GVP Module VIII: Post-Authorisation Safety Studies Explained

Introduction

A post-authorisation safety study (PASS) is a pharmacovigilance study conducted after a medicinal product has been authorised to obtain information relevant to the safety of the product, its safety profile, or the effectiveness of risk-management measures.

PASS is broader than a single study design. Under EU pharmacovigilance law, a PASS can be interventional or non-interventional, although GVP Module VIII places particular emphasis on non-interventional PASS. citeturn0search20

The regulatory importance of a PASS depends not only on the scientific question but also on why the study is being conducted, who initiated or manages it, whether it is imposed by a competent authority, and how it relates to the product's risk-management system.

This article establishes the foundation for the Module VIII series. Later articles examine when a PASS is required, protocol and design requirements, governance, results and regulatory follow-up in greater depth.

1. What Is a PASS?

EU legislation defines a PASS as a study relating to an authorised medicinal product conducted with the aim of:

• identifying a safety hazard;
• characterising a safety hazard;
• quantifying a safety hazard;
• confirming the safety profile of the medicinal product; or
• measuring the effectiveness of risk-management measures.

This definition is important because a PASS is defined primarily by its post-authorisation safety purpose, not by a particular statistical method or data source. citeturn0search20

A study can therefore be relevant to PASS requirements even when it does not resemble a conventional clinical trial.

2. Why PASS Exists

Authorisation does not mean that all clinically relevant safety questions have been resolved.

After marketing, the medicinal product may be used:

• in larger populations;
• for longer periods;
• in different healthcare settings;
• in populations under-represented in pre-authorisation development;
• together with other medicines;
• or under conditions that generate new safety information.

Post-authorisation studies can provide evidence that cannot be obtained adequately from spontaneous reporting or other routine pharmacovigilance activities alone.

A PASS may therefore address a specific uncertainty rather than responding to a confirmed safety problem.

3. PASS and the Risk Management System

PASS is closely connected with risk management but is not synonymous with the RMP.

An RMP describes the identified and potential risks, missing information and the pharmacovigilance and risk-minimisation activities used to address them.

A PASS can be one of those pharmacovigilance activities.

For example, a study may be included in an RMP to:

• investigate an important potential risk;
• address missing information;
• further characterise an identified risk;
• or evaluate the effectiveness of a risk-minimisation measure.

The study is therefore an activity, while the RMP is the broader risk-management framework in which that activity may sit.

4. PASS Is Not Necessarily an RMP Study

Not every PASS is conducted because it appears as a commitment in an RMP.

GVP Module VIII recognises several categories of non-interventional PASS, including studies imposed as obligations, specific obligations associated with exceptional circumstances, studies required in an RMP, and voluntarily conducted studies. citeturn0search20

This distinction matters operationally.

A company should not assume that a study is outside PASS requirements merely because the current RMP does not list it as an activity.

The purpose and regulatory circumstances of the study must be assessed.

5. Interventional and Non-Interventional PASS

A PASS may be interventional or non-interventional.

GVP Module VIII covers both, with its main focus on non-interventional PASS. citeturn0search20

The distinction is important because different regulatory requirements can apply depending on the study design.

A non-interventional PASS is not simply a study in which no investigator gives treatment. The EU definition contains cumulative requirements concerning how treatment is prescribed, how patients are assigned to treatment and whether additional diagnostic or monitoring procedures are imposed.

6. When Is a Study Non-Interventional?

For a study to fall within the non-interventional PASS framework, the relevant requirements include that:

1. the medicinal product is prescribed in the usual manner in accordance with the terms of the marketing authorisation;
2. assignment to a particular therapeutic strategy is not decided in advance by a study protocol and the decision to prescribe is clearly separated from the decision to include the patient in the study; and
3. no additional diagnostic or monitoring procedures are applied and epidemiological methods are used for analysis of collected data. citeturn0search20

These conditions should be assessed together.

A study should not be labelled non-interventional merely because it uses routinely collected healthcare data.

7. The Importance of Study Purpose

Study purpose is a critical starting point for classification.

Consider a study using electronic health records after authorisation. The data source alone does not establish whether the study is a PASS.

