Data generated through NGS may support clinical decisions for patient care, patient eligibility for a clinical study, patients stratification and/or other research activities. This set of considerations is critical to ensure quality while using NGS service providers in clinical drug development. Requirements were already established in ICH and various HA regulations and ISO standards, but can be complemented by recommendations issued by medical genetics societies. The data clinical quality considerations are detailed below and summarized at the end of this section (Fig. 2).
Genomic Data
To protect patient rights and wellbeing it is critical that the integrity of genomic data and derived insights provided to HCPs is maintained [9, 12, 16]. NGS-based tests are technically complex in that they have an end-to-end workflow consisting of multiple systems from sample processing and sequencing to a data analysis bioinformatics pipeline for reporting. This workflow includes multiple steps for ingestion of data, data generation, data transfer and ultimately data retention. Throughout this sample and data lifecycle ALCOA + principles (Accurate, Legible, Complete, Original, Attributable, Contemporaneous, Complete and Enduring) [17] should be considered to ensure the integrity of the data reported to the pharmaceutical sponsor, HCPs and HAs.
In summary, when genomic data are intended for submission to a HA or to be provided to a HCP, pharmaceutical sponsors should ensure genomic laboratories have:
-
A defined and fit-for-purpose quality management system (QMS) and are accredited, if applicable, to ensure full NGS-based test workflow (from sample collection kit preparation to DNA extraction through to results interpretation) [9, 18,19,20]
-
Well-defined and validated sample tracking processes to provide traceability of results to the patient [18,19,20,21]
-
Processes in place to ensure scientifically justified analysis parameters are used and documented [18, 20]
-
NGS Platforms, including both Laboratory and Computational Methods, that are validated for compliance against quality metrics [12, 15, 18,19,20]
-
Computerised system validation and/or qualification policies, processes, controls and monitoring in place to ensure systems are fit for their intended use [9, 12, 15, 18]
-
Audit trails implemented (as required) and assessed as fit for purpose and regularly reviewed [9, 12, 15]
-
A data workflow, including data processing and analysis procedures clearly documented and followed. Raw sequencing requirements, post-sequencing bioinformatics pipeline updates and data management practices should be considered [9, 12, 15, 19]
-
Adequate procedures or monitoring controls in place to demonstrate oversight and resolution of data integrity risks [9, 12, 15]
-
Data archival procedures in place to ensure reproducibility of analyses [9, 12, 15]
-
Use well defined or industry standard biomarker definitions, if available [19, 20, 22,23,24]
-
Controls in place where test limitations exist (e.g., false positive/false negative rates of algorithms used), the impact on data is communicated to HCP and patients in a manner that supports clinical use of data [19, 25, 26]
-
The ability to use widely accepted standard open file formats to support future use of the data [19, 20, 27]
-
Controls in place to assess and address data standard requirements for data recipients. For example pharmaceutical sponsors may have specific requirements to facilitate useability. Additionally genomic data intended to be submitted to HA should comply with the applicable data standards, such as CDISC (Clinical Data Interchange Standards Consortium)
Computerised Systems Used for NGS Activities
In clinical drug development, all GxP computerised systems (e.g., laboratory instruments, laboratory information management systems (LIMS), sample management systems, IT development tools) must be qualified or validated for their intended use [9, 12, 15]. This includes risk-based validation or qualification of the software, components and infrastructure that comprises the system or is used in the post sequencing analysis bioinformatics pipeline. Hence, these considerations would apply to NGS service providers like any other type of service provider used in a clinical trial.
NGS Validation
Similarly, analytical test methods used in clinical drug development must also be validated for their intended use. Such analytical validation requires the careful prospective end-to-end study of appropriately justified method parameters and performance characteristics (e.g., accuracy, precision, limits of detection, specificity, robustness) from sampling through to data reporting. In order to demonstrate safety and effectiveness, developers of NGS-based tests must provide assurance of accurate and reliable detection of clinically relevant variants through careful design, development and analytical validation of such techniques [12, 13, 19, 20, 26].
NGS tests can be quite complex, involving many elements to achieve proper collection, and handling of clinical and laboratory samples, selection of adequate sampling materials, accurate laboratory analysis, and correct data processing through use of appropriate bioinformatics pipelines. Therefore, robust validation policies, processes, controls and monitoring must be in place to ensure NGS-based tests, including individual test elements and methods, that directly impact on the reliability of data are fit for purpose throughout the data processing and testing life cycle [9, 12, 13, 19, 20, 26].
In order to aid in the development of such robust controls, HA recommendations are available that outline key considerations for test design, development and validation [28]; Analytical standards for test development and performance characteristics for test validation (thresholds/definitions) must be well defined or based where possible on HA or medical Genetics Society standards [19] Additionally, processes must be in place to monitor ongoing performance characteristics (quality metrics) and ongoing validity of methods used for reproducible analytical results and classification of variants. [26, 28]
Data Use & Privacy
Some NGS applications require the capture of a high volume of genomic data that is processed to generate valuable clinical insights [1,2,3,4,5,6]. Patient rights and privacy of personal data, including information collected must therefore be protected [19, 26, 29, 30]. All data collected and data created as a result of sample processing must be safeguarded, and its use must be in compliance with applicable national legislation such as Regulations on Management of Human Genetic Resources of the People's Republic of China, as well as regional data privacy legislation such as General Data Protection Regulation (GDPR) in the EU [29] and Health Insurance Portability and Accountability Act (HIPAA) in the United States [30].
While manufacturers are responsible for privacy controls for tests they develop and distribute, pharmaceutical sponsors must ensure NGS data use is disclosed and privacy risks are considered and addressed in clinical trial consents and commercial agreements [9, 26, 31]. When tests are co-developed data handling agreements need to be in place to address roles and responsibilities as it relates to applicable laws such as GDPR and HIPAA [29, 30]. Overall, pharmaceutical sponsors should establish a data privacy process to ensure that local privacy requirements (e.g., for recognizing and addressing data subject requests and withdrawal of consent, if applicable) are addressed. Finally, genomic sequencing should be performed within the scope of the protocol specifications, subject consent and contractual agreements [9, 26, 31, 32].
Manufacturers and pharmaceutical sponsors are responsible for ensuring genomic data is stored in a secure manner. Controls should be in place as required by applicable local laws to address security requirements, and access to data should be limited, not only to protect the integrity of the results, but also the privacy of the patients. These controls should be routinely reviewed against applicable local laws and security tests should be performed to assess weakness in security measures and to identify new threats [12, 13, 29, 30].
The return of genomic individual research results [33] and their potential reinterpretation [34] fall beyond the scope of clinical quality, hence were out of scope for this review. Processes that comply with applicable local and global laws and regulations are usually managed by data privacy and legal teams of pharmaceutical sponsors.