GVP Module VIII: PASS in the Risk Management Plan

Introduction

A post-authorisation safety study does not exist in isolation from the risk management system. Where a medicinal product has an identified or potential safety concern, or where additional evidence is needed to understand the product's benefit-risk profile or the effectiveness of risk-minimisation measures, a PASS can become one component of the pharmacovigilance plan within the RMP.

Understanding this relationship requires keeping two concepts separate. The RMP explains how a product's risks are being characterised and managed; the PASS generates evidence needed to support part of that process. The study is therefore an evidence-generating activity within a broader decision system, rather than the RMP itself.

This distinction becomes particularly important when the study is changed, completed or produces unexpected findings. The organisation must be able to move from the study question to its implications for the safety specification, pharmacovigilance activities, risk-minimisation measures and subsequent RMP updates.

1. Start With the Safety Question

The appropriate starting point for placing a PASS in an RMP is the unresolved safety question.

The RMP identifies what is known about the medicine's important risks, potential risks and missing information and describes the pharmacovigilance and risk-minimisation activities intended to address those concerns. EMA describes RMPs as including the medicine's safety profile, measures to prevent or minimise risks, plans for studies and other activities to gain further knowledge, and plans for measuring the effectiveness of risk-minimisation measures. citeturn0search1

A PASS should therefore have a clear relationship with a safety concern or risk-management objective. The question might involve characterising the frequency or clinical features of an important risk, identifying risk factors, addressing missing information, or determining whether a risk-minimisation measure is achieving its intended effect.

The quality of the RMP-PASS relationship depends on being able to state this relationship precisely. A study described only as "further safety monitoring" provides much less useful governance than one whose objective explains exactly what uncertainty it is intended to reduce.

2. The Pharmacovigilance Plan Is the Bridge

The relationship between the RMP and PASS is best understood through the pharmacovigilance plan.

The safety specification identifies the concern. The pharmacovigilance plan then describes the activities intended to investigate or characterise it. A PASS may be one of those activities when routine pharmacovigilance cannot adequately answer the question.

This creates a logical chain:

Safety concern / missing information
              ↓
        Knowledge gap
              ↓
   Pharmacovigilance objective
              ↓
             PASS
              ↓
        New evidence
              ↓
   Updated safety assessment
              ↓
     RMP lifecycle decision

The value of this model is that it prevents the study from becoming detached from the reason it was commissioned. The PASS should produce evidence that can be used in the decision process identified by the RMP.

3. When Does a PASS Belong in the RMP?

A PASS should be considered for inclusion when its objectives address a relevant risk-management question and the study forms part of the agreed pharmacovigilance strategy.

This can include studies intended to:

• identify or characterise a risk;
• estimate the occurrence of an adverse reaction or important safety outcome;
• investigate risk factors or vulnerable populations;
• address important missing information;
• investigate a safety concern that cannot be adequately characterised through routine sources;
• or evaluate the effectiveness of a risk-minimisation measure.

The inclusion of a study should follow the safety question and the regulatory context. It should not be driven simply by the availability of a convenient database or by a desire to label an existing epidemiological project as a PASS.

GVP Module V links studies in the pharmacovigilance plan to safety concerns identified in the safety specification and states that studies designed to address safety concerns or measure the effectiveness of risk-minimisation measures should be included in the pharmacovigilance plan. citeturn0search22

4. PASS Is Not the Same as an RMP Commitment

A useful distinction is between the scientific activity, the RMP entry describing that activity, and any formal regulatory obligation associated with it.

The PASS is the study. The RMP describes its role within the risk-management system. A regulatory authority may additionally impose a legal obligation to conduct a study or establish a specific requirement through the applicable regulatory procedure.

These layers should not be collapsed into one concept.

For example, a non-interventional PASS may be required in an RMP without automatically being an imposed PASS in the legal sense discussed in the preceding I7 article. Conversely, an imposed PASS will generally have a regulatory basis that must be reflected appropriately in the RMP where the study forms part of the pharmacovigilance plan.