The organisation should ask:

• What safety question is being addressed?
• Is the study related to an authorised medicinal product?
• Is the objective to identify, characterise or quantify a safety hazard?
• Is it intended to confirm the safety profile?
• Is it measuring effectiveness of risk management?
• Who initiated and manages the study?
• Is it voluntary or imposed?

The classification should be based on the applicable legal and regulatory criteria rather than the name given to the project internally.

8. Imposed PASS

An imposed PASS is a study that an EU competent authority requires under the applicable legal framework.

GVP Module V distinguishes categories of studies that may be imposed, including studies imposed as an obligation and specific obligations associated with certain marketing authorisations. citeturn0search20

An imposed study therefore carries regulatory significance beyond an ordinary internal research project.

The organisation must control the regulatory obligation, protocol, milestones, reporting and implementation according to the applicable requirements.

9. PASS Required in the RMP

A PASS may also be included in an RMP as a pharmacovigilance activity.

The study may investigate an important safety concern or evaluate the effectiveness of risk-minimisation activities.

In such cases, the study should be designed to answer the specific uncertainty or effectiveness question identified in the risk-management strategy.

The mere existence of a study in the RMP does not demonstrate that the study is capable of answering the question. Protocol design and methodological validity remain essential.

10. Voluntary PASS

A marketing authorisation holder may conduct a PASS voluntarily.

Voluntary does not mean unregulated.

Where a voluntary non-interventional PASS falls within the scope of GVP Module VIII, applicable pharmacovigilance and study requirements remain relevant. GVP Module VIII states that non-interventional PASS initiated, managed or financed voluntarily by an MAH are within its scope. citeturn0search20

The organisation should therefore classify voluntary studies systematically rather than assuming that regulatory oversight applies only to imposed studies.

11. Specific Obligations and Exceptional Circumstances

Some medicinal products may be authorised subject to specific obligations.

A PASS can form part of those obligations in the circumstances established by EU legislation.

The regulatory basis of the obligation should be documented clearly because the applicable submission, assessment and follow-up requirements may differ from those applicable to a purely voluntary study.

The organisation should maintain a direct link between:

Regulatory obligation
        ↓
Study question
        ↓
Protocol
        ↓
Study conduct
        ↓
Results
        ↓
Regulatory follow-up

12. PASS Versus Clinical Trial

A PASS should not automatically be treated as a clinical trial simply because it involves prospective data collection.

Conversely, a study cannot avoid clinical-trial requirements merely by being described internally as a PASS.

The applicable classification depends on the study design and the legal framework governing the activity.

A study involving an intervention that changes treatment or introduces additional procedures may fall under clinical-trial legislation rather than the non-interventional PASS framework.

Classification should therefore occur before the study begins and should be documented.

13. PASS Versus Routine Pharmacovigilance

Routine pharmacovigilance and PASS can complement one another.

Routine activities may identify a safety question that requires additional evidence.

A PASS may then be designed to address that question systematically.

For example:

Routine PV evidence
        ↓
Safety uncertainty
        ↓
Scientific assessment
        ↓
PASS question
        ↓
Study evidence
        ↓
Updated safety assessment

The study should not be designed merely because a regulatory template expects a study. It should have a defined evidence-generating purpose.

14. PASS and Risk-Minimisation Effectiveness

Some PASS are intended to evaluate whether a risk-minimisation measure is effective.

This is an important distinction from simply measuring whether a measure was implemented.

For example, documenting that healthcare professionals received educational material establishes implementation activity. It does not by itself establish that the material changed the intended knowledge, behaviour or clinical outcome.

A study intended to measure effectiveness should therefore define an appropriate effectiveness question and methodology.

15. The MAH's Responsibility

The MAH remains responsible for ensuring that applicable PASS obligations are identified and fulfilled.

Outsourcing study conduct does not transfer regulatory responsibility.

The MAH should maintain appropriate oversight of:

• study classification;
• regulatory basis;
• protocol development;
• study governance;
• data quality;
• analysis;
• reporting;
• regulatory submissions;
• and follow-up.

The depth of oversight should be proportionate to the study's regulatory and scientific importance.

