CliniGA CRO

CliniGA CRO Blog

File Checksums: Identical Bytes Do Not Establish Correct Clinical Data

Combine file fingerprints with content reconciliation to verify that unchanged data concern the right participants and scope.

Representative research photograph: File Checksums: Identical Bytes Do Not Establish Correct Clinical Data
Photo: Max MBAKOP · License: CC BY-SA 4.0 · Cropped and resized.
Published
Updated

A file fingerprint is useful for checking whether a delivery arrived unchanged. But an incomplete file or one containing records for the wrong participants can produce identical fingerprints at the sender and receiver.

Preserve the meaning of data

Distinguish technical integrity from business meaning. A fingerprint addresses change during transfer, while participant coverage, record counts, reporting periods and field semantics require separate reconciliation. Explain which checks support successful transport and which support acceptance of usable data. Passing one control should not be interpreted as a reason to omit the others.

Worked example

For example, an imaging provider packages files from the wrong study folder. The package arrives securely and its fingerprints match. The receiver detects the problem by comparing the study identifier and participant population with the expected review list. Technical delivery is recorded as successful and business acceptance as failed, with a separately identified corrected package requested.

Review checks

  • Compare sender and receiver fingerprints for the same file version.
  • Independently verify the intended study and participant population.
  • Display technical acceptance separately from data-review acceptance.

Acceptance and boundaries

Acceptance means both unchanged transport and conformity with the defined business scope are explainable. This does not require manual inspection of every field; select proportionate automated and sample-based controls. Terms such as checksum, signature and encryption should not be turned into claims of scientific correctness. Address discrepancies through the authorised process while relevant delivery evidence remains available.

Frequently asked questions

What does a matching fingerprint establish?
It supports equality of the compared contents, not that the file contains the correct study data.
Is a record count enough as an additional check?
It helps, but identity and coverage checks are needed to detect the same number of incorrect records.

Sources

  1. FDA — Electronic systems, records and signatures in clinical investigations
  2. MHRA — Guidance on GxP data integrity