Emerging Safety Issues in Pharmacovigilance
Most new safety information can be handled through established pharmacovigilance processes: individual case reporting, literature monitoring, signal detection, signal validation, periodic reporting and risk-management activities. Occasionally, however, information is sufficiently serious and urgent that waiting for the normal signal-management cycle would be inappropriate. EU Good Pharmacovigilance Practices use the term emerging safety issue (ESI) for this situation.
An ESI is therefore not simply a "high-priority signal" or an internally scored safety concern. The defining feature is regulatory urgency: the information has potential for a major impact on the benefit-risk balance of the medicinal product and/or on patients or public health, and its urgency and seriousness cannot permit delay in handling. GVP Module IX states that when a marketing authorisation holder becomes aware of an ESI, it should notify the relevant competent authority or authorities and EMA in writing within two working days of becoming aware of the issue.
The ESI route is deliberately reserved for exceptional concerns. GVP warns that the system should not be saturated with less urgent information. This means that governance must be able to do two things at once: escalate genuine urgent safety concerns quickly, while avoiding the tendency to classify every important or novel signal as an ESI.
- Emerging Safety Issues in Pharmacovigilance
- Purpose and Regulatory Framework
- Relationship to Signal Management
- ESI Versus Other Urgent Safety Concepts
- Recognising and Escalating a Potential ESI
- Initial Assessment
- The Two-Working-Day Notification Expectation
- Governance and Decision Rights
- Documentation and Evidence
- After Notification: Assessment and Regulatory Action
- Potential Failure Modes
- Every serious signal is classified as an ESI
- An internal scoring threshold replaces scientific judgement
- Notification waits for a complete assessment
- ESI notification is assumed to replace ICSR reporting
- A product-quality problem remains isolated in quality systems
- The initial notification is sent, but follow-through is weak
- Inspection Considerations
- Practical Checklist
- Key Takeaways
- References
- Regulatory Note
Purpose and Regulatory Framework
The purpose of the ESI mechanism is to ensure that information requiring urgent regulatory attention reaches authorities before routine processes would otherwise do so. It allows the authority and the MAH to assess urgency, potential public-health impact and appropriate next steps without waiting for ordinary signal-confirmation or periodic-reporting timelines.
The principal EU sources are:
- GVP Module IX – Signal management, which defines the ESI notification pathway and its relationship to validated signals requiring urgent attention;
- GVP Module VI, which recognises important new evidence related to an authorised medicinal product that may have major impact on benefit-risk, patients or public health as an ESI and directs notification according to Module IX; and
- EMA's current Signal management and Contacts at EMA pages, which provide the current route for notifying EMA and the relevant national competent authority contacts.
The legal and regulatory context surrounding the underlying safety information remains applicable. If an ESI is based on one or more suspected adverse reactions, the ordinary ICSR reporting obligations do not disappear. GVP Module VI explicitly states that ESI notification is additional to applicable ICSR submission requirements.
The regulatory definition matters
The old operational temptation is to create an internal numerical score—severity plus novelty plus publicity, for example—and declare that any score above a threshold is an ESI. Such tools can support internal triage, but they are not the regulatory definition.
The regulatory question is qualitative and consequence-based: is this safety concern so urgent and potentially important that normal handling would create an unacceptable delay in regulatory attention?
This requires scientific judgement. A single well-documented event can sometimes be more urgent than a large statistical pattern if the event has extreme clinical significance and plausible product association. Conversely, a high disproportionality statistic may not be an ESI if clinical review shows that the issue can be managed through the ordinary signal process.
Relationship to Signal Management
An ESI and a signal are related concepts but are not interchangeable.
A signal is information suggesting a new potentially causal association, or a new aspect of a known association, that warrants further investigation. Signals progress through detection, validation, confirmation where applicable, analysis/prioritisation, assessment and recommendation for action.
An ESI is defined by the need for urgent regulatory attention. GVP Module IX states that validated signals requiring urgent attention should be reported as ESIs. An ESI can therefore arise from a signal, but the ESI mechanism describes the urgency of handling rather than a separate scientific method of causality assessment.
Examples of circumstances that may generate an ESI
The following are illustrative rather than automatic regulatory classifications:
- a newly recognised, serious and clinically plausible reaction with potential for major immediate harm;
- a cluster suggesting an acute product-related risk that may require rapid restriction or communication;
- important new epidemiological evidence indicating a substantial risk in a large or vulnerable population;
- a quality or contamination issue with direct safety implications for patients;
- a major change in severity, frequency or affected population for a known risk; or
- external regulatory information that materially changes the urgency of the product's safety position in the EU.
The same type of information may or may not qualify as an ESI depending on strength of evidence, potential impact and urgency. The category should not be assigned mechanically from the source alone.
ESI Versus Other Urgent Safety Concepts
Pharmacovigilance professionals should avoid using ESI as an umbrella term for every urgent safety process.
ICSR expedited reporting
A serious suspected adverse reaction may be subject to expedited ICSR reporting requirements, but an individual expedited case is not automatically an ESI. ESI notification is used when the safety issue itself has the urgent, potentially major benefit-risk or public-health significance described in GVP.
Clinical-trial safety reporting
Clinical-trial legislation and guidance contain their own concepts and timelines, including SUSAR reporting and urgent safety measures. Those requirements should be followed within their own legal framework. A post-authorisation ESI article should not replace them with a company-created 24/48/72-hour workflow.
Product quality defects and recalls
A quality defect can have safety consequences and may contribute to an ESI, but quality-defect notification, recall or rapid-alert obligations may also apply independently. The responsible functions should coordinate rather than assume that one notification pathway substitutes for all others.
Safety communication
An ESI may lead to urgent safety communication, but communication is an outcome or control, not part of the ESI definition itself. GVP Module XV and applicable procedural requirements govern safety communication.
Recognising and Escalating a Potential ESI
A mature pharmacovigilance system needs a route by which urgent safety information can bypass ordinary meeting cycles and reach decision-makers quickly. The control should be simple enough to function under pressure and broad enough to capture information from all relevant sources.
The first step is not to prove causality. It is to recognise that the potential consequence of delay may be important enough to justify accelerated review.
Sources of potential ESIs
Potential ESIs can arise from many parts of the organisation, including:
- spontaneous or solicited ICSRs;
- literature;
- clinical development or post-authorisation studies;
- signal detection and signal assessment;
- epidemiological or real-world evidence;
- regulatory intelligence;
- product quality information with safety consequences;
- medical information or complaints that reveal a clinically important pattern; and
- external scientific information.
The organisation should therefore avoid designing the ESI process as a sub-process accessible only to the signal-management team. Relevant staff and service providers need to know how to escalate information that may require urgent PV attention.
Initial Assessment
The initial assessment should be rapid but scientifically disciplined. It should establish enough information to decide whether the concern meets the ESI concept and what immediate actions are necessary.
Useful questions include:
- What exactly is the safety concern?
- What is the source and how reliable is it?
- How serious is the potential clinical consequence?
- How many patients could plausibly be affected?
- Is the information new, or does it materially alter a known risk?
- Is there a plausible association with the medicinal product?
- Are there important alternative explanations?
- Could delay in regulatory attention expose patients to avoidable harm?
- Is immediate risk minimisation, communication, suspension, restriction or further investigation potentially needed?
- Which jurisdictions and authorisations are affected?
The objective is to support a defensible urgency decision. A full signal assessment may follow, but the ESI notification should not be delayed simply because every scientific uncertainty has not yet been resolved.
What should not determine ESI status by itself?
The following may increase concern but are not independent regulatory criteria:
- media attention;
- litigation;
- a large number of social-media posts;
- a high disproportionality statistic;
- commercial importance of the product;
- the presence of one fatal case without adequate clinical context; or
- an internal numerical risk score.
These factors may influence urgency or evidence gathering, but the ESI determination still depends on the regulatory definition and scientific judgement.
The Two-Working-Day Notification Expectation
GVP Module IX states that when an MAH becomes aware of an emerging safety issue, it should notify the relevant competent authority or authorities and EMA in writing within two working days of becoming aware of the issue.
The wording is important. The clock is linked to awareness of the ESI, not to completion of a full investigation or formal committee meeting. Internal procedures should therefore be designed so that escalation, medical review and regulatory decision-making can occur quickly enough to support the external expectation.
An organisation may choose shorter internal targets to protect the regulatory deadline. Those internal targets are company controls, not separate GVP requirements, and should be labelled accordingly.
Notification recipients
EMA's current contact guidance instructs MAHs to notify:
- EMA via its designated emerging-safety-issue mailbox; and
- the relevant competent authority or authorities of the Member State or Member States concerned.
National contact points are published by EMA. The exact recipient set should reflect the authorisations and jurisdictions affected.
Information to include
GVP Module IX states that the notification should describe:
- the safety concern;
- the source or sources of information;
- actions planned or already taken; and
- relevant supporting documentation.
A concise notification can therefore be appropriate when the issue is genuinely urgent and the assessment remains ongoing. The organisation should communicate what is known, what remains uncertain and what is being done next rather than delaying notification to produce a polished final assessment.
