QPPV.COM

Important Identified Risks

Explains how important identified risks are distinguished from other adverse reactions and safety concerns, how the evidence and clinical importance are assessed, and how the classification is used through the EU RMP lifecycle.

Take test

Important Identified Risks

An important identified risk is not simply a serious adverse reaction, a labelled adverse reaction, or an event for which causality has been established. It is an identified risk that is sufficiently important to the medicinal product's risk management that it belongs in the risk management plan (RMP). The distinction matters because the RMP is intended to remain focused on the safety concerns that require active risk-management planning rather than becoming a duplicate of the product information or a catalogue of all known adverse reactions.

Purpose and Regulatory Context

EU pharmacovigilance uses the RMP to describe the risk-management system for a medicinal product. The underlying legal framework is established in Directive 2001/83/EC, Regulation (EC) No 726/2004 and Commission Implementing Regulation (EU) No 520/2012. The detailed scientific and operational framework is set out in Good Pharmacovigilance Practices (GVP) Module V — Risk management systems and in the EMA guidance on the EU RMP format.

The legal framework requires risk-management systems to be proportionate to the identified and potential risks of the medicinal product and to the need for post-authorisation safety data. GVP Module V then explains how this principle is translated into the RMP safety specification: the RMP should focus on safety concerns that are relevant for risk-management planning rather than reproduce every known adverse reaction.

This distinction between law and guidance is important. EU legislation establishes the requirement for a risk-management system and RMP and sets requirements for its maintenance and submission. GVP Module V provides the regulatory guidance used to determine which risks should be treated as safety concerns and how they should be linked to pharmacovigilance and risk-minimisation activities.

What Makes a Risk an Identified Risk?

The first question is whether the risk is identified.

GVP Module V describes an identified risk for RMP purposes as an undesirable clinical outcome for which there is sufficient scientific evidence that it is caused by the medicinal product. Evidence may arise from several sources, including clinical trials, epidemiological studies, spontaneous reports, published literature, and non-clinical findings that are supported by clinical evidence.

The threshold is therefore stronger than suspicion. A temporal association or a small cluster of reports may be sufficient to start signal evaluation, but it does not automatically make the event an identified risk. Conversely, causality does not have to depend on one specific type of evidence. The conclusion is based on the totality of the evidence and the clinical and scientific context.

Evidence that may contribute to the conclusion includes:

Evidence domain Questions that support assessment
Clinical trials Is the event more frequent with treatment than with an appropriate comparator? Is there a dose or exposure relationship?
Spontaneous reports Are there well-documented cases with a compatible temporal pattern, dechallenge, rechallenge, or characteristic clinical features?
Epidemiology Is there a reproducible increase in risk after accounting for confounding and bias?
Pharmacology and mechanism Is the event compatible with the known pharmacological or biological effects of the medicine?
Class evidence Is a similar risk established for closely related medicinal products, and is there a scientifically credible basis for applying the class evidence to this product?
Regulatory assessment and literature Do independent assessments or published evidence materially strengthen the causal interpretation?

These are evidentiary considerations, not a scoring system. EU guidance does not prescribe a universal number of cases, relative-risk threshold, reporting rate, or statistical cut-off that converts a suspected association into an identified risk. The strength and type of evidence required depend on the event, the medicinal product, the exposed population and the available data.

Identified risk does not mean important identified risk

Once causality is sufficiently supported, a second and separate question must be answered: is this identified risk important enough to belong in the RMP?

This prevents a common conceptual error. A medicinal product may have many established adverse reactions in its summary of product characteristics (SmPC), but only a subset may warrant inclusion as important identified risks in the RMP.

What Makes an Identified Risk Important?

GVP Module V states that the RMP should focus on important identified risks that are likely to have an impact on the benefit-risk balance of the product. In practice, importance is assessed in the context of both the individual patient and the treated population.

