Clinical trials generate enormous volumes of documentation requiring signatures—informed consent forms, investigator agreements, protocol amendments, delegation logs, and regulatory submissions. For multi-site trials spanning dozens of locations across multiple countries, coordinating these signatures traditionally meant weeks of delay, courier costs, and administrative burden that slowed enrollment and extended timelines.
Remote online notarization (RON) and electronic signature technologies are transforming this landscape. But clinical research operates under uniquely rigorous regulatory requirements. The FDA’s 21 CFR Part 11, ICH Good Clinical Practice guidelines, and international regulations like the EU’s eIDAS create a complex compliance framework that research organizations must navigate carefully.
This guide examines how pharmaceutical companies, contract research organizations (CROs), and academic research institutions can leverage online notarization while maintaining full regulatory compliance.
The Regulatory Framework for Electronic Records in Clinical Research
Clinical trials operate under multiple overlapping regulatory frameworks governing electronic records and signatures.
FDA 21 CFR Part 11
Title 21 of the Code of Federal Regulations, Part 11 (21 CFR Part 11) establishes the criteria under which the FDA considers electronic records and electronic signatures to be trustworthy, reliable, and equivalent to paper records and handwritten signatures.
Part 11 applies to electronic records that are:
- Created, modified, maintained, archived, retrieved, or transmitted under FDA regulations
- Submitted to the FDA under the Federal Food, Drug, and Cosmetic Act
- Used in place of paper records to meet regulatory requirements
The regulation divides into two main areas:
Subpart B (Electronic Records): Requires validation of systems to ensure accuracy and reliability, secure retention with audit trails capturing creation, modification, and deletion events, and limited access via unique credentials.
Subpart C (Electronic Signatures): Requires electronic signatures to use at least two distinct identification components (such as a user ID and password), be linked to their respective electronic records, and include the printed name of the signer, date, time, and meaning of the signature.
ICH Good Clinical Practice (GCP)
The International Council for Harmonization’s GCP guidelines (ICH E6) establish the international ethical and scientific quality standard for designing, conducting, recording, and reporting clinical trials. ICH GCP has been adopted by regulatory agencies including the FDA, EMA, PMDA (Japan), and Health Canada.
Regarding informed consent, ICH GCP mandates that consent be obtained “by means of a written, signed, and dated informed consent form.” The guidelines explicitly permit electronic signatures: “The informed consent process may involve a physical or an electronic signature and date.”
The recently adopted ICH E6(R3) introduces provisions specifically designed for decentralized clinical trials and technological innovation, including enhanced guidance on electronic informed consent.
ALCOA++ Principles
Data integrity in clinical research is evaluated against the ALCOA++ framework, which stands for:
- Attributable: Data linked to the person who created or modified it
- Legible: Data readable and permanent
- Contemporaneous: Data recorded at the time of the activity
- Original: First recording of data (or certified copy)
- Accurate: Data free from errors, truthful
- Complete: All data present, nothing deleted without documentation
- Consistent: Data follows expected sequence, properly dated and time-stamped
- Enduring: Data stored durably and accessibly
- Available: Data retrievable when needed for monitoring, audits, and inspections
- Traceable: Changes documented with full history reconstructable
Any electronic system used for clinical trial documentation—including RON platforms—must support these principles.
EMA Guidelines (European Union)
The European Medicines Agency’s “Guideline on Computerized Systems and Electronic Data in Clinical Trials” provides detailed expectations for electronic informed consent (eIC). The guideline defines eIC as “the use of any digital media to firstly convey information related to the clinical trial to the trial participant and secondly document informed consent via an electronic device.”
Key EMA requirements include:
- Sponsors must clarify legality and GCP compliance with each country’s ethics committees and national regulatory authorities before implementation
- Alternative methods must be available for participants unable or unwilling to use electronic procedures
- Electronic signature functionality must be proven during system validation
- For open systems where signatories are not known in advance, signatures should meet eIDAS requirements
eIDAS Regulation (EU Electronic Signatures)
The EU Regulation on electronic identification and trust services (eIDAS) establishes three levels of electronic signatures:
Simple Electronic Signature (SES): Basic electronic signature with minimal requirements.
