justification.3
Timestamps that mean something
E6(R3) asks that the automatic capture of date and time of data entries or transfer be unambiguous, giving coordinated universal time as the example.3 This sounds like a technical footnote and is not. In a multi-country trial with tablets carried between clinics, local device clocks drift, time zones change mid-study, and daylight saving transitions create entries that appear to precede the events they describe. When the timestamp is the primary evidence of contemporaneous capture, an ambiguous timestamp is a data integrity finding waiting to be written.
Attribution and delegation
Attributable is the first letter of ALCOA+, and under direct capture it carries more weight than usual. The system must maintain a record of individual users authorized to access it, their roles, and their permissions, and E6(R3) requires that access permissions granted to investigator site staff be in accordance with delegations by the investigator and visible to the investigator.3 Shared accounts, generic site logins, and coordinator accounts left active after a staff member departs are common findings in electronic records generally. Under direct capture they do not simply weaken the record. They destroy the attribution of the source itself.
Investigator control of the only copy
This is the requirement most often missed, and the consequences of missing it are severe. E6(R3) states that the sponsor should not have exclusive control of data captured in data acquisition tools, in order to prevent undetectable changes, and that the investigator must have access to the required data for retention purposes.3 The EMA qualification opinion explains what is at stake. Missing continuous investigator control over eCRF data is already a frequent inspection finding. As long as sponsor-independent source data exist and an audit trail is possible, at least a verification of the eCRF data against the sponsor-independent source data can be carried out. The elimination of sponsor-independent source data, the opinion says, would significantly affect data integrity and therefore change the classification of these findings from major to critical.2
A control weakness that would be graded major in a conventional trial can be graded critical in a direct capture trial, because there is no second record to fall back on. This is the single most important sentence in the EMA opinion for anyone building a business case. Direct capture raises the consequence of a control failure, which means the control design has to be better, not equivalent.
The practical answer is a certified copy strategy. Both workflow scenarios described in the EMA opinion end the same way: the direct data capture database transfers certified copies of the source data, and of the data reported to the sponsor if different, into the investigator trial master file before the site’s access to the sponsor system is removed.2 If your implementation plan does not name who produces those certified copies, in what format, at what trigger points, and how their completeness is verified, the plan is incomplete.
Inventory the audit trail content per system
Establish what the system actually records for each event type: creation, modification, deletion, workflow actions, user administration, and data transfer. Do this against the live configuration, not the vendor brochure. E6(R3) asks responsible parties to evaluate the system for the types and content of metadata available.
Decide which metadata are reviewed and retained
Reviewing everything is not achievable and is not asked for. E6(R3) expects the responsible party to determine which identified metadata require review and retention, with the extent and nature risk based and adjusted from experience during the trial.
Write the audit trail review procedure before enrollment
Name who reviews, at what frequency, against what triggers, and what happens when a pattern is found. An audit trail nobody reads is evidence of nothing. Under direct capture it is the primary quality control record for source data.
Prove investigator access, then prove it again at close out
Test read access, export capability, and the certified copy process during user acceptance testing, not at database lock. Verify that access survives the end of the trial and the end of the vendor contract.
Plan for the outage
Define the documented fallback when the tablet fails, the network drops, or the platform is unavailable during a visit. Paper capture followed by transcription is an acceptable answer if it is written down, controlled, and reflected in the source data declaration. An undocumented workaround invented at the bedside is not.
None of these requirements is exotic. Every one of them exists in some form under 21 CFR Part 11, which requires secure, computer-generated, time-stamped audit trails that independently record operator entries and actions, limits system access to authorized individuals, and requires that record changes not obscure previously recorded information.4 What direct capture changes is that these controls stop being administrative hygiene and become the only evidence that the clinical observation is real.
What Happens to Monitoring: Redistribution, Not Savings
The commercial case for direct capture usually leans on monitoring. The reasoning runs: source data verification is expensive, direct capture removes the need for it, therefore direct capture pays for itself. The first clause is true. The second is roughly true. The conclusion does not follow.
