Why an Independent Review Is Needed
A dataset can pass a programmed validation suite and still be wrong. A required-field check may confirm that every dose record has a dose value, for example, without confirming that the value agrees with the source record or that the dose was assigned to the correct event. Independent dataset quality control (QC) is a separate review of whether the dataset implements its documented specification and represents its source records accurately.
The review is not simply a second person running the same script and checking that it completes. It should test important decisions along the data path: what the specification requires, what the source says, how the transformation was performed, what value appears in the delivered dataset, and what the validation results actually establish. The earlier material on Source Reconciliation and Discrepancy Logs provides a way to document source conflicts; independent QC uses such evidence while also testing the construction and review of the dataset.
Independence is practical, not merely organizational. A reviewer who did not write the transformation can still produce a weak review by copying its logic without examining the rules or source evidence. Conversely, an automated check written separately can add useful independence if it tests the same requirement through a genuinely distinct implementation. The review should identify who prepared the data, who reviewed it, which dataset version was reviewed, and any shared assumptions or tools that limit independence.
Define the Review Before Inspecting Records
Start from controlled inputs: the dataset specification, approved transformation rules, source extracts or records, and the validation plan. Record the dataset version or other unambiguous identifier, the source versions, and the rule versions. Without these, a reviewer cannot reliably establish which materials were compared or reproduce a finding. If specifications or source files are still changing, agree on a review cut-off and explain how subsequent changes will be handled.
Next, map each review question to evidence. A useful question is specific enough to answer: “For all records marked as dose events, does the dataset dose and date agree with the administration record and the event-coding rule?” “The dose values look plausible” is not specific enough. Reviewers should distinguish three things that are often conflated:
- Specification: what fields and meanings are required, including permitted units, codes, and missing-value conventions.
- Construction: the source information and documented rules used to create or transform each value.
- Validation evidence: the checks run, their results, and how exceptions were investigated and resolved.
Set review coverage according to risk. Fields or rules with important consequences for model interpretation, common transformations, complicated coding, known source inconsistencies, or previous defects warrant more direct scrutiny. For critical requirements, test every relevant record where feasible, using an independently implemented comparison. For manual review, select records that cover meaningful cases: different subjects or sites, boundary values, missing or partial information, repeats, and records with unusual timing or coding. Document the selection and its rationale. A purposive sample is useful for finding varied failure modes, but it does not establish a statistical error rate for all unreviewed records.
Identify the dataset version, source materials, specification, rules, fields, and review cut-off.
Link each high-risk requirement to a reproducible comparison or a documented manual inspection.
Compare source evidence, the applicable rule, the transformation, and the resulting dataset value.
State the evidence, impact, disposition, corrective action, and any required retest.
Report what was checked, what remains uncertain, and whether unresolved findings prevent use.
Recalculate Transformations, Do Not Just Inspect Outputs
For a derived value, independently apply the documented rule to the source inputs and compare the result with the dataset. Check units, reference dates, rounding, missing-input behavior, and boundary cases where those are specified. A reviewer need not reproduce the whole construction pipeline, but should be able to follow a selected value from source through rule to output. When an output differs, first determine whether the difference reflects a defect, an approved exception, or a source correction that has not yet been incorporated.
Worked Example: Rechecking a Unit Conversion
Suppose a specification says that source body weights recorded in pounds are converted to kilograms by dividing by 2.20462, then rounded to one decimal place. A hypothetical source record gives 154.3 lb, while the dataset contains 70.0 kg. Recalculate the value independently.
Apply the rule. The unrounded conversion is \(154.3 \div 2.20462 = 69.989\) kg (to three decimal places). Rounding to one decimal place gives 70.0 kg.
Compare and conclude. The dataset value, 70.0 kg, agrees with the documented conversion and rounding rule. This one record passes this check. The review should also confirm that the unit recorded for the source value is pounds and that this rule applies to the record; matching arithmetic alone does not establish either fact.
A useful reviewer note preserves enough detail for another person to repeat the check: record identifier, source value and unit, rule version, independently calculated result, dataset value, and conclusion. For transformations used across many rows, a separate comparison program can check the full relevant set, but its input, logic, and output should be retained and reviewed. A comparison that reuses the original code unchanged may repeat its defect rather than detect it.
Check Event Coding and Dose Histories Against Evidence
Event coding is a statement about what happened, not just a label that satisfies a permitted-code list. Independently compare event type, time, and associated values with the source record and the rule for coding. Check how the rule handles records that are ambiguous, incomplete, corrected, or inconsistent across sources. A syntactically valid code can still assign the wrong meaning to an event.
Dose histories require particular attention to both the event and its context. Compare recorded amount, dose time, units, route or other required attributes, and any interruption or modification against the relevant source records and documented rules. Where a value is carried forward or reconstructed, verify the stated basis and the interval over which it applies. Do not infer an administration merely from a planned dose if the applicable source records distinguish planned from actual dosing.
Worked Example: Reviewing an Event Code and Dose Record
In a hypothetical dataset, a record for subject S014 has event code 1, a dose of 50 mg, and an event time of 08:00. The approved rule defines code 1 as an administered dose. The administration record for the same subject documents an actual administration of 50 mg at 08:05, while the schedule lists a planned time of 08:00. Assume the specification requires actual administration time for administered-dose events.
Check the event meaning. The source documents an administration, so code 1 is consistent with the rule. The amount, 50 mg, also agrees with the administration record.
Check the time rule. The dataset time is 08:00, but this is the planned time. The required actual time is 08:05, a difference of \(08{:}05 - 08{:}00 = 5\) minutes. The record therefore fails the time check even though its event code and amount are correct.