The study inventory should therefore distinguish at least:

• the scientific objective;
• the RMP relationship;
• whether the study is part of the pharmacovigilance plan;
• whether it is imposed or voluntary;
• the regulatory basis where applicable;
• and the expected outputs and milestones.

This distinction prevents the RMP from becoming an unreliable substitute for the underlying regulatory record.

5. Choosing PASS Instead of Routine Pharmacovigilance

The existence of a safety concern does not automatically mean that a PASS is necessary.

Routine pharmacovigilance activities may already provide sufficient evidence. For example, spontaneous reports, literature monitoring, signal detection, aggregate review, targeted follow-up or existing data sources may adequately characterise a concern.

A PASS becomes useful when the remaining question requires evidence that routine activities are unlikely to provide with sufficient reliability or precision.

The decision should therefore identify the limitation of the existing evidence and explain why the proposed study is capable of addressing it. A study that cannot resolve the underlying uncertainty is a poor fit for the RMP even if its methods are technically sound.

6. PASS Objectives Must Map to the RMP Question

The study objective should be capable of being mapped back to the relevant RMP concern.

Consider a safety specification that identifies an important potential risk but has insufficient information about its occurrence in a particular population. A PASS might be designed to estimate the incidence of a defined outcome in that population.

The relationship is then explicit:

Important potential risk
        ↓
Missing epidemiological information
        ↓
PASS objective: estimate occurrence
        ↓
Study result
        ↓
Risk characterisation
        ↓
RMP reassessment

By contrast, a study whose objective is so broad that its findings cannot be connected to a specific RMP decision creates ambiguity at every later stage: protocol design, analysis, interpretation and regulatory follow-up.

7. Studies Measuring Risk-Minimisation Effectiveness

A particularly important category is the PASS used to measure the effectiveness of risk-minimisation measures.

Here the study is not merely asking whether an adverse event occurs. It is asking whether an intervention intended to reduce a risk is producing the desired effect in clinical practice.

The study should therefore be connected to the relevant risk-minimisation objective and to the way effectiveness will be judged. This may require assessing implementation, behavioural or process indicators, and, where appropriate, clinical or epidemiological outcomes.

GVP Module V identifies studies measuring the effectiveness of risk-minimisation measures as part of the pharmacovigilance plan and links them to the corresponding risk-minimisation plan. citeturn0search21

This creates an important governance distinction: implementation of an RMM is not the same as demonstrating that the RMM is effective.

8. The RMP Does Not Replace the Study Protocol

The RMP describes the role of the PASS at the level of the risk-management system. It does not normally provide the methodological detail required to conduct the study.

The protocol should define the scientific question in operational terms, including the population, exposure, outcomes, data sources, analysis and other design elements appropriate to the study.

The two documents therefore have complementary functions:

The distinction is operationally important. A well-written RMP cannot compensate for an inadequate protocol, and a scientifically strong PASS cannot compensate for an RMP that fails to incorporate its implications.

9. RMP Inclusion Is a Lifecycle Decision

The RMP should not be treated as a static record of the study as originally conceived.

EMA states that RMPs are continually modified and updated as new information becomes available, including when an important pharmacovigilance or risk-minimisation milestone is reached or when new information may significantly change the benefit-risk profile. citeturn0search1

A PASS can therefore affect the RMP at several points:

1. when the study is initially added;
2. when its objectives or design change materially;
3. when interim information changes the understanding of the safety concern;
4. when the final results become available;
5. when the results alter risk characterisation or risk minimisation;
6. and when the study or associated regulatory commitment is completed.

The RMP relationship should consequently be maintained throughout the study lifecycle rather than checked only when the initial RMP is prepared.

10. Practical Scenario: A PASS Is Added to Address Missing Information

Suppose the safety specification identifies an important area of missing information because evidence in a clinically relevant population is limited.

The MAH proposes a PASS using an established healthcare database to characterise the relevant outcome.