16. The QPPV Interface

PASS is a cross-functional activity, but it remains part of the pharmacovigilance system.

The QPPV should have appropriate oversight of significant PASS activities and their implications for the safety profile and risk-management system.

This does not mean that the QPPV must personally manage every operational study activity.

It means that the organisation should be able to demonstrate that important PASS obligations and findings are visible within pharmacovigilance governance.

17. Study Registration

For non-interventional PASS, registration in the EU PAS Register is an important part of the EU framework.

GVP Module VIII Addendum I states that non-interventional PASS should be registered in the EU PAS Register before the study commences or at the earliest possible date, and that protocols and relevant study reports should be uploaded in accordance with the applicable recommendations. citeturn0search21

For imposed non-interventional PASS, the legal submission requirements are distinct from the recommendation to use the register as a public study-registration mechanism. Addendum I specifically notes that uploading documents to the EU PAS Register is not itself the legal channel for submitting required documents to authorities. citeturn0search21

This distinction is operationally important.

18. PASS Governance as a Lifecycle

A PASS should be managed as a lifecycle rather than as a single protocol document.

A practical lifecycle is:

Need identified
      ↓
Regulatory classification
      ↓
Question and objectives
      ↓
Protocol
      ↓
Regulatory review / registration
      ↓
Study conduct
      ↓
Data quality and monitoring
      ↓
Analysis
      ↓
Final report
      ↓
Regulatory assessment
      ↓
Safety / RMP / regulatory action

The exact stages depend on the study category and applicable requirements.

19. Common Classification Errors

Potential errors include:

• assuming every post-authorisation study is a PASS;
• assuming every observational study is non-interventional;
• treating voluntary as outside GVP requirements;
• failing to identify an imposed obligation;
• confusing PASS with clinical trials;
• confusing implementation of risk minimisation with effectiveness evaluation;
• and failing to assess the regulatory consequences of study findings.

These are illustrative failure modes. Classification should always be based on the applicable legal and regulatory criteria.

Key Takeaways

A PASS is a post-authorisation study conducted for a defined safety-related purpose.

It can be interventional or non-interventional, although GVP Module VIII focuses mainly on non-interventional PASS.

The regulatory classification depends on the study's purpose, design, regulatory basis and circumstances—not simply on whether it is observational, prospective or voluntary.

PASS can be imposed, associated with specific obligations, included in an RMP or conducted voluntarily.

A PASS should be managed as part of an integrated pharmacovigilance lifecycle, with appropriate governance from study conception through regulatory follow-up.

References

1. European Medicines Agency. Good Pharmacovigilance Practices (GVP), Module VIII — Post-authorisation safety studies, Rev. 3. citeturn0search20
2. European Medicines Agency. GVP Module VIII Addendum I — Requirements and recommendations for submission of information on non-interventional PASS, Rev. 3. citeturn0search21
3. Directive 2001/83/EC, as amended.
4. Regulation (EC) No 726/2004, as amended.
5. Commission Implementing Regulation (EU) No 520/2012, as amended.
6. European Medicines Agency. Post-authorisation safety studies (PASS). citeturn0search3

Regulatory Note

This article is an educational explanation of GVP Module VIII. It does not replace current EU legislation, GVP Module VIII, Module VIII Addendum I, applicable study procedures, national requirements or an organisation's approved procedures.

GVP Module VIII is undergoing future revision as the European pharmacovigilance framework evolves. EMA states that GVP modules are regularly reviewed and that amendments to Commission Implementing Regulation (EU) No 520/2012 will lead to further GVP updates. citeturn0search0

Before classifying or initiating a PASS, the current applicable legislation, EMA guidance and procedural requirements should therefore be verified.

20. How to Decide Whether a Study Is a PASS

A practical classification exercise should begin with the study's purpose and then work through the regulatory and methodological characteristics.

A useful sequence is:

1. Is the medicinal product authorised?
2. Is the activity a study rather than routine data processing?
3. Is the study related to safety, safety-profile confirmation or risk-management effectiveness?
4. Is the study interventional or non-interventional?
5. Who initiated, manages or finances it?
6. Is there an EU competent-authority obligation?
7. Is it included in the RMP?
8. What legal and GVP requirements therefore apply?

