EU Clinical Trial Regulation 536/2014: The CTIS Submission Workflow, Assessment Clocks, and RFI Deadlines

At a glance

• The EU Clinical Trials Regulation (CTR) 536/2014 is not just a legal summary to read; it is an operational workflow you execute through one portal, on hard clocks, with deadlines that can make your application lapse.
• One dossier goes to all Member States through a single EU entry point (the portal underpinning CTIS). There is no per-country submission anymore.
• Assessment splits into Part I (scientific, led by one Reporting Member State) and Part II (national and ethics aspects, assessed by each Member State for its own territory), resolved in one single decision.
• The clock is real: validation within 10 days, a Part I assessment delivered within 45 days of the validation date, and a Request for Information (RFI) that you must answer inside the deadline set by the authority or your application is deemed to have lapsed.
• CTR sets the legal and procedural frame; it does not replace Good Clinical Practice. ICH E6(R3) still governs how the trial is conducted, and the sponsor retains overall responsibility even when work is delegated.
• Expedited safety reporting timelines are tight (7 days for fatal/life-threatening SUSARs, 15 days otherwise), and CTR centralises that reporting to the EMA database.

This guide treats CTR 536/2014 the way a clinical-ops or regulatory-affairs reader actually meets it: as a sequence of portal actions and countdowns. If your timeline assumptions are wrong, you do not get a polite reminder; under several CTR articles the application is “deemed to have lapsed.”

What CTR 536/2014 actually is, and why it reads like a process, not a statute

Regulation (EU) No 536/2014 governs clinical trials on medicinal products for human use across the EU and EEA, and it repealed the older Clinical Trials Directive 2001/20/EC. Two structural facts drive everything downstream. First, it is a Regulation, so its provisions are directly applicable in all Member States rather than transposed into 27 different national laws. Second, it routes the entire authorisation process through a single portal.

A note on the dates you will see everywhere (CTR became applicable on 31 January 2022, CTIS became the mandatory route on 31 January 2023, and the transition window closed on 31 January 2025): these operational milestones are widely cited by the EMA and the Commission, and you should plan against them, but they were fixed by the portal-readiness mechanism rather than printed as calendar dates in the Regulation itself. What the Regulation text does state is the trigger: under its entry-into-force provision, the Regulation applies six months after publication of the notice confirming the EU portal and database are functional. The Regulation also provides a transitional path: trials submitted under Directive 2001/20/EC before the application date continued to be governed by that Directive for up to three years from that date. Practically, that three-year derogation is what defined the transition deadline you have heard about.

Directive 2001/20/EC versus Regulation 536/2014: what changed for you

Dimension	Directive 2001/20/EC (old)	Regulation 536/2014 (CTR)
Legal form	Directive, transposed into national law	Regulation, directly applicable in all Member States
Submission	Separate national submissions	One dossier through a single EU entry point (Article 80)
Assessment structure	Parallel national reviews	Part I (scientific, one Reporting Member State) + Part II (national/ethics)
Decision	Per-country authorisations	One single decision per Member State, on a coordinated clock
Safety reporting destination	Competent authorities and Ethics Committees in each Member State (per CT-3)	Centralised reporting to the EMA database (Article 42)
Missing a response deadline	National variation	Application “deemed to have lapsed” by Regulation

The Regulation moved the burden from “file 12 times” to “file once and manage one shared clock.” That is liberating and unforgiving in equal measure.

CTIS: the single entry point

Article 80 of CTR 536/2014 requires the Agency, with the Member States and the Commission, to set up and maintain a portal at Union level that serves as the single entry point for submitting data and information relating to clinical trials. This is the legal backbone of CTIS (the Clinical Trials Information System). The practical consequence: you prepare one application dossier and submit it to all the Member States concerned at once. There is no longer a compliant way to lodge a separate national package as the primary route.

CTIS is also a transparency system. The Regulation pairs the portal with an EU database, and information about trials flows into the public record through that system. Treat anything you enter as potentially publishable, and structure your dossier and amendments with that in mind.

The assessment as a workflow: validation, Part I, Part II, single decision

Think of authorisation as four moves.