The RMP should explain the relationship between the missing information and the study objective. The protocol should then translate that objective into a design capable of producing useful evidence.

If the study later shows that the population was adequately represented and the missing information has been substantially reduced, the organisation should assess whether the safety specification and pharmacovigilance plan remain appropriate. The study result should not simply be filed as a completed project.

11. Practical Scenario: The PASS No Longer Answers the RMP Question

Suppose a study was designed when a safety concern was poorly characterised. During the study, new evidence changes the scientific question and the original outcome becomes less informative.

The organisation should not continue the study mechanically merely because the original protocol exists.

Instead, it should assess the new evidence, determine whether the protocol remains scientifically fit for purpose, and evaluate whether a substantial amendment, additional analysis, replacement study or RMP change is required.

For an imposed PASS, the applicable regulatory procedure for substantial amendments must also be followed. Current EMA procedural guidance provides specific controls for such amendments. citeturn0search6

12. Practical Scenario: The PASS Produces a New Safety Signal

Suppose the PASS identifies an association that was not adequately anticipated in the original safety specification.

The result should enter the organisation's signal-management process rather than remaining confined to the study team. The organisation should assess the strength and limitations of the evidence, consider whether the safety profile has changed and determine whether immediate regulatory or risk-management action is required.

Only after that assessment can the organisation determine whether the RMP requires revision.

This illustrates the direction of information flow: the PASS informs the RMP; the RMP does not predetermine the scientific conclusion of the PASS.

Key Takeaways

A PASS within an RMP is best understood as an evidence-generating component of a wider risk-management system.

The starting point is the safety concern or knowledge gap. The pharmacovigilance plan defines why additional evidence is needed; the PASS protocol defines how that evidence will be generated; the results inform scientific assessment; and the RMP is subsequently reassessed in light of what has been learned.

The regulatory status of the study must remain distinct from its RMP relationship. Likewise, inclusion in the RMP does not remove the need for a scientifically appropriate protocol or for independent assessment of the resulting evidence.

The strongest systems preserve this chain throughout the study lifecycle, so that an inspector or future reviewer can understand not only that a PASS existed, but why it existed, what it was intended to resolve and how its findings changed—or confirmed—the risk-management strategy.

References

1. European Medicines Agency. GVP Module V — Risk management systems.
2. European Medicines Agency. GVP Module VIII — Post-authorisation safety studies.
3. European Medicines Agency. GVP Module VIII Addendum I — Requirements and recommendations for submission of information on non-interventional PASS.
4. European Medicines Agency. Risk management plans and current post-authorisation RMP guidance.
5. Directive 2001/83/EC, as amended.
6. Regulation (EC) No 726/2004, as amended.
7. Commission Implementing Regulation (EU) No 520/2012, as amended.

Regulatory Note

This article explains the relationship between PASS and EU risk management plans. It distinguishes legal requirements from GVP guidance and recommended operational practice. The applicable status of an individual PASS should be established from its current regulatory documentation, RMP, authorisation conditions and applicable EU and national requirements.

GVP guidance and procedural requirements are subject to revision. Current EMA and EU requirements should therefore be verified before applying this framework to an actual product or study.

Practical scenarios are illustrative unless an authoritative source is specifically identified.

13. How the PASS Fits the RMP Lifecycle

Once a PASS has been established as an appropriate pharmacovigilance activity, its relationship with the RMP needs to remain visible as the study progresses. This is because the RMP is a lifecycle document: the relevance of a study can change as evidence accumulates, regulatory conclusions develop and the product's risk profile evolves.

The practical question at each milestone is therefore not simply whether the study is still listed. It is whether the study remains the appropriate activity for the safety question it was intended to address and whether its emerging or final evidence changes any other component of the risk-management system.