This sequence prevents the common mistake of classifying a study solely from its title.

21. The Study Name Is Not the Regulatory Classification

Organisations use many internal terms for post-authorisation research:

• observational study;
• registry study;
• database study;
• epidemiological study;
• outcomes study;
• safety surveillance study;
• utilisation study;
• risk-minimisation study;
• or real-world evidence study.

None of these labels, by themselves, determines whether the activity is a PASS.

The regulatory classification must be established from the study's purpose, design and applicable legal criteria.

This is particularly important where a project begins as general medical research but later develops a safety objective.

22. Registry Studies

A registry can provide valuable evidence for pharmacovigilance, but not every registry is a PASS.

The organisation should determine whether the registry activity is being used as a study meeting the PASS definition and, if so, whether it falls within the applicable non-interventional framework.

Important questions include:

• What is the registry's objective?
• What medicinal product is being studied?
• Is there a defined safety question?
• Is the registry collecting information specifically to characterise a safety concern?
• Is the registry part of an RMP activity?
• Is there a regulatory obligation?

The underlying scientific activity, not the word "registry", determines the classification.

23. Real-World Data Does Not Automatically Mean PASS

Real-world data can be used in a PASS, but the data source does not itself create a PASS.

Examples include:

• electronic health records;
• claims databases;
• disease registries;
• prescribing databases;
• hospital records;
• and linked healthcare datasets.

A study using such data should still be assessed against the PASS definition and the applicable interventional/non-interventional criteria.

24. The Importance of Prescription and Treatment Decisions

For non-interventional PASS, the distinction between ordinary clinical practice and study-directed treatment decisions is fundamental.

The medicinal product should be prescribed in the usual manner according to the marketing authorisation, and assignment to treatment should not be determined in advance by the study protocol.

The decision to prescribe should be separate from the decision to enrol a patient in the study.

If the study protocol determines treatment allocation, the activity may fall outside the non-interventional PASS definition and require assessment under another regulatory framework.

25. Additional Diagnostic or Monitoring Procedures

The absence of additional diagnostic or monitoring procedures is another element of the non-interventional definition.

A study should therefore be assessed carefully when participation requires procedures that would not ordinarily occur in routine practice.

The issue is not whether the procedure is clinically useful. The issue is whether the study introduces additional diagnostic or monitoring activity that affects its regulatory classification.

26. Prospective Data Collection

Prospective data collection does not automatically make a PASS interventional.

A non-interventional study can collect information prospectively provided the applicable non-interventional criteria remain satisfied.

Conversely, retrospective use of existing data does not automatically establish that a study is non-interventional.

Classification should therefore be based on the full study design.

27. Safety Concern Versus Effectiveness of Risk Minimisation

PASS objectives can differ substantially.

One study may seek to estimate the incidence of an adverse outcome. Another may evaluate whether an educational intervention changes healthcare-professional behaviour.

Both can fall within PASS, but their methodological requirements will differ.

The study objective should be stated precisely enough to determine:

• the population;
• exposure;
• outcome;
• comparator where appropriate;
• data source;
• analytical approach;
• and success criteria.

28. PASS as a Pharmacovigilance Activity

When a PASS forms part of an RMP, its findings should feed back into the risk-management system.

The study should therefore have a clear relationship to the specific safety concern or effectiveness question that justified it.

A poorly connected RMP study can create a governance problem even if the study itself is technically well conducted.

The organisation should be able to explain why the study exists and what decision it is intended to inform.

29. The Protocol as the Central Control Document

The protocol translates the safety question into an operational study design.

For a mature PASS process, the protocol should make the following understandable:

• rationale;
• objectives;
• study population;
• exposure definition;
• outcomes;
• data sources;
• study design;
• analytical methods;
• limitations;
• governance;
• milestones;
• and reporting arrangements.

The protocol should be sufficiently specific to allow an independent reviewer to understand how the study will answer its question.

30. Substantial Protocol Amendments

A protocol can change after the study begins.