Relevant considerations include the seriousness and severity of the clinical outcome, its frequency or probability, reversibility, preventability, the populations particularly at risk, the magnitude of exposure, and the consequences for the way the medicine can be used safely. A rare event can be important because it is catastrophic or requires specific clinical action. A less severe event can also become important if it is sufficiently frequent or materially limits treatment. The same adverse reaction may therefore have different risk-management importance in different therapeutic settings.

For example, a risk that is well characterised, readily recognised and adequately addressed through ordinary clinical practice may not need to remain a safety concern indefinitely. By contrast, an identified risk may clearly warrant RMP inclusion when further characterisation is needed, when particular populations are at increased risk, or when specific risk-minimisation actions are necessary to maintain a favourable benefit-risk balance.

GVP Module V notes that an important identified risk included in the RMP would usually warrant one or both of the following:

The word usually matters. It should not be converted into a rigid rule that every important identified risk must have an additional pharmacovigilance study or additional risk-minimisation measure.

Relationship With Other Safety-Concern Categories

The RMP safety specification distinguishes three safety-concern categories: important identified risks, important potential risks and missing information. They represent different states of knowledge and different risk-management questions.

Category Core question Causal evidence Why it is in the RMP
Important identified risk Is the adverse clinical outcome caused by the medicine, and is it important for risk management? Sufficient evidence supports causality The established risk may affect benefit-risk and requires focused characterisation and/or minimisation
Important potential risk Is there a scientifically credible possibility of a causal relationship that remains unconfirmed, and would it matter if confirmed? Evidence suggests a possible association but is insufficient to establish causality Further evidence may confirm, refute or better characterise an important suspected risk
Missing information Is there a clinically relevant gap in knowledge about safety in an anticipated use or population? Not a causal-risk category The missing knowledge could conceal a safety profile different from that already characterised

A safety concern can move between categories as evidence develops. An important potential risk may become an important identified risk when evidence becomes sufficient to support causality. An important identified risk may eventually be removed from the safety specification when it is fully characterised and appropriately managed and no longer requires special risk-management planning. These changes should reflect scientific evidence and regulatory context rather than administrative preference.

How the Classification Is Made in Practice

Classification should begin with the clinical concept, not with the RMP table. The purpose is to decide whether a distinct adverse clinical outcome has crossed both thresholds: sufficient evidence of causality and sufficient importance for risk-management planning.

A useful working sequence is:

  1. define the clinical outcome precisely;
  2. assemble the evidence relevant to causality;
  3. decide whether the association is sufficiently established to call the risk identified;
  4. assess the clinical and public-health importance of the identified risk in the authorised therapeutic context;
  5. determine what further characterisation or risk minimisation is needed;
  6. document the rationale and reflect the conclusion consistently across the RMP and related safety documents.

This sequence is more reliable than beginning with labels such as “serious,” “listed,” “class effect,” or “regulatory interest.” Those descriptions may be relevant evidence, but none is independently equivalent to an important identified risk.

Defining the clinical concept

A risk should be described at a level that is clinically meaningful and useful for risk management. Excessively broad terms can combine events with different mechanisms and management needs, while overly narrow terms can fragment a single clinically coherent risk into multiple entries.

For example, “hepatic events” may be too broad if the clinically meaningful concern is drug-induced liver injury with a specific pattern and management approach. Conversely, separating closely related manifestations into several safety concerns may make the RMP harder to interpret if the same mechanism, risk factors and minimisation strategy apply to all of them.

The appropriate level of grouping is therefore a scientific judgement. The chosen concept should support a clear explanation of what the risk is, who is vulnerable, how it presents, and how it is monitored or minimised.

Assessing causality without creating artificial thresholds

Causal assessment should integrate the available evidence. No single criterion is universally decisive. Strong randomised evidence may establish a relationship even without informative spontaneous reports. A characteristic clinical syndrome with convincing dechallenge and rechallenge may be persuasive even when population-level incidence is difficult to estimate. Epidemiological data may be essential where background incidence is high or confounding is substantial.

