Protocol deviations are a familiar part of clinical research, yet historically there has been little regulatory clarity around their classification and management. Clearer expectations for assessment, categorization, and reporting of these deviations are provided in the U.S. Food and Drug Administration (FDA) draft guidance document, “Protocol Deviations for Clinical Investigations of Drugs, Biological Products, and Devices” (December 2024). There is a particular focus on “important” protocol deviations, defined by FDA as “a subset of protocol deviations that might significantly affect the completeness, accuracy, and/or reliability of the study data or that might significantly affect a subject’s rights, safety, or well-being.”
“Protocol deviations can occur as unintentional departures, often discovered during monitoring visits, such as a missed scheduled appointment or a required assessment that was not completed,” notes Kaushal Shah, PhD, Director and Clinical Associate Professor, Clinical Research Management and Regulatory Science Programs, Arizona State University. “In some situations, a deviation may be intentional for a single participant, although these cases would be rare and carefully justified. For many years, regulatory clarity regarding the classification and management of protocol deviations has been limited.
“Since FDA did not previously offer a definition or a standardized classification system, different organizations managed protocol deviations differently,” states Shah. “Labels included major, minor, critical, or noncritical. These inconsistencies created operational and regulatory risks. Teams struggled to distinguish routine procedural slips from events that significantly threatened safety or compromised data. Investigators lacked clarity on what required prompt escalation, and sponsors found it difficult to compare deviation patterns across sites.”
The December 2024 draft guidance establishes the first structured, agency-wide framework for deviation management. It adopts the ICH E3(R1) definition from the International Council for Harmonization, which describes a protocol deviation as any change, divergence, or departure from the procedures, requirements, or study design described in the protocol. The goal is to promote a clear, risk-based approach.
“The new draft guidance is very helpful—indeed, many quality professionals have long advocated for this type of structure for categorizing and reporting protocol deviations,” according to Shah. “Our ACRP 2026 session, ‘Oops in the Ops: Catching, Categorizing, and Reporting Protocol Deviations,’ will translate this regulatory framework into clear and actionable practices for clinical research professionals.”
Oops in the Ops: Catching, Categorizing, and Reporting Protocol Deviations
Join Kaushal, Glenda Guest, and Meghana Rao at ACRP 2026 [April 24-27; Orlando, Fla.] as they evaluate deviations using a risk-based approach and strengthen communication with institutional review boards and sponsors. View complete schedule.
“Clinical teams are now expected to demonstrate stronger inspection readiness, consistent deviation classification, and well-reasoned documentation,” says Shah. “By applying the new structure and definitions, clinical research professionals will be able to strengthen deviation categorization and reduce operational risk across diverse study environments.
“Centralized monitoring, artificial intelligence, and machine learning can detect emerging deviation patterns and help anticipate where problems may arise,” concludes Shah. “These tools enable a move from reactive correction to proactive quality management, which will be helpful across the clinical trial ecosystem as we work to protect participants and uphold the scientific integrity of our clinical trials.”
Edited by Jill Dawson