This produces a recurring cycle:

RMP safety concern
      ↓
PASS design
      ↓
Study evidence
      ↓
Scientific interpretation
      ↓
RMP impact assessment
      ↓
Updated risk-management strategy
      ↓
Further evidence generation or monitoring

The cycle can end when the evidence is sufficient and the relevant uncertainty is resolved, but closure should itself be justified. A completed study is not automatically an obsolete study, and an RMP entry should not remain indefinitely merely because it was once appropriate.

14. Updating the RMP When the Study Changes

A PASS may change without the underlying safety question changing. For example, the data source may become unavailable, recruitment may prove infeasible, an outcome definition may need refinement, or the study population may need to be modified.

The organisation should first determine whether the change affects the study's ability to answer the RMP question. If it does, the RMP impact should be assessed alongside the protocol and regulatory implications.

For an imposed non-interventional PASS, substantial amendments are subject to the applicable regulatory procedure. For other PASS, the legal procedure may differ, but a scientifically meaningful change can still require reassessment of the RMP because the evidence-generation strategy may no longer be equivalent to the one originally agreed.

This distinction illustrates why protocol change control and RMP change control are related but not identical processes.

15. When a PASS Should Be Added or Removed From the Pharmacovigilance Plan

The pharmacovigilance plan should reflect the activities actually needed to address the safety concerns identified in the safety specification.

A study may need to be added when new evidence creates an important knowledge gap that routine pharmacovigilance cannot adequately address. Conversely, a planned study may need to be reconsidered if its scientific objective is no longer relevant, another evidence source has adequately answered the question, or the study cannot achieve its intended purpose.

GVP Module V recognises that studies included in the pharmacovigilance plan should relate to identified safety concerns and that a study may need to be modified or removed from the pharmacovigilance plan when it does not have an appropriate pharmacovigilance objective or is unlikely to achieve its stated scientific purpose. citeturn0search22

Removal should therefore be an evidence-based lifecycle decision, not simply a project-management decision to delete an overdue activity.

16. PASS and Risk Characterisation

A PASS may change the characterisation of a risk in several ways.

It may provide a more reliable estimate of occurrence, identify previously unrecognised risk factors, demonstrate that a risk is concentrated in a particular population, reduce uncertainty around an important potential risk, or fail to confirm an anticipated association.

The scientific conclusion should then be translated into the terminology and structure used by the RMP. This may affect the safety specification, the pharmacovigilance plan, risk-minimisation measures or missing-information assessment.

The translation should preserve scientific nuance. A study result that changes the estimated frequency of an outcome does not necessarily mean that the risk should be reclassified in the same way as a study that establishes a new causal association.

17. PASS and the Safety Specification

The safety specification is the point at which the product's important risks, potential risks and missing information are described in the RMP framework.

When a PASS addresses one of these elements, its results should be considered against the evidence that originally justified the classification.

For example, if a PASS investigates an important potential risk and produces evidence that substantially changes the strength of the association, the organisation should assess whether the risk remains appropriately classified and whether the supporting evidence in the safety specification remains current.

The assessment should also consider evidence that does not confirm the original concern. Negative or inconclusive results can be scientifically important, particularly where the original concern was sufficiently important to justify additional evidence generation.

18. PASS and Missing Information

Missing information is not simply a list of unanswered questions. It reflects limitations in knowledge that may affect understanding of the safety profile in a clinically relevant context.

A PASS designed to address missing information should therefore have an endpoint that can meaningfully reduce that uncertainty.

Suppose a product has limited safety information in a particular population. A PASS that generates substantial evidence in that population may reduce the missing-information concern. However, the organisation should consider whether the study population, duration, exposure and outcome ascertainment are sufficient to address the original limitation.

The conclusion should be based on what the study actually established, not merely on the fact that the planned sample size was reached.

19. PASS and Risk-Minimisation Measures

When a PASS is linked to risk minimisation, the study may provide evidence about whether a measure is being implemented and whether it achieves its intended effect.

These are different questions.

A healthcare professional may receive a communication correctly, yet the intended prescribing behaviour may not change. Similarly, a patient may receive educational material without the desired reduction in risk occurring.

