Pharmacovigilance
Pharmacovigilance is defined by the World Health Organization as the science and activities relating to the detection, assessment, understanding and prevention of adverse effects or any other medicine-related problem. In the EU it is governed by Directive 2001/83/EC and Regulation (EC) No 726/2004 as amended by the 2010 pharmacovigilance package, Implementing Regulation (EU) 520/2012, the EMA's Good Pharmacovigilance Practices (GVP) modules, and, for clinical trials, Chapter VII of the Clinical Trials Regulation. In the United States, 21 CFR 314.80 and 312.32 apply.
Marketing authorisation holders must operate a pharmacovigilance system described in a Pharmacovigilance System Master File, appoint a Qualified Person for Pharmacovigilance (QPPV) residing in the EU, collect and report individual case safety reports of suspected adverse reactions to EudraVigilance within 15 days (serious) or 90 days (non-serious), perform signal detection, submit periodic safety update reports, maintain risk management plans and conduct post-authorisation safety studies. In trials, sponsors report SUSARs and annual safety reports. Activities are frequently outsourced to CROs and specialist providers, and safety databases such as Argus or ArisGlobal host the data.
Pharmacovigilance processes health data of patients and personal data of reporters (healthcare professionals, patients, consumers). The legal basis is compliance with a legal obligation (Art. 6(1)(c) GDPR) combined with the public health exception of Art. 9(2)(i), so consent is neither required nor appropriate, the right to erasure does not apply, and records are retained for the life of the product plus at least 10 years. Data minimisation is nevertheless required: reports should contain only medically relevant information, patient identifiers should be limited to initials, age or age group and sex where national law allows, and reporter identity should be protected. Because safety data flows globally to affiliates, licensing partners and regulators, international transfers must be covered by appropriate safeguards (intra-group BCRs or SCCs) or the public-interest derogation, and safety data exchange agreements between partners should include data protection clauses. Pharmacovigilance is a standard chapter of every pharmaceutical company's RoPA and a frequent subject of iliomad gap analyses.