The evidence against generalized source data verification is genuinely strong
It is worth being clear that the case against comprehensive source data verification was settled well before direct capture became a practical option. TransCelerate BioPharma evaluated source data verification as a quality control measure through a literature review, retrospective analysis of trial data from member companies, and assessment of major and critical internal audit findings, and concluded that generalized source data verification has limited value as a quality control measure.5 An independent review published in the European Journal of Clinical Pharmacology analyzed 22 publications and found that fourteen showed little objective evidence of improved data integrity from traditional monitoring, including full source data verification, compared with reduced verification, central statistical monitoring, and remote monitoring. Eight publications identified potential for significant reductions in monitoring expenditure from reducing verification without compromising the validity of trial results. The authors concluded that full source data verification is not a rational method of ensuring data integrity and subject safety given the expense involved.6
The FDA reached a compatible position in its risk-based monitoring guidance, which supports monitoring approaches focused on critical data and processes rather than uniform verification of everything.7 So the direction of travel is not in dispute.
What does not disappear
Here is where the business case usually overreaches. E6(R3) defines monitoring as a broad range of activities including communication with investigator sites, verification of investigator and site staff qualifications and site resources, training, and review of trial documents and information using a range of approaches including source data review, source data verification, data analytics, and visits to facilities undertaking trial-related activities.3 Source data verification is one item in that list. Removing it leaves the rest intact, and in a direct capture trial several of the remaining items get larger.
Source data review
Verification asks whether the eCRF matches the document. Review asks whether the record itself is complete, internally consistent, and medically coherent. That question survives direct capture untouched, and it requires clinical judgment rather than comparison, so it is harder to delegate and harder to automate.
Centralized statistical monitoring
E6(R3) treats centralized monitoring as an evaluation of accumulated data and notes that these activities may be conducted by persons in different roles, giving data scientist as the example. That is a hiring statement, not a workflow note.
Audit trail and metadata review
New activity with no equivalent in the transcription model at anything like the same scale. Somebody has to design it, staff it, and document it, and the reviewer needs enough system knowledge to interpret what they are seeing.
Site qualification and system oversight
The EMA opinion expects a site qualification procedure before deploying the system at any given site, plus specified help desk availability and accessibility. Sponsors also carry the validation burden, including study-specific validation and validation of transfers into the site’s medical record.
Central statistical monitoring is worth dwelling on, because it is where the displaced effort most usefully lands. The methods are mature. Key risk indicator approaches have been developed and applied within large ongoing randomized trials, monitoring factors such as serious adverse event reporting rates, treatment compliance, and laboratory results to focus attention on variables most likely to affect reliability or participant safety.8 Unsupervised statistical monitoring using mixed effects models has been shown to detect centers with fraud or other anomalies. In a reanalysis of the ESPS2 trial, five centers were flagged as atypical, the center with known fraud ranked second among them, and an incremental analysis showed that the fraudulent center could have been detected after only 25 percent of its data had been reported.9 Central statistical monitoring has also been applied successfully to investigator-led oncology trials, where budgets rarely permit extensive on-site verification.10
The important observation for a direct capture program is that these techniques find a class of problem that source data verification never found. Fabrication, unusually low variability in vital signs and laboratory values, absent adverse events, and implausible distributions are visible in aggregate and invisible in a single participant file. The shift is therefore not a downgrade of quality control. It is a change of instrument.
Present this to a steering committee as a redistribution and you will keep the program’s credibility. Present it as a saving and you will spend the second year explaining why the monitoring line did not fall as promised, while the data management and statistics lines quietly grew.
The Site Burden Reality
Direct capture is almost always sold as reducing work at the site. Sometimes it does. Frequently it does not, and the reason is structural rather than a matter of poor execution.
The industry position on this is not naive. TransCelerate’s published point of view on accelerating eSource adoption, which groups the field into four types (electronic health records, devices and apps, non-CRF data transfers, and direct data capture), states plainly that eSource should not increase participant or site burden and identifies duplicate data entry and inadequate training as ways in which implementations do exactly that. The same analysis lists interoperability gaps between healthcare and research systems, unclear processes for correcting source data, and gaps in eSource and informatics expertise among the barriers holding adoption back.18 None of those barriers is solved by choosing a better capture screen.
