Types of Risk Management Plans

The phrase “types of RMPs” can be misleading. In the European Union there is one regulatory concept—the Risk Management Plan (RMP)—implemented through the current EU RMP format and GVP Module V. What varies is the product's legal basis, evidence base, lifecycle stage and risk-management need. Those differences determine which RMP sections are applicable, how much information is required and whether additional pharmacovigilance or risk-minimisation activity is justified.

Purpose and Regulatory Framework

EU risk-management requirements arise from Directive 2001/83/EC, Regulation (EC) No 726/2004, Commission Implementing Regulation (EU) No 520/2012 and GVP Module V — Risk management systems (Rev. 2). EMA's current integrated RMP format is Rev. 2.0.1.

EMA's pre-authorisation guidance, revised in October 2025, states that the Revision 2 RMP format should be used, including for generics. The framework therefore does not provide separate official templates called “full RMP,” “hybrid RMP” or “biosimilar RMP.” Instead, the same RMP framework is applied proportionately.

This distinction matters because terminology used internally in companies can easily be mistaken for regulatory classification.

Proportionality Is the Governing Principle

An RMP should contain the information and activities needed to characterise and manage important risks and relevant uncertainty. The amount of content is not determined by whether a company calls the document “full” or “abridged.” It follows from questions such as:

• How much is already known about the active substance and product?
• Does the application rely on a reference medicinal product?
• Are there product-specific differences that could alter safety?
• Are important risks or missing information present?
• Are routine pharmacovigilance activities sufficient?
• Are additional pharmacovigilance studies needed?
• Are routine risk-minimisation measures sufficient?
• Are additional risk-minimisation measures justified?

The same logic continues after authorisation as new evidence changes the safety profile.

Innovative and New Active Substance Applications

Applications for a new active substance may require the broadest use of the RMP structure because pre-authorisation exposure is inherently limited and important uncertainties may remain at launch.

The RMP may need to address:

• epidemiology of the indication and target population;
• non-clinical and clinical safety findings;
• populations not sufficiently studied;
• important identified and potential risks;
• missing information;
• additional pharmacovigilance activities where routine surveillance cannot answer an important question; and
• additional risk minimisation where routine product information is insufficient.

None of these elements should be included merely because the product is innovative. Each safety concern and activity requires scientific justification.

Conditional Marketing Authorisation and Other Special Approval Contexts

A product authorised with a less complete evidence base may have important post-authorisation data-generation commitments. Those obligations can make the pharmacovigilance plan more extensive, but they do not create a different legal “type” of RMP.

The RMP should distinguish:

• routine pharmacovigilance;
• additional pharmacovigilance activities;
• imposed conditions or specific obligations where applicable; and
• activities that are company research but not regulatory RMP commitments.

This distinction prevents the RMP from becoming an undifferentiated project list.

Generic Medicinal Products

Generic medicinal products submitted under Article 10(1) should include an RMP in the application dossier. EMA's generic/hybrid procedural guidance explains that some parts or modules may be omitted in accordance with GVP Module V.

The generic applicant generally relies on the established safety knowledge of the reference medicinal product while assessing whether anything product-specific changes the risk-management need.

Relevant questions include:

• What safety concerns apply to the reference medicinal product?
• Are there formulation, excipient, device or administration differences with safety relevance?
• Are additional risk-minimisation measures applicable to the generic?
• Are any product-specific pharmacovigilance activities needed?

If no RMP exists for the reference medicinal product, EMA advises applicants to use the European public assessment information and SmPC of the reference product to identify relevant safety concerns and, where needed, discuss the approach with regulators.

Hybrid Applications

Hybrid applications under Article 10(3) rely partly on a reference medicinal product but include differences that require additional pre-clinical or clinical data. The RMP should therefore separate established reference-product knowledge from uncertainties introduced by the hybrid product.

Potentially relevant differences include:

• strength;
• pharmaceutical form;
• route of administration;
• indication;
• device or delivery system; and
• formulation characteristics that alter exposure or use.

The presence of a hybrid legal basis does not automatically require additional pharmacovigilance. The need follows from whether the differences create an important unanswered safety question.

Biosimilar Medicinal Products

Biosimilars also use the common EU RMP framework. EMA's biosimilar procedural guidance requires an EU RMP, while the RMP format and GVP Module V permit some content to be adapted or omitted where scientifically justified.