Mechanistic plausibility strengthens an interpretation but does not replace clinical evidence. Likewise, a class effect can increase concern but does not automatically establish that every medicine in the class causes the same outcome. Product-specific pharmacology, target selectivity, exposure, formulation and population may alter the relevance of class evidence.

An experienced reviewer therefore asks not merely whether evidence exists, but whether competing explanations have been sufficiently addressed and whether the totality of evidence supports a causal conclusion appropriate to the current stage of the product lifecycle.

Assessing importance in therapeutic context

Importance cannot be assessed independently of the indication and treatment setting. The same absolute risk can have different implications in curative oncology, chronic preventive therapy, paediatric treatment or treatment of a self-limiting condition.

Questions that help establish importance include:

These considerations should be documented in product-specific terms. A generic statement that a risk is “serious and therefore important” is usually insufficient reasoning.

How an Important Identified Risk Appears in the RMP

Under the current EU RMP format, safety concerns are developed in Part II: Safety Specification and summarised in Module SVIII: Summary of the Safety Concerns. Important identified risks are then connected to the pharmacovigilance plan in Part III and to risk-minimisation measures in Part V where relevant.

This architecture creates a deliberate chain:

evidence → safety concern → characterisation need → pharmacovigilance activity → risk-minimisation action → effectiveness evaluation.

The chain does not mean that every element must be additional or product-specific. Routine pharmacovigilance may be sufficient for some risks. Product information may provide adequate routine risk minimisation. Additional activities are justified only when the remaining uncertainty or risk-management need requires them.

Risk characterisation

The RMP should provide enough information for the reader to understand why the risk matters and how it behaves clinically. Depending on the available evidence, this may include:

The purpose is not to reproduce every case, trial table or adverse-reaction listing. GVP Module V explicitly frames the RMP as a focused risk-management document. The evidence presented should therefore be selective enough to explain the safety concern while remaining traceable to the underlying analyses.

Relationship With the Pharmacovigilance Plan

An important identified risk may require further characterisation even though causality is already established. “Identified” answers whether the medicine causes the clinical outcome; it does not necessarily answer how often it occurs, which patients are most susceptible, how severe it is in routine care, or which management strategy is most effective.

Routine pharmacovigilance may answer some of these questions through ongoing ICSR collection, targeted follow-up and cumulative review. Where routine activities cannot adequately address an important uncertainty, additional pharmacovigilance activities may be appropriate. These can include post-authorisation safety studies or other structured data-collection approaches, provided the objective is clearly linked to the information gap being addressed.

The scientific question should determine the activity. A study should not be added merely because a risk is classified as important. Conversely, the absence of an additional study should be defensible if routine pharmacovigilance and available evidence are adequate.

Relationship With Risk Minimisation

Risk minimisation translates knowledge of the risk into actions intended to prevent the adverse reaction, reduce its probability, facilitate earlier recognition, or reduce its severity or consequences.

Routine risk-minimisation measures include the SmPC, package leaflet, labelling, pack size and legal status where relevant. For an important identified risk, the product information may contain contraindications, warnings, recommendations for monitoring, dose modification, treatment interruption or clinical management.

Additional risk-minimisation measures are not automatic. They are used when routine measures are insufficient to manage an important risk. Examples can include educational materials, controlled-access elements or other interventions agreed through the regulatory process. Where additional measures are used, their effectiveness should be evaluated using methods appropriate to the objective of the intervention.

A useful distinction is therefore:

Question What it determines
What is the risk? Safety specification
What do we still need to learn? Pharmacovigilance plan
What must clinicians or patients do differently because of the risk? Risk-minimisation plan
Are those actions working? Effectiveness evaluation

Illustrative Classification Examples

The following examples are hypothetical and are intended to show the reasoning process rather than prescribe RMP wording.