Advanced Electronic Signature (AES): Uniquely linked to the signatory, capable of identifying the signatory, created using data under the signatory’s sole control, and linked to data in a way that detects subsequent changes.
Qualified Electronic Signature (QES): An advanced electronic signature created by a qualified electronic signature creation device, based on a qualified certificate. QES is the legal equivalent of a handwritten signature throughout the EU.
For clinical research in the EU, the required signature level varies by country and document type. Germany and Austria, for example, require QES for informed consent signatures, while the UK permits AES.
Informed Consent: Requirements and Electronic Options
Informed consent is the cornerstone of ethical clinical research. Understanding the regulatory requirements for consent documentation is essential before implementing any electronic solution.
What Informed Consent Must Include
Under FDA regulations (21 CFR 50) and ICH GCP, informed consent documents must include:
- Statement that the study involves research
- Explanation of purposes, expected duration, and procedures
- Description of reasonably foreseeable risks or discomforts
- Description of potential benefits to participant or others
- Disclosure of appropriate alternative procedures or treatments
- Statement describing confidentiality protections
- Explanation of compensation and treatment for injury (for more than minimal risk research)
- Contact information for questions about research and participant rights
- Statement that participation is voluntary
The Consent Process vs. The Consent Document
Regulators distinguish between the informed consent process (the ongoing communication between researcher and participant) and the informed consent form (ICF) that documents consent. Electronic methods can facilitate both, but the regulatory focus differs:
The Process: Must ensure the participant has adequate opportunity to consider participation, can ask questions, and is not subject to coercion or undue influence. This typically requires interaction with qualified study personnel, whether in person or via video.
The Document: Must be signed and dated by the participant (or legally authorized representative), witnessed where required, and maintained in the study records with full audit trail.
FDA Guidance on Electronic Informed Consent
The FDA’s guidance “Use of Electronic Informed Consent in Clinical Investigations” (2016) permits electronic methods for both presenting information and obtaining signatures, provided that:
- The eConsent process provides the same information as paper-based processes
- The participant can access the consent document at any time during the study
- The system captures signatures that comply with applicable regulations
- Adequate safeguards exist to prevent unauthorized access
- The electronic record is retained for the required period
The FDA does not specify particular technologies but requires that electronic signatures comply with 21 CFR Part 11.
Types of Electronic Consent Solutions
Clinical research uses several approaches to electronic consent:
eConsent Platforms: Specialized software designed for clinical trials that presents consent information through multimedia (text, video, audio, interactive quizzes), captures electronic signatures, integrates with electronic data capture (EDC) systems, and maintains Part 11-compliant audit trails.
Electronic Signature Platforms: General-purpose platforms like DocuSign or Adobe Sign configured for Part 11 compliance. These can be used for consent forms and other trial documents.
Remote Online Notarization: RON adds an additional layer of identity verification and witnessing that may be required or beneficial for certain documents or jurisdictions.
Hybrid Approaches: Combining electronic presentation of information with biometric “signing on glass” (capturing handwritten signatures on electronic devices) or wet-ink signatures that are subsequently scanned.
When RON Applies to Clinical Research
Not all clinical trial documents require notarization. Understanding which documents benefit from RON helps organizations deploy the technology appropriately.
Documents That May Require or Benefit from Notarization
Informed Consent Forms: While FDA regulations do not require notarization of consent forms, some sponsors, IRBs, or international regulations may require or prefer notarized consent for certain studies or populations.
Investigator Agreements: Agreements between sponsors and principal investigators regarding study conduct, often requiring notarization for legal enforceability.
Financial Disclosure Forms: FDA Form 3454 and 3455 require investigators to disclose financial interests. Some sponsors require notarized submissions.
Site Contracts and Agreements: Clinical trial agreements between sponsors and research sites may require notarization depending on jurisdiction and organization policy.
Regulatory Submissions: Certain regulatory submissions to the FDA or other agencies may require notarized statements or declarations.
Legally Authorized Representative Documentation: When participants cannot consent for themselves, documentation of representative authority may require notarization.
International Document Authentication: Documents used across borders may require notarization as part of apostille or legalization processes.