Document the finding. Record the subject and event identifier, the planned and actual times, the rule requiring actual time, the dataset value, and the needed correction or justified disposition. Do not describe this as a dose-amount error: the evidence supports a timing discrepancy, not an amount discrepancy.
Interpret Validation Results in Context
A validation report is evidence about the checks that were executed; it is not, by itself, evidence that the dataset is correct. The reviewer should confirm which dataset version was checked, whether the expected checks ran, what each check was intended to detect, and how warnings or failures were handled. A result of “zero errors” is meaningful only relative to the rules actually tested, their implementation, and the input version.
For example, a range check can flag an implausible value while missing a plausible but incorrectly transcribed value. A required-field check can find no missing event code while missing an event coded incorrectly. Cross-field checks may detect contradictions between columns but cannot establish that both columns agree with the source. The reviewer should therefore connect validation results to direct source-based checks, especially for high-impact requirements.
Worked Example: Interpreting a Validation Summary
A hypothetical validation report states that 1,248 records were checked, with 1,248 passing a required-field check and 3 warnings from a range check. The reviewer confirms that the report names the dataset version under review. The three warnings correspond to body weights of 181, 187, and 191 kg; the documented warning threshold is 180 kg, and the rules say that values above this threshold are flagged for source verification, not automatically excluded.
Count the findings. There are three flagged records out of 1,248. The proportion flagged is \(3 \div 1{,}248 = 0.002404\), or \(0.2404\%\) (about \(0.240\%\)).
Interpret the result correctly. The report supports the statement that all 1,248 records passed the required-field check and that three triggered the range warning. It does not establish that the other 1,245 weights are accurate, nor does the warning alone establish that the three flagged values are wrong.
Follow up. Compare each flagged value with its source and document the result. If all three match the source and meet the documented exception process, retain the evidence and disposition. If any does not match, record and resolve the discrepancy, then retest the affected record and relevant check.
Findings, Retesting, and Review Conclusions
A finding should be precise enough to act on and later verify. Include the affected record or rule, expected behavior, observed evidence, potential impact, severity or priority, owner, disposition, and status. Preserve a clear distinction between a confirmed data error, a possible error requiring investigation, a justified exception, and a gap in review evidence. A conclusion should not claim that all data are correct when only a subset was examined.
After a correction, retest the changed value against its source and rule. Also consider whether the same cause could affect other records; correcting one subject's value does not show that a faulty transformation was fixed everywhere. For a rule-level defect, test the corrected implementation on the relevant population and check that the output version is the one subsequently reviewed. A resolved finding should link to its evidence and retest, rather than simply being marked closed.
Independent QC complements, rather than replaces, several alternatives. Automated validation is efficient and repeatable for specified rules, but cannot test requirements that were omitted or incorrectly encoded. Self-review by the data preparer benefits from detailed knowledge of the process, but is less independent and may overlook assumptions embedded in the construction. Manual source review can clarify context and exceptions, but is slower and can be inconsistent unless criteria and evidence are recorded. A strong QC plan uses these approaches together, with the independent review focused on the risks and decisions they do not adequately cover.
Common Pitfalls and Limits
- Equating a clean report with correct data. The wrong reasoning is that zero validation errors proves the dataset is accurate. The correction is to state exactly which checks passed and independently test important source-to-output requirements.
- Checking only whether a value is plausible. A plausible dose or time can still be copied from the wrong record or based on the wrong rule. Compare it with the authoritative source and the specified meaning.
- Reusing the construction logic without challenge. An independent run of identical faulty logic may reproduce the same error. Recalculate selected results from the written rule or implement a genuinely separate comparison.
- Treating a small purposive sample as proof about every row. Varied examples can reveal defects but do not quantify the error rate in unreviewed records. Describe the selection and limit the conclusion to the evidence.
- Closing findings without retesting. A documented correction is not evidence that the affected output now follows the rule. Verify the corrected output and assess whether the same cause affects other records.
Independent QC is necessarily bounded by available source records, the clarity of approved rules, reviewer expertise, and the coverage of checks. Missing source evidence may prevent a definitive conclusion; it should be recorded as a limitation or unresolved issue, not silently treated as confirmation. QC reduces the chance that defects remain undetected, but it cannot guarantee that every error has been found.
Check Your Understanding
Answer each question, then compare your reasoning with the brief solutions.
- A dataset has no required-field errors. What can this result establish, and what can it not establish?
- A reviewer manually checks 12 unusual records chosen because they span different event types. Can the reviewer report an estimated dataset-wide error rate from this selection? Explain.
- A source record gives 2.5 g and the dataset gives 2,500 mg. The specification requires milligrams. What should the reviewer calculate and compare?
- A planned dose is recorded for 09:00, but the source has no administration record. Under a rule that requires actual times for administered-dose events, what should the reviewer verify before accepting an administered-dose code?
- After fixing one incorrect dose conversion, what additional review is needed before considering a transformation-level finding resolved?
Solutions. (1) It establishes that the tested required-field rule found no missing required values in the named dataset version. It does not establish source accuracy, correct coding, or correctness of untested rules. (2) No. The records were purposively selected, not a probability sample suitable for estimating a dataset-wide error rate; report the scope and findings of those 12 records. (3) Apply the documented conversion: \(2.5 \text{ g} \times 1{,}000 \text{ mg/g} = 2{,}500 \text{ mg}\). Confirm that the source unit and applicable rule are correct, then compare the result with the dataset value. (4) Verify whether an actual administration is documented or whether the record should have a different event code under the approved rule. A planned time alone does not establish an actual dose. (5) Retest the corrected output against the source and rule, assess other records that may share the same faulty logic, and retain evidence that the corrected transformation was applied to the reviewed dataset version.