GVP Module VIII: PASS Results, Reporting and Regulatory Follow-up
- GVP Module VIII: PASS Results, Reporting and Regulatory Follow-up
- Introduction
- 1. Start With the Prespecified Question
- 2. Statistical Result Is Not the Same as Safety Conclusion
- 3. Positive, Negative and Inconclusive Findings
- 4. Study Limitations Are Part of the Result
- 5. Interim Results
- 6. Safety Escalation
- 7. The Final Study Report
- 8. Reporting Against the Protocol
- 9. Quality Review Before Finalisation
- 10. Regulatory Reporting for Imposed PASS
- 11. Results From Non-Imposed PASS
- 12. Study Completion Versus Regulatory Closure
- Key Takeaways
- References
- Regulatory Note
- 13. RMP Reassessment
- 14. Signal-Management Follow-Up
- 15. Product-Information Assessment
- 16. Risk-Minimisation Assessment
- 17. PASS and PSUR
- 18. PASS and Other Aggregate Assessments
- 19. Regulatory Questions After Submission
- 20. Additional Analysis
- 21. Substantial Changes to the Study Interpretation
- 22. Negative Findings and Remaining Uncertainty
- 23. Study Results That Contradict Earlier Evidence
- 24. Transparency and Study Registration
- 25. Final Report and Public Information
- 26. Closure Criteria
- 27. Records and Traceability
- 28. Vendor-Generated Final Reports
- 29. Inspection Scenario: Final Report Is Available but No Impact Assessment Exists
- 30. Inspection Scenario: Interim Safety Finding Was Not Escalated
- 31. Inspection Scenario: Regulatory Submission Cannot Be Reconstructed
- 32. Inspection Scenario: RMP Conclusion Was Assumed
- 33. Inspection Scenario: Vendor Conclusion Was Accepted Without Challenge
- 34. Inspection Scenario: Study Was Marked Complete Too Early
- Key Takeaways
- 35. Follow-Up Actions
- 36. When No Action Is Required
- 37. When Further Evidence Is Required
- 38. Regulatory Commitments
- 39. Delays and Missed Milestones
- 40. Final QPPV Assessment
- 41. Evidence Chain for Inspection
- 42. Common Failure: Treating the Final Report as the End
- 43. Common Failure: Overstating Negative Results
- 44. Common Failure: Ignoring Unexpected Findings
- 45. Common Failure: Conflicting Safety Narratives
- 46. Common Failure: Regulatory Closure Is Assumed
- 47. Mature Results-to-Action Model
- Key Takeaways
- References
- Regulatory Note
Introduction
A PASS is not complete merely because data have been collected and analysed. The results must be interpreted against the original safety question, documented appropriately and assessed for their consequences for the pharmacovigilance system.
The result of a PASS may confirm an existing understanding of risk, reduce uncertainty, identify a new concern, change the estimated magnitude of a risk, or show that an expected effect cannot be demonstrated. Each outcome can require a different follow-up response.
This article explains the controlled path from study results to reporting and regulatory or pharmacovigilance action.
1. Start With the Prespecified Question
Results should first be interpreted against the objectives and estimands defined in the protocol.
The organisation should distinguish:
- what the study was designed to answer;
- what it actually observed;
- what can reasonably be inferred;
- and what remains uncertain.
A result should not be presented as answering a question that the study design could not reliably address.
2. Statistical Result Is Not the Same as Safety Conclusion
A statistical association does not automatically establish causality, and a non-significant result does not prove absence of risk.
Interpretation should consider:
- effect estimates;
- confidence intervals;
- exposure;
- outcome definition;
- confounding;
- bias;
- missing data;
- study power and precision;
- and the clinical context.
The final conclusion should therefore integrate epidemiological or statistical evidence with pharmacovigilance and medical assessment.
3. Positive, Negative and Inconclusive Findings
A PASS may produce several broad outcomes.
Evidence supporting an increased risk
The finding may strengthen an existing safety concern or identify a previously unrecognised association.
No evidence of the prespecified effect
This may reduce uncertainty but does not necessarily demonstrate that the risk is absent.
Inconclusive evidence
Wide confidence intervals, inadequate exposure, poor outcome ascertainment, residual confounding or other limitations may prevent a reliable conclusion.
The report should distinguish these outcomes rather than forcing every study into a binary positive/negative conclusion.
4. Study Limitations Are Part of the Result
Limitations should not be relegated to a formulaic final paragraph.
