White Paper - Prepaid Cards for Clinical Trial Participants: UK Compliance Risks Under the 2026 Regulations

1. Introduction: The World Moved On But Prepaid Cards Did Not

Q: Are prepaid cards still a compliant method for paying clinical trial participants in the UK in 2026?

A: Prepaid cards were a practical solution when they were introduced, but the April 2026 UK clinical trial regulations have exposed significant gaps in their compliance, data integrity and participant experience that make them increasingly difficult to justify.

Prepaid cards were supposed to be the answer.

Back in 2009, when clinical trial reimbursement meant a cheque in the post or a cash envelope at the site, a reloadable debit card felt like a genuine step forward. Participants could get a card on the day of their visit. Whether they could access their funds was, as we will come to, quite another matter.

But that was 2009. The world moved on. The prepaid card industry did not.

And now, with the April 2026 UK clinical trial regulations raising the bar on data integrity, audit trails and participant protection, the cracks that were always there have become impossible to ignore.

I felt compelled to write this paper after listening to participants, speaking to site coordinators and spending time researching public forums, complaint boards and clinical research communities where people speak their mind.

Reddit threads, BBB complaints, coordinator forums. The picture is not pretty. Participants locked out of their own funds. Balances quietly eaten by inactivity fees. Cards declined at the till with no explanation. Money that was owed to someone for giving up their time for science, simply gone.

That is not a payment system. That is a problem.

This paper examines the problems with prepaid cards across five areas: the fees that quietly erode participant funds, the payments that never make it to the participants, the data and jurisdiction risks, the audit trail gaps, and the participant experience that is impacting participant retention. It draws on publicly available evidence including participant accounts, official fee schedules, and, remarkably, a public article written by the person who introduced prepaid cards to the clinical trial industry, in which he explains exactly how the fee model works, who benefits from its flaws, and who does not. Spoiler: it is not the participants.

If you are a sponsor, CRO, site or site coordinator reviewing your participant payment process ahead of April 2026, this paper is for you.

2. How Prepaid Cards Work in a UK Clinical Trial Context

Q: How do prepaid cards work for clinical trial participant payments in the UK?

A: A prepaid card is issued to the participant at their visit and loaded with expenses by the site. To access their funds, the participant must activate the card by providing personal details including their name, date of birth, address and a photo ID, a process known as Know Your Customer or KYC. This data is collected and stored by the card provider, which in most cases is a US-based company operating outside UK jurisdiction.

Before we get into the problems, it is worth being clear on how prepaid cards work. Not how they are marketed. How they work in practice.

When any payment solution is brought into a clinical trial, a third party enters the picture. Payment providers carry their own fee structures, data policies, terms and conditions and commercial interests.

Here is the basic process as a participant would experience it.

At some point during a participant's visit, once they have completed the required assessments or reached the relevant milestone, a coordinator hands the participant a plastic card. It looks like a normal debit card. The site has already registered that card number against the participant's details on their system, linking it specifically to them. The participant is told their expenses are loaded onto it. They take the card home.

To use it, the participant needs to activate it. That means either visiting a cardholder portal online and working through a registration process or calling a recorded phone line and navigating an automated system. Either way, the participant needs to enter their card number, their date of birth and set up a PIN. If any of that information does not match what the site entered when they registered them on the system, it won't activate the card. The participant's money sits behind a door they do not have the key for.

Then if the total loaded onto the card exceeds a certain threshold, typically around £500, the card provider requires further verification. That means photo ID. A passport or driving licence. Site coordinators have reported that a significant number of their participants do not have these documents readily available, particularly older participants and those with memory impairment who do not drive.

Assuming activation goes smoothly, expenses are loaded by the site coordinator each time the participant completes a qualifying visit. They can then use the card like a debit card. In theory.

In practice, the card does not work everywhere. There is a list of blocked merchants, but it is not published anywhere. The participant finds out a merchant is blocked when the card is declined at the till. Subscription payments are blocked. Some online retailers do not accept it. Petrol stations frequently decline it.