Relationship to standalone signal notification
GVP Module IX explains that where an ESI is notified, a separate standalone signal notification is not required for the same issue. This avoids duplicate notification pathways. Other applicable obligations—such as ICSR submissions or variation requirements—remain relevant in their own right.
Governance and Decision Rights
The ESI pathway should identify who can make urgent decisions when normal governance is unavailable. The precise organisational design is flexible, but the decision chain should be clear.
Typical participants may include the product safety physician or signal owner, QPPV, regulatory affairs, quality, clinical development where relevant, and senior medical or safety leadership. Other functions may be needed depending on the nature of the issue—for example manufacturing quality for a contamination concern.
The QPPV should have visibility appropriate to the responsibility for the pharmacovigilance system and product safety profile. The QPPV need not personally perform every initial analysis, but an ESI affecting EU-authorised products is the type of material safety matter for which QPPV awareness and ability to influence action are particularly important.
Deputies and continuity
Urgent safety governance cannot depend on one individual being available. Back-up arrangements should ensure that a potential ESI can be assessed and notified during QPPV or key-staff absence. The arrangements should connect to the organisation's wider QPPV back-up and business-continuity procedures rather than inventing a separate statutory role.
Documentation and Evidence
Speed does not remove the need for traceability. An ESI record should allow a later reviewer to reconstruct:
- when the information first entered the organisation;
- when the potential ESI was recognised;
- the evidence available at each decision point;
- who assessed urgency and why;
- who was notified and when;
- what immediate actions were taken;
- how the subsequent scientific assessment evolved; and
- how the issue was ultimately resolved or incorporated into routine signal/risk management.
This evidence can exist across validated safety systems, controlled documents, correspondence and governance records. A single dedicated ESI form is useful in some organisations but is not a universal regulatory requirement.
After Notification: Assessment and Regulatory Action
Notification is not the end of the ESI process. Once authorities are informed, the MAH should continue to develop the evidence and coordinate the issue through the appropriate signal, risk-management, product-information and regulatory pathways.
Depending on the issue, subsequent actions may include:
- expedited clinical and scientific signal assessment;
- targeted follow-up of cases;
- epidemiological or real-world analyses;
- review of clinical-trial or non-clinical evidence;
- urgent product-information changes;
- update of the RMP where warranted;
- additional risk-minimisation measures;
- temporary restriction, suspension or other regulatory action; or
- safety communication to healthcare professionals or patients.
The appropriate action depends on the evidence and regulatory assessment. An ESI does not predetermine the outcome.
Relationship to the RMP
An ESI under assessment does not automatically become an important identified or potential risk in the RMP. EMA's RMP procedural Q&A explains that an RMP update may be warranted when the ESI is confirmed and the resulting important identified or potential risk needs to be added to the list of safety concerns.
This preserves the distinction between an urgent concern being evaluated and a safety concern that has completed enough assessment to justify formal incorporation into the risk-management strategy.
Potential Failure Modes
The following are illustrative failure modes rather than reported inspection findings.
Every serious signal is classified as an ESI
Over-classification can saturate the urgent pathway and reduce its usefulness. GVP explicitly cautions against transmitting less urgent information as ESIs.
An internal scoring threshold replaces scientific judgement
A risk score can structure discussion but cannot define the regulatory category. A concern below an arbitrary score may still require urgent action, while a high score driven by publicity may not meet the ESI definition.
Notification waits for a complete assessment
The two-working-day expectation is intended for urgent issues. Waiting for a full signal report or formal monthly committee can defeat the purpose of the ESI route.
ESI notification is assumed to replace ICSR reporting
Where the issue involves reportable suspected adverse reactions, applicable ICSR submission obligations continue independently.
A product-quality problem remains isolated in quality systems
A defect with major patient-safety implications may require coordinated PV assessment and potentially ESI handling. Functional silos can delay recognition of the wider safety consequence.
The initial notification is sent, but follow-through is weak
Authorities may receive an ESI notification while the company's own assessment, risk-management actions or product-information changes proceed slowly or without clear ownership. Urgency should persist until the immediate risk is adequately controlled or transferred into a defined regulatory process.
Inspection Considerations
An inspector reviewing ESI management is likely to test whether the organisation can recognise urgent concerns, escalate them rapidly, meet the two-working-day notification expectation and preserve a traceable scientific decision record.
Potential inspection questions include:
- How does staff recognise a potential ESI?
- Which functions can raise one?
- Who decides whether the GVP definition is met?