They can materially affect the interpretation of the primary finding.
Examples include:
- selection bias;
- information bias;
- exposure misclassification;
- outcome misclassification;
- incomplete follow-up;
- unmeasured confounding;
- database limitations;
- changes in clinical practice;
- and limited sample size.
The strength of a conclusion should reflect these limitations.
5. Interim Results
Some studies generate interim analyses before the final study report.
Interim findings should be governed according to the protocol and applicable procedures. They should not automatically be treated as definitive conclusions.
However, an interim finding that creates a potentially important safety concern should not be ignored simply because the final analysis is pending.
The organisation should have a defined route for escalation to pharmacovigilance and regulatory functions.
6. Safety Escalation
A PASS can generate information relevant to an ongoing signal, known risk or new safety issue.
Where results could materially affect the safety profile, the appropriate pharmacovigilance assessment should occur without waiting unnecessarily for routine study close-out.
Possible consequences depend on the evidence and regulatory context and can include:
- further signal evaluation;
- additional analysis;
- follow-up studies;
- changes to risk management;
- regulatory communication;
- or changes to product information.
The existence of a PASS does not replace the organisation's other pharmacovigilance obligations.
7. The Final Study Report
The final report should allow a knowledgeable reviewer to understand what was planned, what was done, what was found and what the findings mean.
At a minimum, the report should provide traceability between:
Protocol objective
β
Study conduct
β
Data
β
Analysis
β
Results
β
Interpretation
β
Conclusion
Important deviations from the protocol should be visible and their potential impact assessed.
8. Reporting Against the Protocol
The final report should not silently replace the prespecified analysis with a different analysis that happens to produce a more convenient result.
Where exploratory or post hoc analyses are performed, they should be identified appropriately.
This distinction is particularly important when the study result is used to support a regulatory or risk-management decision.
9. Quality Review Before Finalisation
The final report should undergo appropriate scientific and quality review before approval.
Review can include:
- consistency between protocol and report;
- numerical accuracy;
- table and figure verification;
- statistical-programming outputs;
- interpretation of limitations;
- consistency with the broader safety profile;
- and appropriate regulatory conclusions.
The extent of review should be proportionate to study complexity and significance.
10. Regulatory Reporting for Imposed PASS
Imposed non-interventional PASS are subject to specific EU procedural requirements.
The organisation should maintain a controlled record of the applicable regulatory obligation, procedural milestones, submissions and responses.
The regulatory route depends on the legal basis and type of study. It should therefore be established from the current applicable EU procedure rather than assumed from the study's internal project plan.
11. Results From Non-Imposed PASS
A voluntary PASS may not have the same imposed regulatory procedure, but its results can still be highly relevant to pharmacovigilance and regulatory decision-making.
Where the study supports an RMP, addresses an important safety concern or produces significant new evidence, the organisation should assess the appropriate regulatory and pharmacovigilance consequences.
Voluntary status does not make an important safety finding optional.
12. Study Completion Versus Regulatory Closure
Study completion and regulatory closure are separate concepts.
A study may be scientifically complete while follow-up remains necessary because:
- the final report requires regulatory submission;
- a commitment remains open;
- an RMP must be reassessed;
- a signal requires further action;
- product information may need review;
- or additional evidence is required.
The organisation should define completion criteria that include relevant downstream actions rather than treating database lock as automatic regulatory closure.
Key Takeaways
PASS results should be interpreted against the prespecified scientific question, with uncertainty and limitations made explicit.
Interim findings may require escalation before the final report. Final reporting should preserve traceability from protocol through analysis and conclusion.
Most importantly, study completion should trigger an assessment of what the results mean for the wider pharmacovigilance and regulatory system.
References
- European Medicines Agency. Good Pharmacovigilance Practices (GVP), Module VIII β Post-authorisation safety studies.
- European Medicines Agency. Post-authorisation safety studies (PASS), including current procedural advice and Q&A.
- European Medicines Agency. GVP Module I β Pharmacovigilance systems and their quality systems.
- European Medicines Agency. GVP Module V β Risk management systems.
- Commission Implementing Regulation (EU) No 520/2012, as amended.
- Directive 2001/83/EC, as amended.
Regulatory Note
This article is an educational explanation of PASS results and regulatory follow-up. It does not replace current EU legislation, GVP guidance, applicable PASS procedures or an organisation's approved procedures.
13. RMP Reassessment
Where a PASS addresses an RMP safety concern or missing information, the results should be assessed against the relevant risk-management objective.