The dual entry trap
A research site is usually also a care setting. The institution has a legal and professional obligation to maintain a medical record for the participant’s standard of care, and that obligation is independent of the trial. If protocol-mandated observations are captured in the sponsor’s direct capture system and that system does not write back into the institution’s medical record, the site staff enter the same information twice. The transcription step you removed from the sponsor’s side has reappeared on the institution’s side, where nobody is measuring it.
The EMA qualification opinion recognizes this and is direct about the obligation it creates. To decrease workload on the investigator and site staff and to avoid transcription errors, transcription requiring manual intervention between eSource and the medical record should be avoided. Using an eSource must not result in a depletion or disorder of the information available in patients’ medical records. An increase of the investigator staff’s workload must be avoided. The opinion states that the long-term ambition should be that collected data can be transferred automatically into the site’s own electronic medical record, or captured automatically from it, and that cooperation to achieve standardization of data interoperability should be supported.2
The opinion also names the failure mode that scales worst. Investigators must use different eSource systems for the various trials conducted by different sponsors and vendors in parallel. If those systems are not compatible for data transfer into the medical records, the result is increased data dispersion, depleted medical records, increased workload for site personnel, and a potential breach of national requirements for the upkeep of medical records.2 A single sponsor optimizing its own trial can make the site worse off overall. Nothing in a single-sponsor business case will surface that.
- Does the system write captured data back into the site’s medical record, and through what validated mechanism? If the answer is a certified copy uploaded as a document, is that acceptable to the institution and readily traceable within its record?
- What does the site do about protocol data that must appear in the medical record for continuity of care, when the sponsor is only permitted to receive pseudonymized data?
- How many other sponsors’ systems is this site already running, and who at the site has counted the total training and login burden?
- Who pays for the site time spent on entry into a second system, and does the site budget recognize it?
- What happens to site access to the data after the trial closes and the vendor contract ends?
What actually reduces burden
The honest answer is that the largest lever is not capture technology. It is collecting less. The Tufts Center for the Study of Drug Development and TransCelerate analyzed 105 protocols and found that Phase III protocols now collect an average of 5.9 million datapoints, a 67 percent increase since 2020 and 10.8 percent annual growth. Roughly one third of procedures and data collected per Phase III protocol were classified as non-core or superfluous, and between 25 and 30 percent of participant and site burden was associated with non-core or non-essential procedures.11 Questionnaires carried the highest concentration of non-core and non-essential content.
Set that alongside a direct capture program and the arithmetic is uncomfortable. Removing a transcription step from a protocol that collects a third more data than it needs is optimizing the wrong layer. Protocol simplification and direct capture are complementary, and the order matters: simplify first, then decide how to capture what remains.
Two situations produce real reductions rather than displaced work. The first is trial-specific data that has no home in routine care documentation, where investigators today create their own paper worksheets and then transcribe them. The EMA opinion identifies exactly this case and suggests that replacing such worksheets with sponsor-provided electronic worksheets is likely to improve data quality, giving rating scales not used in normal clinical practice and detailed recording of multiple blood sampling times as examples. The second is validated automated transfer from the site’s own systems, where the source remains in the institution’s record and the transfer, rather than the transcription, becomes the controlled step. When transfer from the medical record is automated, source data verification forms part of the system validation rather than a site visit activity.2
Both of those work because they remove a genuine duplicate act. What does not work is moving the point of entry from one screen to another screen and calling it a reduction. Site coordinators can tell the difference immediately, and their assessment tends to be more accurate than the projected savings in the business case.
Queries and Data Cleaning Without a Document to Consult
Query management is where the absence of a source document becomes concrete for the data management team, and it is the area most often left until the study is already enrolling.
