GCP Was Built on GMP: Why Clinical Teams Need to Understand Their Shared DNA
A Shared History Many Clinical Professionals Never Learn
Good Manufacturing Practices (GMP) came decades before Good Clinical Practice (GCP). When regulators began shaping GCP in the 1970s–1990s, they did not build a new quality system from scratch. Instead, they extended the already proven GMP framework — its documentation controls, validation expectations, data integrity principles, and product-quality mindset — into the clinical research environment.
GCP added critical ethical requirements for subject protection and trial conduct. However, the quality system bones of GCP remain GMP’s.
Also, this is increasingly relevant today as digital systems, data integrity expectations, and cross-functional processes demand a unified understanding of how quality is maintained across the regulated landscape.
To being with, the influence of GMP is most evident in how it shaped the documentation expectations that define modern GCP.
1.
GMP Established Modern Documentation Principles, and GCP Built on Them
The famous GMP principle: “If it isn’t documented, it didn’t happen.” predates GCP by decades.
Importantly, GMP documentation rules — completeness, legibility, control, and traceability — directly informed GCP expectations for:
- essential documents
- TMF management
- monitoring documentation
- protocol and amendment versioning
- investigator site files
- QC and oversight records
For example, this is why TMF expectations often resemble GMP documentation systems: GCP inherited the model. Altogether, this alignment demonstrates how deeply GMP documentation practices were carried into the GCP environment.
2.
Data Integrity Began in GMP, and Became Foundational to GCP
The ALCOA principles (Attributable, Legible, Contemporaneous, Original, Accurate) originated in GMP long before clinical research adopted them. As clinical trials digitized, these principles became central to:
- source documentation
- monitoring outputs
- audit trails
- electronic signatures
- metadata
- TMF quality, completeness, and timeliness
- traceability across systems
Equally important, clinical teams increasingly rely on these principles to ensure records remain reliable throughout the study. In addition, ICH E6(R3) reinforces this alignment even more clearly, emphasizing record reliability as a critical factor in trial quality.
In fact, GCP did not invent ALCOA — it adopted and extended it.
3.
GMP Created the First Framework for Validated, Controlled Systems
Before eTMF, EDC, IRT, and CTMS existed, GMP already required:
- validated computerized systems
- lifecycle maintenance
- change control
- access restrictions
- audit trails
- data backup and recovery
- user requirements (URS)
- deviation and CAPA management
- periodic review
- supplier qualification
So, these principles migrated naturally into GCP as clinical research became more digital.
In the end, today’s clinical systems operate using GMP-derived controls, even if teams do not always recognize them by name.
4.
Oversight and Accountability: A Core GMP Principle Adopted by GCP
In this case, GMP provided the foundational expectations that clinical teams still follow today.
GMP reinforced one of the most important quality concepts in any regulated environment: You can outsource the work, but not the responsibility.
Furthermore, this concept now anchors modern GCP requirements for:
- CRO oversight
- vendor oversight
- qualification of technology partners
- governance of cloud systems
- documented roles and responsibilities
- monitoring of system performance
- retention of requirements and validation evidence
Because of this, GCP’s sponsor duties follow GMP’s long-held view: delegated tasks still require independent sponsor control.
5.
“State of Control”: A GMP Concept That Now Defines Modern GCP Expectations
The idea that a process or system must remain in a state of control throughout its lifecycle originated in GMP. This concept is increasingly visible in clinical inspections.
Inspectors ask clinical teams:
- Is your eTMF validated today, not just at go-live?
- How do you assess the impact of vendor-driven system updates?
- How do you maintain requirements and traceability?
- What is your process for audit trail review?
- Are access roles reviewed routinely?
In contrast, these are GMP-derived questions applied to GCP contexts because the risks of digital systems are similar, regardless of where in the product lifecycle they operate.
6.
Quality Risk Management: GMP Origins Reflected in ICH E6(R3)
ICH Q9 (Quality Risk Management) and Q10 (Pharmaceutical Quality System) come directly from GMP frameworks.
Meanwhile, modern GCP expectations, especially ICH E6(R3), now incorporate the same concepts:
- identifying critical-to-quality factors
- applying risk-proportionate oversight
- integrating people, processes, and systems
- focusing controls where they matter most
So, today’s clinical teams often use risk-based approaches that look very much like GMP quality systems. Overall, these shared principles reflect how GCP’s risk expectations evolved directly from GMP’s established framework.
7.
Digitalization and AI Are Reinforcing the GMP–GCP Connection
Importantly, GMP moved into digital systems before GCP, especially through:
- Annex 11 (computerized systems)
- data integrity guidance
- Annex 22 (AI)
- validation frameworks
- supplier oversight requirements
Similarly, clinical research is now adopting tools (eTMF automation, metadata extraction, AI-assisted QC) that face similar risks to GMP digital systems:
- algorithmic error
- lack of transparency
- inconsistent configuration
- uncontrolled updates
- gaps in documentation or rationale
As a result, clinical teams increasingly depend on GMP-derived principles:
- explainability
- intended-use documentation
- performance verification
- human oversight
- change control
- inspection readiness
On the whole, these parallels underscore the continuity between GMP and GCP in digital system governance. GMP built the blueprint; GCP is applying it to new areas.
How Just in Time GCP Helps Trial Sponsors Apply GMP-Derived Quality Principles in GCP
Just in Time GCP works at the crossroads of clinical operations, digital documentation, and quality systems — exactly where GMP-originated principles underpin modern GCP expectations.
We help sponsors strengthen:
Digital Documentation & eTMF Quality
- lifecycle validation for eTMF and eClinical systems
- critical-to-quality metadata structures
- record integrity (accuracy, completeness, timeliness)
- multi-repository reconciliation
- routine risk reviews and escalations
- transparency and traceability across the TMF story of the study
CRO & Vendor Oversight
- clear sponsor–vendor accountability frameworks
- review of system validation evidence
- governance of cloud configurations and release changes
- audit prep and documentation of oversight activities
Inspection Readiness
- defensible evidence paths
- audit trail expectations
- TMF signals and risk indicators
- completeness, quality, and timeliness reviews
- CAPA pathways linked to system performance
AI and Next-Generation Tools
- applying Annex 11 and Annex 22 principles to clinical systems
- explainability and human review
- clear intended-use documentation
- digital oversight without unnecessary burden
Clinical teams don’t need to become GMP experts —
they need a partner who understands how GMP’s quality foundations shape today’s GCP expectations.
That’s where Just in Time GCP brings clarity, structure, and confidence.