The assessment should answer whether the study:
- reduces the identified uncertainty;
- changes the characterisation of the risk;
- changes the frequency or severity estimate;
- identifies a new risk;
- affects the need for additional evidence;
- or changes the effectiveness assessment of risk-minimisation measures.
The conclusion may be that no RMP change is required. That conclusion should nevertheless be based on a documented assessment.
14. Signal-Management Follow-Up
PASS findings can become part of the evidence considered during signal management.
The organisation should maintain traceability between an important study finding and any resulting signal-management activity.
If a signal was the reason for commissioning the study, the final assessment should explicitly consider whether the study resolves, weakens, strengthens or leaves unresolved the original concern.
A PASS should not be considered successful merely because the study was completed if its safety question remains unanswered.
15. Product-Information Assessment
Some PASS findings may have implications for product information.
The organisation should assess, as appropriate, whether the evidence affects:
- an adverse-reaction section;
- warnings or precautions;
- contraindications;
- special populations;
- dosing information;
- or other safety-related information.
The result of the assessment may be that no change is warranted. The important control is that the question was considered by the appropriate function.
16. Risk-Minimisation Assessment
Where the PASS evaluates a risk-minimisation measure, the results should be interpreted against the predefined effectiveness objectives.
The organisation should distinguish:
- implementation of the measure;
- reach of the measure;
- knowledge or behavioural outcomes;
- and actual impact on the safety outcome.
A measure being distributed does not by itself demonstrate that it is effective.
17. PASS and PSUR
Relevant PASS results should be available to the periodic safety evaluation process.
The PSUR should reflect important new evidence arising from completed or relevant ongoing studies where applicable.
The organisation should therefore have a controlled interface between study management and aggregate reporting.
A completed PASS should not remain invisible to the PSUR process merely because it is managed by a separate department or vendor.
18. PASS and Other Aggregate Assessments
A PASS result may also interact with other safety assessments, including signal evaluations, RMP updates and regulatory procedures.
The organisation should avoid creating separate, contradictory safety narratives across documents.
Where different documents contain different conclusions, the rationale should be explainable and scientifically justified.
19. Regulatory Questions After Submission
Regulatory authorities may ask questions about study methods, results, limitations or interpretation.
Responses should be controlled in the same way as other important regulatory correspondence.
The organisation should preserve:
- the question;
- the evidence reviewed;
- the scientific assessment;
- the response;
- approvals;
- and any resulting action.
Questions raised during assessment may also need to be considered in subsequent pharmacovigilance activities.
20. Additional Analysis
Additional analysis may be appropriate when the initial findings leave an important question unresolved.
Such analysis should have a defined rationale and should not be presented as if it were part of the original prespecified analysis when it was not.
The organisation should consider whether the additional analysis affects the original conclusion and whether the need for further work should be documented.
21. Substantial Changes to the Study Interpretation
If new evidence changes the interpretation of the study, the organisation should not simply retain the original conclusion for consistency.
The scientific record should reflect the best supported interpretation available at the time.
Where the changed interpretation affects a regulatory commitment or previous submission, appropriate regulatory assessment should follow.
22. Negative Findings and Remaining Uncertainty
A study that does not demonstrate an increased risk may still leave important uncertainty.
For example, a study may have limited precision for a rare outcome or may be unable to address an important confounder.
The final assessment should therefore distinguish:
no evidence of an association
from:
evidence that an association does not exist.
These are not interchangeable conclusions.
23. Study Results That Contradict Earlier Evidence
A PASS may produce findings that differ from spontaneous reports, clinical trials, literature or previous aggregate assessments.
The correct response is not to select whichever source is most convenient.
The organisation should examine differences in:
- population;
- exposure;
- outcome definition;
- follow-up;
- ascertainment;
- confounding;
- data quality;
- and study design.
The evidence should then be integrated using appropriate scientific judgement.
24. Transparency and Study Registration
Applicable PASS transparency obligations should be considered alongside final reporting.
For non-interventional PASS, the EU PAS Register and related HMA-EMA processes provide important transparency mechanisms. The exact registration and publication requirements depend on the study category and applicable procedure.
Transparency records should remain consistent with the study's actual status and important changes.
25. Final Report and Public Information
Where study information is made publicly available, the organisation should ensure that the public record accurately reflects the study and its status.
Important changes should not result in a public description that is materially inconsistent with the final study report.