The queries that never happen
Some of the change is favorable and immediate. In the transcription model, edit checks fire when the data reaches the eCRF, which may be days or weeks after the visit, by which time the participant has gone home and the coordinator is reconstructing what happened. In direct capture, validation runs while the data is being entered during the visit. The EMA opinion notes that edit checks configured by the sponsor take place when the data is entered in the system and may help reduce or identify missing or erroneous entries, and E6(R3) asks that automated data validation checks at the point of capture be considered based on risk, with their implementation controlled and documented.23
The practical effect is that a large share of range checks, missing field prompts, and simple consistency failures are resolved at the moment of capture and never become queries at all. That is a genuine improvement in cycle time and in data quality, because the correction is made by the person who made the observation while the observation is fresh.
The queries that remain, and what they resolve against
What remains is the harder category: cross-form inconsistencies, clinical plausibility concerns, protocol interpretation questions, and coding issues. In the transcription model, these are resolved by consulting the source document. Under direct capture there is no such document, so the resolution has to rest on something else.
E6(R3) is specific about what that something else looks like. Corrections should be attributed to the person or computerized system making the correction, justified, supported by source records around the time of original entry, and performed in a timely manner.3 When the entry is the source record, the support for a correction is the audit trail plus a documented, meaningful reason for change. This has three consequences that data management leads should plan for.
First, reason for change stops being an optional field. In many conventional studies, reason-for-change text is either not required or is filled with a default value. Under direct capture it is the substantive record of why the source was altered, and generic entries such as “data entry error” carry no evidentiary weight when an inspector asks how a value changed three weeks after a visit.
Second, the sponsor’s latitude to correct data narrows sharply. E6(R3) states that the sponsor should not make changes to data entered by the investigator or trial participants unless justified, agreed upon in advance by the investigator, and documented, and that the sponsor should allow correction of errors where requested by investigators or participants.3 Practices such as self-evident corrections, where data management fixes obvious errors under a standing agreement, need rewriting for a study where those data are the source record.
Third, the query routing itself becomes an engineering problem. Both workflow scenarios in the EMA opinion describe queries raised in the sponsor’s clinical database and passed back through the direct capture database to the capture tool, where the site resolves them.2 That round trip crosses at least two validated systems and a mapping layer. Every hop needs to preserve the audit trail, and the mapping from the capture database into the eCRF database has to be performed via a validated process.
| Data cleaning activity | Transcription model | Direct capture model |
|---|---|---|
| Range and format errors | Query raised after entry, resolved by site days later | Prevented at the point of capture during the visit |
| Value disputed by monitor | Compare eCRF against worksheet or chart | Examine audit trail, entry time, and user; escalate to investigator judgment |
| Correction after entry | Correct eCRF to match source; source unchanged | Correct the source itself; audit trail and reason for change are the only record of the prior state |
| Reason for change | Often administrative | Substantive evidence, reviewed and inspectable |
| Sponsor-initiated correction | Common under standing agreements | Requires prior investigator agreement and documentation |
| Close out evidence | Site retains its own source documents | Certified copies transferred to the investigator file before access removal |
None of this is difficult in principle. It is difficult in practice because the artifacts that govern it, the data management plan, the monitoring plan, the query conventions document, and the site training materials, were all written for a world with two records and have to be rewritten for a world with one.
Where Direct Capture Fits and Where EDC Still Makes Sense
The useful question is not whether direct capture is better. It is which data elements, in which studies, at which sites, benefit from it. Three variables drive the answer.
Study type and where the data originates
Direct capture works best where the observation does not already exist in the medical record and would otherwise be written on a trial worksheet. The EMA opinion gives the clearest examples: rating scales not used in normal clinical practice, detailed recording of multiple blood sampling times, and similar protocol-driven parameters. It also suggests that trials already using electronic technology such as electronic patient-reported outcomes, eCRFs, real-time outcome monitoring, and electronic capture of laboratory results are a reasonable initial testing ground.2
Conventional EDC remains the sensible model where the observation originates in routine care and is properly documented in the institution’s record. Oncology response assessment, complex safety histories, prior treatment records, and anything a treating physician records for care purposes belong in the medical record first. Trying to make the trial system the source for those elements risks exactly the depletion of the medical record that the EMA opinion warns against.