The study design should therefore reflect the effectiveness question defined in the risk-management strategy. The resulting evidence may lead to continuation, modification, strengthening, replacement or removal of a measure, depending on the evidence and regulatory context.

GVP Module V specifically connects studies measuring risk-minimisation effectiveness with the pharmacovigilance and risk-minimisation plans. citeturn0search21

20. PASS and the PSUR

The RMP is not the only downstream interface of PASS evidence.

Where the study generates information relevant to the ongoing safety evaluation of the product, the evidence should also enter the appropriate aggregate reporting process. The PSUR may need to describe the study, its progress, results or implications depending on the reporting period and the significance of the evidence.

This creates an important relationship between the documents:

PASS
 ↓
Evidence
 ↙   ↓   ↘
RMP  PSUR  Signal management

The three processes have different purposes. The PASS generates evidence, the PSUR performs periodic cumulative evaluation, and signal management assesses emerging safety information. None should simply copy the conclusions of another process without applying its own scientific purpose.

21. PASS and Signal Management

A PASS may generate a potential signal, provide evidence relevant to an existing signal or reduce uncertainty around a previously evaluated concern.

When this occurs, the study team should have a defined route into the pharmacovigilance signal-management process.

The study report should not become the only location in which the finding is assessed. Conversely, signal management should not reinterpret the study without access to sufficient information about its design, limitations and analytical methods.

The strongest interface allows the two processes to remain distinct while sharing the evidence needed for an appropriate conclusion.

22. PASS and Product Information

A PASS does not directly change product information. The evidence it generates may, however, contribute to a regulatory assessment that results in a product-information change.

The organisation should therefore avoid a simplistic rule such as "new safety finding equals label change". The appropriate response depends on the totality of evidence, the clinical significance of the finding, existing wording, regulatory assessment and the applicable legal procedure.

Where a product-information assessment is required, the decision and its rationale should be traceable to the evidence and regulatory conclusion.

23. PASS and Regulatory Commitments

The relationship between the PASS and a formal regulatory commitment needs to be explicit.

A study may be listed in an RMP because it forms part of the agreed pharmacovigilance strategy while also being subject to a separate regulatory obligation. In that situation, the organisation should maintain a clear distinction between the RMP representation of the study and the legal source of the obligation.

The study tracker should therefore connect, where applicable:

• the RMP activity;
• the regulatory commitment;
• the study protocol;
• relevant milestones;
• interim information;
• final results;
• regulatory submissions;
• and implementation actions.

This creates one evidence chain without pretending that the documents have identical regulatory functions.

24. Practical Scenario: A Study Result Changes the Safety Specification

A PASS investigating an important potential risk finds evidence substantially stronger than was available when the RMP was prepared.

The scientific team concludes that the finding is credible and clinically relevant. The organisation should then assess whether the safety specification remains accurate, whether the pharmacovigilance plan remains sufficient and whether risk-minimisation measures require reassessment.

The key governance step is the impact assessment. The study result itself is evidence; the RMP change is a subsequent regulatory and scientific decision.

25. Practical Scenario: The Study Does Not Confirm the Concern

A PASS designed to investigate an important potential risk does not confirm the anticipated association.

That result should not automatically be interpreted as proof that the risk does not exist. The organisation should consider study power, outcome definition, exposure, residual confounding, data quality and other limitations.

If the evidence substantially reduces the uncertainty, the RMP may eventually require modification. If important uncertainty remains, further monitoring or evidence generation may still be appropriate.

The correct conclusion follows from the strength of the evidence, not from whether the study result is positive or negative.

26. Practical Scenario: A Risk-Minimisation Effectiveness Study Finds Weak Effect

Suppose a PASS finds that an additional risk-minimisation measure is being implemented but is not producing the intended clinical effect.

The result should trigger assessment of why effectiveness is inadequate. The appropriate response could involve modifying the measure, improving implementation, changing the target population, introducing another intervention or reconsidering the overall risk-management strategy.

