QPPV.COM

What is a QPPV?

Explains the QPPV role required for Marketing Authorisation Holders in the EU, outlining oversight of the pharmacovigilance system, PSMF maintenance, inspection readiness, vendor oversight, and availability to authorities.

Audio Lesson 11 min

A Qualified Person Responsible for Pharmacovigilance (QPPV) is the individual responsible for oversight of a marketing authorisation holder's pharmacovigilance system and serves as a central point of responsibility for pharmacovigilance compliance within the European Union.

Overview

The QPPV is one of the most important roles within a pharmacovigilance system. The position exists to ensure that medicinal product safety activities are appropriately managed, overseen and maintained throughout the lifecycle of authorised medicinal products.

Within the European Union regulatory framework, marketing authorisation holders are required to maintain a pharmacovigilance system and appoint a QPPV responsible for its oversight (Directive 2001/83/EC, Article 104; EMA GVP Module I). The legal requirement creates both substantive responsibilities and procedural obligations (appointments, notifications, access to records), which must be translated into operational controls and governance within the MAH.

Why the Role Exists

Medicinal products continue to be monitored after approval. New safety information may emerge through spontaneous reporting, literature monitoring, signal detection, post-authorisation studies and regulatory activities.

The QPPV helps ensure that these activities operate within an effective pharmacovigilance system and that emerging safety issues are appropriately evaluated and communicated. In regulatory terms the QPPV is the MAH's named accountable person for pharmacovigilance and the principal contact for competent authorities in the EU/EEA (Directive 2001/83/EC, Article 104; EMA GVP Module I).

For authoritative text and exact legal wording consult the Directive and the current GVP Modules on the EMA website.

Key Responsibilities (expanded)

QPPV availability, location and qualification requirements — detailed

Legal requirements - The appointment and responsibilities of the QPPV are a legal obligation under Directive 2001/83/EC (Article 104). The Directive requires that the QPPV is resident and permanently and continuously available in the EU/EEA and that the MAH provides the competent authority with the name and contact details of the QPPV (Directive 2001/83/EC, Art. 104). - GVP Module I expands on the Directive and sets expectations for how the availability requirement is met in practice and how it should be documented in the PSMF.

Qualification and competence - The Directive does not prescribe a single academic qualification, but GVP Module I sets expectations: the QPPV should be a suitably qualified and experienced person with scientific or medical training and demonstrable pharmacovigilance competence commensurate with the complexity and risk profile of the MAH’s product portfolio (GVP Module I, Section on QPPV competence). - Practical elements to document in the PSMF and inspection files: the QPPV’s CV, evidence of training and continuing professional development in pharmacovigilance, records of delegated authorities, and evidence of understanding of the MAH’s product portfolio and key PV systems (GVP Module I).

Residence and continuous availability — practical interpretation - “Resident and permanently and continuously available” is interpreted in EMA guidance (GVP Module I) to mean that the QPPV must be located within the EU/EEA and must be reachable by competent authorities and by the MAH for urgent safety matters without undue delay. - Practical implementation (examples adopted by inspected MAHs): - The QPPV’s contact details (work email, mobile phone number and an emergency contact point such as a monitored central inbox or on-call rota) are recorded in the PSMF and provided to competent authorities. - The MAH maintains a documented deputisation system (named deputies with written delegation statements and training records) to ensure 24/7 effective coverage for urgent matters. Deputies must be authorised in writing and their authority must be explicit for specified tasks (see Delegation Controls, below). - Availability logs (call/email records) are kept to demonstrate responsiveness to regulatory contact during an inspection.

Notification and change control for QPPV - Directive 2001/83/EC and GVP Module I require that the MAH notifies competent authorities of the QPPV’s name and contact details; any change in the QPPV should be notified to the competent authority without undue delay (Directive 2001/83/EC, Art. 104; GVP Module I). - Practical implementation: - Maintain a PSMF section and an SOP describing the notification workflow for changes to QPPV details, including timelines for internal approval, preparing the notification dossier, and the communication channel to the competent authority. - Typical MAH practice: notify the RMS/NCAs within 7–30 calendar days of change, depending on the MAH’s internal policy and the national requirements of Member States in which the product is authorised. The PSMF should reflect the chosen MAH standard and provide justification if timelines differ from “without undue delay”. - Keep records of the submitted notification and any acknowledgement from competent authorities in the PSMF.

Inspection relevance - Inspectors will verify residence/availability, notification records, the QPPV’s CV and evidence of competence, named deputies and delegations, and logs of contact with competent authorities. The PSMF must allow an inspector to validate that the QPPV is accessible and that handover/delegation arrangements are robust (GVP Module I).