Endpoint complexity and the amount of free text
Structured, well-defined endpoints suit direct capture. Endpoints requiring narrative clinical reasoning do not, or at least not without careful design. The EMA opinion notes that the capture tool should not be limited to structured data only and must allow free text, and that use should be evaluated by in-use testing of the eSource approach against collecting the same data without it, to confirm that the technology does not degrade the interaction between investigator and participant.2 That in-use comparison is rarely performed and is one of the cheapest risk reduction steps available.
A further constraint follows from the certified copy requirement. The electronic worksheet should only contain elements that can be adequately mirrored in a printout or flat file without loss of information, because a certified copy must be producible.2 Highly interactive form designs with conditional logic, embedded calculations, and dynamic content can fail this test.
Site infrastructure and institutional policy
The third variable is the one most often assumed away. Direct capture depends on connectivity, device availability, and institutional willingness to accept that some care-relevant information is first recorded in a sponsor-provided system. Academic medical centers with strict record-keeping policies, sites in countries with prescriptive medical record legislation, and sites already running several sponsor systems are poor candidates regardless of how attractive the protocol looks. The EMA opinion expects a site qualification procedure before deploying the system at any given site, and that qualification should genuinely be able to return a negative answer.2
Protocol-only assessments
Rating scales, structured symptom instruments, sampling time logs, and other data that exist solely because the protocol requires them and would otherwise live on a paper worksheet.
Participant and device generated data
Electronic clinical outcome assessments, wearables, and sensors, where the data acquisition tool has always been the source and the model is already understood by regulators and sites.
Care-derived endpoints
Observations a clinician records for treatment purposes and which must remain complete and accessible in the institutional record. Here the better investment is validated transfer out of the medical record, not capture into a separate system.
Sites without the operating conditions
Limited connectivity, no dedicated research staff, institutional policy that forbids first recording outside the medical record, or a site already carrying several sponsor systems.
A realistic target for most sponsors today is a hybrid: direct capture for a defined subset of protocol-specific fields, validated transfer for laboratory and device data, and conventional transcription with risk-proportionate verification for care-derived elements. That is not a compromise position. It is what the source data declaration will produce if the field-level inventory is done honestly.
Regulatory Expectations You Should Plan Against
The regulatory position on direct capture is more settled than most internal debates suggest. The gap is not in the guidance. It is in how few implementation plans map to it.
ICH E6(R3) is the anchor
ICH adopted E6(R3) in January 2025, and the FDA issued its final guidance adopting the revised guideline in September 2025.312 Three features matter most for a direct capture program. The guideline requires the investigator to define source records, capture methods, and locations before the trial begins. It requires the protocol to identify data recorded directly into data acquisition tools with no prior record and treated as source. And it builds an entire section on data governance across the life cycle covering capture, metadata and audit trails, review, corrections, transfer, finalization, retention, and destruction.3 A program that can demonstrate compliance with that section is, in practice, a program that has answered most of the questions in this article.
FDA expectations
The 2013 eSource guidance remains the most specific United States statement on the subject, addressing identification of authorized data originators, data element identifiers that support examination of the audit trail, capture of source data into the eCRF, and investigator responsibilities including review before signing.113 The 2018 guidance on the use of electronic health record data in clinical investigations covers the adjacent case where the institution’s record feeds the trial, including expectations for interoperability and for the sponsor’s assessment of the source system.14 The 2024 final guidance on conducting clinical trials with decentralized elements addresses the operating context in which direct capture is most often deployed, including validation and reliability of the technologies used for data collection.15 Underneath all of them, 21 CFR Part 11 governs the electronic records and signatures themselves.4
EMA expectations
The 2019 qualification opinion on eSource direct data capture remains the most detailed European treatment of the specific question and is worth reading in full by anyone designing a program.2 It was issued in the knowledge that a broader guideline on computerized systems and electronic data in clinical trials was under development, and the agency noted at the time that the guideline would constitute the definitive guidance once in force. The opinion is not general guidance, and it was written against one applicant’s proposal, but its reasoning on investigator control, certified copies, per-field audit trails, medical record depletion, and finding severity is the clearest published statement of what European inspectors will look for.