A substantial amendment should be assessed for its impact on:

• scientific validity;
• study objectives;
• bias;
• regulatory commitments;
• timelines;
• interpretation of results;
• and applicable submission requirements.

For imposed non-interventional PASS, GVP Module VIII Addendum I specifically addresses submission of updated protocols following substantial amendments. citeturn0search21

The organisation should therefore maintain a controlled amendment history rather than replacing the original protocol silently.

31. PASS Governance Across Functions

PASS commonly involves several functions, which may include:

• pharmacovigilance;
• epidemiology;
• biostatistics;
• clinical development;
• regulatory affairs;
• data management;
• medical affairs;
• procurement;
• and external research organisations.

Clear responsibility should be established for scientific decisions and regulatory commitments.

Cross-functional participation does not remove the need for a single coherent governance model.

32. Outsourced PASS

An MAH may outsource some or all study activities.

The outsourcing arrangement should clearly define:

• deliverables;
• responsibilities;
• quality standards;
• milestones;
• data ownership;
• issue escalation;
• change control;
• and regulatory communication.

The MAH remains responsible for ensuring compliance with applicable pharmacovigilance obligations.

33. Study Quality Is More Than Statistical Quality

A PASS can use sophisticated statistical methods and still be weak if the underlying study question or data are inappropriate.

Quality should therefore be considered across the entire chain:

Regulatory question
      ↓
Scientific objective
      ↓
Study design
      ↓
Data quality
      ↓
Analysis
      ↓
Interpretation
      ↓
Regulatory conclusion

Weakness at an earlier stage cannot necessarily be repaired by more sophisticated analysis at a later stage.

34. Data Quality and Traceability

The organisation should understand the provenance and limitations of the data used in the PASS.

Important considerations can include:

• completeness;
• missing data;
• coding;
• exposure ascertainment;
• outcome ascertainment;
• linkage quality;
• changes to the source database;
• and reproducibility of analytical datasets.

Where external data sources are used, the organisation should retain appropriate evidence supporting their suitability for the study question.

35. Safety Signal and PASS Relationship

A PASS can arise from an existing safety signal, but a signal and a PASS are not interchangeable.

A signal is information suggesting a new potentially causal association or a new aspect of a known association requiring further investigation.

A PASS is a structured study designed to answer a defined question.

The transition from signal to study should therefore be scientifically justified.

36. PASS and Individual Case Safety Reports

A PASS can generate individual reports of suspected adverse reactions.

The organisation should have procedures for identifying and processing reportable safety information arising from study activities.

This is particularly important when study personnel, investigators or data sources identify individual cases rather than only aggregate outcomes.

The study protocol should therefore be compatible with the pharmacovigilance system's case-processing requirements where applicable.

37. PASS and Literature

Study findings may subsequently appear in scientific publications.

The publication does not replace the MAH's regulatory obligations regarding the study itself.

The organisation should maintain appropriate controls over:

• study reporting;
• publication review;
• literature monitoring;
• consistency between published and regulatory conclusions;
• and management of safety information identified through the publication.

38. Registration and Transparency

Registration supports transparency and allows relevant stakeholders to identify studies being conducted after authorisation.

For non-interventional PASS, GVP Module VIII Addendum I recommends registration in the EU PAS Register before commencement or at the earliest possible opportunity. citeturn0search21

The organisation should distinguish public registration requirements from formal regulatory submission requirements.

39. Inspection Questions

An inspector may ask:

• How did you determine that this study was a PASS?
• What regulatory basis applies?
• Why is the study interventional or non-interventional?
• Who initiated and manages it?
• Is it an RMP commitment?
• Is it imposed?
• How was the protocol approved?
• How are amendments controlled?
• How do you ensure data quality?
• How are findings incorporated into the PV system?
• What happens if the study identifies an important new risk?

The organisation should be able to answer these questions from controlled evidence.

40. Practical Scenario: A Registry Becomes an RMP Activity

An organisation operates a disease registry primarily for epidemiological research. A regulatory assessment later identifies missing information that the registry can address.

If the registry is incorporated into the RMP as a pharmacovigilance activity, the organisation should reassess its regulatory classification, objectives, protocol, governance and reporting obligations.