The organisation should distinguish an implementation failure from an intrinsically ineffective intervention. The distinction affects the appropriate corrective action.

Key Takeaways

The relationship between PASS and the RMP is dynamic. The RMP defines the risk-management context in which evidence is generated, while the PASS provides evidence that can change that context.

The most important interfaces are the safety specification, pharmacovigilance plan, risk-minimisation plan, PSUR, signal-management process and regulatory-commitment framework.

A mature system does not update the RMP mechanically whenever a study ends. It performs a scientific impact assessment and determines what, if anything, should change.

The result may be a revised risk characterisation, a new or modified pharmacovigilance activity, altered risk minimisation, continued monitoring or a documented conclusion that no change is necessary. The quality of the system lies in the reasoning and traceability connecting the evidence to that decision.

References

1. European Medicines Agency. GVP Module V — Risk management systems.
2. European Medicines Agency. GVP Module VIII — Post-authorisation safety studies.
3. European Medicines Agency. GVP Module VII — Periodic safety update report.
4. European Medicines Agency. GVP Module IX — Signal management.
5. European Medicines Agency. Risk management plans and post-authorisation RMP guidance.
6. Directive 2001/83/EC, as amended.
7. Regulation (EC) No 726/2004, as amended.
8. Commission Implementing Regulation (EU) No 520/2012, as amended.

Regulatory Note

This article explains how PASS activities interface with the EU risk-management plan. It distinguishes legal requirements, GVP guidance and recommended operational practice. The regulatory status and RMP requirements of an individual study should be verified against current EU legislation, the applicable authorisation and current regulatory documentation.

Practical scenarios are illustrative unless an authoritative source is specifically identified.

27. What Happens When the RMP and PASS Tell Different Stories?

The RMP and the PASS should normally be consistent, but they are produced at different points in the evidence lifecycle. A discrepancy therefore requires investigation rather than automatic correction of one document to match the other.

For example, the RMP may describe a risk as an important potential risk when a later PASS produces evidence that strengthens the association. The organisation should first assess the new evidence scientifically and then determine whether the RMP classification remains appropriate.

The direction of control is therefore important: the RMP should reflect the current scientific and regulatory understanding; it should not be used to constrain the interpretation of new evidence.

28. When the PASS Becomes More Important Than Originally Expected

A study can produce evidence that is substantially more significant than anticipated when it was added to the RMP.

This can occur when an expected risk is observed at a higher frequency, when a previously uncertain association becomes more credible, when a vulnerable population is identified, or when a risk-minimisation measure performs differently from expectations.

Such findings should enter the appropriate escalation pathway promptly. The organisation should determine whether immediate signal-management, regulatory assessment, risk-minimisation action or product-information review is necessary rather than waiting for the next scheduled RMP revision.

The later RMP update records the resulting risk-management position; it is not a substitute for timely action on important new evidence.

29. When the PASS Becomes Less Relevant

The opposite situation can also occur. New evidence may answer the original question through another source, change the clinical context, or make the original concern less relevant.

In such circumstances, continuing a PASS solely because it appears in an old RMP can create unnecessary research activity without improving patient-safety knowledge.

The organisation should assess whether the study remains scientifically justified, whether it can still achieve its stated objective, and whether the RMP should be changed. For an imposed study, the regulatory status must be considered separately before any decision to discontinue or materially alter it.

30. Evidence Is Not the Same as an RMP Decision

One of the most important governance distinctions is between evidence, scientific interpretation and risk-management decision.

A PASS produces evidence. Scientists interpret that evidence in the context of the study design and the wider body of knowledge. Pharmacovigilance and regulatory functions then determine what the evidence means for the product's safety profile and regulatory position. The RMP records the resulting risk-management strategy.

This sequence prevents premature conclusions such as "the PASS found a signal, therefore the RMP must change" or "the PASS was negative, therefore the risk can be removed".

Each conclusion requires an assessment of the totality of evidence.