Illustrative scenario 1: established severe hypersensitivity

Clinical trials and post-authorisation cases show a reproducible pattern of immediate severe hypersensitivity after administration. Several cases have compatible timing and no more plausible alternative cause, and the mechanism is biologically credible. The reaction can be life-threatening but can be managed more safely when administration occurs in an appropriately equipped setting with prompt recognition and treatment.

The evidence may support classification as an identified risk because causality is sufficiently established. It may also be important because the clinical consequence is severe and specific risk-minimisation actions are needed. The RMP would then explain the evidence, clinical characteristics, relevant pharmacovigilance and the measures used to reduce harm.

Illustrative scenario 2: common, mild adverse reaction

A medicine causes a transient mild adverse reaction that is well characterised, readily managed, does not materially influence treatment decisions and requires no risk-management activity beyond standard product information.

The event may be an identified risk in the broad pharmacovigilance sense and may be a labelled adverse reaction, but it would not necessarily qualify as an important identified risk in the RMP. Including every such reaction would obscure the risks that genuinely require focused management.

Illustrative scenario 3: serious but unconfirmed association

Post-marketing reports suggest a serious cardiovascular event, but the exposed population has substantial baseline cardiovascular morbidity, case information is incomplete and available comparative studies do not establish an increased risk.

Seriousness alone does not make the event an important identified risk. If the causal association remains scientifically plausible and would materially affect benefit-risk if confirmed, it may instead meet the concept of an important potential risk until further evidence clarifies the relationship.

Governance and Traceability

The RMP is owned within the marketing-authorisation holder's pharmacovigilance system, but classification decisions normally require multidisciplinary scientific input. Safety physicians, epidemiologists, clinical experts, regulatory colleagues, statisticians and risk-management specialists may all contribute depending on the product and evidence.

The EU QPPV has responsibility for oversight of the pharmacovigilance system and should have sufficient authority and access to information to fulfil that role. This does not mean that EU legislation prescribes a particular internal committee, voting model, checklist or signature pathway for every safety-concern classification. Organisations should define governance that is proportionate to their system and that produces clear, retrievable evidence of how significant safety decisions were reached.

A defensible decision record should normally make it possible to reconstruct:

This traceability is more valuable than a formulaic checklist that cannot explain the scientific reasoning behind the classification.

Lifecycle Management: Adding, Reclassifying and Removing Risks

An RMP is a dynamic document. GVP Module V explicitly recognises that safety concerns can be added, removed or reclassified as the safety profile becomes better characterised. The lifecycle of an important identified risk should therefore follow the evidence rather than remain fixed because the risk appeared in an earlier RMP version.

When a new important identified risk may be added

A new important identified risk may emerge when accumulating clinical, post-authorisation, epidemiological or other evidence establishes a causal relationship for an outcome that is important to the product's benefit-risk balance. The regulatory consequence should then be considered across the complete risk-management system: the safety specification, pharmacovigilance plan, risk-minimisation measures and product information may all need review.

Not every newly validated signal becomes an important identified risk. Signal validation and confirmation are parts of signal management; RMP classification requires the additional judgement that the causal relationship is sufficiently established and that the resulting risk is important for risk-management planning.

Reclassification from potential to identified risk

An important potential risk can become an important identified risk when new scientific and clinical evidence strengthens the association sufficiently to support causality. Reclassification should not be treated as a purely terminological change. It may alter the questions that pharmacovigilance must answer and may strengthen or change the required risk-minimisation strategy.

For example, once causality is established, a study designed mainly to determine whether an association exists may no longer be the most useful activity. The remaining questions may instead concern incidence, risk factors, clinical outcomes or the effectiveness of risk minimisation.

Removal from the safety specification

GVP Module V also allows for important identified risks to be removed from the safety specification in appropriate circumstances, for example when a risk is fully characterised and appropriately managed and there are no outstanding additional pharmacovigilance activities and/or the necessary risk-minimisation measures have become fully integrated into standard clinical practice.