Transparency should support understanding of the study without overstating what the evidence demonstrates.
26. Closure Criteria
A mature PASS process defines closure criteria before the study reaches its final stage.
Closure may require confirmation that:
- the final report is approved;
- required regulatory submissions are complete;
- regulatory questions are resolved or transferred to appropriate follow-up;
- RMP implications have been assessed;
- signal implications have been assessed;
- relevant PSUR interfaces are complete;
- commitments are appropriately tracked;
- and required records are retained.
The exact criteria depend on the study and its regulatory status.
27. Records and Traceability
The organisation should be able to reconstruct the path from study results to decisions.
Important records can include:
- final report;
- statistical outputs;
- analysis datasets;
- scientific review comments;
- approval records;
- regulatory submissions;
- authority correspondence;
- impact assessments;
- RMP assessments;
- signal-management records;
- and closure evidence.
The record should demonstrate not only what decision was made, but why.
28. Vendor-Generated Final Reports
Where a vendor prepares the final report, the MAH should retain appropriate scientific oversight.
The MAH should be able to challenge:
- interpretation;
- limitations;
- unexpected findings;
- statistical conclusions;
- and proposed safety implications.
Vendor authorship does not remove the need for MAH review and approval.
29. Inspection Scenario: Final Report Is Available but No Impact Assessment Exists
An inspector asks what the final PASS results changed in the PV system.
The organisation provides the final report but cannot demonstrate any assessment of RMP, signal, PSUR or regulatory implications.
The weakness is not necessarily that a change was required. It is that the organisation cannot demonstrate that the implications were evaluated.
30. Inspection Scenario: Interim Safety Finding Was Not Escalated
A study team identifies a potentially important finding during an interim analysis but waits for the final report before informing pharmacovigilance.
The governance problem is that study completion was treated as a prerequisite for safety action.
The appropriate process should allow important emerging evidence to enter the PV system when warranted.
31. Inspection Scenario: Regulatory Submission Cannot Be Reconstructed
The organisation knows that a PASS result was submitted but cannot produce a controlled copy of the submitted report, approval evidence or relevant correspondence.
This creates a records and regulatory-control weakness.
A mature process should preserve sufficient evidence to reconstruct the submission and subsequent authority interaction.
32. Inspection Scenario: RMP Conclusion Was Assumed
The final PASS report states that there are no implications for the RMP, but no documented RMP assessment exists.
The conclusion may ultimately be correct, but the absence of an assessment record makes the decision difficult to defend.
33. Inspection Scenario: Vendor Conclusion Was Accepted Without Challenge
A CRO concludes that the study does not alter the safety profile. Internal records contain no evidence of meaningful medical or pharmacovigilance review.
The organisation may have outsourced execution, but it has not outsourced accountability.
34. Inspection Scenario: Study Was Marked Complete Too Early
The database was locked and the final report approved, but an outstanding regulatory commitment and an unresolved authority question remained.
The organisation's definition of completion was therefore narrower than its actual regulatory obligations.
Key Takeaways
PASS results should trigger a structured impact assessment across the pharmacovigilance system.
Important interfaces include the RMP, signal management, PSUR, risk minimisation, product information and regulatory commitments.
Closure should be based on completion of the applicable scientific, regulatory and pharmacovigilance actionsβnot simply completion of data collection.
35. Follow-Up Actions
Follow-up should be explicitly linked to the conclusions of the study.
Possible actions include:
- no further action;
- continued monitoring;
- additional analysis;
- additional data collection;
- signal-management activity;
- RMP modification;
- additional risk minimisation;
- regulatory interaction;
- product-information assessment;
- or another study.
The action should be proportionate to the evidence and uncertainty.
36. When No Action Is Required
A well-governed process can legitimately conclude that no additional action is required.
The record should nevertheless explain why.
For example, the study may have adequately addressed the safety question and confirmed the existing risk characterisation without identifying a need for further intervention.
"No action" should therefore be an assessed conclusion, not an absence of a decision.
37. When Further Evidence Is Required
A PASS may show that the original question remains unresolved.
Further evidence may be appropriate where:
- the study lacked sufficient precision;
- important confounding remains;
- exposure was inadequate;
- outcome ascertainment was incomplete;
- the study population was not representative;
- or an unexpected finding requires confirmation.
The next activity should address the remaining uncertainty rather than simply repeat the same study without modification.
38. Regulatory Commitments
Where the PASS is linked to a formal regulatory commitment, the organisation should maintain a controlled record of the commitment and its status.