Regulatory context - EU ICSR reporting requirements and timelines are set out in Directive 2001/83/EC and corresponding implementing regulations, and are explained in EMA GVP Module VI (Management and reporting of adverse reactions to medicinal products) together with EudraVigilance requirements. - GVP Module VI provides legal context and operational expectations for MAHs when processing and reporting suspected adverse reaction reports.

Core timelines (summary, see GVP Module VI for full legal text) - Initial reporting: MAHs must submit serious suspected adverse reactions received from any source to EudraVigilance within the legally defined timelines for post-authorisation reporting as specified in GVP Module VI. The standard legal timeframe for initial submission of a serious suspected adverse reaction is 15 calendar days from receipt by the MAH (GVP Module VI, section on post-authorisation ICSR reporting). - Follow-up reports: follow-up information should be provided as soon as available; GVP Module VI describes expectations for the timeliness of follow-up submissions and the use of case identifiers to link follow-up to the initial ICSR. - Non-serious ICSRs: non-serious ICSRs are subject to different requirements. For non-serious spontaneous reports the reporting obligation may be limited; GVP Module VI specifies circumstances for capture and submission (refer to Module VI for details).

Operational implementation (practical controls) - Receipt and triage: establish SOPs to timestamp (date/time) initial receipt, perform immediate triage (within 24 hours business time) to identify seriousness and expectedness, and assign a case processor. - Medical review and coding: ensure medically qualified staff perform causality/seriousness assessments and apply MedDRA coding within a defined internal timeframe (commonly 24–72 hours from triage). - Case entry and gateway submission: define internal performance targets such as “initial case entry within 48 hours of receipt, submission to EudraVigilance within 15 calendar days for serious reports.” - Follow-up management: track outstanding follow-ups with periodic review (e.g., weekly) and set escalation triggers (e.g., follow-up outstanding >30 days) to ensure compliance with and promptness beyond legal minimums. - Recordkeeping: retain a full audit trail of receipt date, assessment decisions, dates of case creation, submission and any follow-up. Inspectors will check that MAH internal dates allow reconstruction of compliance with the legal timelines (GVP Module VI).

Inspection relevance - Inspectors will request evidence that the MAH can demonstrate: date/time of receipt, evidence of medical review, evidence of submission to EudraVigilance within the required timeframe, and linkage of follow-up information to initial reports (GVP Module VI). Gaps in timestamps, missing medical assessment records or missing follow-up documentation are frequent inspection findings.

Note: The GVP Modules and implementing legislation contain the precise legal wording and full set of timelines; MAHs should consult the current GVP Module VI text for the definitive requirements and any subsequent updates.

Regulatory context - Directive 2001/83/EC establishes that the QPPV is the MAH’s responsible person for PV. GVP Module I makes clear that while certain PV activities may be delegated (outsourced) to third parties, ultimate responsibility remains with the MAH and the QPPV (GVP Module I). - Delegation does not relieve the MAH (and QPPV) of responsibility to maintain oversight and ensure compliance with PV obligations.

Essential delegation controls (practical implementation) - Written pharmacovigilance agreements (PVAs): every delegated activity must be governed by a PVA that defines responsibilities, deliverables, timelines (including ICSR reporting triggers and timelines), performance metrics and audit rights. PVAs should be maintained in the PSMF (GVP Module I). - Delegation matrix and RACI: maintain a delegation matrix that maps PV tasks (e.g., case processing, signal detection, expedited reporting, literature monitoring, RMP maintenance, PSMF maintenance) to responsible parties and clearly identifies the QPPV’s retained responsibilities and deputies. - Qualification and oversight: subject vendors to qualification activities (due diligence, capability assessment), ongoing oversight (KPIs, periodic quality reviews, audits), and change management controls. - Deputisation: name at least one deputy (or a deputy pool) with explicit written delegation for urgent tasks; ensure deputies have appropriate access and permissions to act on behalf of the QPPV (e.g., ability to submit to EudraVigilance if required). - Access and system rights: ensure delegated providers have appropriate system access (including EudraVigilance connectivity where required) and that logging/auditing of actions is enabled for inspection evidence. - Escalation and governance: implement agreed escalation routes and governance meetings (e.g., monthly PV operational calls, quarterly management reviews) with minutes and corrective action tracking.

Inspection relevance - Inspectors will review PVAs, evidence of vendor qualification, oversight records (audit reports, CAPA), delegation matrices and deputisation letters, and will expect to see evidence that the QPPV exercises oversight and receives the information necessary to comply with legal obligations (GVP Module I).

Pharmacovigilance System Master File (PSMF) — content, location, access and change‑notification

Regulatory context - GVP Module I sets out the PSMF content and its role as a central repository documenting the MAH’s pharmacovigilance system. The PSMF is the primary document inspectors consult to understand how a MAH meets its PV obligations (GVP Module I).