Documents Typically Using Electronic Signature Without Notarization
Case Report Forms (CRFs): Electronic CRFs use Part 11-compliant electronic signatures without notarization.
Protocol Amendments: Signed electronically within validated systems.
Delegation of Authority Logs: Electronic signatures within CTMS or TMF systems.
Monitoring Visit Reports: Electronic signatures in clinical monitoring systems.
Adverse Event Reports: Electronic safety reporting systems.
21 CFR Part 11 Compliance for RON Platforms
When using RON for clinical trial documents, the platform must meet Part 11 requirements.
System Validation
Part 11 requires that systems be validated to ensure accuracy, reliability, consistent intended performance, and the ability to identify invalid or altered records. For RON platforms, validation should address:
- Identity verification processes
- Signature capture and binding to documents
- Audio/video recording integrity
- Audit trail functionality
- Record retention and retrieval
- System security and access controls
Validation documentation should include:
- User requirements specification
- Functional requirements specification
- Installation qualification (IQ)
- Operational qualification (OQ)
- Performance qualification (PQ)
- Validation summary report
Many RON vendors provide “validation packages” containing template documents that organizations can customize for their specific use cases and procedures.
Audit Trail Requirements
Part 11 mandates secure, computer-generated, time-stamped audit trails that:
- Record the date and time of operator entries and actions
- Capture creation, modification, and deletion of electronic records
- Do not obscure previously recorded information
- Are retained for at least as long as the electronic records they document
- Are available for FDA inspection
For RON platforms, the audit trail should capture:
- Session initiation (date, time, participants)
- Identity verification steps and results
- Document presentation and review
- Signature execution (date, time, signer identification)
- Notary actions and acknowledgments
- Session recording storage location
- Any technical issues or interruptions
Electronic Signature Controls
Part 11 requires that electronic signatures:
- Be unique to one individual and not reused or reassigned
- Include at least two distinct identification components (e.g., user ID and password)
- Be linked to their respective electronic records so that signatures cannot be excised, copied, or transferred
- Include the printed name of the signer, date and time of signature, and meaning of the signature
RON platforms typically satisfy these requirements through:
- Credential analysis (government-issued ID verification)
- Knowledge-based authentication (KBA) questions
- Biometric verification (facial recognition matching ID photo)
- Video recording of the signing session
- Cryptographic binding of signatures to documents
Closed vs. Open Systems
Part 11 distinguishes between closed systems (where access is controlled by the organization responsible for the records) and open systems (where such control does not exist).
Most RON platforms operate as open systems because participants access them from outside the organization’s controlled environment. Open systems require additional controls including:
- Document encryption
- Digital signatures using accepted standards
- Additional authentication mechanisms
Implementing RON for Multi-Site Clinical Trials
Multi-site trials present unique challenges and opportunities for RON implementation.
Centralized Document Management
RON enables centralized management of documents across all trial sites:
Single Platform: All sites use the same RON platform, ensuring consistency in processes and documentation.
Real-Time Visibility: Sponsors and CROs can monitor document status across all sites in real time.
Standardized Training: Site personnel receive consistent training on RON procedures.
Centralized Audit Trail: All signature activities are captured in a unified audit trail accessible for monitoring and inspection.
Site Qualification Considerations
Before implementing RON at research sites, sponsors should verify:
- Site has adequate internet connectivity and hardware
- Site personnel are trained on the RON platform
- Site’s IRB has approved electronic consent procedures
- Local regulations permit RON for the document types involved
- Site has backup procedures for technology failures
Participant Considerations
Not all trial participants can or should use RON:
Technology Access: Participants need devices capable of video conferencing and internet access. Sites should have devices available for participants who lack them.
Digital Literacy: Older participants or those unfamiliar with technology may struggle with RON. Hybrid approaches or additional support may be necessary.
Accessibility: RON platforms should accommodate participants with disabilities, including those with visual, hearing, or motor impairments.
Participant Preference: Regulations emphasize that electronic methods should not discriminate against those uncomfortable with technology. Paper-based alternatives must remain available.
Enrollment Efficiency Gains
RON can significantly accelerate enrollment timelines:
Reduced Travel: Participants can complete consent remotely, eliminating transportation barriers.
