Every marketing authorisation holder (MAH) operating in the European Union is legally required to appoint a Qualified Person Responsible for Pharmacovigilance (QPPV). This is not optional — Directive 2001/83/EC, Article 104 mandates it. For biotech companies with one to three products, outsourcing the QPPV role is the most common and cost-effective approach. But choosing the wrong provider creates compliance gaps that surface during inspections — and remediation costs are not small ones.
This guide covers the legal requirements, the real cost comparison between in-house and outsourced models, and a practical evaluation framework so you can make an informed decision.
EU QPPV Requirements — What the Law Actually Says
What is an EU QPPV? A Qualified Person Responsible for Pharmacovigilance (QPPV) is the individual legally responsible for the establishment and maintenance of a pharmacovigilance system for a marketing authorisation holder, as defined under Directive 2001/83/EC, Article 104 and Regulation (EC) No 726/2004.
The EU QPPV must:
- Reside and operate in the EU/EEA. The QPPV must be based in a Member State and be continuously available to fulfil their responsibilities.
- Oversee the pharmacovigilance system master file (PSMF). The QPPV is responsible for maintaining and making the PSMF available for inspection upon request, as specified in GVP Module II.
- Ensure timely ICSR submission. All individual case safety reports must be submitted to EudraVigilance within the legally mandated timeframes (15 days for serious, 90 days for non-serious).
- Maintain a functioning signal management process. Per GVP Module IX, the QPPV must ensure signal detection and evaluation activities are in place.
- Serve as the single point of contact for national competent authorities and the EMA on pharmacovigilance matters.
- Have sufficient authority within or over the MAH's PV operations to ensure compliance.
The QPPV role carries personal legal accountability. GVP Module I further specifies the qualifications and ongoing responsibilities, including the duty to ensure adequate training of all PV personnel.
For a detailed overview of the QPPV's scope of work, see our Safety Corner article on EU QPPV Services.
In-House QPPV vs. Outsourced QPPV — When Each Makes Sense
The decision between hiring an in-house QPPV and outsourcing the role depends on your product portfolio, team structure, and EU timeline.
| Factor | In-House QPPV | Outsourced QPPV |
|---|---|---|
| Product count | 3+ marketed products in EU | 1–2 products (or pre-MAA) |
| Existing PV team | Dedicated PV department (5+ people) | No PV team or small team (1–3) |
| EU timeline | Long-term, established EU presence | Entering EU for first time or recently approved |
| Cost profile | Part of EUR 300,000–500,000/year in-house PV cost | 20–30% lower than in-house equivalent |
| Flexibility | Fixed headcount regardless of workload | Scales with product lifecycle |
| Speed to operational | 3–6 months (recruit, onboard, build systems) | 2–4 weeks (QPPV appointment) |
When outsourcing is the clear choice:
- You are filing your first MAA in the EU and do not yet have PV infrastructure.
- You have one to two marketed products and the ICSR volume does not justify a full in-house team.
- You need a QPPV in place quickly to meet a regulatory deadline.
- You want access to an established local QPPV network across multiple Member States.
When in-house makes more sense:
- You have three or more products with growing ICSR volumes.
- You already employ PV professionals and need a senior leader, not an external service.
- Your long-term strategy requires full control of PV data and processes.
Most biotech companies entering the EU for the first time start with an outsourced QPPV and transition to in-house only if their portfolio grows to a point where the cost-benefit shifts. This hybrid approach allows you to build compliance from day one without the overhead of a full PV department.
What an EU QPPV Service Actually Costs
Cost is one of the first questions biotech companies ask — and one of the hardest to answer without context, because QPPV services are rarely priced in isolation. They are typically part of a full-scope pharmacovigilance outsourcing engagement.
In-house cost model:
- Senior QPPV hire: EUR 150,000–200,000 annual compensation (salary + benefits), depending on the Member State.
- Add PV system costs (safety database licence, EudraVigilance access setup, training platform): EUR 50,000–100,000/year.
- Add support staff (at least one PV associate for ICSR processing): EUR 60,000–90,000/year.
- Total: typically part of the EUR 300,000–500,000/year a full in-house PV operation costs for a single-product MAH.
Outsourced cost model:
- QPPV services bundled within full-scope PV outsourcing: 20–30% lower total cost compared to the in-house equivalent.
- The savings come from shared infrastructure (the provider's safety database, established processes, trained staff) and the ability to allocate capacity across multiple clients.
- Pricing is typically structured as a monthly retainer covering QPPV oversight, PSMF maintenance, and regulatory intelligence, with variable costs for ICSR processing based on volume.
What drives cost up:
- Number of marketed products (each adds PSMF complexity, PSUR obligations, and signal management workload).
- ICSR volume (higher case volume = more processing time).
- Number of EU markets requiring local QPPV or local contact person (LCP) coverage.
- Complexity of the product's safety profile (oncology products generate more cases than rare disease treatments with small patient populations).
- Additional services beyond core QPPV: medical writing (PSUR, RMP, DSUR), audit support, regulatory intelligence.
A practical benchmark: If your in-house PV team costs EUR 400,000/year for one product, an outsourced model with equivalent coverage from a specialist provider would typically cost EUR 280,000–320,000/year — while providing access to a broader team, established systems, and a local QPPV network you would otherwise need to build separately.
How to Evaluate an EU QPPV Provider — 8 Questions to Ask
Not all QPPV providers offer the same depth of service. These eight questions help you evaluate what you are actually getting.
1. Where is the QPPV physically based?
The QPPV must reside in an EU/EEA Member State. Confirm the specific country and verify the provider can demonstrate continuous availability. Some providers list a QPPV who is technically EU-based but spread across too many clients to be genuinely available.