If the participant wants to move the money to their own bank account instead, they can request a transfer through the app. That requires handing over bank account and sort code details to the card provider. The transfer then takes three to five business days. Several participants report the transfer function does not work at all.

If the participant loses the card, they must contact the provider. A replacement takes seven to ten business days and in some cases incurs a fee. The funds on the card are frozen in the meantime.

If the card is not used for six months, inactivity fees begin. They are deducted from the participant's balance every month until the card is drained.

If the card expires mid-trial, a replacement is not automatically sent. The participant must request one.

Now here is the part that matters for UK sponsors thinking about the 2026 regulations.

The market leader in prepaid cards for clinical trials in the UK is an American company, headquartered in Pennsylvania. When a UK participant hands over their name, date of birth, address and bank details to activate their card, that data sits with a US corporation, subject to US law, including the US CLOUD Act, which allows US authorities to demand access to data held by US companies regardless of where that data is stored or who it belongs to.

The sponsor signed up for a payment solution. What they got is a data transfer to a US third party that sits outside UK jurisdiction.

We will come to exactly what that means for your GDPR obligations and your MHRA audit trail in the sections ahead. But it is worth holding that in mind from here.

3. Why Prepaid Cards Are Failing UK Clinical Trials in 2026

3.1 The Fee Problem

Q: Do prepaid cards charge fees to clinical trial participants?

A: Yes. Prepaid card providers typically charge a range of fees including inactivity fees when the card is not used for six months, ATM withdrawal charges, balance inquiry fees, replacement card fees and account liquidation fees. These are deducted directly from the participant's balance, are set by the card company rather than the bank, and the card company is the primary beneficiary when funds go unspent.

Let us talk about money. Specifically, the money that never makes it to participants.

Prepaid cards come with fees. That is not a secret, but it is not something the industry has ever been particularly keen to shout about. Inactivity fees. Replacement card fees. ATM withdrawal charges. Balance inquiry fees. Account liquidation fees. The list varies by provider, but the principle is consistent: every time a participant does not use their card for a few months, or withdraws cash, the balance goes down. Not because they spent it. Because fees were deducted without their knowledge.

Here is how the inactivity fee works in practice. If a card is not used for six months, a monthly fee kicks in automatically. Around £4 to £5 per month, deducted from the balance until either the participant uses the card or the balance reaches zero.

A participant might decide to save the funds on their card for Christmas, or put them towards something they have been planning, a perfectly reasonable decision. But when they come to use the card, they find the balance has quietly depleted simply because they did not spend fast enough.

The NeuroClin case study tells the same story from the site side. Participants regularly found lower balances than expected. Staff spent time fielding confused and frustrated queries from people who could not understand where their money had gone. As Martin Donaldson, Reception Manager at NeuroClin, put it simply: “It became a burden.”

Participants themselves have described the experience openly in clinical research forums. One coordinator wrote: “Our site has had poor experiences with prepaid cards. We learned they were taking money off participants’ balances in the form of inactivity fees. Several participants dropped out of our study and one even reported the company to the Better Business Bureau. We now use other methods to reimburse participants.”

And here is the part that should make every sponsor and ethics committee uncomfortable. Those fees are not set by the banks. They are set by the company running the prepaid card scheme, who also happens to be the primary beneficiary when participants do not access their funds.

This was confirmed publicly in 2025 by the person who first introduced prepaid cards to the clinical trial industry. Writing in a published article, he stated clearly that card companies, not banks, determine which fees are charged and the amounts, and that they are the primary beneficiaries of those fee revenues. He acknowledged that even as better, fee-free alternatives emerged, the industry chose not to evolve. In his own words:

“The initial inclusion of fees set a negative standard that came at the expense of patients and, in hindsight, it’s clear that the ClinCard’s fees weren’t critical to its economic viability.” Sam Whitaker, Mural Health, 2025

He went further, raising a question that every Institutional Review Board (IRB) and ethics committee in the UK should be sitting with right now. Should payments made to cover a participant’s out of pocket costs be subject to fees that quietly reduce what they receive? Especially when most participants never realise those fees exist until it is too late.

There is a natural conflict of interest buried in this model. If a participant does not access their funds, the prepaid card company profits. The longer money sits unspent on the card, the better it is for the prepaid card company. And it goes further than that. Unactivated cards, where funds were loaded but the participant never successfully completed the activation process, represent the most profitable outcome of all for the card company. Every pound sitting in an unactivated account is revenue waiting to be collected through fees.

It is worth asking plainly: is it in the prepaid card company’s commercial interest to make activation easy? Based on the evidence, that question answers itself. We will come back to unactivated cards in the next section, because the consequences go well beyond fees.

Prepaid Card Fees and Clinical Trial Compliance in 2026

Every pound deducted from a participant’s balance in fees is a pound that was approved for reimbursement and never received. Under the 2026 framework, sponsors are accountable for ensuring participants receive what they are owed. A payment process that systematically erodes participant funds through fees is not a compliant one, and the fee structure of any participant payment provider should form part of the sponsor and site due diligence.

3.2 The Black Hole: Participant Reimbursements That Never Arrive

Q: What happens to clinical trial participant funds loaded onto prepaid cards that are never activated?

A: Funds loaded onto unactivated prepaid cards remain in the card company's account, not the participant's, and cannot be retrieved by the site. Monthly inactivity fees are then deducted until the balance reaches zero. Neither the site nor the participant can recover the money, and no published figure exists for how often this happens across the industry.

There is a question that nobody in the prepaid card industry wants to answer.

What percentage of participant reimbursements loaded onto prepaid cards are never actually received by the participant?

These are not funds eroded by fees or spent slowly, but reimbursements that were never accessed at all. Cards handed over at a site visit, taken home and never successfully activated, with funds sitting in a prepaid card company’s account being quietly eaten by inactivity fees month after month until the balance reaches zero, while the site considers its job done and nobody is tracking it.

We researched and asked questions but could not find a single published figure for clinical trials, not from card providers, not from sponsors and not from any independent research body. In an industry that is legally required to document everything, the question of how much participant reimbursement money never reaches participants has no published answer.

That silence is not an accident. The site loads the card and in their system the payment is processed, obligation fulfilled. But the participant’s money is now sitting in the prepaid card company’s account rather than the participant’s, and if they cannot activate the card, neither the site nor the participant can retrieve those funds.

The NeuroClin case study describes this directly. Some participants spent weeks, even months, attempting to activate their cards. Some gave up entirely. The funds tied to those individuals could not be retrieved or reallocated by the site. They simply disappeared into the card provider’s system.

The sites often try to help but the card provider would not speak to site staff about a participant’s account. Understandably, the account belongs to the participant. But the practical consequence was that the site team sometimes had to invite the participant back to the clinic, sit with them, and call the card company’s customer support together on speakerphone, just to attempt to resolve an activation problem. This meant more time, more expense, and more out of pocket costs for both the site and the participant who had still not been paid for their previous visit.

When they did get through to support, it was a US-based line operating on US hours. Waiting days for a response was not unusual. When calls were answered, participants described receiving the same scripted response regardless of their problem. Eventually, people stop trying.

When they give up, no one follows up. Because from the system’s point of view, the payment was made.

The question sponsors and sites need to ask right now

How many participants on your current studies have cards that were loaded but never activated?

If you do not know the answer, that is the problem.

Under the 2026 framework, not knowing is no longer a defensible position. The audit trail must show not just that funds were disbursed, but that the participant received them. A loaded card that cannot be activated, sitting in a drawer while its balance is eroded by monthly fees, is not evidence of reimbursement. It is evidence of a process that failed the person it was designed to serve.

Unactivated Prepaid Cards: A Hidden Compliance Risk Under the 2026 Framework

Under the April 2026 UK clinical trial regulations, financial records are evidence. They must meet the ALCOA+ standard: attributable, contemporaneous and accurate. They must be retained for 25 years.

A record showing funds were loaded onto a card tells an MHRA inspector that money left the site’s control. It does not tell them the participant received it. Those are two very different things, and under the new framework, the distinction matters.

A loaded card that was never activated is not evidence of reimbursement. It is a compliance gap.

3.3 The Data and Jurisdiction Problem

Q: Do prepaid card companies store UK clinical trial participant data outside the UK?

A: In most cases yes. The market leading prepaid card providers in the UK clinical trial industry are US based companies, meaning participant data collected during card activation, including names, addresses and identity documents, is held by a US corporation subject to US law. Under the US CLOUD Act, that data can be accessed by US authorities without notifying the sponsor or the participant.

Given that the market leading prepaid card providers in the clinical trial industry are US based companies, when a UK participant activates a prepaid card, they are not just unlocking their expenses but entering a data relationship with a US financial company. While most participants are unaware of this and most sponsors rarely consider it, the April 2026 regulations make it a compliance question that can no longer be ignored.

What data is collected by prepaid card companies and why?

Prepaid cards are regulated financial products. That means the company issuing them is legally required to verify who they are giving money to. This is called Know Your Customer, or KYC. At the point of activation, participants are required to provide their full name, date of birth, home address, and in many cases a copy of a passport or driving licence. For payments above certain thresholds, additional identity documents are requested.

This data is not collected by the site or the sponsor. It is collected directly by the prepaid card company and held in their systems. Once this data is shared with the prepaid card company, the sponsor has no control over where it goes, how long it is kept, or who can access it.

The CLOUD Act: why US jurisdiction matters

Given the market leader in prepaid cards for clinical trials in the UK is a US company, that matters for one very specific reason: the US CLOUD Act.

The Clarifying Lawful Overseas Use of Data Act, passed in 2018, gives US law enforcement and government agencies the legal authority to compel US companies to hand over data they hold, regardless of where that data is physically stored and regardless of which country the data subjects are citizens of.

In plain terms: if a US company holds data about your UK trial participants, US authorities can demand access to it. The company does not need to inform you. They do not need to inform the participant. They may be legally prevented from doing so. You could have a significant breach of participant data, including the link between their identity and their trial participation, and never know it happened.

UK GDPR does not protect against this. The CLOUD Act operates at a jurisdictional level that sits above data protection agreements. A company can be fully GDPR compliant and still be compelled to hand over data under the CLOUD Act. These are not contradictory positions. They are two separate legal frameworks, and in a conflict between them, US law applies to US companies.

Sponsor Accountability for Prepaid Card Data Under UK GDPR

This is where it becomes the sponsors’, not the prepaid card company’s.

The ICO is clear on this point. As the sponsor or data controller, you cannot outsource your legal accountability for how participant data is handled. If a payment process leads to a data breach, compromises participant anonymity, or results in personal data leaving UK jurisdiction without adequate safeguards, the ICO will not look to the card provider. They will look to the sponsor.

Choosing a prepaid card provider that operates under US jurisdiction is a data transfer decision. It should be assessed in your Data Protection Impact Assessment, documented, and justified. If you cannot demonstrate that adequate safeguards were in place, you are exposed.

The question to ask your prepaid card provider is a simple one: where is participant data held, under which jurisdiction, and what happens if a US government agency requests it?

If the answer is unclear, that is your answer.

Prepaid Card Data Risks and UK GDPR Compliance in 2026

As the data controller, the sponsor cannot outsource accountability for how participant data is handled. Selecting a payment provider that operates under US jurisdiction is a data transfer decision that must be assessed in your Data Protection Impact Assessment, documented and justified. The ICO is clear on this: if personal data leaves UK jurisdiction without adequate safeguards in place, responsibility sits with the sponsor, not the card provider. Under the 2026 framework, that is not a risk worth carrying when compliant, UK based alternatives exist.

