R Programming Language Certification Regulatory Frameworks & Compliance 2 — Questions and Answers
Question 1: Under GDPR, what R package function is most appropriate for anonymizing a dataset before sharing it with a third party?
- sdcMicro::anonymize() (Correct answer)
- base::sample()
- dplyr::filter()
- stats::na.omit()
Correct answer: sdcMicro::anonymize()
The sdcMicro package provides statistical disclosure control methods specifically designed to anonymize data in compliance with privacy regulations like GDPR.
Question 2: Which principle of the FDA 21 CFR Part 11 regulation directly governs the use of electronic records produced by R scripts in clinical trials?
- Audit trail integrity (Correct answer)
- Open-source licensing
- Version pinning
- Reproducible randomness
Correct answer: Audit trail integrity
FDA 21 CFR Part 11 requires that electronic records maintain audit trails that document the creation, modification, and deletion of records to ensure data integrity.
Question 3: A pharmaceutical company uses R for statistical analysis in a submission to the EMA. Which file format is required for submitting analysis datasets?
- SAS Transport (.xpt) (Correct answer)
- RDS (.rds)
- CSV (.csv)
- Parquet (.parquet)
Correct answer: SAS Transport (.xpt)
The EMA and FDA require clinical trial analysis datasets to be submitted in SAS Transport format (.xpt), which R can write using the haven or SASxport packages.
Question 4: Which R package is the industry standard for creating CDISC-compliant ADaM datasets used in regulatory submissions?
- admiral (Correct answer)
- tidyr
- reshape2
- data.table
Correct answer: admiral
The admiral package, maintained by a pharma industry consortium, provides a toolkit for creating ADaM (Analysis Data Model) datasets conforming to CDISC standards.
Question 5: Under HIPAA's Safe Harbor method, how many specific identifiers must be removed from a dataset for it to be considered de-identified?
- 18 (Correct answer)
- 12
- 25
- 8
Correct answer: 18
HIPAA's Safe Harbor method requires the removal of 18 specific patient identifiers, such as names, dates, and geographic data finer than state level.
Question 6: When using R in a GxP-regulated environment, what practice ensures that package versions used in an analysis remain stable over time?
- Using renv to lock the project library (Correct answer)
- Installing packages from CRAN only
- Running sessionInfo() after each analysis
- Setting options(repos = 'https://cran.r-project.org')
Correct answer: Using renv to lock the project library
The renv package creates a lockfile (renv.lock) that records exact package versions, ensuring reproducibility and compliance with GxP requirements for validated environments.
Question 7: Which organization publishes the CDISC standards that govern clinical data structures used in R-based regulatory submissions?
- Clinical Data Interchange Standards Consortium (Correct answer)
- International Organization for Standardization
- Institute of Electrical and Electronics Engineers
- Health Level Seven International
Correct answer: Clinical Data Interchange Standards Consortium
CDISC (Clinical Data Interchange Standards Consortium) is the nonprofit organization that develops and maintains standards like SDTM and ADaM used in regulatory submissions.
R Programming Language Certification Regulatory Frameworks & Compliance 2
Under GDPR, what R package function is most appropriate for anonymizing a dataset before sharing it with a third party?