Nested Case-Control Design

The nested case-control (NCC) design is a sampling strategy inside a fully enumerated cohort, not a stand-alone case-control study. The cohort and its person-time are defined first (entry, exit, outcome). Then, instead of measuring an expensive exposure or confounder on everyone, the analyst ascertains it only on all cases plus a small number of controls sampled from the set of cohort members still at risk at the moment each case fails (the risk set).

Because controls are drawn from the same source population and the same calendar/age/follow-up structure that generated the cases, the design preserves the cohort's internal validity while collapsing the measurement burden to roughly (number of cases) x (1 + controls per case). It is the design of choice when the outcome is rare and the exposure assay is costly: stored-biospecimen biomarkers, genotyping, manual chart abstraction, NLP over clinical notes, or expert outcome adjudication.

Core conceptual distinction

The estimand and its validity hinge entirely on how controls are sampled in time, and this is the axis reviewers test. (1) Incidence-density (risk-set) sampling selects controls from those alive, enrolled, and event-free at the case's event time; matching on time means the conditional-logistic odds ratio estimates the hazard (rate) ratio of the underlying Cox model directly, with no rare-disease assumption required (Goldstein & Langholz; Lubin & Gail).

Under density sampling a sampled control may later become a case and may even serve as a control for an earlier case — this is correct, not double-counting, and analyses that purge such subjects reintroduce bias. (2) Cumulative (exclusive) sampling draws controls only from those who never become cases over follow-up; the resulting odds ratio estimates the cumulative-incidence (risk) odds ratio and approximates the risk ratio only under the rare-disease assumption. Modern pharmacoepidemiology defaults to density sampling.

Separately, any matching factor (age, sex, calendar time, cohort-entry date, follow-up time) is controlled by design but consumed: its main effect cannot be estimated from the matched data, and matching on a mediator or collider is the classic NCC trap.

Pros, cons, and trade-offs

• vs full-cohort Cox proportional hazards (the key comparison): NCC's only advantage is measurement cost. With expensive exposure ascertainment (biobank assays, chart review, genotyping), NCC delivers ~90% of full-cohort efficiency at 4-5 controls per case (Goldstein & Langholz) for a small fraction of the assay budget. When exposure is already cheap and universal — i.e., ordinary claims/EHR where the drug, diagnosis, and covariates sit in the data for everyone — NCC throws away information and full-cohort Cox dominates on efficiency. Choosing NCC for cheap-exposure claims data is a common and indefensible mistake.
• vs case-cohort design: Both subsample a cohort, but the case-cohort comparator is a single random subcohort fixed at baseline, reusable across multiple outcomes and supporting absolute-risk estimation with weighting. NCC re-samples controls per-outcome at each event time, is more efficient for a single time-matched analysis, but the control set is outcome-specific and not naturally reusable. Prefer case-cohort for multi-outcome biobank studies; prefer NCC for one time-to-event outcome with strong time confounding (Wacholder).
• vs ordinary (population) case-control: NCC fixes the source-population and selection problems of population case-control because controls are provably from the cohort that generated the cases; there is no separate, possibly incomparable, control series.
• vs self-controlled designs (SCCS, case-crossover): Those eliminate all time-fixed confounding by within-person comparison but require transient, reversible exposures and recurrent or acute outcomes. NCC handles chronic exposures and between-person confounders via matching and adjustment, at the cost of residual unmeasured between-person confounding.

When NOT to use - and when it is actively misleading or dangerous

• Cheap, complete exposure in claims/EHR. If the exposure and confounders are already captured for the whole cohort, NCC is strictly less efficient than full-cohort Cox and offers no benefit; using it discards data and inflates variance.
• Cumulative sampling reported as a rate ratio. Estimating the OR from exclusive (non-case) controls and presenting it as a hazard/rate ratio without the rare-disease assumption is a quantitative error; if the outcome is common the bias is large.
• Time-varying exposure mis-anchored. For each matched set, exposure must be evaluated as of the index (case event) time for cases AND controls. Carrying a control's exposure forward to the case's event date, or evaluating a control's exposure at its own (later) censoring date, is a frequent macro bug that biases the rate ratio.
• Over-matching. Matching on a factor on the causal pathway (a mediator) or on a collider attenuates or distorts the true effect; the matched main effect is then uninterpretable.
• Differential outcome surveillance by exposure. Because the outcome defines the case set, exposure-dependent surveillance (more testing in treated patients) is amplified, not diluted, by the design.

