
Destruction procedures: when and how records may be destroyed per ICH E6(R3)
Teaches the complete record destruction procedure -- from eligibility determination through documented execution -- including the approval chain, hold mechanisms for pending regulatory actions or litigation, and the destruction log that closes the records lifecycle.
The last gate in the lifecycle
Every records lifecycle has a terminal event. For clinical trial records, that event is destruction -- the permanent, irreversible elimination of records that have completed their retention obligation. And it is, without question, the phase where the regulatory coordinator must exercise the most care, because the consequences of error run in only one direction. A record destroyed too early cannot be reconstituted. There is no "undo" for shredding.
Lesson 3 built the analytical framework for determining when records become eligible for destruction -- the three-layer retention hierarchy, the sponsor notification dependency, the tracking system that monitors both conditions across the portfolio. This lesson picks up where that framework leaves off. The retention tracking system has flagged a study's records as potentially eligible. What happens next?
What happens next is not a trip to the shredder. It is a procedure -- a defined, documented, multi-step process that transforms "potentially eligible" into "authorized for destruction" and then into "destruction completed and documented." ICH E6(R3) addresses destruction in a single sentence at Section 4.2.8: "The trial data and metadata may be permanently destroyed when no longer required as determined by applicable regulatory requirements." That sentence grants permission. But it says nothing about how. The "how" is what the regulatory coordinator designs, and it is the subject of this lesson.
I have seen sites where destruction amounted to a coordinator emptying old file boxes into recycling bins on a quiet Friday afternoon. No approval. No log. No verification that the records were actually eligible. And I have seen the audit findings that followed -- because when a regulatory authority or sponsor asks for records that no longer exist, the site's only defense is the documented procedure by which those records were destroyed. If that documentation does not exist, the site has no defense at all.
What you will learn
By the end of this lesson, you will be able to: