EU PV Regulatory Intelligence news: EU Commission Implementing Regulation 2025/1466 Other
guides

Pharmacovigilance audits and inspections: preparation and readiness guide

What happens during an EMA pharmacovigilance inspection — and how do you prepare for one?

A pharmacovigilance inspection can determine whether a marketing authorization remains active. EMA and national competent authorities (NCAs) inspect MAHs to verify that their pharmacovigilance systems comply with EU Directive 2001/83/EC, EMA Good Pharmacovigilance Practices (GVP), and applicable national legislation. Critical findings can lead to regulatory action — including suspension of marketing authorizations.

This article covers how PV inspections work, what inspectors look for, common findings, and how to prepare.

Understanding PV Inspections

Types of Pharmacovigilance Inspections

EMA GVP Module III (EMA/541760/2011) defines three types of inspections:

  • Routine inspections: Scheduled based on risk assessment; evaluate the MAH's overall PV system compliance
  • Triggered (for-cause) inspections: Initiated when specific concerns arise — e.g., missed reporting deadlines, safety signal concerns, complaints from other regulators
  • Pre-authorization inspections: Conducted before a marketing authorization is granted, particularly for products with complex safety profiles

The EMA Compilation of Union Procedures on Inspections and Exchange of Information (EMA/572454/2014 Rev 17) details the operational framework for how inspections are planned, conducted, reported, and followed up across EU member states.

What Inspectors Assess

A typical PV inspection lasts 3–5 days (on-site or remote) and covers:

  • QPPV oversight and availability — Is the QPPV demonstrably involved in safety decisions? Are oversight activities documented? (GVP Module I)
  • PSMF completeness and currency — Does the PSMF accurately describe the current PV system? Is the logbook of changes maintained? (GVP Module II)
  • ICSR handling — Are adverse events collected, processed, and reported within regulatory timelines? Are expedited reports (15-day) submitted on time? (GVP Module VI)
  • Signal management — Is there a documented signal detection process? Are EVDAS screenings performed regularly? Are signal assessments documented? (GVP Module IX)
  • Periodic reporting — Are PSURs/PBRERs prepared and submitted according to the EURD list timelines? (GVP Module VII)
  • Safety database — Is the database validated per EU Annex 11? Are audit trails functional? Is data integrity maintained? (GVP Module I, Annex)
  • Quality system — Are SOPs in place, current, and followed? Is there an internal audit program? Are CAPAs tracked to closure? (GVP Module I)
  • Training records — Are all PV staff trained on relevant SOPs and GVP requirements? Are training records complete and accessible? (GVP Module I, Section I.B.8)
  • Subcontractor oversight — If PV activities are outsourced, are quality agreements in place? Is the MAH maintaining oversight? (GVP Module I)
  • Risk management — Are RMPs maintained and updated? Are risk minimization measures effective? (GVP Module V)

Classification of Findings

Per the EMA Compilation of Union Procedures, inspection findings are classified as:

  • Critical: Adversely affects the rights, safety, or well-being of patients, or poses a significant risk to data integrity. Requires immediate corrective action. Can lead to suspension of the marketing authorization.
  • Major: Could potentially affect patient safety or indicates significant deviation from GVP. Requires corrective action within a defined timeline.
  • Minor: Departure from good practice that does not significantly affect patient safety or data integrity. Should be addressed but does not usually require immediate action.

