HGR Gate Before First-Patient-In: A Sponsor Checklist That Survives Global Protocols

Life Sciences & Healthcare Blog · Legal cluster hub

If your global protocol assumes free secondary genomics and offshore bioinformatics, China will not adapt later. Human genetic resource approval must be gated before first-patient-in. This article provides sponsors with a statutory and operational checklist for clearing China's human genetic resources requirements ahead of the first patient enrolled at any China site, covering regulatory classification, biosecurity compliance, sample export and cross-border data provision.

The regulatory landscape for human genetic resources#

China regulates human genetic resources, including human genes, genomes, organs, tissues, cells and related data, under a layered framework that combines the Biosecurity Law with the Regulations on the Administration of Human Genetic Resources. The regime applies whenever a clinical trial conducted in China collects, stores, uses or exports biological samples and associated data from Chinese participants, and it applies with particular force to international collaborative clinical trials where a foreign sponsor is involved. The consequence of non-compliance is not a paperwork delay; it is a suspension of the trial, a penalty on the responsible Chinese entity, and in serious cases a prohibition on the use of the samples and data already collected.

The threshold question for every sponsor is whether its trial triggers the approval or the filing track. International collaborative clinical trials that involve the collection or use of human genetic resources generally require approval from the Ministry of Science and Technology through the Human Genetic Resources Administration Office. Certain lower-risk activities, such as clinical research conducted entirely by a Chinese entity with no outbound transfer of samples or data, may fall under the filing or notification track. The distinction is fact-specific, and getting it wrong at the planning stage is the most common cause of FPI delays.

Statutory basis#

Biosecurity Law#

The PRC Biosecurity Law, effective from April 2021, elevates human genetic resources to a matter of national biosecurity. Articles 53 through 56 establish state ownership of human genetic resources, require the state to support research while protecting the resources, and provide the legal foundation for strict licensing and approval of their use and export. The Biosecurity Law also creates the linkage between genetic resource protection and national security review, which matters for foreign sponsors because the characterization of the resource as a national security interest affects how regulators interpret any outbound provision.

"Article 53 of the PRC Biosecurity Law: The state implements a licensing system for the collection, preservation, utilization and provision of human genetic resources to outside parties, and for the outbound provision of human genetic resource materials and related information."

Human Genetic Resources Regulations#

The Regulations on the Administration of Human Genetic Resources, revised in 2023, provide the operational detail. Article 7 confirms that international collaborative clinical trials involving human genetic resources must obtain approval before initiation. Article 11 requires that the international cooperative project identify a Chinese party that is responsible for the legal and regulatory compliance of the project, and that the Chinese party be a legal person or other organization registered in China. Article 21 restricts the outbound provision of human genetic resource materials, requiring approval and compliance with the conditions of the original approval. Article 28 requires a security review for the provision of human genetic resource information to outside parties where the provision may affect public health, national security or public interest.

Clinical trial and biobank interfaces#

Sponsors should also map the HGR requirements onto the clinical trial regulatory pathway. The NMPA clinical trial application, the ethics committee approval and the HGR approval are separate gates, and a trial cannot begin at a China site until all applicable gates are cleared. In addition, where the trial involves a biobank or the long-term storage of residual samples, the storage entity must itself comply with the HGR regime, including the requirement to obtain approval for the preservation of samples beyond the clinical trial itself.

Enforcement context: MOST sanction notices#

The Ministry of Science and Technology has published administrative sanction notices that define the practical consequences of non-compliance. The 2018 sanction notices against several prominent organizations, including AstraZeneca, BGI and Huashan Hospital, involved unauthorized cross-border transfer of genetic data and improper use of samples beyond the approved clinical trial scope. The sanctions included revocation of approvals, restrictions on future filings, and publication of the violations. The cases sent a clear message to the industry: the HGR regime is enforced, the penalties are public, and the consequences extend beyond the individual trial to the organization's ability to conduct future research in China. For a global sponsor, a MOST sanction on a China affiliate is a reputational and operational event that affects every future China program.