The safety strategy should distinguish what is already established for the reference biological medicine from what must be monitored for the biosimilar itself.

Important considerations may include:

• immunogenicity where clinically relevant;
• product traceability and correct identification in ICSRs;
• differences in device or presentation;
• safety in extrapolated indications where the totality of evidence warrants specific attention; and
• manufacturing or quality changes only where they create a pharmacovigilance-relevant safety question.

It is incorrect to assume that every biosimilar requires a special post-authorisation study simply because it is a biosimilar. The pharmacovigilance plan should remain proportionate to identified uncertainties.

Line Extensions and Major Variations

A new strength, formulation, route or indication may change the RMP because the change alters exposure, target population, administration or the known safety profile. The organisation should perform an impact assessment rather than automatically create a separate RMP “type.”

Questions include:

• Does the new use change the target population?
• Does exposure differ materially?
• Does the route introduce new administration risks?
• Are new data gaps relevant to authorised use?
• Are existing risk-minimisation measures still suitable?

Where the RMP changes, the version history and submission context should make the reason for the update clear.

Products Without a Historical RMP

Some older marketing authorisations predate the current requirement for an RMP. EMA's current post-authorisation guidance notes that an RMP may still need to be introduced later, for example when a new safety concern or significant change to the marketing authorisation creates a risk-management need.

This is another reason not to think of “RMP type” as a permanent product label. A product's risk-management documentation can change fundamentally during its lifecycle.

Global Core Risk-Management Documents

Companies may maintain a global core safety or risk-management document to coordinate risk strategy across regions. Such a document can be operationally useful, but it is not the EU RMP unless it satisfies the EU regulatory format and procedure.

A global core document may support:

• consistency of safety concern definitions;
• global study strategy;
• alignment of risk-minimisation concepts;
• comparison of regional differences; and
• efficient lifecycle governance.

Regional regulatory documents should nevertheless remain controlled according to the applicable jurisdiction.

Country-Specific Materials and Annexes

Country-specific educational materials, implementation plans or local risk-minimisation requirements may accompany a broader risk-management strategy. These should not automatically be described as separate “country RMP types.”

For EU products, national implementation of additional risk-minimisation measures may vary within the regulatory framework. The organisation should maintain traceability between the agreed RMP measure and local implementation evidence.

Comparison by Regulatory Context

This table describes regulatory contexts, not formal EMA RMP document categories.

Relationship With the Safety Specification

Regardless of application type, the safety specification remains the scientific foundation of the RMP. It should identify only those important identified risks, important potential risks and missing information that meet the relevant criteria.

A generic or biosimilar should not mechanically reproduce every historical concern of a reference product without assessing current applicability. Equally, an innovator should not populate the safety specification with every adverse reaction merely because more data are available.

The companion article [[safety-specification]] explains these criteria in detail.

Relationship With the Pharmacovigilance Plan

The pharmacovigilance plan follows from the safety specification. Routine pharmacovigilance is the baseline. Additional pharmacovigilance is justified when an important question cannot be answered adequately through routine activities.

The legal basis of the application may affect the available evidence, but it does not by itself mandate a PASS, registry or enhanced surveillance programme.

Relationship With Risk Minimisation

Routine risk minimisation includes measures such as the SmPC, package leaflet, pack size and legal status where applicable. Additional risk minimisation should be used only when routine measures are insufficient to manage an important risk.

The same principle applies to generics, biosimilars and innovative medicines. Risk minimisation follows the risk, not the product label assigned by the organisation.

Practical Implementation

When determining the appropriate RMP content, a useful sequence is:

1. identify the legal basis and regulatory procedure;
2. establish the current safety knowledge and reference-product information where applicable;
3. identify product-specific differences and clinically relevant uncertainty;
4. determine which RMP modules are applicable;
5. define safety concerns using GVP Module V criteria;
6. decide whether routine pharmacovigilance is sufficient;
7. add only those additional pharmacovigilance activities that address a defined question;
8. determine whether routine risk minimisation is sufficient;
9. add additional measures only when justified; and
10. maintain the RMP through the applicable lifecycle procedure.

This approach is more reliable than first selecting an internal “RMP type” and then filling a corresponding template mechanically.

