QPPV.COM KNOWLEDGE ASSESSMENT

Knowledge Assessment: GVP Module VI Addendum II—Masking Personal Data in Individual Case Safety Reports

Test your understanding of the concepts covered by GVP Module VI Addendum II: Masking Personal Data in Individual Case Safety Reports.

Question 1 of 10Pass mark: 80%

Question 1 of 10 Which audit approach would most effectively test whether masking controls operate in practice?

Review only the written masking procedure Review only electronic validation logs Compare sampled source documents, internal cases, transmitted ICSRs, narratives, QC records, system settings, training and deviations Interview only the procedure owner and exclude operational staff

Question 2 of 10 How should duplicate detection and privacy protection be reconciled?

Delete all potentially identifying data so duplicate detection cannot use them Transmit all duplicate-detection information externally without restriction Retain sufficient information in a controlled environment for legitimate duplicate management while applying appropriate access and handling controls Avoid duplicate detection for cases containing personal data

Question 3 of 10 How should a hospital-generated patient number generally be treated in the masking process?

It should always be transmitted because it supports traceability It should always be deleted from every internal system It should be assessed for its purpose and transmission context, distinguishing controlled internal use from unnecessary external disclosure It should be replaced with the patient's full name

Question 4 of 10 What is a principal risk of over-masking an ICSR?

It can impair chronology, clinical assessment, duplicate detection and follow-up It guarantees that the report will fail technical validation It increases the amount of unnecessary personal information transmitted It makes internal source traceability automatically stronger

Question 5 of 10 Why should dates not be removed automatically from an ICSR?

Dates are never personal data Dates establish clinical chronology, including exposure, reaction, treatment changes and outcome Dates are required only to identify the reporter Removing dates always causes an electronic validation failure

Question 6 of 10 Which statement best reflects the role of EudraVigilance technical validation in masking control?

Technical validation confirms that no personal data are present Technical validation is unnecessary if a case has been reviewed manually A technically valid message may still contain unnecessary personal information that should have been masked Technical validation replaces narrative review

Question 7 of 10 Which statement best describes the relationship between an internal source record and an external regulatory ICSR?

They must contain identical levels of identifying information The internal record may retain source information under controlled access while the external report contains appropriately masked information The external report should contain more personal data than the internal record The internal source record should be deleted after transmission

Question 8 of 10 Why may a rare disease or small population require a more cautious masking assessment?

Rare diseases are excluded from pharmacovigilance reporting A small number of distinctive details may make re-identification more likely when combined Rare diseases cannot be described in an ICSR narrative Small populations eliminate the need for internal traceability

Question 9 of 10 A processor removes the patient's full name but leaves an exact admission date, named hospital, rare disease and narrow age range in a case concerning a small community. What is the most appropriate interpretation?

The case is necessarily anonymous because the name was removed The remaining details may still create a re-identification risk and require contextual assessment All clinical details must be deleted to ensure compliance Only the hospital name is relevant to privacy assessment

Question 10 of 10 Which approach is most appropriate for patient information in an externally transmitted ICSR?

Transmit the patient's full name whenever it appears in the source Delete all patient characteristics because they are personal data Retain relevant clinical characteristics in an appropriately protected form while avoiding unnecessary direct identifiers Transmit only the suspected reaction and omit exposure and outcome information

QPPV.com

Knowledge Assessment: GVP Module VI Addendum II—Masking Personal Data in Individual Case Safety Reports

Cookie Settings