Extended Hours: RON sessions can be scheduled outside traditional business hours.
Geographic Reach: Sites can enroll participants who live far from the physical location.
Faster Turnaround: Documents that previously required courier delivery can be completed in hours rather than days.
Reduced Screen Failures: Better-informed participants (through multimedia consent) may have lower early dropout rates.
International Trial Considerations
Global clinical trials must navigate varying regulations across jurisdictions.
EU Member State Variability
Despite EU harmonization efforts, electronic consent acceptance varies significantly:
Permissive Countries: Austria and the UK have published comprehensive guidance allowing eIC including electronic signatures.
Restrictive Countries: Switzerland forbids electronic informed consent signatures.
Variable Requirements: Germany and Austria require qualified electronic signatures (QES) for consent, while other countries accept advanced electronic signatures (AES).
Before implementing RON for EU trials, sponsors must:
- Clarify legality with each country’s ethics committee and regulatory authority
- Understand country-specific electronic signature requirements
- Ensure the RON platform can meet varying technical requirements
- Consider whether hybrid approaches (electronic information, paper signature) may be necessary in some countries
Cross-Border Document Recognition
Documents executed via RON in one country may need acceptance in another. Considerations include:
Apostille Requirements: For countries party to the Hague Convention, apostille certification may be required for document authentication.
Notarization Standards: Some countries may not recognize remote notarization performed in another jurisdiction.
Language Requirements: Consent documents may need translation, and some countries require consent in the participant’s native language.
Data Protection: GDPR and other privacy regulations affect how participant data (including video recordings of RON sessions) can be stored and transferred.
Country-Specific Regulatory Guidance
Major regulatory agencies have provided varying guidance:
FDA (United States): Flexible approach permitting electronic signatures compliant with Part 11. Draft guidance on decentralized trials encourages use of digital technologies.
EMA (European Union): Guideline on computerised systems provides framework for eIC but defers to national requirements for signature validity.
MHRA (United Kingdom): Generally permissive of electronic consent with appropriate controls.
Health Canada: Permits electronic signatures with appropriate validation and security measures.
PMDA (Japan): Has issued guidance on remote consent processes, particularly following COVID-19.
NMPA (China): Electronic consent permitted with specific requirements for participant verification.
Practical Approaches for Global Trials
Given regulatory variability, sponsors often adopt tiered approaches:
Tier 1 (Full RON): Countries with clear regulatory acceptance and RON availability use full electronic consent with remote notarization where required.
Tier 2 (Electronic Signature): Countries permitting electronic signatures but not RON use eConsent platforms with Part 11-compliant signatures.
Tier 3 (Hybrid): Countries with unclear or restrictive regulations use electronic presentation of information with paper-based signature collection.
Tier 4 (Traditional): Countries requiring wet-ink signatures use traditional paper-based consent.
This tiered approach allows maximum efficiency where regulations permit while maintaining compliance globally.
Audit Trail and Data Integrity Considerations
Clinical trial data integrity depends on robust audit trails that satisfy ALCOA++ requirements.
What the Audit Trail Must Capture
For RON sessions involving clinical trial documents, the audit trail should record:
Session Information:
- Date and time of session initiation and completion
- Platform and version used
- Session identification number
- Geographic location of participants (where required)
Identity Verification:
- Methods used (credential analysis, KBA, biometric)
- Results of each verification step
- Government ID type and number (where appropriate)
- Verification failures or anomalies
Document Handling:
- Document identification and version
- Presentation to signer (timestamp)
- Pages viewed and time spent
- Any comprehension checks or quizzes completed
Signature Execution:
- Exact timestamp of each signature
- Signer identification
- Meaning of signature (consent, acknowledgment, etc.)