3.4 The Audit Trail Problem

Q: Do prepaid cards provide a compliant audit trail for clinical trial participant payments under the 2026 MHRA framework?

A: No. Prepaid card providers offer portal based reporting of card loads and balances, but this represents only one part of the financial record. A compliant audit trail under the 2026 ALCOA+ standard requires the expense claim, receipts, approval and payment confirmation to be held in a single attributable system, something prepaid cards cannot deliver.

Prepaid card providers do offer reporting. Sponsors and sites can log into a web portal and view payment histories, load dates and card balances. The providers market this as a complete audit trail.

Here is what that audit trail looks like in practice when you try to pull it together.

First, the site holds records of which participants attended which visits and what they were owed. Clinical data sits in patient management systems. But the record of who has been reimbursed and for how much typically lives in a spreadsheet.

Second, the card provider holds records of what was loaded onto which card number on which date. That lives in their portal.

Third, the participant holds receipts for what they spent. Travel tickets, parking, food, anything they were claiming back. At most sites, those receipts are scanned and stored separately on spreadsheets because the prepaid card system has no capability to attach them to a payment record.

At inspection, you need to connect all three. You need to show that participant 004 attended visit 3, was owed £87 in expenses, had £87 loaded onto card number ending in 4421 on a specific date, and here are the receipts that justify that figure. None of those three systems talk to each other. The audit trail is not a trail, it is three separate sets of records that someone has to manually reconcile.

As the NeuroClin case study describes, coordinators were managing this across multiple spreadsheets, scanning receipts into separate folders, and cross-referencing card portal records by hand. That is not a compliant financial record. That is an administrative workaround that creates exactly the kind of gaps an MHRA inspector is trained to find.

What ALCOA+ requires

The ALCOA+ standard does not just ask whether a payment was made. It asks whether the record of that payment is attributable to a specific individual, recorded at the time it happened, original rather than reconstructed, and accurate in every detail.

A payment loaded onto a prepaid card that was never activated has no confirmation of receipt. A receipt scanned into a separate folder with no direct link to the payment record is not contemporaneous evidence. A portal report generated weeks after the fact at the request of an inspector is not an original record.

Each of these is a gap. And here is the question that rarely gets asked until it is too late: if you needed to reconstruct these records in five or ten years time, who would do it? The spreadsheet owner may have left. The folder structure may have changed. The card portal may look entirely different or no longer exist in its current form. In a 25 year retention window, gaps do not stay small, they compound.

Prepaid Card Audit Trails and MHRA Inspection Readiness in 2026

The question an inspector will ask: can you show me, for each participant, the complete payment record from the point the expense was approved to the point the participant received the funds, with supporting documentation, in a single auditable system?

If your answer involves logging into a US company’s portal, opening a spreadsheet, and locating a folder of scanned receipts, you already know you have a problem.

3.5 The Participant Experience Problem

Q: How do prepaid cards affect clinical trial participant retention and patient centricity?

A: Prepaid cards create significant friction for participants, particularly those who are elderly, cognitively impaired or unfamiliar with financial technology. Activation barriers, undisclosed fees and declined transactions are consistently cited as reasons participants do not return for subsequent visits, directly undermining patient centricity and trial retention.

Everything in this paper so far has been about compliance, data and audit trails. This section is about people.

You know your participants. You work with them every day. But it is worth pausing on what the payment experience feels like from their side, because the gap between what the industry intends and what participants experience is where retention is lost.

As Martin Donaldson, Reception Manager at NeuroClin, put it: a participant who received her stipend cried. She said she was not doing it for the money. But she was grateful. That single moment says more about what these payments mean to people than any retention statistic.

How Prepaid Cards Create Barriers for Clinical Trial Participants

The activation process alone, as documented across Sections 3.1 and 3.2, presents significant barriers for participants who are elderly, cognitively impaired or simply unfamiliar with financial technology, and for many the experience ends with them giving up entirely before they have accessed a penny.