Potential Failure Modes

The following are illustrative failure modes, not reported inspection findings.

Inspection and Governance Considerations

An inspector or regulatory assessor is likely to focus less on what the company calls the RMP and more on whether the content is scientifically justified and operationally implemented.

Questions may include:

• Why are these safety concerns included?
• Why are other known adverse reactions not included?
• Which modules were omitted for this generic or biosimilar and why?
• What product-specific differences were assessed?
• Why was an additional study considered necessary?
• How are additional risk-minimisation measures implemented locally?
• How are changes to the reference product assessed for impact?
• Can the current RMP version be traced to the regulatory procedure that approved it?

The QPPV should have appropriate oversight of important RMP content and commitments but does not need to be described as the mandatory signatory of every RMP version unless a specific organisational or procedural requirement applies.

Practical RMP-Context Checklist

The following is recommended operational practice.

1. What is the legal basis of the marketing-authorisation application?
2. Is the current EU RMP format being used?
3. Which RMP modules are applicable to this product and why?
4. Is reference-product safety information relevant and current?
5. Are product-specific formulation, device, route or indication differences assessed?
6. Are safety concerns classified using current GVP criteria?
7. Are data gaps distinguished from true missing information?
8. Does each additional pharmacovigilance activity answer a defined question?
9. Is each additional risk-minimisation measure linked to an important risk and an objective?
10. Are regulatory commitments distinguished from voluntary company activities?
11. Are global and local documents clearly distinguished from the EU RMP?
12. Is lifecycle change controlled and traceable?

Key Takeaways

The EU does not operate a formal taxonomy of “full,” “generic,” “hybrid,” “biosimilar,” “global core” and “country-specific” RMP document types. There is a common EU RMP framework applied proportionately.

The legal basis and product context influence which modules and evidence are relevant, but the scientific logic remains the same: define important safety concerns, identify what additional knowledge is needed, select proportionate pharmacovigilance and minimise risk appropriately.

Generic and biosimilar RMPs may omit or adapt certain content when justified; this does not make them a different regulatory species of document.

Global core risk-management documents and country implementation materials can be useful internal or regional tools, but they should not be confused with the submitted EU RMP.

The most reliable approach is to work from evidence and regulatory context rather than from an internal document label.

References

1. European Medicines Agency. Guideline on good pharmacovigilance practices (GVP) Module V — Risk management systems (Rev. 2). EMA/838713/2011 Rev. 2.
2. European Medicines Agency. Guidance on the format of the risk management plan (RMP) in the EU — integrated format (Rev. 2.0.1). EMA/164014/2018 Rev. 2.0.1. https://www.ema.europa.eu/en/human-regulatory-overview/marketing-authorisation/pharmacovigilance-marketing-authorisation/risk-management/risk-management-plans
3. European Medicines Agency. Pre-authorisation guidance, section on RMP submission; revised October 2025. https://www.ema.europa.eu/en/human-regulatory-overview/marketing-authorisation/pre-authorisation-guidance
4. European Medicines Agency. Generic and hybrid applications — questions and answers, including RMP requirements for established generic products. https://www.ema.europa.eu/en/human-regulatory-overview/marketing-authorisation/generic-hybrid-medicines/generic-hybrid-applications
5. European Medicines Agency. Biosimilar medicines: marketing authorisation, including RMP requirements for similar biological medicinal products. https://www.ema.europa.eu/en/human-regulatory-overview/marketing-authorisation/biosimilar-medicines-marketing-authorisation
6. European Medicines Agency. Risk management plans in post-authorisation phase: questions and answers. EMEA-H-19984/03 Rev. 118, updated 13 July 2026.
7. European Union. Directive 2001/83/EC, as amended.
8. European Union. Regulation (EC) No 726/2004, as amended.
9. European Union. Commission Implementing Regulation (EU) No 520/2012, as amended.

Regulatory Note

This article uses “types of RMPs” as a teaching label for different authorisation and lifecycle contexts. EMA applies a common EU RMP framework rather than a formal taxonomy of full, generic, hybrid or biosimilar RMP document types. As of 8 September 2026, EMA continues to publish GVP Module V Rev. 2 and the integrated RMP format Rev. 2.0.1; the current post-authorisation RMP Q&A is Rev. 118, updated 13 July 2026.