- Notary identification and commission information
Session Recording:
- Storage location of audio/video recording
- Duration and file size
- Encryption and access controls
Audit Trail Review
FDA and EMA expectations include risk-based, ongoing review of audit trails. For RON-based consent, reviews should verify:
- Identity verification was completed successfully
- Signatures were captured with proper timestamps
- No unauthorized modifications occurred
- Records are complete and consistent
- Any anomalies were appropriately addressed
Record Retention
Clinical trial records, including consent documentation, must be retained for specified periods:
- FDA requires retention until at least 2 years after marketing application approval or investigation discontinuation
- ICH GCP requires essential documents be retained for periods specified by applicable regulatory requirements
- Some regulations require 15-25 years depending on product type and indication
RON platforms must support long-term retention of:
- Signed documents in non-proprietary formats
- Audio/video recordings
- Complete audit trails
- System validation documentation
Organizations should verify that RON vendors can guarantee accessibility of records for required retention periods, including provisions for data migration if the vendor discontinues service.
Integration with Clinical Trial Systems
RON is most effective when integrated with broader clinical trial technology infrastructure.
Electronic Data Capture (EDC) Integration
Modern clinical trials use EDC systems to capture and manage study data. RON integration should enable:
- Automatic population of participant enrollment data from RON to EDC
- Linking consent documentation to participant records
- Triggering enrollment workflows upon consent completion
- Flagging participants requiring re-consent following protocol amendments
Clinical Trial Management System (CTMS) Integration
CTMS platforms track overall trial conduct. Integration with RON can provide:
- Real-time consent status across all sites
- Enrollment metrics and forecasting
- Site performance tracking
- Regulatory compliance dashboards
Electronic Trial Master File (eTMF) Integration
The trial master file contains essential documents for regulatory inspection. RON-executed documents should flow automatically to the eTMF with:
- Proper document classification
- Complete metadata
- Audit trail information
- Version control
Interactive Response Technology (IRT) Integration
For studies with randomization or drug supply management, consent completion may need to trigger IRT processes:
- Participant randomization eligibility
- Study drug assignment
- Kit shipment authorization
Risk Management and Contingency Planning
Implementing RON for clinical trials requires comprehensive risk management.
Technology Failure Scenarios
Organizations should plan for:
Internet Connectivity Loss: Sites need backup procedures for completing consent if connectivity fails mid-session. This may include rescheduling or reverting to paper-based consent.
Platform Outages: Backup RON platforms or alternative signature methods should be available.
Device Failures: Sites should have backup devices for participant use.
Recording Failures: Procedures for handling sessions where recording fails should be documented.
Identity Verification Failures
When identity verification fails:
- Document the failure in the audit trail
- Determine whether verification can be reattempted
- Have procedures for in-person identity verification as backup
- Consider whether the participant can proceed with the study
Regulatory Inspection Readiness
Organizations should be prepared to demonstrate:
- RON platform validation documentation
- Standard operating procedures for RON use
- Training records for site personnel and notaries
- Audit trail accessibility and completeness
- Record retention capabilities
- Integration with other trial systems
Vendor Management
For RON vendors providing services to clinical trials:
- Conduct vendor qualification and ongoing oversight
- Establish quality agreements addressing Part 11 compliance
- Verify data security and privacy practices
- Ensure business continuity and disaster recovery capabilities
- Plan for potential vendor changes or discontinuation
Cost-Benefit Analysis
Implementing RON for clinical trials involves costs that should be weighed against benefits.
Implementation Costs
- Platform licensing or per-transaction fees
- System validation and integration
- Standard operating procedure development
- Site training and qualification
- Ongoing vendor management
Operational Benefits
- Reduced document courier and shipping costs
- Faster enrollment timelines (potentially weeks per site)
- Lower screen failure rates through better-informed participants
- Reduced site burden for document management
- Improved participant diversity through remote access
- Real-time visibility into consent status
Compliance Benefits
- Standardized processes across all sites
- Enhanced audit trail compared to paper
- Reduced consent errors and omissions
- Better documentation for regulatory inspection
- Simplified re-consent for protocol amendments
Strategic Considerations
Beyond direct cost-benefit analysis, consider:
- Competitive advantage in site and participant recruitment
- Alignment with decentralized trial strategies
- Scalability for future trials
- Regulatory trend toward digital acceptance
Best Practices for Implementation
Organizations implementing RON for clinical trials should follow these practices:
Planning Phase
- Regulatory Assessment: Determine which documents require notarization and confirm RON acceptance in all trial jurisdictions.
- Vendor Selection: Evaluate RON platforms for Part 11 compliance, integration capabilities, and geographic coverage.