1. Pick the Reporting Member State (RMS). For multinational trials the sponsor proposes one Member State as RMS; if more than one is willing (or none is), the Member States concerned agree on the RMS. The RMS leads Part I.
2. Validation. Within 10 days from submission, the RMS validates the dossier: whether the trial falls within the scope of the Regulation and whether the dossier is complete per Annex I. The date the sponsor is notified is the validation date, and the entire downstream clock counts from it. (If you are not notified in time, the validation date defaults to the last day of the relevant period.)
3. Part I assessment, the scientific and product file led by the RMS. Article 6 makes the RMS assess aspects such as whether the trial is low-intervention (where claimed), the anticipated therapeutic and public-health benefits, and the risk and inconvenience to subjects. The RMS submits the final Part I assessment report and its conclusion to the sponsor and the other Member States within 45 days from the validation date.
4. Part II assessment, the national and ethics aspects. Under Article 7, each Member State concerned assesses, for its own territory, aspects such as compliance with informed-consent requirements and arrangements for compensating subjects and investigators. Each Member State completes its Part II assessment within 45 days from the validation date.

The two parts are then resolved into one outcome. Under Article 8, each Member State notifies the sponsor of its decision by way of one single decision. A Member State may still refuse authorisation if it disagrees with the RMS’s Part I conclusion on specified grounds, finds Part II aspects not complied with, or where an ethics committee has issued a negative opinion valid for that Member State.

The assessment clock and RFI mechanics

This is where sponsors most often misjudge their timeline. The clock does not simply run from submission to decision; it has a defined internal structure and a stop mechanism.

For multinational trials, the Part I assessment runs in three phases counted from the validation date: an initial assessment phase performed by the RMS within 26 days, a coordinated review phase performed within 12 days from the end of the initial phase, and a consolidation phase performed by the RMS within 7 days from the end of the coordinated review.

The pause comes from the Request for Information. Between the validation date and the reporting date, only the RMS may request additional information from the sponsor on Part I aspects. To obtain and review that information, the RMS may extend the Part I period by a maximum of 31 days. You, the sponsor, must submit the requested additional information within the period the RMS sets, which cannot exceed 12 days from receipt of the request. The hard edge: if the sponsor does not provide the additional information within that set period, the application is deemed to have lapsed in all Member States concerned.

Part II has a parallel mechanism. Each Member State concerned may request additional information on Part II aspects only within its assessment window, may extend that window by a maximum of 31 days to obtain and review the response, and the sponsor again has no more than 12 days from receipt to respond. If the sponsor misses that window, the application is deemed to have lapsed in that Member State.

Phase / event	Default day-count (multinational)	Clock behaviour
Validation	Within 10 days of submission	Sets the validation date; all later counts run from it
Part I report to sponsor	Within 45 days of validation date	Internal phases: 26 + 12 + 7 days
Part II completion (each MS)	Within 45 days of validation date	Assessed per territory
RFI response window	No more than 12 days from receipt of request	Authority may extend its own period by up to 31 days to review
Missing the RFI window	Application “deemed to have lapsed”	Part I: in all MS; Part II: in that MS

Confirm the exact day-counts against the current Annexes and any Member State guidance before you commit them to a Gantt chart, since some counts differ for substantial modifications and for the addition of further Member States.

Where CTR sits next to ICH E6(R3) GCP

A common misreading is that CTR replaced GCP. It did not. CTR sets the legal and procedural frame for authorisation, conduct oversight, and reporting; Good Clinical Practice still governs how you actually run the trial. The current GCP standard, ICH E6(R3), keeps the sponsor squarely accountable.

Two of the GCP principles do load-bearing work here. ICH E6(R3) Principle 1.1 states that the rights, safety and well-being of participants are the most important considerations and should prevail over the interests of science and society. And on delegation, ICH E6(R3) Principle 10.1 provides that the sponsor may transfer (and the investigator may delegate) tasks, duties or functions, but they retain overall responsibility for their respective activities; Principle 10.2 adds that where activities have been transferred or delegated to service providers, responsibility for the conduct of the trial, including the quality and integrity of the trial data, resides with the sponsor or investigator. In other words, outsourcing CTIS work to a CRO does not move the accountability. A CTIS submission tool or a CRO can enable a compliant submission, but the sponsor stays responsible.

