Skip to main content
search

March 20, 2025

Health regulatory agencies require pharmaceutical companies to protect study participants’ personal information (PI) within regulatory drug submissions. In addition, pharmaceutical organizations should avoid disclosing company-related secrets and procedures that could help their competitors gain market advantage. The European Medicines Agency (EMA) calls this information Commercially Confidential Information (CCI). Health Canada (HC) calls it Confidential Business Information (CBI). This blog will provide you with best practices for identifying and protecting confidential information in investigational drug submissions.

CCI – Any information contained in the clinical reports submitted by the applicant/MAH [marketing authorisation holder] which is not in the public domain or publicly available and where disclosure may undermine the legitimate economic interest of the applicant/MAH. (EMA)

CBI – Information that has actual or potential economic value because it is not publicly available, and its disclosure would result in a material financial loss to the person/business or a material financial gain to their competitors. (HC)

CCI/CBI is information that isn’t available to the public yet. Examples include projects in progress, unpublished data, brainstorming notes, or plans for future studies. It could also include:

  • detailed information on the quality and manufacturing processes
  • details on the process validation or characterization techniques of active substances, or
  • novel developments on products or intellectual property.

In short, it’s any information that if given to the wrong hands, could cause financial loss for the company.

CCI

Quantitative composition of investigational product
Detailed information on manufacture of active substance
Future development of plans
Innovative analytical methods

Not CCI

General or administrative information
Nonclinical information
Information that bears no innovative features

What isn’t protected by CCI/CBI?

The easiest approach/methodology for protecting sensitive company-specific information in regulatory submissions is through redaction. Read this blog to learn the differences between anonymization vs. redaction of clinical trial data.

Thus, along with the new guidance on what is personal data and commercially confidential information, the EMA and Health Canada’s guidelines target common items that do NOT constitute CCI/CBI. The most important indicator that information isn’t CCI/CBI is that it’s in the public domain. This may include the following locations and more:

  • Company Website
  • Clinical Trial Registries
  • Scientific Literature
  • Scientific Guidelines
  • Regulatory Authorities’ websites
  • Patent Application documents

Most information published in clinical research should, by definition, be of a clinical nature. However, there may also be additional administrative, quality-related, or non-clinical information.

These sections may look like CCI/CBI. Although some may be, the EMA has provided a list of items that are not CCI/CBI. This includes:

  • Unit measurements, study IDs, names & addresses, vendors, sponsors, standard operating procedures (SOPs), study site IDs
  • Structural formulas, lot #’s, excipients, high-level safety info, cell lines or strains, storage & shipping conditions, temp, humidity & other storage information
  • Methods, drug concentrations, quantification limits, scientific advice received from regulators, information on technical methodology (ELISA, LC-MS, etc.)

Finally, every study contains insights into both internal procedures as well as clinically relevant information. These sections are usually located within the protocol or methods. They often contain information such as primary & secondary endpoints, statistical methods, inclusion & exclusion criteria, literature reviews, plasma drug concentrations, and PK/PD models.

These points can give insights into an organization’s methods. However, most regulators will deem this information relevant to understanding the research. Thus, they won’t allow sponsors to redact this information.

Potential CCI/CBI

No

Is this info available in the public domain?

Company website, Clinical Trial Registries, Scientific Literature, Scientific Guidelines, Regulatory Authorities, Patent Application

Yes

No - Potenial CCI/CBI

Yes

Is this info important for economic interest?

If this information becomes available to the general public, it may contribute to the financial advantage of a competitor in the same market

No

Yes - Potenial CCI/CBI

No

Is this info necessary for understanding the data?

Does the info supplement the research in a way where its absence makes it diificult to understand? Methodology, PK & PD Models, Dosing, Storage & Shipping, Lot Numbers

Yes

No - Potenial CCI/CBI

Not CCI/CBI

How to Identify CCI/CBI in 3 Simple Steps

  1. Is this information available in the public domain?
    • If you can find this information online via search engines, the company website, or publications, it’s not confidential.
  2. Does this information hold economic value?
    • If disclosing this information doesn’t give a competitor some market advantage, it’s not CCI/CBI.
  3. Is this information relevant for understanding the documents being published?
    • Some elements within a study may not be clinical, however they are still critical to understanding it. This type of information requires further investigation but will often fall outside the scope of CCI/CBI.

Do you need help preparing anonymized and redacted reports for EMA Policy 0070 or Health Canada PRCI submissions? Our transparency and disclosure experts can partner with you to develop the CCI/CBI identification criteria for a specific submission and manage the anonymization process, leaving a simplified review/approval step. 

Honz Slipka

Senior Transparency Specialist

With a research background in neuroscience, and experience in health information technology, Honz Slipka has a thorough understanding of data analysis, regulatory standards, and best practices in the field of clinical data privacy. Drawing from his experiences, Honz is a champion of innovation, helping to lead the field of science, healthcare, and research into the modern age of technological efficiency, clinical transparency, and data utility.

The blog was originally published on October 3, 2022. It was updated on March 14, 2025.

Contact us