What inspectors already find
It helps to know where problems concentrate today. MHRA’s published good clinical practice inspection metrics show that case report form and source data issues have been among the most common major findings at investigator site inspections, alongside delegation of responsibilities, protocol compliance, and data integrity.16 Those are precisely the areas that direct capture makes more consequential rather than less. Delegation errors become attribution errors. Source data location ambiguity becomes an unanswerable question. Data integrity weaknesses lose the fallback of a second record.
Pilot experience supports a measured pace. A hospital-based pilot in China constructing and evaluating an electronic source data flow from hospital electronic medical records reported that the approach was feasible while identifying substantive quality and standardization work required to make the source data usable for trial purposes.17 The lesson from published pilots is consistent: the technology works, and the surrounding process, standards, and governance work is where the effort goes.
A workable sequence for a first program
Choose one study with a well-defined set of protocol-only assessments. Perform the field-level source inventory and write the protocol declaration. Design the certified copy and investigator access mechanism before selecting a vendor, so it becomes a selection criterion rather than a gap discovered later. Qualify a small number of sites with the operating conditions the design assumes, and be prepared to exclude sites that do not have them. Rewrite the monitoring plan, data management plan, and query conventions for a one-record world, and train sites on the corrections and reason-for-change discipline specifically. Then measure the site time actually spent, not the site time projected, and use that number for the next study.
Conclusion
Direct data capture is a small technical change wrapped around a significant change in the evidentiary structure of a clinical trial. Removing transcription removes a source of error, which is a real benefit. It also removes the independent second record that source data verification, query resolution, and a good deal of institutional habit depend on. The organizations that struggle with direct capture are rarely the ones that picked the wrong platform. They are the ones that treated the source data declaration as paperwork, assumed monitoring effort would simply fall away, and did not ask what the site would do about its own medical record. The organizations that succeed treat it as what it is: a data governance change that happens to involve a new screen at the point of care.
Our advice to clients considering this is consistently the same. Do the field-level source inventory first, before any vendor conversation, because it tells you how much of your protocol is actually a candidate. Model the monitoring change as a redistribution across roles and functions, not a reduction, and get the receiving functions staffed before enrollment. Ask the sites what happens to their medical record, and believe their answer. And design the certified copy and investigator access mechanism at the start, because it is the control that determines whether a future finding is graded major or critical.
Sakara Digital works with pharma and biotech organizations designing clinical data models that hold up under inspection. If you are weighing direct data capture against conventional EDC for an upcoming program and want an independent read on where it fits and what it will actually require, we are happy to have that conversation.
For Further Reading
For Further Reading
- Risk-Based Monitoring (RBM) in 2026: The Updated Playbook
- Site-Centric Digital Transformation: Redesigning Clinical Trial Technology Around Investigator Needs
- Data Integrity and ALCOA+ in the Digital Age: Modernizing Compliance for Cloud and AI Systems
- Data Lineage Adoption in Clinical Data Management: Where Teams Stumble
- 21 CFR Part 11 Compliance for Modern Cloud Apps in Pharma
References & Sources
- U.S. Food and Drug Administration. “Electronic Source Data in Clinical Investigations: Guidance for Industry.” September 2013. https://www.fda.gov/media/85183/download
