Clinical investigations collect more data than ever, from eCRFs, laboratories, imaging systems, wearables, patient-reported outcomes and connected devices. Reviewing every data point with the same intensity produced query volume, site fatigue and long closeouts without a proportionate gain in quality. Risk-based data management puts the effort where an error would actually change something.
Chief Data Officer
Biometrics & Data Systems
in clinical data systems, biometrics and statistical reporting
Head of Quality & Compliance
ISO 14155 & data integrity
in quality systems and inspection readiness for device studies
Chief Operating Officer · former TÜV SÜD Senior Reviewer
in device evaluation and Notified Body review
Historically many organizations attempted to verify and clean nearly every collected value. The intention was sound. The result was not.
Modern regulatory guidance encourages sponsors to adopt risk-based quality management, focusing resources on critical data and important study processes rather than exhaustive review of every variable. The approach is documented in the data management plan and runs through the whole data management scope.
Every investigation is different, but the categories are stable. Identifying them is the first step, and it happens before the database is configured.
Serious adverse events, adverse device effects, device deficiencies affecting safety, deaths, hospitalizations and unanticipated adverse device effects. Errors here affect patient protection and regulatory reporting directly.
Performance endpoints, clinical effectiveness outcomes, diagnostic accuracy, imaging assessments and functional scores. These variables carry the study conclusion.
Inclusion and exclusion criteria, informed consent and baseline assessments. Incorrect eligibility data compromises study validity, and early review reduces protocol deviations.
Serial numbers, batch or lot numbers, implantation and explantation dates, device returns and disposition. Structured capture starts in the eCRF design.
Study dates, participant disposition, protocol deviations, safety reporting and device deficiencies. These receive enhanced review because a submission depends on them.
Device configuration, software versions, malfunctions, user errors, corrective actions, wearable data and connected device telemetry.
Site experience, data protection constraints, registry access and vendor reliability differ by country. The risk assessment takes account of where the study is actually running.
Query response times, vendor delivery calendars and national closeout obligations differ by country, and they decide how long the last month of the study takes.
Risk-based data management begins during study planning. The assessment is a joint exercise, because no single function can see all the ways a study can go wrong.
Traditional data management generated large numbers of low-value queries: minor spelling differences, small formatting inconsistencies, non-critical missing values. Every one of them costs a little of the attention you will need later.
The practical detail of how this is run week to week is on the clinical data cleaning page.
Modern EDC platforms provide the tooling that makes a risk-based approach practical at scale.
Immediate feedback at the point of entry, so routine issues never become queries at all.
Central review across sites, which finds patterns no individual record review would surface.
Open query rate, missing critical data, entry timeliness, site performance, protocol deviations, safety reporting timelines.
Issues visible while the study can still respond to them rather than at closeout.
Risk-based data management is not a one-time exercise. When indicators move, review activity is increased where the movement is.
The approach does not depend on one vendor. See choosing an EDC system and our data management capability.
They are related but they are not the same thing, and confusing them leaves a gap.
Together they form a coherent quality management system for the investigation. Sponsors who want the underlying standards can start with our ISO 14155 training.
Device investigations carry data that has no pharmaceutical equivalent: implantation procedures, device configuration, software versions, deficiencies, malfunctions, user errors, corrective actions, accountability records, wearable data and connected device telemetry. Prioritizing these variables maintains the traceability the EU MDR and ISO 14155 expect, without reviewing everything else to the same depth.
Published work and client evidence, not claims.
Where the risk strategy touches the rest of the data lifecycle.
Regulatory authorities increasingly encourage sponsors to adopt risk-based quality management principles. Regulations may not prescribe a specific methodology, but standards such as ISO 14155 and ICH Good Clinical Practice E6 emphasize identifying and controlling risks to data quality and participant safety.
No. It means reviewing data according to its importance. Critical variables receive enhanced oversight, while lower-risk information is handled through efficient automated processes and targeted review.
Risk-based monitoring governs how study sites and clinical processes are monitored. Risk-based data management governs how clinical data is reviewed, validated and maintained. They are complementary parts of the same quality strategy.
Yes. Even smaller studies benefit from identifying critical data and prioritizing review. The scope should stay proportionate to the complexity and risk profile of the investigation.
In the data management plan, with the critical data list, the rationale, the resulting validation and review intensity, and the revision history. A reviewer should be able to follow why a given variable was treated the way it was.
Yes, though the gains are smaller than starting at study planning. A mid-study assessment usually begins by reducing low-value query generation and reprioritizing the review effort towards the endpoints and safety data.
Send us the protocol and the endpoint definitions. We come back with a critical data assessment, the validation and review intensity each category warrants, and where your current query load is being spent on variables that do not change anything.
Your documents are reviewed confidentially. An NDA can be put in place before we receive any technical or clinical information. You can also reach the team through the contact page.
Whitepaper, BSI and Eclevar
on the EU MDR
Client testimonial,
RegenLab