The original research label does not determine the new regulatory status.

41. Practical Scenario: An Observational Study Introduces Protocol-Directed Treatment

Suppose an observational study begins collecting routine prescribing information but is later amended so that investigators actively determine which patients receive the medicinal product according to the study protocol.

That change can materially alter the study's regulatory classification.

The organisation should therefore reassess the study before implementing the amendment rather than assuming that its original classification continues unchanged.

42. Practical Scenario: A Voluntary PASS Identifies a New Risk

A voluntary non-interventional PASS identifies evidence suggesting an important new safety concern.

The fact that the study was voluntary does not make the finding voluntary.

The safety information should enter the organisation's normal pharmacovigilance assessment and escalation processes.

The study's results may then have implications for the safety profile, RMP, product information or regulatory communication.

43. Practical Scenario: PASS Shows Risk-Minimisation Effectiveness Is Inadequate

A study designed to evaluate an additional risk-minimisation measure finds that the measure has not achieved its intended effect.

The organisation should evaluate:

• the strength of the evidence;
• methodological limitations;
• whether the result is generalisable;
• whether implementation was adequate;
• and what changes to risk management may be required.

The result should not be treated as a simple pass/fail score without understanding what the study actually demonstrated.

Key Takeaways

PASS classification requires analysis of the study's purpose, design and regulatory circumstances.

Study labels such as registry, observational, real-world evidence or database study are not regulatory classifications by themselves.

Non-interventional status depends on cumulative criteria concerning prescribing, treatment assignment and additional procedures.

Protocol changes can change the regulatory classification and should therefore be assessed before implementation.

PASS findings must feed into the broader pharmacovigilance system when they generate safety information or affect risk management.

References

1. European Medicines Agency. GVP Module VIII — Post-authorisation safety studies, Rev. 3. citeturn0search20
2. European Medicines Agency. GVP Module VIII Addendum I — submission and registration requirements/recommendations for non-interventional PASS, Rev. 3. citeturn0search21
3. Directive 2001/83/EC, as amended.
4. Regulation (EC) No 726/2004, as amended.
5. Commission Implementing Regulation (EU) No 520/2012, as amended.

Regulatory Note

This article provides an educational explanation of PASS classification and governance. It does not replace the current EU legal framework, GVP Module VIII, applicable study-specific regulatory requirements or approved organisational procedures.

Where a study is being classified or materially amended, the current applicable legislation and regulatory guidance should be checked before implementation.

44. Practical Governance Model

A practical PASS governance model should make four questions visible at all times:

1. Why does the study exist?
2. What regulatory requirement applies?
3. How will the study answer the question?
4. What will the organisation do with the result?

These questions connect scientific design with regulatory accountability.

A study can fail its purpose even when it is completed on schedule if the final evidence cannot answer the original safety question.

45. Regulatory Classification Should Be Documented

The classification decision should be recorded rather than left to institutional memory.

A useful classification record can identify:

• study purpose;
• medicinal product;
• study design;
• interventional/non-interventional assessment;
• regulatory basis;
• imposed or voluntary status;
• RMP relationship;
• applicable submission requirements;
• registration requirements;
• and approving functions.

The record provides a foundation for later inspection and change-control decisions.

46. Reclassification During the Study Lifecycle

A study's classification should be reconsidered when its material characteristics change.

Triggers can include:

• protocol amendments;
• changes in treatment assignment;
• new diagnostic procedures;
• changed objectives;
• changes in regulatory status;
• addition of a safety objective;
• or conversion of a voluntary activity into an RMP commitment.

Reclassification should occur before the changed activity is implemented whenever practicable.

47. Study Milestones

A mature PASS system should control important milestones, such as:

• classification;
• protocol approval;
• registration;
• regulatory submission;
• study initiation;
• substantial amendments;
• interim or progress reports where applicable;
• end of data collection;
• final report;
• regulatory assessment;
• and implementation of resulting actions.

Milestone management should reflect the actual regulatory category of the study.

48. Imposed PASS Requires Particular Control

An imposed PASS carries a regulatory obligation and therefore requires particularly clear control of commitments and deadlines.

