Yellow Card scheme (UK)
The Yellow Card scheme is the United Kingdom's national system for collecting reports of suspected adverse drug reactions, incidents involving medical devices, defective or counterfeit medicines, and safety concerns about e-cigarettes, run by the Medicines and Healthcare products Regulatory Agency (MHRA). Established in 1964 following the thalidomide tragedy, it accepts reports from healthcare professionals, patients, carers and companies through the Yellow Card website, app, integrated clinical systems and the industry gateway, and is the UK counterpart of EudraVigilance and the FDA's MedWatch. Since Brexit, UK reports are no longer routed through the EU system, so marketing authorisation holders must report UK cases to the MHRA directly under the Human Medicines Regulations 2012, with a UK QPPV responsible for the UK pharmacovigilance system.
The MHRA uses Yellow Card data for signal detection, benefit-risk assessment and regulatory action, publishes interactive Drug Analysis Profiles, and shares data with the WHO Uppsala Monitoring Centre. Reporters are asked for the suspected product, the reaction, the patient's age, sex and (optionally) initials or a local identifier, relevant medical history and outcome, and their own contact details for follow-up. The scheme emphasises that reporters need not be certain of causality: suspicion is enough, and under-reporting remains its main limitation.
Yellow Card processing is governed by the UK GDPR and the Data Protection Act 2018, with the MHRA as controller relying on its public task and the public health condition for special category data. Patient identity is minimised (no names or full dates of birth are collected), reporter details are kept confidential and are not passed to companies without consent, and pharmaceutical companies receiving anonymised case data for their products must handle it under their own pharmacovigilance and data protection procedures. For a non-UK sponsor or marketing authorisation holder, UK safety reporting is one of the processing activities that requires a UK representative under Art. 3A UK GDPR and should be reflected in the RoPA and transfer documentation alongside EU reporting to the EMA. iliomad acts as UK Data Protection Representative for life sciences companies.