31. QPPV Oversight of the PASS-RMP Interface

The QPPV does not need to reproduce the epidemiological analysis, but significant PASS activity should be visible within the pharmacovigilance governance system.

For a significant study, the QPPV should be able to understand:

• what safety question the study addresses;
• why the question requires additional evidence;
• whether the study is appropriately represented in the RMP;
• whether its regulatory status is correctly classified;
• whether significant changes have occurred;
• what emerging evidence has been identified;
• what the final results mean for the safety profile;
• and what actions follow from the findings.

This is particularly important when the study is connected to a formal regulatory obligation or a major risk-minimisation programme.

32. Inspection Evidence for the PASS-RMP Relationship

An inspector should not have to infer the relationship between the PASS and RMP from the final study report alone.

A useful evidence chain is:

Safety concern
      ↓
Safety specification
      ↓
Pharmacovigilance objective
      ↓
RMP / pharmacovigilance plan
      ↓
PASS protocol
      ↓
Study conduct and data
      ↓
Results and interpretation
      ↓
RMP impact assessment
      ↓
Regulatory / PV action
      ↓
Updated RMP or documented no-change decision

The exact documents used to demonstrate the chain will vary by organisation. What matters is that the relationships are reconstructable and that significant decisions have identifiable owners, dates, evidence and rationale.

33. Inspection Scenario: PASS Listed in the RMP but No Scientific Link

An inspector asks why a PASS appears in the RMP. The organisation can identify the study but cannot explain which safety concern or knowledge gap it addresses.

This suggests that the RMP entry has become an administrative listing rather than a meaningful representation of the pharmacovigilance strategy.

The corrective question is not simply whether the RMP contains enough words. It is whether the organisation can explain the scientific reason for the study and how its results will inform risk management.

34. Inspection Scenario: Final Results but No RMP Impact Assessment

The PASS final report is available and the study is formally complete, but there is no evidence that the organisation assessed its implications for the safety specification or pharmacovigilance plan.

The final result may ultimately require no RMP change. Nevertheless, the absence of an impact assessment means that the organisation cannot demonstrate that this conclusion was reached through an effective process.

35. Inspection Scenario: RMP Updated Before the Evidence Was Interpreted

A study produces an unexpected finding and the organisation immediately changes the RMP before the study has undergone appropriate scientific and medical assessment.

This reverses the normal evidence-to-decision sequence. An RMP should reflect a justified scientific and regulatory conclusion, not an unassessed preliminary observation.

Where an emerging finding may be important, the correct response is timely escalation and assessment—not premature documentation of an unconfirmed conclusion.

36. Inspection Scenario: The RMP Was Updated but the Study Governance Was Not

An RMP is updated to describe a new PASS, but the study protocol, governance arrangements, responsibilities and milestones do not reflect the change.

This creates a disconnect between the strategic risk-management document and the operational evidence-generation process.

The organisation should therefore treat a material RMP change as a trigger to verify the corresponding study governance and regulatory controls.

37. Inspection Scenario: A Risk-Minimisation PASS Has No Defined Success Criterion

A PASS is intended to evaluate an additional risk-minimisation measure, but the RMP and protocol do not establish how effectiveness will be judged.

Without a defined evaluative framework, the study may generate data without answering whether the intervention achieved its intended purpose.

The corrective approach is to connect the RMP objective, the effectiveness concept, the study endpoint and the eventual decision criteria before interpreting the results.

38. Inspection Scenario: A Completed PASS Remains Indefinitely in the RMP

A study has answered its original question and all relevant downstream actions have been completed, but the RMP continues to list the study without explanation.

This may indicate that the RMP lifecycle is not being actively maintained.

The appropriate response is to assess whether the study should remain as a completed activity for historical traceability, whether the pharmacovigilance plan requires revision, and whether any residual monitoring or commitment remains. The decision should be documented rather than made solely to shorten the RMP.

