Coordination of pharmacovigilance inspections
Human
Veterinary
Compliance and inspections
Pharmacovigilance
This content applies to human and veterinary medicines.
Pharmacovigilance inspections are conducted to ensure that requirements for monitoring the safety of medicines are met. The responsibility for carrying out the inspections rests with the national competent authorities.
The European Medicines Agency (EMA) plays an important role in the harmonisation and coordination of pharmacovigilance inspections at the Union level. It is involved in:
Marketing authorisation holders and applicants need to use EMA's IRIS system to communicate with EMA on GVP inspections requested by the Agency’s scientific committees.
Using IRIS for GVP inspections improves efficiency by harmonising and automating processes and re-using master data held by EMA. It also simplifies retrieving and reporting data.
More information on the use of EMA's IRIS system:
EMA and the Pharmacovigilance Inspectors Working Group provide guidance on human pharmacovigilance obligations in the form of questions and answers (Q&As).
These Q&As are based on the Pharmacovigilance Inspectors Working Group's interpretation of pharmacovigilance legislation.
This Q&A aims at addressing the situation where a marketing authorisation holder (MAH) is using a system (as intended) from a vendor, including the built-in possibilities for configuration. The system in question may be a system validated by the supplier, but installed at the MAH, or a system provided as software-as-a-service (SaaS or cloud solution). Different requirements will apply in cases where the MAH is changing/adding functionalities to the system.
Today, the use of electronic systems e.g. for safety data collection has proved to be more the standard than the exception. A considerable number of electronic system for collection, assessment, submission etc. of safety data are provided by, or purchased from, vendors and customized to varying degrees. PhV inspectors receive an increasing amount of questions from MAHs, and deviations are given during PhV inspections, regarding the level of validation/qualification needed to be performed by an MAH when using a system that has already been (or is supposed to have been) validated by the supplier.
According to Commission Implementing Regulation (EU) No 520/2012 of 19 June 2012 on the performance of pharmacovigilance activities provided for in Regulation (EC) No 726/2004, article 6 on subcontracting, the marketing authorisation holder may subcontract certain activities of the pharmacovigilance system to third parties. It shall nevertheless retain full responsibility for the completeness and accuracy of the pharmacovigilance system master file, and according to Guideline on good pharmacovigilance practices (GVP) Module I - Pharmacovigilance systems and their quality systems section I.B.8, facilities and equipment which are critical for the conduct of pharmacovigilance should be subject to appropriate checks, qualification and/or validation activities to prove their suitability for the intended purpose.
The MAH is ultimately responsible for the validation of the pharmacovigilance processes, which are supported by electronic systems. The MAH may rely on qualification documentation provided by the vendor if the qualification activities performed by the vendor have been assessed as adequate, but may also have to perform additional qualification/validation activities based on a documented risk assessment.
The conditions for an MAH to use the vendor’s qualification documentation include, but are not limited to the following:
???????MAHs and vendors should be aware that if the electronic systems are used for generating/handling pharmacovigilance data or maintain control and oversight of pharmacovigilance processes, during PhV inspections documentation regarding the qualification process and any other relevant documentation on the e-system maintained at the MAH level, as well as on the vendor level, could be inspected.
Documentation regarding the validation of processes and qualification of systems is considered essential by inspectors and it is likely to be requested during inspections. This is irrespective of whether or not the MAH has contracted out activities related to electronic systems and whether the MAH choses to consider the above mentioned assessment of vendor systems/processes/documentation as an audit
This Q&A aims at clarifying the interpretation of day zero for medical literature reports received by marketing authorisation holders, applicants or third parties acting on their behalf; They are referred as ‘marketing authorisation holders’ throughout this document.
In line with the requirements and modalities provided in GVP Module VI, Chapters VI.B.1.1.2, VI.C.2.2.3, VI.C.3, VI.C.4, and VI.App.2, marketing authorisation holders are requested to maintain awareness of publications from medical literature to identify reports of suspected adverse reactions, record them as individual case safety reports (ICSRs) and report them to EudraVigilance.
Marketing authorisation holders are expected to perform a global literature search through a systematic literature review of widely used reference databases no less frequently than once a week and to review the received information without delay. As specified in the GVP Module VI, Chapter VI.App.2.7, for valid ICSRs identified through this activity, the day zero for the submission is taken to be the date on which the search was conducted.
Marketing authorisation holders should also monitor with the same frequency (or in the respective publication frequency, if less frequent than once a week) relevant published abstracts from meetings and draft manuscripts as well as publications in local medical journals in countries where medicinal products have a marketing authorisation.
For ICSRs identified in relevant published abstracts from meetings and draft manuscripts as well as publications in local medical journals (i.e., all mandatory medical literature monitoring activities with the exception of weekly literature searching in reference databases), the regulatory time clock for reporting starts (day zero) as soon as marketing authorisation holders identifies sufficient information to determine that the minimum criteria for a valid ICSR reporting are met. The marketing authorisation holders should review the received information without delay to identify and manage potential cases of suspected adverse reactions. This should be done within a week of the date of receipt. Therefore, the clock start (day zero) for the regulatory reporting of valid ICSRs identified in relevant published abstracts from meetings and draft manuscripts as well as publications in local medical journals should not be beyond 7 calendar days of the date of receipt (electronic/ hard copy) of that information by marketing authorisation holders.
If publications in local medical journals (electronic/ hard copy) are received by marketing authorisation holders while being also indexed in the literature reference databases monitored weekly, the first received information should be considered to determine the day zero. If the publication is first received through local medical journals, it should be reviewed without delay and day zero should not go beyond 7 calendar days of the date of receipt; if the publication is first received through results of the systematic literature review from the monitored reference databases, it should be reviewed without delay and day zero should be taken to be the date on which the search was conducted.