Data-source operational depth

• Claims (FFS): Build the cohort and person-time first (continuous enrollment, washout, index/time-zero). For each case, sample controls at risk at the case's event date matched on age, sex, calendar quarter, and cohort-entry date; ascertain the expensive item (e.g., adjudicated outcome via chart pull, or a covariate requiring linkage) only on the sampled set. Lag exposure to respect induction/latency. Failure modes: Medicare Advantage person-time lacks fee-for-service claims, so MA enrollees are invisible to the risk set and sampling probabilities are distorted — restrict the risk set to FFS-observable person-time (Parts A/B/D). Stockpiling and 90-day mail-order distort `days_supply`-based exposure windows.
• EHR: Risk-set membership requires the patient to be "active" (an encounter window) at the case's event time; visit-driven capture means a patient who leaves the system is not truly at risk and should not be sampled — define an observability window, not mere presence in the database. Notes/labs are the very assets NCC makes affordable to abstract.
• Registry: Excellent for adjudicated outcomes and disease severity but typically incomplete for exposure; NCC is ideal when the registry case set is fixed and exposure must be pulled from linked claims or stored specimens for cases + sampled controls only.
• Linked claims-EHR-vital records: The ideal substrate — EHR severity, claims completeness, reliable mortality for the competing-risk of death. Competing risks bite hardest in elderly cohorts: a potential control who died before the case's event time is no longer at risk and is ineligible for that risk set; if mortality differs by exposure, naive control sampling biases the rate ratio, so the death index must drive risk-set eligibility.

Worked claims example

Question: rate of hospitalized acute kidney injury (AKI) among new users of a nephrotoxic oral agent in 100% Medicare FFS. (1) Cohort: adults >=66 with 365 days continuous A/B/D enrollment and no prior AKI; `index_date` = first qualifying `fill_date`; follow person-time from index to first AKI (`dx` in a validated inpatient algorithm), disenrollment, death, or data end. (2) Cases: each first AKI hospitalization; its admission date is the event time.

(3) Risk-set (density) sampling: for each case, randomly draw 4 controls from cohort members who at that exact event date are still enrolled, event-free, and alive, matched on age (+/-2y), sex, and calendar quarter of cohort entry. A control sampled here may itself develop AKI later and appear as a case — keep it.

(4) Exposure: cumulative `days_supply` of the agent as of the matched index time, lagged 30 days for induction; ascertained identically for the case and its 4 controls as of that index time (never the control's own later date). (5) Covariate (the "expensive" item justifying NCC): baseline serum creatinine / eGFR pulled from linked lab data only for the ~5x(#cases) sampled subjects.

(6) Analysis: conditional logistic regression stratified on matched set, exposure as the primary term plus eGFR and key comorbidities; the conditional OR is read as the AKI rate ratio. (7) Sensitivity: vary controls-per-case (1, 4, 10), the induction lag (0, 30, 60 days), and a negative-control outcome to probe residual confounding.

Decision diagram

flowchart TD
  Cohort["Assembled cohort with person-time<br/>entry / exit / outcome defined"] --> Cases[Identify every case<br/>and its event time t_i]
  Cohort --> Riskset["At each t_i form the risk set:<br/>members enrolled, alive, event-free at t_i"]
  Cases --> Sample["Sample 4-5 controls per case<br/>from that risk set, matched on time-stable factors"]
  Riskset --> Sample
  Sample --> Assay["Ascertain expensive exposure / confounder<br/>ONLY on cases + sampled controls, as of t_i"]
  Assay --> Clogit["Conditional logistic regression on matched sets<br/>exp(coef) = rate ratio"]
  Clogit --> Sens["Sensitivity: controls-per-case,<br/>induction lag, negative-control outcome"]

flowchart LR
  subgraph T1[Risk set at Case A's event time]
    A[Case A fails] --- B[Control B at risk]
    A --- C[Control C at risk]
  end
  subgraph T2[Later: Case C's event time]
    C2[Same subject C now fails - is a CASE here] --- D[Control D at risk]
  end
  C -. same person, sampled earlier as a control .-> C2

Worked example

Scenario

Imagine a cohort of six patients who enroll in a drug-safety study on 2023-01-01 and are followed until the end of 2023. On day 120 (2023-05-01), Patient P2 is hospitalized for the outcome we are tracking. We want to understand whether a certain exposure is linked to that hospitalization without measuring everyone's costly lab values. Using risk-set sampling, we identify which patients were still being followed and had not yet had the event on 2023-05-01, and we draw two of them as controls for P2.

Dataset

Cohort follow-up table — one row per patient, showing enrollment start, last observed date, and whether/when the outcome event occurred.

FIG. 1 — DESIGN TIMELINE

Steps

Result

Risk-set sampling reduces measurement to 3 of 6 cohort members (50%) for this event, and approaches 5 of 6 savings (roughly 80-90% cost reduction) in large studies with rare outcomes and 4-5 controls per case — without meaningfully sacrificing the accuracy of the rate estimate.