- Process Design: Develop workflows that integrate RON into existing consent and enrollment processes.
- Documentation: Create SOPs, work instructions, and training materials.
Validation Phase
- Requirements Documentation: Define user and functional requirements specific to clinical trial use.
- Vendor Qualification: Verify vendor’s Part 11 compliance documentation and conduct appropriate due diligence.
- System Validation: Execute IQ/OQ/PQ protocols, documenting results.
- Integration Testing: Verify integration with EDC, CTMS, and eTMF systems.
Deployment Phase
- Site Training: Train site personnel on RON procedures, emphasizing compliance requirements.
- Pilot Testing: Conduct pilot implementation at selected sites before full rollout.
- IRB Approval: Ensure IRBs approve electronic consent procedures including RON.
- Go-Live Support: Provide enhanced support during initial implementation.
Ongoing Operations
- Monitoring: Regularly review audit trails and system performance.
- Periodic Review: Conduct periodic assessment of compliance and effectiveness.
- Change Management: Follow validated system change control procedures.
- Continuous Improvement: Incorporate lessons learned into process improvements.
Frequently Asked Questions
Does FDA require notarization of informed consent forms?
No. FDA regulations do not require notarization of informed consent forms. However, some sponsors, IRBs, or international regulations may require or prefer notarized consent for certain studies or populations. The key FDA requirement is that electronic signatures comply with 21 CFR Part 11.
What is 21 CFR Part 11 and how does it apply to RON?
21 CFR Part 11 is the FDA regulation establishing requirements for electronic records and signatures to be considered equivalent to paper records and handwritten signatures. It requires system validation, audit trails, access controls, and specific electronic signature controls. RON platforms used for clinical trial documents must meet these requirements.
Can RON be used for international clinical trials?
Yes, but with significant caveats. Regulatory acceptance of electronic consent and RON varies by country. Some EU countries require qualified electronic signatures (QES) for consent. Sponsors must verify acceptance in each jurisdiction and may need tiered approaches using different methods in different countries.
What audit trail information must be captured for RON sessions?
The audit trail should capture session information (date, time, participants), identity verification steps and results, document presentation and viewing, signature execution with timestamps, notary actions, and session recording details. All data must support ALCOA++ principles and be retained for required periods.
How does RON integrate with eConsent platforms?
RON and eConsent are complementary technologies. eConsent platforms typically present consent information through multimedia and capture electronic signatures. RON adds identity verification and witnessing capabilities. Some organizations use both—eConsent for routine consent and RON for documents requiring additional authentication or notarization.
What happens if the RON session fails due to technical issues?
Organizations should have documented contingency procedures. Options include rescheduling the RON session, completing identity verification in person, or reverting to paper-based consent. Any failures should be documented in the audit trail, and the participant’s enrollment should not proceed until valid consent is obtained.
How long must RON records be retained for clinical trials?
Records must be retained according to applicable regulations—typically at least 2 years after marketing application approval or investigation discontinuation under FDA rules, though some regulations require 15-25 years. RON platforms must support long-term retention of signed documents, recordings, and audit trails.
Can participants who are not tech-savvy use RON for consent?
Participants who are uncomfortable with technology should not be excluded from trials. Regulations require that alternatives be available. Sites should offer in-person consent options or additional support for participants who struggle with electronic methods. The goal is informed, voluntary consent—not technological gatekeeping.
Conclusion:
Remote online notarization offers significant potential for streamlining clinical trial documentation, particularly for multi-site and decentralized trials. However, clinical research operates under uniquely rigorous regulatory requirements that demand careful implementation.
Success requires:
- Understanding which documents require or benefit from notarization
- Selecting RON platforms that meet FDA 21 CFR Part 11 requirements
- Validating systems and maintaining ALCOA++-compliant audit trails
- Navigating varying international regulations through tiered approaches
- Integrating RON with existing clinical trial technology infrastructure
- Planning for contingencies and maintaining inspection readiness
For pharmaceutical companies, CROs, and research institutions seeking Part 11-compliant remote notarization solutions, platforms like Bluenotary provide the technical infrastructure and audit capabilities that regulated research requires.
