Authorisation & Maintenance: IRAS, Combined Review, and Change Control

Building the CTA dossier. A typical UK CTA includes the protocol and synopsis; Investigator’s Brochure; IMPD or equivalent quality documentation; manufacturing and labelling plans; safety-management arrangements; summaries of nonclinical and any prior human data; justification for endpoints/estimands; and a monitoring approach that reflects CtQ risks. Part of the application package is reviewed by the REC, including informed-consent materials, recruitment media, investigator suitability, site capacity, indemnity/insurance, and data-protection statements.

Combined Review through IRAS. The UK’s Combined Review routes the application simultaneously to MHRA and a REC. Coordinated requests for information (RFIs) may follow; sponsors should pre-assign owners (clinical, stats, CMC, PV, legal, data-protection) and prepare “shadow clocks” to deliver responses within tight windows. Keep version control strict—protocol, IB, ICFs, and IMPD must align line-by-line to avoid contradictory statements that trigger additional rounds of questions or conditions of approval.

Substantial amendments and notifications. After authorisation, changes that materially affect risk, scientific value, consent, or operational integrity (e.g., new arms or doses, endpoint changes, major consent revisions) are submitted as substantial amendments for MHRA/REC review. Administrative updates (contact details, minor clarifications) may be handled as non-substantial notifications. Each change should include tracked documents, a rationale tied to emerging evidence, a cross-functional impact statement (statistics, PV, CMC, IxRS, supply), and a plan for re-consent and re-training. Synchronise UK changes with other regions (e.g., U.S. IND amendments under FDA Part 312; EU CTR substantial modifications via EMA systems) to maintain one global version lineage.

Start-up and site activation. UK site activation typically requires REC approval, CTA approval, signed Clinical Trial Agreements, site capacity/feasibility confirmation, pharmacy qualification, and system access/training. The sponsor should define objective green-light criteria (approved local ICF version, delegation log, temperature monitoring in place, IMP on site, user access set). Activation roadmaps that recognise clinic realities—imaging slots, infusion chairs, pharmacy hours—reduce early deviations and missed endpoints.

End-of-trial and results. Sponsors must notify early termination, temporary halts, and trial completion to MHRA/RECs, and provide a summary of results on a public registry within applicable timelines, including a layperson summary. Align CSR timing with public reporting so numbers and narratives reconcile. Keep evidence of postings and correspondence in the TMF.

Supply, QP, and labelling. UK trials of IMPs generally require Qualified Person (QP) certification and compliant labelling, with documented batch records, temperature excursion management, returns, and destruction. Where auxiliary medicinal products (AxMPs) support procedures or rescue, define quality controls proportional to risk and evidence of traceability.

Safety, Monitoring & Records: What UK Inspectors Look For

Pharmacovigilance operations. Sponsors must maintain expedited reporting pathways for Suspected Unexpected Serious Adverse Reactions (SUSARs) and provide aggregate safety updates (e.g., DSURs) on cadence. Serious adverse events are captured at sites, assessed by the sponsor’s medical monitor, and reported according to UK timelines and formats. Consistency with global submissions matters—ensure cases reported to UK systems reconcile with those filed to EMA or other authorities in multiregional programs so that there is one coherent safety story.

Urgent safety measures and temporary halts. When immediate hazards arise, the sponsor may implement urgent safety measures without prior approval to protect participants, but must notify authorities and ethics promptly with a rationale, risk mitigation, and re-consent strategy if needed. Restarting after a halt typically demands a root-cause analysis, protocol or IB updates, and targeted re-training—treat this like CAPA under your quality system and evidence the effectiveness of changes.

Risk-proportionate monitoring. ICH E6(R3) encourages blending centralized analytics with targeted on-site work. In the UK, inspectors expect to see that your plan focuses on CtQ factors: informed-consent process and timing; eligibility verification; protection and timing of the primary endpoint; and investigational-product accountability. Define Quality Tolerance Limits (QTLs) and escalation rules, document surveillance outputs (e.g., endpoint missingness, visit window breaches), and show CAPA closure with effectiveness checks. Independence of adjudication committees and DSMBs, and firewalls around unblinded data, are common inspection themes.

Computerised system validation and data integrity. Validate EDC, eCOA, IxRS, safety databases, and data interfaces proportionately to risk. Demonstrate user requirements, testing, role-based access, audit trails, and change control. Maintain ALCOA(+) from source to database: attributable, legible, contemporaneous, original, accurate, complete, consistent, enduring, available. Certified copy processes must be documented and sampled.