One participant described saving the balance for Christmas, only to find it quietly depleted by monthly inactivity fees. They had done nothing wrong but simply not spent fast enough.

A coordinator at a large medical centre reported that several participants arrived at a one year follow up visit to find a zero balance. They had never used the card. They had no idea fees were being charged. Some dropped out of the study that day.

These are not edge cases. They are the lived experience of the payment system that currently dominates the UK clinical trial market.

The Friction That Kills Clinical Trial Retention

A participant who cannot access their reimbursement after their first visit has a very simple calculation to make before their second. They already spent money getting there. They fought with a card system to try to get it back. They may still be waiting. Is it worth doing again?

Participant dropout is one of the most expensive problems in clinical research. Recruiting a replacement takes time, money and in many cases delays the trial timeline. Financial friction sits consistently near the top of the list of reasons participants do not return.

The industry talks a great deal about patient centricity and inclusive trial design, yet as Sections 3.1 through 3.4 demonstrate, the payment system most widely used in UK clinical trials today tells a different story.

What do clinical trial participants want?

Across every forum thread, every complaint and every coordinator account we reviewed, the preference is consistent and simple. Participants want the money in their bank account. Not on a card. Not in a portal. In their account, where they can see it, use it freely, and know it is theirs.

The technology to do exactly that has existed for years. The question is not whether it is possible. The question is why the industry has been so slow to make the change.

Prepaid Card Participant Experience and Patient Centricity Standards in 2026

The 2026 UK clinical trial regulations place greater emphasis than ever on participant protection and ethical trial conduct. A payment method that leaves participants unable to access funds they are owed, with no accessible support and no straightforward resolution, does not meet that standard. Patient centricity is not an aspiration in 2026, it is a regulatory expectation, and the participant payment process is where that expectation is most visibly met or broken.

4. UK Clinical Trial Participant Payments: What Good Looks Like

Q: What should sponsors and CROs look for in a compliant clinical trial participant payment platform in 2026?

A: A compliant platform should pay participants directly to their bank account with no fees deducted, capture only the minimum data required under UK GDPR, store all data within UK jurisdiction, provide a single auditable system meeting the ALCOA+ standard, and offer UK based support for both sites and participants.

This paper has covered a lot of problems. The solutions are not complicated. There are platforms available today that solve every issue raised in this paper. Here is what to look for:

1. No fees for participants

The amount approved for reimbursement is the amount that reaches the participant. No inactivity fees eroding a balance. No replacement card charges. No ATM costs deducted at withdrawal. What the participant is owed in expenses and stipend is exactly what they receive.

2. Pay participants fast and directly to their bank

Participants are clear and consistent across forums and research: they want their money in their bank account, quickly. Participants provide their details once. Reimbursements arrive directly in their account within 1-3 days. No cards to activate. No payments rejected at the till.

3. Digital reporting and audit trail

A compliant payment platform captures every transaction, receipt, approval and payment confirmation in a single auditable system. No manual reconciliation across multiple systems. No scanned receipt folders. One place, exportable in seconds, inspection ready from day one.

4. Minimal data capture

The payment platform must only capture the minimum data needed to process a payment, in line with UK GDPR’s data minimisation principle. No passport. No driving licence. No address. Just what is needed to move money safely and nothing more.

5. Data stored in the UK

Your participant data must be captured and stored within UK jurisdiction. Ask your provider for evidence of where participant data is held. No KYC handover to a third party. No CLOUD Act exposure. The sponsor remains the data controller throughout.

6. Customer support

Ensure your payment provider offers real support for both participants and your team. Email, phone and chat, available during UK hours, staffed by people who understand your participants and can resolve their issues. Not a scripted US call centre operating five hours behind.

5. Conclusion

Meet Isla.