Removal does not mean that the adverse reaction has ceased to exist or that relevant product information should automatically disappear. The decision concerns whether the risk still requires focused treatment as a safety concern in the RMP. Product-information changes follow their own regulatory assessment and should not be inferred solely from RMP removal.

A removal rationale should therefore explain what has changed in the evidence or management context and why continued RMP focus is no longer proportionate.

Special Situations

Risks that apply only to a subgroup, formulation or route

A risk may be important only in a particular population, formulation, route of administration or treatment context. Where an RMP covers more than one presentation or product, the safety specification should avoid implying that a risk applies uniformly when it does not. The RMP format allows the safety concerns to be structured so that clinically meaningful differences are clear.

The underlying principle is precision: risk classification should correspond to the population and exposure in which the risk-management need actually exists.

Class effects

A recognised class effect can be highly relevant, especially early in development or when product-specific data are limited. However, class evidence should be interpreted in light of the product's mechanism, selectivity, pharmacokinetics, formulation and clinical data. A class effect can support a potential-risk assessment and may contribute to an identified-risk conclusion when product-specific evidence is sufficient, but it should not be used as an automatic substitute for product-specific causal assessment.

Medication errors and use outside the authorised conditions

Undesirable clinical outcomes associated with medication errors, drug interactions or off-label use can be relevant to the RMP when the relationship to the medicine and the importance for risk management meet the applicable criteria. The classification should focus on the actual clinical risk and its causal and management context, rather than assuming that every error or off-label scenario is itself an important identified risk.

Potential Failure Modes

The following are illustrative failure modes, not published inspection findings.

Failure mode Why it weakens the RMP Better approach
Copying all serious labelled adverse reactions into the safety specification Confuses the SmPC adverse-reaction profile with focused risk-management planning Select only risks that meet both the identified and importance thresholds
Treating a signal as an identified risk before causality is sufficiently established Collapses signal management and risk classification into one step Separate suspicion, signal assessment, causal conclusion and RMP importance
Using fixed numeric cut-offs for “importance” Creates pseudo-regulatory thresholds that GVP does not prescribe Use product-specific clinical, population and benefit-risk reasoning
Adding an additional study for every important identified risk Turns the pharmacovigilance plan into a checklist rather than a question-driven plan Use additional activities only where routine pharmacovigilance cannot answer an important question
Assuming an additional risk-minimisation measure is mandatory Overstates the regulatory consequence of classification Determine whether routine measures are sufficient; add further measures only when justified
Leaving old safety concerns in the RMP indefinitely Prevents the RMP from becoming more focused as knowledge improves Periodically reassess whether each concern still requires RMP-level management
Removing a risk without a reconstructable rationale Breaks lifecycle traceability Document the new evidence, management context and regulatory reasoning supporting removal

Inspection Considerations

A pharmacovigilance inspector is less likely to be interested in whether a company used a particular internal checklist than in whether the risk-management process is effective, scientifically coherent and traceable.

For an important identified risk, relevant inspection questions could include:

The inspection perspective is therefore one of evidence, consistency, execution and oversight, not merely document completeness.

Practical Review Checklist

When reviewing an existing important identified risk, an RMP author or safety governance group can use the following questions as a quality aid. This is recommended operational practice, not a legally prescribed checklist.

  1. Is the clinical outcome defined precisely enough to support meaningful risk management?
  2. Is the causal relationship supported by the current totality of evidence?
  3. Is the reason the risk remains important to benefit-risk or public health clearly explained?
  4. Are the most relevant affected populations, risk factors and clinical consequences characterised?
  5. Are remaining uncertainties stated explicitly rather than obscured by the identified-risk label?
  6. Do pharmacovigilance activities address specific unanswered questions?
  7. Are routine and additional risk-minimisation measures proportionate to the risk?
  8. Are effectiveness measures appropriate to the objective of any additional risk minimisation?
  9. Is the classification consistent across the RMP, product information, signal documentation and aggregate safety evaluation?
  10. Is there a documented basis for retaining, reclassifying or removing the safety concern at this point in the lifecycle?