2. How many products does the QPPV currently oversee?
A QPPV overseeing five to ten products can provide meaningful attention to each. A QPPV overseeing 50+ products is a name on paper. Ask for the actual number and the workload distribution model.
3. What is the deputy QPPV arrangement?
Every QPPV setup must include a documented deputy who can assume full responsibilities during absences. Ask who the deputy is, what their qualifications are, and how handover is managed. This is a common inspection focus area.
4. What local QPPV network do they have?
Certain EU Member States require a local contact person for pharmacovigilance (LCP) or a local QPPV in addition to the EU-level QPPV. Ask which countries the provider covers, whether through employed staff or subcontracted partners, and how quality oversight of the local network is managed.
5. What is their inspection track record?
This is the single most important differentiator. Ask how many pharmacovigilance inspections their clients have undergone, what the outcomes were, and whether any critical or major findings were related to QPPV oversight.
At NextPV, we have supported 20+ pharmacovigilance inspections with a 100% success rate — zero critical findings attributable to our PV systems or QPPV services.
6. How do they handle PSMF maintenance?
The PSMF is a living document that must be kept current at all times per GVP Module II. Ask how often they update it, what triggers an update, and whether updates are proactive or reactive (i.e., only before inspections).
7. What safety database do they use?
If the provider uses a different safety database than what your organisation plans to use long-term, data migration becomes a risk. Understand which system they operate, whether they can work within your database, and how ICSR data is managed across systems.
8. What is the onboarding timeline?
A specialist provider should be able to appoint a QPPV within 2–4 weeks. Full PV system setup — including safety database configuration, PSMF creation, EudraVigilance registration, and process documentation — typically takes 3–6 months. Get a specific timeline with milestones, not a vague range.
Local QPPV Network — Why One EU QPPV Is Not Enough
The EU QPPV covers your obligations at the European level. But pharmacovigilance is not exclusively managed from Brussels.
Several Member States require a local contact person for pharmacovigilance (LCP) or, in some cases, a local QPPV who serves as the point of contact for the national competent authority. The requirements vary:
- Germany (BfArM/PEI): Requires a local contact person (Stufenplanbeauftragter) for nationally authorised products.
- France (ANSM): Requires a local responsible person for pharmacovigilance for certain product types.
- Spain (AEMPS): Requires a local responsible person.
- Italy (AIFA): Requires local PV contact arrangements.
- Nordic countries, Benelux, CEE: Requirements vary — some require formal LCP notification, others accept the EU QPPV directly.
When you evaluate a QPPV provider, ask specifically which countries they cover through their local network. A provider with a pan-European network saves you the complexity of managing multiple local subcontractors independently.
NextPV maintains a European network of local QPPVs and contact persons covering 30+ countries, with centralised quality oversight from our EU QPPV team.
Red Flags When Selecting a QPPV Provider
Walk away — or at least dig deeper — if you encounter any of these:
- The provider cannot name the QPPV or deputy. If the specific individual is not identified before contract signing, the "service" is administrative, not operational.
- No documented inspection track record. Inspections are the ultimate validation of a PV system's quality. A provider with no inspection experience is an untested partner.
- The QPPV oversees 50+ products. At that workload, meaningful oversight of your product is unlikely. Inadequate QPPV oversight is the most common critical inspection finding according to GVP Module III inspection statistics.
- No local QPPV network. If you plan to market in multiple EU countries, a provider without local coverage will leave gaps that become your problem.
- PSMF updates only happen before inspections. The PSMF must be current at all times. Reactive maintenance is a compliance risk.
- Pricing that seems unusually low. QPPV services require qualified professionals and maintained systems. Significantly below-market pricing usually means the "QPPV" is nominal — a name and signature without operational substance.
Choosing the Right QPPV Provider: Key Takeaways
- Every EU MAH needs a QPPV — it is a legal requirement, not a nice-to-have.
- For biotech companies with 1–2 products entering the EU, outsourcing is typically 20–30% more cost-effective than in-house, with faster time to operational.
- Evaluate providers on inspection track record, QPPV capacity, deputy arrangements, local network coverage, and PSMF maintenance practices.
- Ask the eight questions listed above before signing any contract.
Frequently Asked Questions
How long does it take to appoint an outsourced EU QPPV?
A specialist provider can typically appoint a QPPV within 2–4 weeks. However, the QPPV appointment is only one part of the setup. Building a complete, inspection-ready PV system — including safety database configuration, PSMF creation, EudraVigilance registration, SOPs, and training — takes 3–6 months. Starting early is critical: companies that engage a QPPV provider 12+ months before planned MAA submission avoid the timeline compression that leads to compliance gaps.
Can one QPPV cover all EU member states?
Yes. The EU QPPV is appointed at the Union level and covers all Member States where the MAH holds marketing authorisations. However, certain Member States additionally require a local contact person for pharmacovigilance (LCP) or a local QPPV who serves as the point of contact for the national competent authority. This means you need one EU QPPV plus local contacts in specific countries — which is why choosing a provider with an established European network matters.
What happens if my QPPV leaves or is unavailable?
Every QPPV arrangement must include a documented and qualified deputy QPPV. The deputy must be able to assume full QPPV responsibilities immediately during absences or transitions. When you outsource to a provider like NextPV, deputy coverage is built into the service agreement — the continuity risk sits with the provider, not with you. If you employ an in-house QPPV, you must ensure the deputy arrangement is contractually and operationally documented, and that the deputy has current knowledge of your PV system.