The organisation should be able to demonstrate:

• the legal or regulatory basis for the obligation;
• the approved protocol;
• the required milestones;
• submissions;
• authority correspondence;
• amendments;
• results;
• and completion or closure.

For imposed non-interventional PASS, GVP Module VIII Addendum I specifies submission requirements for protocols, substantial protocol amendments and final study reports. citeturn0search21

49. Final Study Report

The final study report should allow a reviewer to understand what was planned, what was actually conducted and what the results mean.

A useful report should provide traceability between:

Protocol objective
      ↓
Methods
      ↓
Data collected
      ↓
Analysis
      ↓
Results
      ↓
Limitations
      ↓
Interpretation
      ↓
Conclusion

Where the study deviated materially from the protocol, the report should make the deviation visible and explain its implications.

50. PASS Findings and the Safety Profile

The final study result should not be evaluated in isolation.

The organisation should consider whether it changes understanding of:

• an identified risk;
• an important potential risk;
• missing information;
• a new potential signal;
• or effectiveness of risk minimisation.

The result should therefore enter the appropriate pharmacovigilance assessment process.

51. PASS Findings and Regulatory Action

Depending on the findings, a PASS can lead to:

• no change;
• continued monitoring;
• additional analysis;
• further pharmacovigilance activity;
• RMP modification;
• changes to risk minimisation;
• product-information changes;
• safety communication;
• or other regulatory action.

The study itself does not automatically determine the regulatory outcome. The evidence must be interpreted within the broader regulatory and clinical context.

52. PASS Findings and the PSUR

Important PASS results can become part of periodic safety evaluation.

The organisation should maintain a clear connection between:

• study milestones;
• interim findings where relevant;
• final results;
• regulatory assessment;
• and subsequent PSUR discussion.

A completed PASS should not disappear from the pharmacovigilance system once the final report has been issued.

53. PASS Findings and Signal Management

If a PASS generates evidence suggesting a new safety concern, the organisation should assess the information through its signal-management processes as appropriate.

The study conclusion should not be allowed to bypass normal safety governance merely because the evidence was generated through a formal research project.

Conversely, a study result that does not support a signal should be interpreted according to its methodological limitations rather than automatically treated as evidence that an association has been disproved.

54. PASS Findings and Risk-Minimisation Effectiveness

Where the study evaluates risk-minimisation effectiveness, the organisation should distinguish several levels of evidence:

• measure implemented;
• target population reached;
• knowledge or behaviour changed;
• clinical process changed;
• and health outcome improved.

The appropriate endpoint depends on the measure and study question.

A study should not claim effectiveness at a higher level than its design can support.

55. Inspection Scenario: The Study Was Completed but the Regulatory Question Was Not Answered

An inspector may discover that a PASS was completed according to the protocol but did not generate evidence capable of resolving the original safety question.

Potential causes include:

• inadequate endpoint definition;
• insufficient sample size;
• poor exposure ascertainment;
• inappropriate comparator;
• incomplete data;
• or methodological limitations recognised too late.

This illustrates why protocol quality is a pharmacovigilance control, not merely a research-quality issue.

56. Inspection Scenario: The Study Was Voluntary but Was Not Governed

An organisation may argue that a study required less oversight because it was voluntary.

That is unsafe reasoning.

Where the study falls within applicable PASS requirements, voluntary status does not remove the need for appropriate governance, documentation, quality controls and regulatory assessment.

57. Inspection Scenario: A Vendor Controlled the Study Knowledge

A vendor may conduct the study and hold much of the operational knowledge.

An inspector may nevertheless expect the MAH to understand:

• why the study was required;
• what the protocol means;
• the major limitations;
• what the results show;
• and what actions follow.

Outsourcing operational work without retaining scientific and regulatory understanding creates a governance weakness.

58. Inspection Scenario: The RMP Says One Thing and the PASS Does Another

If the RMP states that a PASS is addressing a particular uncertainty but the final study does not actually address that uncertainty, the organisation should investigate the discrepancy.

Possible explanations include:

• changed scientific understanding;
• protocol amendment;
• change in regulatory strategy;
• or inadequate study design.

