Global Pharmacovigilance Requirements and Databases

Part of Good Clinical Practice (GCP) — ICH E6(R3): Safety Reporting and Pharmacovigilance.

About 6 minutes. Free, in your language, no account needed.

Why this matters

A safety report from your site does not stop at the sponsor. It joins a regional database where it is compared with reports from every other trial and every other country. That comparison is how rare harms are found. Understanding where your report travels helps you see why completeness and timeliness are not administrative preferences.

E6(R3) sets the principle; regions build the machinery

Be clear about scope from the start. The International Council for Harmonisation (ICH) Good Clinical Practice (GCP) guideline E6(R3) does not name any pharmacovigilance database. The terms EudraVigilance and MedWatch appear nowhere in it.

What E6(R3) does is set the obligation and then defer to local law. Section 3.13.2(b) requires the sponsor to expedite reporting of suspected, unexpected and serious adverse reactions (SUSARs) to regulatory authorities "in accordance with the applicable regulatory requirement(s)" and with ICH E2A. Section 3.13.2(a) requires safety updates and periodic reports "as required by applicable regulatory requirements".

So everything in the rest of this lesson is regional implementation. It is how particular authorities have chosen to receive what E6(R3) requires. It is not itself GCP.

The European Union

EudraVigilance is the European Medicines Agency's (EMA) system for collecting and analyzing reports of suspected adverse reactions. It covers medicines authorized in the European Economic Area and medicines being studied in clinical trials there. Sponsors submit SUSARs from clinical trials to EudraVigilance electronically.

CTIS, the Clinical Trials Information System, is the single entry point for submitting and overseeing clinical trial applications in the European Union and European Economic Area. It came into use with Regulation (EU) No 536/2014, the EU Clinical Trials Regulation, which became applicable on 31 January 2022 and replaced the earlier Clinical Trials Directive.

The useful mental model is that SUSAR case reports go to EudraVigilance, while trial applications, substantial modifications and much of the trial's regulatory correspondence run through CTIS. Check the current EMA guidance for the exact routing of any specific report, because the details of what is submitted where have changed as CTIS has been implemented.

The United States

MedWatch is the United States Food and Drug Administration's (FDA) safety information and adverse event reporting program. It is mainly a route for reports about marketed medical products. Healthcare professionals and members of the public may submit voluntary reports. Manufacturers, importers and distributors submit mandatory reports.

Safety reporting from a clinical trial conducted under an Investigational New Drug application follows a different rule. Under the United States regulation at 21 CFR 312.32, the sponsor notifies the FDA and all participating investigators of any suspected adverse reaction that is both serious and unexpected. That regulation sets two well-known clocks: a 7-calendar-day clock for unexpected fatal or life-threatening suspected adverse reactions, and a 15-calendar-day clock for other qualifying reports.

Those numbers belong to United States regulation. They are not ICH E6(R3) numbers, and other regions set their own timelines.

Shared technical standards

Two ICH standards make cross-border reporting workable.

ICH E2B defines the data elements and the electronic format for transmitting Individual Case Safety Reports (ICSRs). An ICSR is the structured record of one adverse event in one patient. E2B is why a case can move from a sponsor's safety database into EudraVigilance or an FDA system without being retyped.

MedDRA, the Medical Dictionary for Regulatory Activities, is the standard terminology used to code adverse events. It was developed under ICH auspices. Coding turns free text such as "heart attack" and "myocardial infarct" into one consistent term, so that cases can be counted together.

Note the boundary. E6(R3) mentions "medical coding" as one of the activities involved in finalizing data sets before analysis, in §4.2.6(b). It does not name MedDRA. MedDRA is the industry standard, not an E6(R3) requirement.

Beyond the trial, the World Health Organization maintains a global database of individual case safety reports contributed by national pharmacovigilance centers. Its role is mainly post-marketing, and it sits outside the scope of E6(R3).

Why the databases exist: three cases

• Thalidomide. Marketed in the late 1950s and early 1960s as a sedative and treatment for nausea in pregnancy. It caused severe birth defects. The disaster is the origin of modern drug safety regulation in many countries, because no system existed to collect and connect the reports.
• Vioxx. A non-steroidal anti-inflammatory drug approved by the FDA in 1999 and withdrawn from the market in 2004 after evidence of increased cardiovascular risk. The signal emerged from accumulated post-marketing data, not from the pre-approval trials alone.
• Essure. A permanently implanted contraceptive device approved by the FDA in 2002. Reports of serious complications accumulated, and in 2018 the FDA restricted its sale and distribution.

Each case shows the same lesson. Individual reports look unremarkable. Aggregated reports reveal the pattern.

In practice

A participant at your site in Nairobi develops severe hepatitis. Dr. Sarah assesses it as possibly related, and the reaction is not described in the reference safety information.

Your obligation under E6(R3) is unchanged by geography. You report the serious adverse event to the sponsor immediately, with a causality assessment, and within the time period the protocol sets.

The sponsor then does the regional work. It assesses expectedness against the reference safety information, decides the case is a SUSAR, codes it in MedDRA, and builds an E2B-format case report. That single case may be submitted to several authorities: to EudraVigilance for the European sites, to the FDA under 21 CFR 312.32 for the United States investigational new drug application, and to the national authority in Kenya under its own requirements. The sponsor also reports the SUSAR to investigators and IRBs/IECs in a manner that reflects the urgency of action required, as E6(R3) §3.13.2(d) requires.

One report from one site can change the Investigator's Brochure for every site in the world.

Key takeaways

• ICH E6(R3) does not name EudraVigilance, MedWatch or any other database; it requires expedited SUSAR reporting in accordance with applicable regulatory requirements and ICH E2A.
• EudraVigilance is the European Medicines Agency's database of suspected adverse reactions, and CTIS is the European Union's single entry point for clinical trial applications under Regulation (EU) No 536/2014, applicable since 31 January 2022.
• MedWatch is the FDA's program for reporting safety problems, used mainly for marketed products, while United States trial safety reporting under an Investigational New Drug application follows 21 CFR 312.32.
• The 7-calendar-day and 15-calendar-day expedited clocks are United States regulation and must never be presented as ICH E6(R3) requirements.
• ICH E2B provides the electronic format for Individual Case Safety Reports and MedDRA provides the coding terminology, which together allow one case to be reported consistently to several authorities.
• Thalidomide, Vioxx and Essure show that safety signals for rare or delayed harms usually emerge only when many individual reports are aggregated.