TMF story and retrieval speed. UK inspections rely heavily on how quickly and coherently teams can retrieve definitive evidence from the TMF. Maintain a living inspector’s index; cross-reference IRAS/REC/MHRA correspondence to TMF locations; and keep storyboards for complex elements—adaptive rules, decentralised procedures, placebo/sham logistics, rescue algorithms. Discordant versions (protocol vs. ICF vs. SAP), missing approvals, and late filing are frequent findings that are preventable with disciplined governance.

Data protection and participant rights. Inspectors will test whether consent materials and operational documents reflect UK-GDPR expectations: lawful basis, minimisation, retention periods, rights of access/erasure limits in research contexts, international transfers, and security controls. Contracts should unambiguously define controller/processor roles and audit rights. Training records must show that frontline staff understand privacy obligations, not just that SOPs exist.

Interface with global authorities. Although MHRA is the UK regulator, referencing alignment with other authorities signals a mature quality system. Keep accessible cross-links to relevant guidance from the FDA, EMA, ICH, the WHO, Japan’s PMDA, and Australia’s TGA in your decision memos and TMF crosswalk.

Implementation Toolkit: Templates, Cadence, and an Audit-Ready Checklist

Template set. Assemble UK-ready templates: protocol and SAP shells with estimand language; Investigator’s Brochure and safety-management plan; IRAS application checklist; participant information sheet/consent templates readable at appropriate literacy levels; privacy notices aligned to UK-GDPR; monitoring and data-review plans anchored to CtQ and QTLs; DSMB and endpoint-adjudication charters; pharmacy manual and IMP accountability tools; urgent-safety-measure SOP; and a TMF plan that maps IRAS/MHRA/REC artifacts to your index.

Governance cadence. Run weekly cross-functional operations meetings that are action-focused (blockers, not status recitals). Hold monthly risk reviews to refresh the register and test QTLs, and quarterly quality reviews to inspect systemic signals. Keep minutes concise and file them contemporaneously. Establish single points of contact for medical, operations, and systems queries to speed site support.

Training rhythm. Deliver role-specific training: investigators on consent, eligibility, and safety reporting; coordinators on eSystems and audit trails; pharmacy staff on IMP handling and temperature excursions; raters on blinded assessment; CRO teams on UK-specific documentation and IRAS workflows. Use micro-learning refreshers and scenario drills (e.g., emergency unblinding, urgent safety measures, re-consent after substantial amendments).

Change-control integration. Tie UK substantial amendments to your global amendment engine. When altering doses, endpoints, or visit schedules, update all downstream assets—ICFs/translations, site training records, eCOA schedules, randomisation/IxRS logic, vendor DTS—and pre-stage re-consent so implementation is synchronous. Maintain decision memos that cite ICH, MHRA, and other primary sources for traceability.

Safety synchronisation. Engineer one safety narrative across regions: consistent causality, expectedness, MedDRA coding, and timelines. Reconcile DSUR content with periodic reports filed elsewhere. When DSMB recommendations affect risk language, ensure the IB and consent are updated promptly and that evidence of communication and training is filed.

Rapid-use UK checklist (actionable excerpt).

• CTA dossier built and cross-checked (protocol/IB/IMPD/consent coherent); Combined Review route selected with owners for RFIs.
• REC approvals and site capacity confirmed; Clinical Trial Agreements executed; pharmacy and temperature monitoring verified; objective green-light criteria satisfied.
• CtQ factors declared with QTLs; monitoring and data-review plans reflect risk; central analytics and targeted on-site checks integrated.
• Safety pipeline live: SUSAR expedited reporting, DSUR cadence, DSMB/CEC charters with firewalls; urgent-safety-measure SOP tested.
• Computerised systems validated; role-based access and change control documented; reconciliation calendars (EDC↔safety↔labs↔imaging) running.
• Consent materials readable, current, and version-controlled; re-consent triggers defined; privacy notices align to UK-GDPR lawful bases and transfers.
• Transparent registration and lay results plan set; CSR timing aligned to public reporting; postings filed to TMF.
• Substantial amendments synchronised globally; ICFs/translations, training, and vendor specs updated in lockstep; TMF shows version lineage.
• Inspector’s index prepared; IRAS and MHRA/REC correspondence cross-referenced; storyboards for complex design or DCT elements ready.
• Cross-links to FDA, EMA, ICH, WHO, PMDA, and TGA captured in decision memos to evidence harmonised thinking.

When sponsors, CROs, and investigators execute these steps with discipline, UK trials progress from authorisation to close-out with fewer surprises. The payoff is twofold: participants are protected by proportionate, patient-centred controls, and the evidence package remains coherent across regions—ready for efficient review in the UK and readily translatable to dossiers before the FDA, EMA, PMDA, TGA, and WHO-aligned authorities.