Introduction
Pharmacovigilance (PV) in the United States plays a crucial role in ensuring the ongoing safety and efficacy of medicinal products. Unlike the European Union, where Good Pharmacovigilance Practices (GVP) modules are highly standardized, the U.S. framework— regulated by the Food and Drug Administration (FDA)—is governed by a combination of federal laws, regulations, and detailed guidance documents.
The FDA’s pharmacovigilance system emphasizes a lifecycle approach to drug safety, requiring continuous monitoring, risk evaluation, and proactive communication throughout a product’s market existence. This blog provides a structured overview of FDA pharmacovigilance requirements, referencing the specific legal and regulatory sources that define obligations for sponsors and marketing authorization holders.
1. The Legal and Regulatory Foundation
Pharmacovigilance obligations in the U.S. derive primarily from:
- The Federal Food, Drug, and Cosmetic Act (FD&C Act)
- The Public Health Service (PHS) Act (for biologics)
- The Code of Federal Regulations (CFR), specifically:
- 21 CFR Part 312 — Investigational New Drug (IND) safety reporting
- 21 CFR Part 314 — Postmarketing reporting for New Drug Applications (NDAs)
- 21 CFR Part 600–606 — Adverse event reporting for biologic products
In addition to these requirements, the FDA issues several non-binding but authoritative guidance documents, including:
- Good Pharmacovigilance Practices and Pharmacoepidemiologic Assessment (2005)
- E2E Pharmacovigilance Planning (ICH-adopted)
- Post marketing Safety Reporting for Human Drug and Biological Products including Vaccines
This guidance collectively forms the operational framework for U.S. pharmacovigilance systems.
2. PV System Requirements
While the FDA does not require a formally designated Qualified Person for
Pharmacovigilance (QPPV) as in the EU, the applicant or holder of the NDA/BLA/ANDA or sponsor must establish and maintain an auditable pharmacovigilance system capable of:
- Collecting, evaluating, and reporting adverse events (AEs) in compliance with 21 CFR 314.80 and 21 CFR 600.80
- Appointing a responsible U.S. safety contact for communication with the FDA
- Developing written Standard Operating Procedures (SOPs) that describe data handling, timelines, escalation, and oversight
- Training all PV-involved personnel
- Ensuring inspection readiness, as the FDA routinely inspects post-marketing safety systems (under FD&C Act, Section 704)
The FDA expects a proactive quality management system that assures data integrity and compliance with reporting obligations.
3. Pre-Marketing Safety Reporting (Clinical Trials)
During drug development, safety reporting is regulated under 21 CFR 312.32. Sponsors must promptly report to the FDA and all investigators any:
- Serious and unexpected suspected adverse reactions (SUSARs) — within 15 calendar days
- Fatal or life-threatening reactions — within 7 calendar days
Sponsors are responsible for determining causality, meaning that only suspected adverse reactions—not all serious adverse events—require expedited reporting.
Sponsors must also maintain comprehensive documentation for all AEs, whether reported or not, and provide follow-up information as required under 21 CFR 312.32(d)
4. Post-Marketing Safety Reporting
Once a drug or biologic is approved, the holder of the NDA, ANDA, or BLA assumes postmarketing PV responsibilities as per 21 CFR 314.80 (drugs) and 21 CFR 600.80 (biologics).
a. Who Reports
The applicant/holder must report adverse drug experiences (ADEs) to the FDA via the FDA Adverse Event Reporting System (FAERS).
b. What to Report
- Expedited (15-day) “Alert Reports” for serious, unexpected ADEs (21 CFR 80(c)(1)(i))
- Follow-up reports within 15 days of receiving additional information (21 CFR 80(c)(1)(ii))
- Periodic Safety Reports (PADERs) typically submitted quarterly for the first 3 years, then annually thereafter (21 CFR 314.80(c)(2))
- Foreign Reports: Serious and unexpected foreign events must be reported in the same timeframe (21 CFR 314.80(c)(1)(ii))
Device-related adverse events follow 21 CFR Part 803 (Medical Device Reporting).
- If you are a device user facility,
Reports of device-related death or device-related serious injuries: shall be submitted no later than 10 workdays. And annual report shall be submitted
- If you are an importer
Submit reports of individual adverse events no later than 30 calendar days after the day that you become aware of a reportable event
5. Risk Management and REMS
The FDA Amendments Act (FDAAA) of 2007, codified under Section 505-1 of the FD&C Act, introduced Risk Evaluation and Mitigation Strategies (REMS) for products with
significant safety risks.
