Study guide

28.1 Safety Reconciliation and Dataset Finalisation

ACRP CCRA Certified Clinical Research Associate Study Guide 2026 Exam

Track your progress as you read

Finished sections get a check mark.

1 Chapter 1: Exam Format, Eligibility and Registration

1.1 Exam Format, Eligibility and Current References 1.2 Registration, Fees and Candidate Decisions

2 Chapter 2: CRA Responsibilities and Study Planning

2.1 The CRA Role, Data Integrity and Product Oversight 2.2 Official Blueprint and Study Strategy

3 Chapter 3: Protocols, Endpoints and Trial Design

3.1 Protocol Elements and Endpoint Hierarchy 3.2 Endpoint Interpretation and Eligibility Rationale 3.3 Eligibility Verification and Trial Designs

4 Chapter 4: Bias Control, Blinding and Product Information

4.1 Bias, Randomisation and Comparator Controls 4.2 Unblinding and Investigator Brochure Content 4.3 Reference Safety Information and IB Updates

5 Chapter 5: Estimands and Device Instructions

5.1 Estimands and Intercurrent Events 5.2 Device Instructions, Configuration and Training

6 Chapter 6: Ethical Foundations and Independent Oversight

6.1 Ethical Foundations and the 2024 Declaration of Helsinki 6.2 Vulnerability, Voluntariness and Compensation 6.3 IRB/IEC Composition and Independent Review

7 Chapter 7: Ethics Communication and Informed Consent

7.1 Ethics Reporting, Approval Status and Version Control 7.2 Informed Consent Information and Meaningful Choice 7.3 Consent Documentation, Special Circumstances and Updates

8 Chapter 8: Recruitment, Retention and Confidentiality

8.1 Ethical Eligibility, Recruitment and Retention 8.2 Privacy, Confidentiality and Appropriate Access

9 Chapter 9: Safety Definitions and Classification

9.1 Adverse Event Definitions and Actual Life-Threatening Risk 9.2 Seriousness, Severity and Medical Importance 9.3 Causality, Expectedness and Reference Safety Information

10 Chapter 10: Safety Detection, Reporting and Oversight

10.1 Detecting Events, AESIs and Collection Windows 10.2 Expedited Reporting and the Sponsor Awareness Clock 10.3 Immediate Site Reporting and Independent Safety Oversight

11 Chapter 11: Follow-Up, Adherence and Conflicts

11.1 Safety Communications, Reconciliation and Follow-Up 11.2 Adherence, Discontinuation and Participant Choice 11.3 Conflicts of Interest and Prorated Payments

12 Chapter 12: Development Stages and Product Management

12.1 Nonclinical Background and Human Pharmacology 12.2 Exploratory, Confirmatory and Therapeutic-Use Studies 12.3 Product Storage, Labelling and Excursion Response

13 Chapter 13: Accountability, Integrity and Regulatory Status

13.1 Product Accountability and Adherence Calculations 13.2 Potential Fraud, Misconduct and Evidence Preservation 13.3 Submissions, Authorisation Status and Trial Reporting

14 Chapter 14: Current GCP Principles and Delegation

14.1 The Eleven Current GCP Principles 14.2 Proportionality and Investigator Oversight 14.3 Delegation, Qualifications and Task Authority

15 Chapter 15: Oversight, Protocol Control and Amendments

15.1 Clinical Oversight and Immediate-Hazard Changes 15.2 Deviation Classification and Resolution

16 Chapter 16: Implementation and Trial Responsibilities

16.1 Amendment Implementation and Communication 16.2 Sponsor, Investigator and Service-Provider Roles

17 Chapter 17: Quality Planning, Root Causes and CAPA

17.1 Quality Planning and Risk Management 17.2 Root Cause Analysis and CAPA Design 17.3 CAPA Implementation and Effectiveness Verification

18 Chapter 18: Risk Assessment and Monitoring Methods

18.1 Risk Assessment and Centralised Surveillance 18.2 Monitoring Methods and Source Review

19 Chapter 19: Quality Metrics, Plans and Communication

19.1 KRIs, Acceptable Ranges and Trial-Level Quality 19.2 Monitoring Plans, Co-Monitoring and Communication

20 Chapter 20: Site Qualification and Readiness

20.1 Site Qualification and Investigator Capacity 20.2 Recruitment Feasibility and Evidence-Based Site Selection 20.3 Site Readiness and Activity-Specific Release

21 Chapter 21: Initiation, Equipment and Supplies

21.1 Initiation Training and Readiness Walkthroughs 21.2 Equipment, Maintenance and Study Supplies

22 Chapter 22: Samples, Diagnostics and Financial Feasibility

22.1 Specimens, Diagnostic Results and Rater Quality 22.2 Contracts, Budgets and Operational Feasibility

23 Chapter 23: Interim Monitoring and Reporting

23.1 Interim Visit Preparation and Consent Review 23.2 Monitoring Eligibility, Safety and Products 23.3 Investigator Debrief and Monitoring Reports

24 Chapter 24: Essential Records, Audits and Findings

24.1 Essential Records and Site/Sponsor Reconciliation 24.2 Version History, Resolution Evidence and Noncompliance 24.3 Audits, Inspections and Closure Planning

25 Chapter 25: Close-Out, Retention and Destruction

25.1 Close-Out, Archiving and Continuing Obligations 25.2 Retention, Destruction and Long-Term Access

26 Chapter 26: Source Records and Good Documentation

26.1 Source Records and Foundational ALCOA Principles 26.2 Good Documentation, Completeness and Corrections 26.3 Source Access, Certified Copies and Context

27 Chapter 27: Electronic Systems, Metadata and Queries

27.1 EDC Design and Fit-for-Purpose Systems 27.2 Audit Trails, Electronic Outcomes and Device Choice 27.3 Queries, Coding and Supported Clinical Meaning

28 Chapter 28: Dataset Finalisation and Critical Data

28.1 Safety Reconciliation and Dataset Finalisation 28.2 Critical Data, Acquisition Tools and Interim Findings

28.1 Safety Reconciliation and Dataset Finalisation

Key Takeaways Explain This Topic AI

Datasets should reach sufficient quality for their prespecified analysis purpose.