This is the right place to flag a boundary the brief calls out: this guide covers the EU/EEA CTIS process. The UK MHRA route diverged after Brexit and is out of scope here; do not assume the CTIS clocks map onto a UK submission.

Safety reporting under CTR

Expedited reporting timelines under CTR are unforgiving and worth memorising. Article 42 of CTR 536/2014 sets the SUSAR reporting periods by seriousness: for fatal or life-threatening suspected unexpected serious adverse reactions, as soon as possible and in any event no later than 7 days after the sponsor became aware; for non-fatal, non-life-threatening SUSARs, no later than 15 days. The Regulation also requires annual safety reporting by the sponsor to the Agency for each investigational medicinal product.

Here a genuine tension is worth naming rather than smoothing over. The destination of SUSAR reporting changed. CT-3, the EudraLex guidance built on Directive 2001/20/EC, describes the sponsor reporting fatal or life-threatening SUSARs as soon as possible and no later than 7 days to the competent authorities in the Member States concerned and to the Ethics Committee, with other SUSARs within 15 days. CTR Article 42 keeps the 7-day and 15-day timelines but routes reporting to the EMA’s central database rather than to each national authority and ethics committee. The day-counts align; the recipient and mechanism do not. CT-3 remains a useful operational reference for verification and presentation of reports, but where it points to national-authority destinations rooted in the Directive, the CTR’s centralised route governs. We flag this divergence rather than reconcile it: confirm your reporting destinations against current CTR-era guidance.

CT-3 also describes the follow-up structure you should plan around: for fatal or life-threatening cases reported on minimum information, a completed report based on the initial information follows within an additional 8 days, with further follow-up as needed.

Where teams get it wrong

• Treating validation as a formality. The validation date is the anchor for every downstream deadline. Teams that do not watch for it lose visibility of when their 45-day Part I clock actually started.
• Under-resourcing RFI turnaround. The response window is short (no more than 12 days from receipt), and missing it does not mean a delay; it means the application is deemed to have lapsed. Pre-stage your subject-matter experts before you submit, not after the RFI arrives.
• Assuming Part II is uniform. Part II is assessed by each Member State for its own territory, so informed-consent and compensation expectations can diverge across countries even on one shared dossier.
• Believing CTR replaced GCP. It did not. ICH E6(R3) still governs conduct, and the sponsor retains overall responsibility even when a CRO runs the portal work.
• Reusing old SUSAR destinations. The 7/15-day clocks survived from the Directive era, but the centralised EMA destination did not exist under CT-3. Verify recipients against current CTR guidance.

The sponsor readiness checklist for a CTR/CTIS submission

• Confirm the trial falls within the scope of CTR 536/2014 and assemble one Annex I-complete dossier for all Member States concerned.
• Decide and align your proposed Reporting Member State before submission.
• Map your clock from the expected validation date: 10-day validation, 45-day Part I, 45-day Part II, single decision.
• Pre-stage RFI responders so you can answer within the authority’s window (no more than 12 days from receipt) without scrambling.
• Plan Part II for national divergence: informed consent, subject compensation, and ethics-committee expectations per Member State.
• Stand up your safety-reporting workflow to the EMA database, with the 7-day and 15-day SUSAR clocks and the annual safety report built in.
• Treat CTIS entries as potentially public, and keep GCP conduct controls (ICH E6(R3)) and sponsor oversight in place regardless of what is delegated.

For deeper dives, see the sibling explainers on this site: the ICH E6(R3) GCP overview, the SUSAR and expedited safety-reporting guide, and the TMF and essential-documents reference.

Sources

• Regulation (EU) No 536/2014 on Clinical Trials, version 2014 — https://eur-lex.europa.eu/eli/reg/2014/536/oj
• ICH E6(R3) Good Clinical Practice, version r3 — https://www.ich.org/page/efficacy-guidelines
• EudraLex Vol 10 CT-3 — Detailed guidance on collection, verification and presentation of adverse event/reaction reports from clinical trials (2011/C 172/01) — version 2011 — https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:52011XC0611(01)