- European Medicines Agency, Committee for Medicinal Products for Human Use. “Qualification opinion on eSource Direct Data Capture (DDC).” EMA/CHMP/SAWP/483349/2019, 25 July 2019. https://www.ema.europa.eu/en/documents/regulatory-procedural-guideline/qualification-opinion-esource-direct-data-capture-ddc_en.pdf
- International Council for Harmonisation. “ICH E6(R3) Guideline on good clinical practice (GCP), Step 5.” EMA/CHMP/ICH/135/1995, January 2025. https://www.ema.europa.eu/en/documents/scientific-guideline/ich-e6-r3-guideline-good-clinical-practice-gcp-step-5_en.pdf
- U.S. Government Publishing Office. “21 CFR Part 11: Electronic Records; Electronic Signatures.” Electronic Code of Federal Regulations. https://www.ecfr.gov/current/title-21/chapter-I/subchapter-A/part-11
- Sheetz N, Wilson B, Benedict J, Huffman E, Lawton A, Travers M, Nadolny P, Young S, Given K, Florin L. “Evaluating Source Data Verification as a Quality Control Measure in Clinical Trials.” Therapeutic Innovation & Regulatory Science, 2014;48(6):671-680. https://pubmed.ncbi.nlm.nih.gov/30227471/
- Olsen R, Bihlet AR, Kalakou F, Andersen JR. “The impact of clinical trial monitoring approaches on data integrity and cost: a review of current literature.” European Journal of Clinical Pharmacology, 2016;72(4):399-412. https://link.springer.com/article/10.1007/s00228-015-2004-y
- U.S. Food and Drug Administration. “A Risk-Based Approach to Monitoring of Clinical Investigations: Questions and Answers, Guidance for Industry.” https://www.fda.gov/media/116754/download
- Venet D, Doffagne E, Burzykowski T, Beckers F, Tellier Y, Genevois-Marlin E, Becker U, Bee V, Wilson V, Legrand C, Buyse M. “A key risk indicator approach to central statistical monitoring in multicentre clinical trials: method development in the context of an ongoing large-scale randomized trial.” Trials, 2012. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3287710/
- de Viron S, Trotta L, Schumacher H, Lomp HJ, Höppner S, Young S, Buyse M. “Detection of Fraud in a Clinical Trial Using Unsupervised Statistical Monitoring.” Therapeutic Innovation & Regulatory Science, 2021. https://pmc.ncbi.nlm.nih.gov/articles/PMC8688378/
- “Central statistical monitoring of investigator-led clinical trials in oncology.” International Journal of Clinical Oncology, 2020. https://pmc.ncbi.nlm.nih.gov/articles/PMC7308734/
- Getz K, Botto E, Calduch Arques A, Galuchie L, Camargo Sanmiguel N, Sheetz N, Smith Z. “Insights Informing Strategies for Optimizing the Collection of Clinical Trial Data.” Therapeutic Innovation & Regulatory Science, 2025. https://pmc.ncbi.nlm.nih.gov/articles/PMC12945892/
- U.S. Food and Drug Administration. “E6(R3) Good Clinical Practice (GCP): Guidance for Industry.” September 2025. https://www.fda.gov/regulatory-information/search-fda-guidance-documents/e6r3-good-clinical-practice-gcp
- Federal Register. “Guidance for Industry on Electronic Source Data in Clinical Investigations; Availability.” 78 FR 57391, 18 September 2013. https://www.federalregister.gov/documents/2013/09/18/2013-22645/guidance-for-industry-on-electronic-source-data-in-clinical-investigations-availability
- U.S. Food and Drug Administration. “Use of Electronic Health Record Data in Clinical Investigations: Guidance for Industry.” July 2018. https://www.fda.gov/media/97567/download
- U.S. Food and Drug Administration. “Conducting Clinical Trials With Decentralized Elements: Guidance for Industry, Investigators, and Other Interested Parties.” September 2024. https://www.fda.gov/media/167696/download
- Medicines and Healthcare products Regulatory Agency, GCP Inspectorate. “GCP Inspections Metrics Report, 1 April 2018 to 31 March 2019.” https://assets.publishing.service.gov.uk/media/602a8e3cd3bf7f03190cbe43/GCP_INSPECTIONS_METRICS_2018-2019_final_12-02-21.pdf
- “Data Flow Construction and Quality Evaluation of Electronic Source Data in Clinical Trials: Pilot Study Based on Hospital Electronic Medical Records in China.” JMIR Medical Informatics, 2024. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC11228134/
- Parab AA, Mehta P, Vattikola A, Denney CK, Cherry M, Maniar RM, Kjaer J. “Accelerating the Adoption of eSource in Clinical Research: A Transcelerate Point of View.” Therapeutic Innovation & Regulatory Science, 2020;54(5):1141-1151. https://pmc.ncbi.nlm.nih.gov/articles/PMC7458943/








Your perspective matters—join the conversation.