Genuinely missing information and justified differences need evaluation, not fabricated completion.

Post-lock corrections require controlled justification, traceability and reassessment.

Last updated: October 2026

Safety Reconciliation and Dataset Finalisation

Regulatory inspectors verify that the following five parameters demonstrate agreement on shared concepts or documented justified differences between the EDC adverse event panel and the safety database case record:

Subject Identification: Subject study ID, site number, age, sex, and randomized treatment cohort.

Adverse Event Terminology: Verbatim diagnostic phrase and matched MedDRA Preferred Term (PT).

Event Chronology: Exact date of event onset and exact date of event resolution (or notation of ongoing status).

Seriousness Criteria: Identical classification of why the event is serious (Death, Life-Threatening, Inpatient Hospitalization / Prolongation, Persistent Disability, Congenital Anomaly, or Medically Significant).

Causality & Outcome: Investigator-assessed relationship to investigational product (Related vs. Not Related), action taken with study drug, and final clinical outcome (Recovered, Recovered with Sequelae, Fatal, Unknown).

The CRA's Operational Role in Reconciliation

When reconciliation identifies a discrepancy (e.g., the safety database records an SAE onset date of October 12, but the EDC eCRF records October 14), the CRA is called upon to perform immediate source record auditing. The CRA reviews the hospital admission face-sheet, nursing notes, and discharge summary to determine the true clinical onset date, guides the site coordinator in amending the erroneous system, and ensures documented rationale accompanies the change.

Blinded review, populations and intercurrent events

Before planned unblinding and analysis, review data quality, deviations and analysis-set decisions under the prespecified statistical plan. Maintain appropriate blinding and document the decisions. A named Blinded Data Review Meeting is one organisational method, not a universal required meeting or attendee list.

The intention-to-treat principle concerns all randomised participants analysed according to assigned treatment. A full analysis set aims to be as close as possible to that ideal, with any justified exclusions limited and prespecified. It is not universally identical to a safety set of participants who received a dose. A per-protocol set uses prespecified criteria for sufficient adherence and relevant deviations. Its selection can introduce bias; it does not automatically reveal a pure biological effect.

E9(R1) links the clinical question to an estimand : treatment, population, variable, handling of intercurrent events and population-level summary. Stopping treatment, rescue medication or death may affect interpretation. Missing data and an intercurrent event are related but different concepts. A participant who stops medication may still contribute planned follow-up measurements if they agree and the protocol permits. Collect the information required by the estimand rather than deleting the person from the database.

Database Lock (DBL) Procedures & Unlocking Governance

Database Lock (DBL) is the definitive milestone in the data management lifecycle. It marks the formal cessation of data editing, rendering the trial database read-only and immutable.

Finalisation based on the analysis purpose

E6(R3) requires prespecified, documented activities that produce data of sufficient quality for planned interim or final analyses. These can include reconciliation, correction of meaningful errors and omissions where possible, medical coding, evaluation of noncompliance and determination of analysis sets. Investigator review/endorsement should occur at agreed important milestones.

A finalisation checklist should identify the intended data cut, required reviews, known missing information, unresolved issues and their assessed impact. Do not invent values to obtain 100% filled fields. Some data may remain genuinely missing or an issue may be documented rather than numerically corrected. The responsible functions assess whether the dataset is suitable for its planned purpose.

A final global lock differs from a planned interim cut or a site close-out. Not every participant must finish long-term follow-up before every interim analysis. Apply the protocol, analysis plan and data-management procedures, including who authorises release and how the version is identified.

Soft Lock vs. Hard Lock

Soft Lock (Interim / Dry-Run Lock): All site editing privileges are temporarily removed, placing the database in read-only status. The biostatistics team runs exploratory statistical scripts, validates analysis datasets (SDTM / ADaM), or conducts planned interim analyses for Data Safety Monitoring Boards (DSMBs). If critical minor data errors are discovered, controlled, documented edits may still be performed under strict change control procedures.

Hard Lock (Final Database Freeze): The final, definitive lock executed after all quality gates pass. Routine editing is restricted under the documented lock procedure. The final dataset is extracted and transferred to Biostatistics. Release of treatment codes follows the protocol and prespecified analysis process, including appropriate interim arrangements.

Controlled post-finalisation corrections

If an important error is found after lock or data release, preserve the prior dataset and assess its impact. Follow documented authorisation, justification, audit trail, change review and re-finalisation procedures. The required approvers are defined by the organisation/trial, not a universal five-executive ICH list. Document what changed, who changed it, why it was justified and which analyses need reassessment.

An audit trail must remain interpretable. Unblinded knowledge creates particular risk of biased changes, so maintain appropriate independent review and safeguards. A locked database is an operational control, not proof that no error can ever exist or that a legitimate correction is prohibited.

Official sources

Checked October 18, 2026: ICH E6(R3), Principles and Annex 1 , ICH E9(R1) .