A Risk Evaluation and Mitigation Strategy (REMS) is a drug safety program that the U.S. Food and Drug Administration (FDA) can require for certain medications with serious safety concerns to help ensure the benefits of the medication outweigh its risks. REMS are designed to reinforce medication use behaviors and actions that support the safe use of that
medication. While all medications have labelling that informs health care stakeholders about medication risks, only a few medications require a REMS.
REMS elements may include:
- Medication Guides and patient communication materials
- Healthcare provider education or certification
- Restricted distribution systems
- Monitoring and reporting obligations
Sponsors must assess and submit REMS effectiveness reports as required by the FDA’s Format and Content of a REMS Document (2017) and REMS Assessment: Planning and Reporting (2019) guidance
6. Signal Detection and Evaluation
The FDA requires continuous monitoring of all safety data to detect potential safety signals, in line with its Good Pharmacovigilance Practices and Pharmacoepidemiologic Assessment (2005) guidance.
applicant/holder must:
- Conduct ongoing aggregate analyses, trend reviews, and case series evaluations
- Use pharmacoepidemiologic methods when signal strength or frequency warrants further assessment
- Implement risk mitigation measures (labelling changes, communications, postmarketing studies) as required by 21 CFR 314.80
- Participate in active surveillance programs such as the FDA Sentinel Initiative for data-driven signal detection
7. Literature Surveillance
Although not explicitly codified, the FDA expects continuous surveillance of published literature to identify serious and unexpected AEs, per the Good Pharmacovigilance Practices and Pharmacoepidemiologic Assessment guidance.
Sponsors should develop procedures to systematically review and evaluate safety information from all relevant data sources, including the published literature.
When such events are detected, they must be reported as 15-day expedited reports if they meet seriousness and unexpectedness criteria (21 CFR 314.80(c)(1)(i)).
8. Post-Marketing Studies and Commitments
The FDA may require sponsors to conduct postmarketing requirements (PMRs) or
postmarketing commitments (PMCs) under Section 505(o)(3) of the FD&C Act. These studies are intended to:
- Further investigate identified or potential safety issues, and/or
- Evaluate the effectiveness of Risk Evaluation and Mitigation Strategies (REMS).
Sponsors are responsible for ongoing oversight of these studies and must submit annual status reports to the FDA in accordance with 21 CFR 314.81(b)(2)(vii). These reports should
include:
- Progress updates on the study,
- Key results or findings, and
- Any safety-related observations or implications that may affect product labeling or patient management under 21 CFR 314.70(b).
Failure to comply with PMRs or PMCs may result in regulatory action, including changes to marketing authorization status.
9. Electronic Reporting
Since June 2015, all Individual Case Safety Reports (ICSRs) must be submitted electronically through the FAERS Electronic Submissions Gateway (ESG), following the ICH E2B(R3) data standard.
Relevant references:
- Providing Submissions in Electronic Format—Postmarketing Safety Reports (2014)
- FAERS Electronic Submission Technical Conformance Guide (2023)
10. Inspection Readiness
Under 21 CFR 314.80(j) and 21 CFR 600.80(i), applicant/holder must:
- Retain all safety-related documentation for at least 10 years
- Maintain inspection-ready files and ensure all AE data are accessible to the FDA (21 CFR 314.81(b)(1)(ii))
- Conduct internal audits covering PV case management, literature monitoring, signal management, and vendor oversight
11. Pharmacovigilance Agreements (SDEAs)
When PV functions are outsourced or shared between entities, the FDA expects a written safety data exchange agreement (SDEA) defining:
- Responsibilities for AE collection, evaluation, and submission
- Data exchange timelines and formats
- Audit rights and access to source data
The applicant/holder retains ultimate responsibility for compliance, as outlined in the Good Pharmacovigilance Practices and Pharmacoepidemiologic Assessment (2005) guidance and the FDA Compliance Program Guidance Manual 7346.832.
Key Takeaways
- The FDA’s PV system is grounded in the FD&C Act and 21 CFR Parts 312, 314, and
- Sponsors and applicant/holder must maintain a robust, auditable PV system covering AE intake, evaluation, and reporting.
- Pre-marketing safety reporting follows 7-day and 15-day timelines under 21 CFR 32.
- Postmarketing reports (15-day alerts and periodic summaries) are required under 21 CFR 314.80 and 600.80.
- REMS programs ensure risk mitigation for high-risk products (FDAAA 2007).
- Continuous signal detection, literature review, and postmarketing commitments ensure long-term safety monitoring.
- All ICSRs must be submitted electronically via FAERS using ICH E2B(R3)
- Written SDEAs are mandatory when PV activities are shared with third
- The FDA expects quality systems, documented oversight, and inspection readiness as part of compliance.
Authored By : Lamees El-Heeny
BPharm-Head of Pharmacovigilance, Baupharma.