Common Inspection Findings

Based on EMA's published pharmacovigilance inspection reports, the most frequently identified areas of non-compliance include:

Signal Management (most common critical/major area)

  • No documented signal detection process
  • EVDAS screenings not performed or not documented
  • No evidence of signal evaluation and assessment
  • Signal management SOPs missing or outdated

QPPV Oversight

  • Insufficient evidence that the QPPV is involved in safety decisions
  • QPPV not available (especially outside business hours)
  • Lack of documented QPPV oversight of outsourced PV activities

ICSR Reporting Timelines

  • Expedited reports (15-day) submitted late
  • Follow-up information not sought or not processed in time
  • Cases not properly assessed for expectedness and seriousness

PSMF Deficiencies

  • PSMF not reflecting the actual PV system
  • Change logbook not maintained
  • Missing or outdated contractual arrangements for outsourced activities

Training

  • Incomplete training records for PV staff
  • No training on new or updated SOPs
  • Subcontractor staff not trained on MAH-specific procedures

PV Gap Analysis: Proactive Compliance Assessment

When to Conduct a Gap Analysis

A gap analysis should be conducted:

  • Before a first inspection: To identify and remediate compliance gaps proactively
  • After a change in PV setup: New outsourcing partner, new safety database, organizational restructuring
  • Annually: As part of the quality management cycle
  • Post-inspection: To verify that all CAPA items have been fully resolved

Gap Analysis Process

Scope definition → Documentation review → Process assessment → Findings classification → Remediation plan → Follow-up verification

The assessment should cover every area that an inspector would review. Using the same findings classification system (critical/major/minor) as EMA inspectors ensures that remediation priorities align with regulatory expectations.

Typical Remediation Timeline

  • Critical findings: Immediate (days) — e.g., establish signal management process
  • Major findings: 1–3 months — e.g., update and validate PSMF, close training gaps
  • Minor findings: 3–6 months — e.g., improve SOP formatting, update document templates

Inspection Readiness: Practical Preparation

Ongoing Readiness (Not Just Pre-Inspection)

The most effective approach to inspection readiness is maintaining inspection-ready status at all times — not scrambling to prepare when an inspection is announced. This means:

  • PSMF is kept up to date continuously (not updated only before inspections)
  • Training records are maintained in real time
  • Signal management is documented monthly
  • ICSR reporting metrics are tracked and reviewed
  • Internal audits are conducted on schedule
  • CAPAs are tracked to completion

When an Inspection Is Announced

When EMA or an NCA announces an inspection (typically 4–8 weeks notice for routine inspections):

  • Review the inspection scope — Understand which products, processes, and time periods will be covered
  • Conduct a rapid gap analysis — Focus on the areas most likely to be examined
  • Prepare a PSMF briefing — Ensure the PSMF is current and that the QPPV can walk inspectors through it
  • Prepare key personnel — Ensure the QPPV, safety officers, and quality staff understand the inspection format and can answer questions confidently
  • Conduct a mock inspection — Simulate the inspection process with internal or external experts playing the role of inspectors
  • Prepare documentation packs — Organize all documents that inspectors are likely to request (SOPs, training records, ICSR samples, signal management logs, audit reports, CAPA logs)

During the Inspection

  • Designate a single point of contact (inspection coordinator) to manage logistics and document requests
  • Answer questions directly and honestly — do not volunteer information beyond what is asked, but never mislead or withhold relevant information
  • Take detailed notes of all questions asked and answers given
  • Request clarification if a question is unclear
  • If a gap is identified during the inspection: acknowledge it and commit to corrective action — do not attempt to justify non-compliance

Post-Inspection: CAPA Management

After the inspection report is received:

  • Develop a CAPA plan for each finding (critical findings first)
  • Assign responsibility and deadlines for each CAPA
  • Implement corrective actions within the agreed timeline
  • Verify effectiveness of corrective actions
  • Document everything — the inspector will review CAPA completion during follow-up

Conclusion

Pharmacovigilance inspections are a reality for every MAH operating in the EU. The question is not whether you will be inspected, but when. Maintaining a compliant PV system year-round — with current documentation, active signal management, and complete training records — is the most effective preparation.

For biotech companies facing their first inspection or seeking to close gaps in their current PV system, a structured gap analysis provides the clearest path to inspection readiness. NextPV has supported 20+ inspections with zero critical findings — because we build inspection readiness into every PV system from the start.