The discrepancy should be documented and resolved rather than concealed through retrospective rewriting.

59. Inspection Scenario: Study Registration Is Missing

Failure to register a study can indicate a process-control problem where registration was applicable.

The organisation should determine:

• whether the study required registration;
• when registration should have occurred;
• whether the omission was detected;
• whether corrective action was taken;
• and whether the omission affected transparency or regulatory compliance.

The appropriate response depends on the study category and applicable requirements.

60. Minimum Inspection Evidence Set

For a significant PASS, an organisation should normally be able to locate, as applicable:

• classification rationale;
• regulatory basis;
• RMP linkage;
• approved protocol;
• protocol amendments;
• registration evidence;
• contracts and oversight records;
• milestone records;
• data-quality documentation;
• analysis plan;
• final report;
• regulatory correspondence;
• safety assessment;
• PSUR/RMP integration;
• and evidence of resulting actions.

The exact records depend on the study and regulatory category.

61. QPPV Oversight Questions

The QPPV should be able to obtain credible answers to:

• Which PASS obligations exist for the portfolio?
• Which are imposed and which are voluntary?
• Which are part of an RMP?
• Are the protocols scientifically appropriate?
• Are important milestones controlled?
• Are significant deviations escalated?
• What do the results mean for the safety profile?
• Have findings entered the appropriate PV processes?
• Are regulatory commitments being fulfilled?

The QPPV should receive information proportionate to the significance of the studies and findings.

62. What a Mature PASS System Looks Like

A mature system does not treat PASS as a separate research silo.

Instead, it connects:

Risk / uncertainty
       ↓
Regulatory question
       ↓
Study classification
       ↓
Protocol and governance
       ↓
Study conduct
       ↓
Results
       ↓
Scientific interpretation
       ↓
PV / RMP / regulatory action
       ↓
Follow-up

This structure makes it possible to demonstrate both scientific purpose and regulatory control.

63. Final Reviewer Checklist

Before a significant PASS is considered adequately controlled, ask:

• Is the study correctly classified?
• Is the regulatory basis documented?
• Is the scientific question explicit?
• Does the design answer that question?
• Is the interventional/non-interventional classification defensible?
• Are imposed obligations clearly controlled?
• Is the RMP relationship understood?
• Are registration and submission requirements fulfilled?
• Are protocol changes controlled?
• Is data quality adequate?
• Are limitations transparent?
• Are findings incorporated into pharmacovigilance?
• Are PSUR and RMP implications assessed?
• Are regulatory actions tracked?
• Can the organisation demonstrate the complete evidence trail?

Key Takeaways

PASS is best understood as an evidence-generating component of the pharmacovigilance system rather than as an isolated research project.

The strongest PASS governance connects the regulatory question to study design, data quality, interpretation and regulatory action.

Classification must be revisited when material study characteristics change.

Voluntary status does not remove applicable PASS responsibilities, and outsourcing does not transfer the MAH's accountability.

The ultimate test of a PASS is not simply whether the study was completed. It is whether the study generated reliable evidence that can inform the safety profile, risk management and regulatory decision-making.

References

1. European Medicines Agency. GVP Module VIII — Post-authorisation safety studies, Rev. 3. citeturn0search20
2. European Medicines Agency. GVP Module VIII Addendum I — Requirements and recommendations for submission of information on non-interventional PASS, Rev. 3. citeturn0search21
3. European Medicines Agency. Post-authorisation safety studies (PASS). citeturn0search3
4. Directive 2001/83/EC, as amended.
5. Regulation (EC) No 726/2004, as amended.
6. Commission Implementing Regulation (EU) No 520/2012, as amended.

Regulatory Note

This article is an educational explanation of GVP Module VIII and PASS governance. It does not replace current EU legislation, GVP guidance, applicable procedural requirements or approved organisational procedures.

EMA currently identifies Module VIII Rev. 3 and Addendum I Rev. 3 as the applicable published GVP documents while also noting that GVP modules are periodically reviewed and that further updates are planned following legislative amendments. citeturn0search0

Current legislation and regulatory guidance should therefore be verified when a PASS is being classified, initiated, amended, submitted or closed.