Key Takeaways

An important identified risk has two distinct components: causality is sufficiently established, and the risk is important enough to require focused risk-management planning. Neither seriousness, labelling status nor signal validation alone establishes the classification.

The RMP should remain selective. Important identified risks are connected to pharmacovigilance and risk minimisation according to the scientific questions and management needs that remain; additional studies and additional risk-minimisation measures are not automatic consequences of classification.

The classification is also not permanent. As evidence accumulates and clinical practice evolves, risks may be added, reclassified or removed from the RMP. Good lifecycle management depends on a reconstructable scientific rationale, consistency across pharmacovigilance processes and effective QPPV oversight rather than on invented thresholds or rigid internal templates.

References

  1. European Medicines Agency. Guideline on good pharmacovigilance practices (GVP) Module V — Risk management systems (Rev. 2). EMA/838713/2011 Rev. 2. https://www.ema.europa.eu/en/documents/scientific-guideline/guideline-good-pharmacovigilance-practices-module-v-risk-management-systems-rev-2_en.pdf
  2. European Medicines Agency. Risk management plans — current EU RMP format guidance and template information. https://www.ema.europa.eu/en/human-regulatory-overview/marketing-authorisation/pharmacovigilance-marketing-authorisation/risk-management/risk-management-plans
  3. European Medicines Agency. Guidance on the format of the risk management plan (RMP) in the EU — integrated format, Rev. 2.0.1. EMA/164014/2018 Rev. 2.0.1. Available from the EMA Risk management plans page.
  4. European Medicines Agency. Risk management plans (RMP) in post-authorisation phase: questions and answers. EMEA-H-19984/03 Rev. 118, updated 13 July 2026. https://www.ema.europa.eu/en/human-regulatory-overview/post-authorisation/pharmacovigilance-post-authorisation/risk-management-plans-rmp-post-authorisation-phase-questions-answers
  5. European Union. Commission Implementing Regulation (EU) No 520/2012, consolidated version current at 12 February 2026. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02012R0520-20260212
  6. European Union. Directive 2001/83/EC on the Community code relating to medicinal products for human use, as amended.
  7. European Union. Regulation (EC) No 726/2004, as amended.
  8. International Council for Harmonisation. ICH E2E Pharmacovigilance Planning. https://www.ich.org/page/efficacy-guidelines

Regulatory Note

This article distinguishes EU legal requirements from GVP and EMA procedural guidance and from recommended operational practice. GVP Module V Rev. 2 and the EU RMP format guidance remain the principal published EU guidance used here for the scientific classification of RMP safety concerns as of 7 September 2026. EMA has announced a risk-management information day for 8 September 2026 that includes updates on GVP Module V; any subsequent adopted revision should be assessed before relying on this article for a future regulatory submission.

Revision History

Related Articles

Important Potential Risks

Explains how important potential risks are selected for the EU RMP, how evidence and uncertainty are assessed, how they connect to signal management and pharmacovigilance planning, and how they are retained, reclassified or removed as knowledge develops.

Missing Information

Explains how missing information is selected for the EU RMP, why absence of data alone is insufficient, how clinically relevant uncertainty is linked to pharmacovigilance planning, and how items are retained, refined or removed as evidence develops.

EU Risk Management Plan Structure Explained

The EU Risk Management Plan is a structured regulatory document that connects the product's safety specification to pharmacovigilance activities, risk minimisation and post-authorisation evidence generation. This article explains the current EU RMP architecture, the purpose of every part and module, proportionality for different products and lifecycle stages, and how an experienced PV professional maintains traceability across the document.

Last reviewed: 2026-09-07