The pre-FPI HGR readiness checklist#

The practical deliverable is a step-by-step verification that should be completed no later than ninety days before the planned first-patient-in date. The checklist has five gates.

Gate 1: Confirm foreign entity status and the Chinese responsible entity#

Confirm whether the trial is an international collaborative clinical trial under the HGR regulations, which it will be whenever a foreign sponsor or foreign participant is involved. Identify the Chinese party that will be the responsible entity for the project, verify that it is a legal person registered in China, and confirm its capacity to perform the compliance duties. This is not a formality; the Chinese party carries the regulatory liability and must have the operational ability to control the project.

Gate 2: Map the sample and data flows#

Draw the complete flow diagram: collection site, storage, processing including cloud processing, who can access the samples and data, and what leaves mainland China. The diagram must name every CRO, laboratory, sequencing provider and data processor involved. For each outbound step, identify the legal basis: does it require approval, filing or a security review? This diagram is the master document that drives the entire approval application.

Gate 3: Prepare and submit the approval application#

Prepare the international collaborative clinical trial approval application, including the cooperation agreement between the Chinese and foreign parties, the protocol, the informed consent documents and the sample and data handling plans. The application must describe the intended use of samples precisely, because post-approval expansion of use is a common violation. Submit the application with sufficient lead time, because the review process can take several months.

Gate 4: Obtain sample export and data security clearances#

If the protocol requires the export of samples, obtain the outbound provision approval required by the regulations. If the protocol involves the provision of genetic information to an outside party, assess whether a security review is required and initiate it. For clinical data that includes personal information, complete the PIPL cross-border transfer assessment in parallel, because the data protection and HGR regimes are separate and both must be satisfied.

Gate 5: Freeze vendor outbound practices#

Audit every vendor SOP for silent outbound mirrors: laboratories that automatically upload sequencing data to overseas servers, CROs that sync trial databases to global warehouses, and IT vendors that back up China data abroad. Each of these practices must be identified and brought under control before FPI. The vendor contract should be amended to prohibit any outbound transfer of China site data without written approval, and the technical controls should be verified, not merely promised.

Common compliance failures#

The most common failures observed in practice are the expansion of sample use beyond the approved protocol, the transfer of data through cloud configurations that were not disclosed in the application, and the assumption that a filing track applies when approval is required. Sponsors should also be alert to the use of residual samples from an earlier trial for a new biomarker study; even if the samples were lawfully collected under the earlier approval, the new use may constitute a separate HGR project requiring a new approval. The same logic applies to sequencing data: once the data is used for a purpose beyond the approved scope, the company has created a compliance gap that cannot be closed retroactively.

The operational rule for the sponsor is to treat the HGR gate as a fixed milestone with a hard deadline, not as an item on a generic start-up checklist. The compliance team should begin the HGR assessment at the same time as the protocol development, not after the ethics submission. Delays at the HGR gate are among the most expensive delays in China clinical development, because they occur after the site has been activated, the team has been hired and the global timeline has been committed.

The relationship between the HGR regime and the informed consent process deserves particular attention. The consent form used at the China site must address the collection, storage and future use of samples and data with the specificity required by the HGR regulations. A consent form drafted for a US or EU trial that describes future unspecified research will not satisfy the Chinese requirement that the approved scope of use be defined. Sponsors should prepare a China-specific consent module, in Chinese, that states the intended use of the samples, the duration of storage, the entities that will process the data, and the conditions under which the samples may be used in future research. The consent module must be consistent with the HGR application, because a consent that authorizes more than the approved application creates a documentation mismatch that inspectors will identify. Where the protocol is amended to add a biomarker endpoint or a secondary analysis, the consent and the HGR approval must both be updated; updating only one creates the same mismatch. Finally, sponsors should remember that the HGR obligations do not end when the trial concludes. Residual samples stored in China remain subject to the regime, and any subsequent research use, transfer to a new entity or export requires its own compliance assessment. The data flow diagram prepared before FPI should be updated at close-out to reflect what was actually stored, where it is located and who controls it.

Read next: HGR compliance · Clinical data cross-border · Trial insurance

Part of the life sciences legal cluster · Life sciences blog