What counts as a protocol deviation under ICH E6 Good Clinical Practice, how to tell an important deviation from a minor one, and worked examples by category — eligibility, consent, treatment, assessments, and IP handling.
Updated June 2026 · Educational resource — not a substitute for professional review
How deviations are classified
ICH E6 Good Clinical Practice expects investigators to conduct the trial in compliance with the approved protocol and to document any deviation. The practical question on review is severity: does the deviation touch participant safety, rights, or welfare, or the integrity, reliability, or completeness of the data? If yes, it is important; if no, it is minor. Classify against pre-defined criteria, not case by case, so the trial's deviation log is consistent and auditable.
Eligibility deviations
Important: a participant enrolled who did not meet a key inclusion criterion (e.g. randomized despite an out-of-range lab that the protocol used to define the population) — affects data integrity and possibly safety.
Minor: a non-key screening assessment documented one day late, with the eligibility determination unaffected.
Informed consent deviations
Important: a study procedure performed before consent was obtained, or consent obtained on a superseded (non-current) version of the form — a participant-rights issue, typically reportable to the IRB/IEC promptly.
Minor: a clerical error on the consent form (e.g. a missing initial on a non-essential field) corrected per procedure, with no impact on the participant's understanding or rights.
Treatment & dosing deviations
Important: a dosing error (wrong dose, wrong drug, or a dose given despite a protocol-defined hold criterion), or a prohibited concomitant medication taken during the treatment period — potential safety and data-integrity impact.
Minor: a dose administered a short interval outside the scheduled time with no clinical or pharmacokinetic consequence per the protocol.
Assessment & visit-window deviations
Important: the primary-endpoint assessment missed or performed far outside its window, so the primary data point is unusable.
Minor: a routine vital-sign check a day or two outside the window when it doesn't drive an endpoint or a safety decision.
Investigational product (IP) handling
Important: IP stored outside its required temperature range and dispensed anyway, or an accountability discrepancy that can't be reconciled — quality and potentially safety impact.
Minor: a temporary, documented excursion shown to be within stability data, with no IP dispensed during the excursion.
What to check when reviewing a deviation log
Are deviations classified consistently against pre-defined criteria, not ad hoc?
Are important deviations concentrated in one arm or at one site — a possible source of bias?
Were important deviations reported to the IRB/IEC and sponsor within the required timelines, and are CAPAs documented for recurring ones?
Does the CSR's protocol-deviations summary reconcile with the underlying deviation log?
PUT THIS INTO PRACTICE
TrialScope runs the checks below automatically — findings, severities, and a clear verdict in under 90 seconds, calibrated to your professional role and sharpened by corrections from verified clinical professionals.
Frequently asked questions
What is a protocol deviation in clinical trials?
A protocol deviation is any departure from the IRB/IEC-approved protocol — a procedure done, missed, or performed outside its specified window or method. Under ICH E6 Good Clinical Practice, deviations should be documented, and important deviations should be summarized in the clinical study report.
What is the difference between an important and a minor protocol deviation?
An important (sometimes 'major') deviation is one that affects participant safety, rights, or welfare, or the integrity, completeness, or reliability of the study data — for example an eligibility violation, a consent failure, or a dosing error. A minor deviation, such as a visit a few days outside the window with no data impact, does not meaningfully affect safety or data integrity, though it is still recorded.
What is the difference between a protocol deviation and a violation?
Usage varies by sponsor, but many organizations reserve 'violation' for the subset of deviations that are important — those impacting safety, rights, or data integrity — while 'deviation' is the umbrella term for any departure from the protocol. ICH E6 itself emphasizes documenting deviations and reporting important ones; consistent, pre-defined categories matter more than the label.