- How is QPPV awareness ensured?
- How are weekends, leave and unexpected absences covered?
- Can the company demonstrate when it first became aware of the issue?
- Were EMA and the relevant national authorities notified within the expected timeframe?
- What evidence was available at notification and what remained uncertain?
- Were applicable ICSR or other reporting obligations handled separately?
- How was the issue integrated into signal assessment, RMP, product-information or communication processes?
- If the concern was not notified as an ESI, is the rationale understandable for a borderline case?
These are illustrative inspection questions. The actual inspection scope depends on the products, events and regulatory context.
Practical Checklist
When a potential ESI is identified, the organisation should be able to confirm that:
- the source and time of awareness are recorded;
- urgent clinical review has been initiated;
- the issue has been assessed against the GVP ESI definition rather than an invented threshold alone;
- the QPPV and other necessary decision-makers can be reached or covered by back-up arrangements;
- affected EU authorisations and Member States have been identified;
- EMA and relevant competent authorities are notified within two working days when the ESI definition is met;
- the notification describes the concern, sources, actions and relevant documentation;
- applicable ICSR, quality-defect, clinical-trial or other obligations are handled independently where required;
- the scientific assessment continues after notification;
- subsequent regulatory and risk-management actions are owned and tracked; and
- closure or transition into routine signal/risk management is documented.
Key Takeaways
An emerging safety issue is an urgent regulatory safety concept, not simply another category of signal. Its defining features are potential major impact on benefit-risk, patients or public health and a level of urgency that does not permit delay in handling.
For EU-authorised medicinal products, GVP Module IX states that an MAH becoming aware of an ESI should notify EMA and the relevant competent authority or authorities in writing within two working days. The notification should describe the concern, its source, actions planned or taken and relevant supporting documentation.
Validated signals requiring urgent attention may become ESIs, but not every signal does. Likewise, expedited ICSRs, clinical-trial safety reporting, product-quality defects and safety communications have their own regulatory pathways and should not be collapsed into the ESI concept.
A strong ESI process therefore combines rapid recognition, scientific judgement, regulatory communication, QPPV visibility, continuity arrangements and traceable follow-through. Internal shorter timelines and scoring tools may help the organisation meet the external requirement, but they should be presented as internal controls rather than EU regulatory rules.
References
- European Medicines Agency. Guideline on good pharmacovigilance practices (GVP) Module IX – Signal management (Rev. 1). EMA/827661/2011 Rev. 1. See section IX.C.3.1 on emerging safety issues. https://www.ema.europa.eu/en/documents/scientific-guideline/guideline-good-pharmacovigilance-practices-gvp-module-ix-signal-management-rev-1_en.pdf
- European Medicines Agency. Guideline on good pharmacovigilance practices (GVP) Module VI – Collection, management and submission of reports of suspected adverse reactions to medicinal products (Rev. 2). See section VI.C.2.2.6. https://www.ema.europa.eu/en/documents/regulatory-procedural-guideline/guideline-good-pharmacovigilance-practices-gvp-module-vi-collection-management-submission-reports-suspected-adverse-reactions-medicinal-products-rev-2_en.pdf
- European Medicines Agency. Signal management. https://www.ema.europa.eu/en/human-regulatory-overview/post-authorisation/pharmacovigilance-post-authorisation/signal-management
- European Medicines Agency. Contacts at the European Medicines Agency — Emerging safety issues. https://www.ema.europa.eu/en/about-us/contacts-european-medicines-agency
- European Medicines Agency. Risk management plans in the post-authorisation phase: questions and answers. https://www.ema.europa.eu/en/human-regulatory-overview/post-authorisation/pharmacovigilance-post-authorisation/risk-management-plans-rmp-post-authorisation-phase-questions-answers
- European Medicines Agency. Guideline on good pharmacovigilance practices (GVP) Module XV – Safety communication (Rev. 1). Available from the EMA GVP collection.
- European Commission. Commission Implementing Regulation (EU) No 520/2012, consolidated text. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02012R0520-20260212
Regulatory Note
This article describes the EU post-authorisation ESI framework. GVP Module IX provides the key regulatory guidance, including the expectation to notify EMA and relevant competent authorities within two working days of becoming aware of an ESI. Internal 24-hour, 48-hour, 72-hour or seven-day targets, scoring matrices, committee structures and templates are not universal EU legal requirements unless adopted by an organisation as internal controls or required by another applicable framework. Clinical-trial safety reporting, ICSR submission, product-quality defect handling, variation procedures and safety communication may impose separate obligations and should be assessed independently.