From the S.P.I.R.I.T. newsletter: Former FDA BIMO Investigator: What IRBs Can Do to Stay Compliant.
What are the most common IRB deficiencies youโve observed during BIMO inspections?
As a former FDA BIMO Consumer Safety Officer/ BIMO investigator, the most frequent IRB deficiencies observed during inspections often resulting in Form FDA 483 inspectional observations and, in more serious cases, FDA center classifications that may lead to Warning Letters, largely fall into three areas:
- Inadequate documentation of IRB activities
- Failure to follow written procedures, and /or Lack of written procedures
- Deficiencies in informed consent oversight
These deficiencies often raise concerns about whether fundamental human subject protections, such as informed consent, are consistently applied and appropriately documented.
What IRB practices most commonly lead to FDA warning letters?
Practices that most regularly lead to FDA Warning Letters typically reflect systemic failures in IRB governance, documentation, and procedural compliance.
One of the most frequent issues inspectors observe involves inadequate IRB documentation, particularly meeting minutes. Minutes may not clearly document attendance, quorum verification, voting results, or the basis for the boardโs decisions, as required under 21 CFR 56.115. In some cases, IRBs also fail to maintain accurate membership rosters, and including one scientific member or complete records of the materials reviewed during protocol approval.
Another recurring issue involves failures to establish or follow written IRB procedures, particularly those related to the reporting of unanticipated problems, serious adverse events, or investigator noncompliance. These requirements are outlined under 21 CFR 56.108, and when procedures are not clearly defined or consistently followed, it raises concerns about whether the IRB is effectively overseeing the protection of research participants involving in clinical research trials.
Recent enforcement actions reflect these trends. For example, the 2024 FDA Warning Letter issued to the Massachusetts Institute of Technology IRB cited deficiencies related to informed consent review as well as inadequate documentation of IRB activities. Similarly, the 2024 Warning Letter issued to the New York State Psychiatric Institute IRB highlighted failures to follow written procedures for reporting serious adverse events and investigator noncompliance, along with governance issues related to IRB meeting quorum requirements.
Taken together, these examples illustrate that IRB warning letters often stem from systemic weaknesses in documentation practices, procedural compliance, and oversight mechanisms designed to protect human subjects participating in research.
What documentation convinces inspectors that an IRB has appropriately investigated noncompliance or an adverse event?
From an inspection perspective, what convinces inspectors is clear documentation demonstrating that the IRB reviewed the issue, assessed the risk to subjects, and took appropriate action.
Good documentation practices are essential in clinical research. Inspectors typically look for a complete paper trail showing how the issue was identified, reviewed, and addressed by the IRB.
This documentation often includes communications from key stakeholders involved in the research, such as the investigator, sponsor, CRO, or in some cases the study participant. Inspectors expect to see the investigatorโs report of the event or deviation, supporting documentation related to the issue, and the IRBโs evaluation of the information provided.
Equally important is documentation demonstrating how the IRB reviewed and assessed the issue. This includes meeting minutes reflecting the boardโs discussion, the determination made by the IRB, and whether the event was classified as serious or continuing noncompliance or an unanticipated problem involving risks to subjects or others.
Inspectors are also looking for documentation of the actions taken by the IRB. These actions may include corrective measures such as investigator retraining, protocol modifications, enhanced monitoring, suspension of enrollment, or other actions implemented to address the issue. When applicable, the documentation should also demonstrate that the IRB reported the issue to institutional officials and regulatory authorities in accordance with applicable requirements under 21 CFR 56.108(b) and 21 CFR 56.113.
At the end, inspectors expect to see clear IRB oversight, a well-documented review process, and evidence that appropriate corrective actions were implemented to protect research participants and prevent recurrence of the issue.
What oversight practices demonstrate that an IRB is actively holding investigators accountable?
An IRB can demonstrate effective oversight when there is clear evidence that it is actively monitoring investigator compliance and taking appropriate action when issues arise.
One of the key things inspectors look for is how the IRB reviews protocol deviations, safety reports, and other compliance issues. There should be documentation showing that the IRB evaluated the information and determined whether the issue represents serious or continuing noncompliance or an unanticipated problem involving risks to subjects or others.
Another important indicator of oversight is when the IRB requires corrective or preventive actions from investigators. This might include requiring investigators to submit a corrective action plan, complete additional training, revise study procedures, or implement enhanced monitoring. In more serious situations, the IRB may suspend enrollment, place conditions on study approval, or terminate approval of the research, consistent with 21 CFR 56.113.
