Skip Navigation Links

icon

Transmittal Notice

  1. Explanation of Material Transmitted: NIH Human Research Protection Program (HRPP) policies have been revised to comport with the revised DHHS Common Rule (45 CFR 46) and to reflect the newly consolidated Institutional Review Board (IRB) structure within the NIH Intramural Research Program (IRP). This policy describes the requirements for data and safety monitoring for human subjects research, based on federal regulation and policy, including NIH policy. Upon implementation, this policy fully supersedes SOP 17 Data and Safety Monitoring.
  2. Filing Instructions:
    • Insert: NIH Manual Chapter 3014-203, dated 8/30/2019
    • Implementation Date: 10/26/2020
  3. PLEASE NOTE: For information on:

This policy establishes the requirements for inclusion of a Data and Safety Monitoring Plan (DSMP) in non-exempt human subjects research protocols conducted by the NIH Intramural Research Program (IRP) and the requirements for Institutional Review Board (IRB) review of such DSMPs.

  1. This policy applies to NIH investigators conducting non-exempt human subjects research. 
  2. This policy applies to NIH Institutes and Centers (ICs) that support and manage non-exempt human subjects research conducted by NIH investigators.
  3. This policy applies to the NIH Institutional Review Board when it is the reviewing IRB.
  4. This policy applies to non-NIH investigators when submitting to the NIH IRB as the Reviewing IRB.
  1. All non-exempt human subjects research protocols must include: a data safety monitoring plan (DSMP) that is commensurate with the level of risk of the research to monitor the data collected to ensure the safety of subjects, consistent with regulatory criteria for approval by an IRB at 45 CFR 46.111(a)(6) and 21 CFR 56.111(a)(6), and consistent with NIH policy (e.g., the Policy for Scientific Review of Clinical Protocols Utilizing the NIH Intramural Program  Submission Requirements and Review Criteria).
  2. The DSMP must be described in the protocol submitted to the IRB for review.
    1. For FDA-regulated emergency research for which informed consent is excepted, the requirement at 21 CFR 50.24(a)(7)(iv) specifies the establishment of an independent data monitoring committee to provide oversight over the clinical research.
  3. Institutes and Centers (ICs) are required to ensure a system for appropriate oversight and monitoring of the conduct of clinical trials to ensure the safety of research subjects and the validity and integrity of the data.

D. Definitions

OHSRP has developed a comprehensive glossary of definitions that describe the terms listed below.  The glossary can be found at the following link: NIH IRP HRPP Policy Glossary.

Note: There may be more than one definition per term, so please review terms carefully to make sure they match the terms listed below. Qualified terms are indicated with a parenthetical qualification. When reviewing a definition, be sure that you are reviewing the appropriate definition that links to this policy. To further assist the reader, each term in the glossary cites the relevant policy number(s) indicating where the term is utilized. 

  1. Clinical trial
  2. Data and Safety Monitoring.
  3. Data and Safety Monitoring Board (DSMB)
  4. Data and Safety Monitoring Entity
  5. Data and Safety Monitoring Plan (DSMP)
  6. Medical Monitor (also known as Safety Monitor)
  7. Study Monitor (also known as a Clinical Monitor or Clinical Research Associate)
  8. Sponsor
  9. Stopping rules

E. Responsibilities and Requirements

  1. The PI is responsible for the following:
    1. Providing to the IRB a DSMP for all non-exempt human subject research protocols. The DSMP should be commensurate with the level of risk, nature and complexity of the research, and the population under study.  As applicable, the DSMP should:
      1. Identify the data and safety monitoring entity (e.g., PI, medical monitor or DSMB).
      2. The investigator should also provide the following in the DSMP, commensurate with the level of risk and complexity of the study:
        1. The schedule for reporting to the data and safety monitoring entity;
        2. The frequency of assessments of data or events;
        3. The stopping rules;
        4. Plans for interim and/or futility analyses;
        5. Procedures for communication between the PI, research team members, the study sponsor, the data and safety monitoring entity, the IRB, others at NIH and, as applicable, the coordinating or statistical center, FDA and other study sites.
    2. Ensuring that the DSMP as outlined in the IRB-approved protocol is followed;
    3. Ensuring that required information is promptly provided to the data and safety monitoring entity;
    4. Notifying the data and safety monitoring entity when there are modifications to the protocol that affect the DSMP;
    5. Responding to the data and safety monitoring entity recommendations. Responses may include providing corrections to errors in fact, responses to recommendations, or requests for corrective action plans;
    6. Providing DSMP reports to the IRB at the time of continuing review or sooner if the report meets the requirements for prompt reporting to the IRB as specified in Policy 3014-801 Reporting Research Events.
    7. For FDA-regulated emergency research for which informed consent is excepted, the requirement at 21  CFR 50.24 (a)(7)(iv), the PI must ensure the establishment of an independent data monitoring committee to exercise oversight of the clinical investigation.
    8. Investigators are expected to be familiar and comply with additional NIH requirements (e.g. the Policy for Scientific Review of Clinical Protocols Utilizing the NIH Intramural Program  Submission Requirements and Review Criteria).
  2. The NIH IRB Responsibilities:
    1. The IRB is responsible for reviewing the DSMP to determine whether there are adequate provisions to ensure, to the extent possible, the safety of research subjects and the integrity of the data.  If necessary, the IRB may require changes to secure approval.
    2. The IRB is responsible for reviewing data and safety monitoring reports at the time of continuing review, or sooner if submitted to the IRB (e.g., under Policy 3014-801 Reporting Research Events or protocol reporting requirements) and IRB review is deemed necessary by the IRB Chair, IRBO Director or Director OHSRP in order to determine if the study remains approvable or needs modification.
      1. IRB review of data and safety monitoring reports includes the following:
        1. Review of the findings and, if applicable, review of the investigator’s proposed actions in response to monitoring report findings (e.g., modification of the protocol or consent(s), placing of administrative hold or study closure);
        2. Determining whether any additional changes are needed based on the report. (For example, deciding if the frequency of continuing review is still adequate, requiring modification of the protocol or consent(s), or deciding whether the protocol will be suspended or terminated, based on reported results.) (Policy 3014-204 Levels of IRB Review and Criteria for IRB Approval of Research)
  3. Institute/Center Responsibilities
    1. Institute/Centers (ICs) are responsible for the establishment of Data and Safety Monitoring Entity (DSME) for multi-site clinical trials, or when the protocol contains a DSMP that calls for the use of a DSME, or the DSME is requested by the IRB. Generally, the establishment of a DSME is governed by the IC’s written procedures and NIH policies (e.g., the NIH Policy for Data and Safety Monitoring).
      1. The NIH IC, the FDA, a Sponsor, or an IRB can require that a DSMP identify an independent data and safety monitoring entity (e.g. a medical monitor or a Data and Safety and Monitoring Board).
    2. ICs are responsible for providing adequate resources and staff support to the data and safety monitoring entity and for appointing a medical monitor or members to the DSMB.
      1. Establishment of formal DSMBs must be consistent with written IC procedures and NIH polices (e.g., NIH Policy for Data and Safety Monitoring)
      2. The IC must ensure that conflict of interest requirements are addressed for DSMB members, as applicable.
    3. Supporting PIs to address the data and safety monitoring entity’s recommendations, as applicable.
    4. When NIH is the sponsor, the IC may require post-approval monitoring to review data on a pre-determined basis or randomly.

* If you require a 508 compliant PDF version of a chapter please contact policymanual@nih.gov
Arrow UpBack to Top