Trade-offs

Runnable example

import numpy as np
import pandas as pd
from statsmodels.discrete.conditional_models import ConditionalLogit

N_CONTROLS = 4
rng = np.random.default_rng(20240101)

def sample_risk_sets(cohort: pd.DataFrame, match_cols=("sex", "age_band")) -> pd.DataFrame:
    cases = cohort[cohort["event"] == 1]
    rows = []
    for _, case in cases.iterrows():
        t = case["event_date"]
        # At-risk at t: entered on/before t, still under observation at t (alive, enrolled, event-free at t).
        at_risk = cohort[(cohort["entry_date"] <= t) & (cohort["exit_date"] >= t) &
                         (cohort["person_id"] != case["person_id"])]
        for c in match_cols:                      # exact matching on time-stable factors
            at_risk = at_risk[at_risk[c] == case[c]]
        k = min(N_CONTROLS, len(at_risk))
        ctrl = at_risk.sample(k, random_state=int(rng.integers(1e9))) if k else at_risk
        rows.append({"set_id": case["person_id"], "person_id": case["person_id"],
                     "index_time": t, "is_case": 1})
        for pid in ctrl["person_id"]:
            rows.append({"set_id": case["person_id"], "person_id": pid,
                         "index_time": t, "is_case": 0})
    return pd.DataFrame(rows)

sets = sample_risk_sets(cohort)
# Attach exposure measured AS OF index_time for every member (case and controls alike), then model.
sets = sets.merge(expo, on="person_id", how="left")   # expo computed at each row's index_time upstream
m = ConditionalLogit(sets["is_case"], sets[["cum_days_supply"]], groups=sets["set_id"]).fit()
print(m.summary())   # exp(coef) is the rate (hazard) ratio under density sampling

library(data.table)
library(survival)
N_CONTROLS <- 4L
set.seed(20240101)

sample_risk_sets <- function(cohort) {
  setDT(cohort)
  cases <- cohort[event == 1L]
  out <- vector("list", nrow(cases))
  for (i in seq_len(nrow(cases))) {
    ca <- cases[i]
    t  <- ca$event_date
    # At-risk at t and matched on time-stable factors; exclude the case itself.
    pool <- cohort[entry_date <= t & exit_date >= t & person_id != ca$person_id &
                   sex == ca$sex & age_band == ca$age_band]
    k <- min(N_CONTROLS, nrow(pool))
    ctrl <- if (k > 0L) pool[sample(.N, k)] else pool
    out[[i]] <- rbind(
      data.table(set_id = ca$person_id, person_id = ca$person_id, index_time = t, is_case = 1L),
      data.table(set_id = ca$person_id, person_id = ctrl$person_id, index_time = t, is_case = 0L)
    )
  }
  rbindlist(out)
}

sets <- sample_risk_sets(cohort)
sets <- merge(sets, expo, by = "person_id")          # cum_days_supply as of index_time
fit <- clogit(is_case ~ cum_days_supply + strata(set_id), data = sets)
summary(fit)   # exp(coef) = rate ratio

%let n_controls = 4;

/* Eligible (control, case) pairs: control at risk at the case's event_date, matched on time-stable factors. */
proc sql;
  create table riskpool as
  select c.person_id   as set_id,            /* the case defines the matched set */
         c.event_date  as index_time format=date9.,
         c.sex, c.age_band,
         p.person_id   as ctrl_id,
         ranuni(20240101) as rk
  from work.cohort c
  join work.cohort p
    on  p.entry_date <= c.event_date          /* at risk: entered before event time */
    and p.exit_date  >= c.event_date          /* still observed (alive/enrolled/event-free) at event time */
    and p.person_id  ne c.person_id
    and p.sex        =  c.sex
    and p.age_band   =  c.age_band
  where c.event = 1;
quit;

/* Keep N lowest random keys per case = N sampled controls. */
proc sort data=riskpool; by set_id rk; run;
data controls;
  set riskpool; by set_id;
  retain n; if first.set_id then n = 0;
  n + 1; if n <= &n_controls;
  person_id = ctrl_id; is_case = 0; keep set_id index_time person_id is_case;
run;
data cases;
  set work.cohort(where=(event=1));
  set_id = person_id; index_time = event_date; is_case = 1;
  keep set_id index_time person_id is_case;
run;

data matched; set cases controls; run;

/* Attach exposure measured AS OF index_time, then conditional logistic on the matched sets. */
proc sql;
  create table analytic as
  select m.*, e.cum_days_supply
  from matched m left join work.expo e
    on m.person_id = e.person_id and m.set_id = e.set_id;
quit;

proc logistic data=analytic;
  strata set_id;                                   /* conditional (matched-set) likelihood */
  model is_case(event='1') = cum_days_supply;      /* exp(beta) = rate ratio under density sampling */
run;

Citations

1. [1]Wacholder S. Practical considerations in choosing between the case-cohort and nested case-control designs. Epidemiology. 1991;2(2):155-158.
2. [2]Langholz B, Goldstein L. Risk set sampling in epidemiologic cohort studies. Statistical Science. 1996;11(1):35-53.
3. [3]Lubin JH, Gail MH. Biased selection of controls for case-control analyses of cohort studies. Biometrics. 1984;40(1):63-75.

1. [4]Essebag V, Platt RW, Abrahamowicz M, Pilote L. Comparison of nested case-control and survival analysis methodologies for analysis of time-dependent exposure. BMC Medical Research Methodology. 2005;5:5.