Isla is 79 years old. She lives in Tarbert, a small town in the Scottish Highlands. She has been showing early signs of Alzheimer’s. Her mother had it. Her sister had it. She is joining a clinical trial because she wants to help stop this disease reaching her daughters and grandchildren.

Getting to the clinic takes her an hour and a half. A return train ticket costs £21. A taxi from the station costs £15 return. She pays it all upfront, out of her state pension, because she was told she would be reimbursed. She also qualifies for a £100 stipend for completing her first visit. She is not doing it for the money. But with gas bills rising, it will help.

She has a good visit. The team are kind. As she leaves, the study coordinator hands her a plastic card and tells her it has £136 on it, her expenses and her stipend. She just needs to call this number to activate it when she gets home.

She gets home. She calls the number. An automated system asks her to enter her details. She presses a wrong digit. It rejects her. She tries again. Rejected. She eventually gets through the menu only to be told she needs to provide a valid passport or driving licence to access her funds. Isla has neither. She has not driven in fifteen years. Her passport expired in 2019.

She tries to speak to a person. The call centre does not open until 2pm UK time. She calls back. The agent on the line struggles to understand her. She struggles to understand them. Nothing is resolved. She calls the clinic. The clinic tries to help but the card company will not discuss the account without the cardholder present. The only option is for Isla to make the journey to the clinic again. Another hour and a half each way, another £36. To fix a payment that should have taken seconds.

Of course the clinic cannot do this for every participant. So imagine all the Islas who simply gave up. Left out of pocket. Left frustrated. Left with the quiet sense that perhaps their contribution was not worth very much after all.

Do you think Isla comes back for her second visit?

Prepaid cards solved a problem once. Now they are the problem.

The April 2026 regulations have shed light on these problems and made them impossible to ignore. The good news is that compliant alternatives exist today and transitioning is not complicated.

Your participants gave their time to advance science. The least the industry can do is pay them back promptly and in full.

Participant payment built for April 2026 from day one

The system you select to process payments should be built for the 2026 framework, not retrofitted to meet it. ALCOA+ audit trail built in with no gaps to close before inspection.

One platform that delivers all of this for UK clinical trials is vHelp, a compliant UK payment platform that pays participants directly to their bank account within 24 hours, does not charge participants fees, keeps all data within UK jurisdiction, and provides a single auditable system fully aligned with the April 2026 regulations from day one.

References

1. Medicines for Human Use (Clinical Trials) (Amendment) Regulations 2025, HRA Guidance The official HRA guidance confirming the regulations came into force on 28 April 2026 and explaining what changed for clinical trials in the UK.

2. MHRA Guidance on Clinical Trial Regulations Reform HRA guidance on the practical implications of the 2026 framework.

3. ICO Guidance on International Data Transfers ICO guidance on the legal requirements for transferring personal data outside the UK.

4. Sam Whitaker, Mural Health, What You Should Know About Prepaid Debit Cards in Clinical Trials Public article by the founder of ClinCard examining the fee model and ethical implications of prepaid cards in clinical research.

5. NeuroClin Case Study, From Frustration to Relief Published case study documenting NeuroClin's experience with prepaid cards and the switch to direct bank payment.

6. ICH E6(R3) Good Clinical Practice Guidelines International guidelines on good clinical practice, including data integrity, audit trail requirements and participant protection standards.

7. US CLOUD Act, Clarifying Lawful Overseas Use of Data Act 2018 US Department of Justice official resource page for the CLOUD Act and its implications for data held by US companies regardless of where it is stored.

8. Better Business Bureau, ClinCard Prepaid Mastercard Reviews 4 pages of one star reviews, and 30 complaints, publicly available consumer complaints referenced in this paper.

9. Publicly available forum discussions referenced throughout this paper. Accounts paraphrased and anonymised. 

• r/clinicalresearch, ClinCard one big scam 
• r/clinicalresearch, Experience with Greenphire ClinCard 
• r/clinicalresearch, Can someone help make sense of Greenphire ClinCard