Required PSMF content (high level) - A description of the MAH’s pharmacovigilance system including organisational structure and responsibilities (including QPPV details), a list of authorised products and countries where they are placed on the market, references to SOPs, key PV processes (case management, signal detection, risk management), sources of safety data, major subcontractors and PVAs, quality systems and audit schedules, and a summary of system performance and compliance (GVP Module I, Annex on PSMF content). - QPPV information: name, contact details, evidence of residence/availability, CV and deputisation arrangements and delegations. - ICSR processes and system descriptions, including EudraVigilance connectivity and routing rules. - Records of regulatory communications and inspection history. - Copies or locations of key SOPs, PV policy documents, and templates used to meet obligations.

Location and accessibility - The PSMF should indicate a single physical or electronic location where the MAH’s PV system is described and where PSMF documentation is maintained. GVP Module I expects the PSMF to be made electronically available and accessible to competent authorities within a reasonable time and in a way that permits effective inspection (GVP Module I). - Practical implementation: - Maintain the PSMF in a controlled electronic repository (e.g., a validated document management system) with role-based access controls and versioning. - Record the PSMF location(s) clearly in the PSMF itself and in the MAH’s global regulatory contact records given that inspectors may request access at short notice. - Establish a documented service level for providing the PSMF to an inspecting authority (e.g., within 2–5 working days electronically, or within the timeframe stipulated in a specific inspection notice).

Access rights and audit trail - Ensure competent authority access is not hindered by IT or contractual barriers: provide direct read-access or provide secure, auditable extracts of PSMF content to authorities upon request. Maintain an audit trail of who accessed, changed or downloaded PSMF sections.

Change-notification procedures - Legal requirement and expectations: - The Directive requires notification of the QPPV details to competent authorities; GVP Module I emphasises that material changes in the pharmacovigilance system (including PSMF location and QPPV changes) should be documented and made available to competent authorities (Directive 2001/83/EC, Art. 104; GVP Module I). - Practical implementation: - Maintain a PSMF change control SOP that defines what constitutes a material change (e.g., QPPV change, PSMF location change, major change in delegated PV activities, migration of PV systems) and the timelines and responsibilities for notifying competent authorities. - Recommended MAH practice: major changes that could affect PV functioning (QPPV, PSMF location, major vendor change) should be notified to the relevant competent authorities in all Member States where the product is authorised “without undue delay” and, for operational clarity, many MAHs adopt a firm internal deadline (for example, notify within 7–30 calendar days depending on the nature of the change). Document the MAH’s notification timeframe and justification in the PSMF. - Retain copies of notifications, confirmations/acknowledgements from authorities, and internal approval records in the PSMF change log.

Inspection relevance - Inspectors will expect the PSMF to be complete, up to date and to contain current QPPV details, PVAs, organisation charts, SOP listings, CVs and evidence of operational performance. PSMF location and access during inspection are commonly inspected items; failures to provide timely access or incomplete PSMF content are frequent findings (GVP Module I).

Governance, records and inspection readiness

Governance structure - Formalise PV governance with defined roles (QPPV, deputies, heads of operations, quality assurance, regulatory affairs), documented responsibilities, regular management reviews and a PV quality plan. Document the governance in the PSMF and retain minutes of governance meetings. - Ensure the QPPV is a member (or has direct access) to senior management to escalate resource needs, quality issues and regulatory concerns.

Records and documentation - Maintain records that permit a retrospective reconstruction of PV activities: timestamps for receipt and submission of ICSRs, medical review notes, delegation logs, training records, audit reports, CAPA and management review minutes. - Ensure retention policies comply with legal requirements and company policy and that records are readily retrievable for inspections.

Inspection readiness - Prepare an inspection pack that includes: PSMF with navigation guide, QPPV CV and deputisation letters, PVAs for key vendors, ICSR processing SOPs and example case files demonstrating compliance with timelines, recent management review minutes and audit reports. - Run regular internal mock inspections and remediate findings. Inspectors will verify that the MAH’s written procedures are implemented in practice and that the QPPV’s oversight is demonstrable in records.

Practical implementation checklist (operational controls)

Closing notes and regulatory references

This article summarises legal expectations and practical implementation detail for QPPVs and MAHs operating in the EU environment. For the exact legal text and the full operational detail you must consult the current versions of:

Last reviewed: June 2026

Related Guides

Related Articles

PSMF and QPPV Oversight

An advanced guide to using the PSMF as a governance, oversight and risk management tool.

Benefit-Risk Evaluation in Pharmacovigilance

A comprehensive guide to benefit-risk evaluation, regulatory expectations, pharmacovigilance activities and decision-making throughout the product lifecycle.

Common PSMF Inspection Findings

A practical inspection-focused guide to understanding recurring PSMF deficiencies and how to prevent them.

Last reviewed: 2026-06-07