39. A Mature PASS-RMP Governance Model

A mature system treats the RMP and PASS as connected components with different functions:

                  RMP
                   │
          ┌────────┴────────┐
          ↓                 ↓
 Safety specification   Risk minimisation
          │                 │
          ↓                 ↓
 Pharmacovigilance plan   Effectiveness question
          │                 │
          └────────┬────────┘
                   ↓
                  PASS
                   ↓
                Evidence
                   ↓
          Scientific assessment
                   ↓
       ┌───────────┼───────────┐
       ↓           ↓           ↓
     Signal       PSUR      Regulatory
   management                 action
       └───────────┼───────────┘
                   ↓
             RMP reassessment
                   ↓
          Updated strategy

The model emphasises that the RMP is not simply the destination for PASS results. It is part of a feedback system in which risk knowledge determines evidence needs and evidence can in turn change the risk-management strategy.

40. Practical Decision Framework

When deciding whether a PASS should remain, change or leave the RMP, the organisation can work through five questions:

1. What question is the study answering?
2. Does that question remain relevant to the current safety profile?
3. Is the study still capable of answering it?
4. What has the evidence shown so far?
5. What does the current evidence require the risk-management system to do?

The answers should then be translated into the applicable scientific, regulatory and RMP actions.

This framework is intentionally different from a checklist that simply asks whether an RMP field has been completed. It tests whether the study remains connected to a meaningful pharmacovigilance decision.

41. Final QPPV Questions

For significant PASS activity, the QPPV should be able to obtain clear answers to:

• What safety concern or knowledge gap does the study address?
• Why was a PASS appropriate rather than routine pharmacovigilance alone?
• How is the study represented in the RMP and pharmacovigilance plan?
• Is the regulatory status correctly understood?
• Has the study remained scientifically fit for purpose?
• Have important interim findings been assessed promptly?
• What did the final study establish, and what remains uncertain?
• What changed in the safety specification?
• What changed in pharmacovigilance activities?
• What changed in risk minimisation?
• What was the effect on the PSUR and signal-management processes?
• Were regulatory commitments affected?
• Has the RMP been updated where necessary?
• If no update was required, is the reasoning documented?
• Can the complete evidence-to-decision chain be reconstructed?

These questions provide a practical governance test without turning the QPPV into the owner of every technical study activity.

Key Takeaways

PASS and the RMP should be understood as a feedback relationship. The RMP identifies the risk-management question and defines the evidence-generation strategy; the PASS generates evidence; scientific and regulatory assessment determines its significance; and the RMP is revised when the resulting knowledge changes the risk-management strategy.

The most important control is therefore not whether a PASS appears in an RMP. It is whether the organisation can demonstrate a continuous and rational connection between the safety concern, the study, the evidence and the eventual risk-management decision.

A mature system can also explain why no change was made. This is as important as documenting a new risk or additional measure because it demonstrates that the evidence was actually assessed rather than simply carried forward.

References

1. European Medicines Agency. GVP Module V — Risk management systems.
2. European Medicines Agency. GVP Module VIII — Post-authorisation safety studies.
3. European Medicines Agency. GVP Module VIII Addendum I — Requirements and recommendations for submission of information on non-interventional PASS.
4. European Medicines Agency. Risk management plans and current post-authorisation RMP guidance.
5. European Medicines Agency. GVP Module VII — Periodic safety update report.
6. European Medicines Agency. GVP Module IX — Signal management.
7. Directive 2001/83/EC, as amended.
8. Regulation (EC) No 726/2004, as amended.
9. Commission Implementing Regulation (EU) No 520/2012, as amended.

Regulatory Note

This article explains the relationship between PASS and EU risk-management plans for educational and professional reference purposes. It distinguishes legal requirements, GVP guidance and recommended operational practice. The status and obligations of an individual study should always be verified against its current regulatory documentation and applicable law.

GVP and procedural guidance are subject to revision. Current EMA and EU requirements should be checked before applying this framework to an actual product or PASS.

Inspection scenarios and practical examples are illustrative unless an authoritative source is specifically identified.