IRBs can also demonstrate strong oversight by adjusting their level of monitoring when concerns arise. For example, instead of the standard annual continuing review, the IRB may require more frequent review, such as every six months, until the compliance concerns are addressed.
When appropriate, the IRB must also ensure timely reporting to institutional officials and regulatory authorities in order to meet its regulatory obligations under 21 CFR 56.108(b).
All of these oversight activities should be clearly reflected in the IRB meeting minutes and related correspondences, showing the boardโs discussion, review, and decisions. In situations where specialized expertise is needed, such as evaluating a complex safety concern, the IRB should involve individuals with the appropriate expertise as part of the review process.
In addition, if the IRBโs SOPs do not clearly outline how investigator or site noncompliance is handled, the IRB should establish procedures to ensure there is a structured and consistent process for reviewing and addressing noncompliance.
Overall, what inspectors expect to see is clear oversight, documented review, actions taken by the IRB to include but not limited to site placed on hold, additional training, Site Corrective Action and Preventive Action Plan, reporting to regulatory authority if necessary, and follow-up monitoring that demonstrates the IRB is actively holding investigators accountable and protecting the rights, safety, and welfare of research participants.
What elements of informed consent are most often missing from IRB documentation?
Having conducted several IRB inspections during my time as an FDA BIMO investigator, I frequently observed deficiencies related to informed consent documentation and whether all required elements were included and appropriately reviewed by the IRB.
Many of these deficiencies involve missing or incomplete elements required under 21 CFR 50.25. One common issue is the failure to include a clear description of appropriate alternative procedures or treatments that may be advantageous to the subject. Another frequently observed deficiency is the absence of information explaining whether compensation or medical treatment would be available if a research-related injury occurs in studies involving more than minimal risk.
Inspectors also sometimes find that consent forms do not include a statement informing participants that the FDA may inspect study records, which is another required regulatory element.
Another element that may be missing or incomplete is clear contact information for whom participants should reach out to if they have questions about the research, their rights as research participants, or in the event of a research-related injury, as required under 21 CFR 50.25(a)(7).
For applicable clinical trials, inspectors may also observe that the consent form does not include the required ClinicalTrials.gov statement, which informs participants that a description of the clinical trial will be available on ClinicalTrials.gov, as required under 21 CFR 50.25(c).
These types of deficiencies have been cited in enforcement actions for many years. For example, the FDA Warning Letter issued to Staten Island University Hospital IRB in June 2009 cited multiple failures to ensure that informed consent documents contained required regulatory elements under 21 CFR 50.25. More recent enforcement actions, such as the 2024 Warning Letter issued to the Massachusetts Institute of Technology IRB, continue to highlight similar informed consent deficiencies.
Overall, inspectors expect to see that all required elements of informed consent are present, clearly written, and appropriately reviewed and approved by the IRB, ensuring that research participants are fully informed before agreeing to participate in a clinical study.
What internal quality assurance practices can help IRBs identify problems before FDA inspectors do?
From my years of experience , it is important for an IRB to have a robust and effective internal quality assurance and compliance oversight program to ensure that regulatory requirements are consistently met and that potential issues are identified and addressed before an FDA inspection.
One important practice is conducting periodic internal audits of IRB records, including meeting minutes, protocol approvals, informed consent documentation, continuing review files, and IRB membership rosters. These reviews help ensure that documentation requirements under 21 CFR 56 are consistently met, as well as always be in an inspection readiness state.
Institutions may also designate quality assurance personnel who are independent of the study and IRB administrative activities to periodically review IRB operations and documentation. Having an independent reviewer helps ensure an objective evaluation of compliance and can identify potential issues early. In many cases, sponsors do not routinely audit IRBs, so having an internal QA function provides an additional layer of independent oversight of IRB processes and compliance.
Another important practice is implementing routine audits of the IRB program itself, including reviewing compliance with written SOPs, regulatory requirements, and internal processes governing protocol review and oversight.
Many institutions also conduct mock regulatory inspections or internal compliance assessments, which simulate the type of documentation and process review that would occur during an FDA BIMO inspection. These exercises help identify gaps in documentation, procedures, or oversight before they become inspection findings.
Overall, these internal quality assurance measures help IRBs proactively identify compliance issues, strengthen oversight processes, and ensure that the rights, safety, and welfare of research participants remain protected before an FDA inspection occurs.