The record should distinguish:
- study completion;
- submission completion;
- regulatory assessment;
- authority acceptance or further questions;
- and final closure of the commitment.
These events may occur at different times.
39. Delays and Missed Milestones
If a PASS is delayed, the organisation should assess the regulatory and pharmacovigilance consequences rather than treating the delay solely as a project-management issue.
Potential consequences depend on the study and its regulatory status and may include:
- regulatory notification;
- revised timelines;
- escalation;
- additional interim assessment;
- or evaluation of whether the underlying safety question requires another approach.
The applicable regulatory procedure should determine the formal response.
40. Final QPPV Assessment
For a significant PASS, the QPPV or appropriate PV governance forum should be able to answer:
- What did the study find?
- How certain are the findings?
- What were the major limitations?
- Does the evidence alter the safety profile?
- Does it affect an existing signal?
- Does it affect the RMP?
- Does it affect risk-minimisation measures?
- Does it affect the PSUR or other aggregate assessments?
- Does product information require assessment?
- Are regulatory actions or commitments affected?
- Is further evidence required?
- Has closure been appropriately demonstrated?
These questions convert a final report into a pharmacovigilance decision rather than an administrative endpoint.
41. Evidence Chain for Inspection
A strong record can be represented as:
Safety question
β
Protocol
β
Study conduct
β
Data and analysis
β
Results
β
Scientific interpretation
β
Final report
β
PV impact assessment
β
Regulatory assessment
β
Action / no-action decision
β
Implementation
β
Follow-up / closure
An inspector should be able to follow this chain without reconstructing the process from disconnected documents.
42. Common Failure: Treating the Final Report as the End
A common organisational failure is to close the project immediately after final report approval.
This can leave important downstream activities undocumented.
The final report should instead trigger a defined impact-assessment and closure workflow.
43. Common Failure: Overstating Negative Results
A study that does not demonstrate an increased risk is sometimes described as proving that no risk exists.
Such wording may exceed what the study can support.
The conclusion should reflect the precision, design and limitations of the evidence.
44. Common Failure: Ignoring Unexpected Findings
A study may generate findings outside its primary objective.
Unexpected findings should be assessed for relevance to pharmacovigilance rather than ignored because they were not prespecified as the primary endpoint.
The appropriate follow-up depends on the evidence and context.
45. Common Failure: Conflicting Safety Narratives
If the PASS, RMP, PSUR and signal-management records describe the safety issue differently, the organisation should understand why.
Different documents may legitimately use different levels of detail or have different purposes, but material contradictions should not be left unexplained.
46. Common Failure: Regulatory Closure Is Assumed
The absence of an outstanding project task does not necessarily establish regulatory closure.
The organisation should verify the applicable regulatory status and commitments before marking the PASS fully closed.
47. Mature Results-to-Action Model
A mature process can be summarised as:
Study result
β
Scientific interpretation
β
Uncertainty assessment
β
Safety impact assessment
β
RMP / signal / PSUR / RMM interfaces
β
Regulatory assessment
β
Action or documented no-action
β
Implementation
β
Effectiveness / continued monitoring
β
Closure
This model prevents the PASS from becoming a disconnected research output.
Key Takeaways
The value of a PASS lies not only in producing evidence but in converting that evidence into an appropriate pharmacovigilance decision.
The final report should therefore be followed by documented assessment of safety, risk management, aggregate reporting, regulatory commitments and any further evidence required.
A defensible closure record demonstrates both what the organisation decided and why.
References
- European Medicines Agency. Good Pharmacovigilance Practices (GVP), Module VIII β Post-authorisation safety studies.
- European Medicines Agency. Post-authorisation safety studies (PASS), including current procedural advice and Q&A.
- European Medicines Agency. GVP Module V β Risk management systems.
- European Medicines Agency. GVP Module VII β Periodic safety update report.
- European Medicines Agency. GVP Module IX β Signal management.
- Commission Implementing Regulation (EU) No 520/2012, as amended.
- Directive 2001/83/EC, as amended.
Regulatory Note
This article is an educational explanation of PASS results, reporting and regulatory follow-up. It does not replace current EU legislation, GVP guidance, applicable PASS procedures, regulatory commitments or an organisation's approved procedures.
Regulatory requirements and procedures may change. Current EMA and EU requirements should be verified when applying this guidance to an actual PASS.
Inspection scenarios and examples are illustrative unless an authoritative source is specifically identified.