GxPinnacle Logo

Pharmacovigilance Regulatory Expectations

What Do Inspectors Check for ICSR Case Management Requirements?

Pharmacovigilance systems must manage Individual Case Safety Reports (ICSRs from receipt through reporting and closure. Regulators expect structured processes covering intake, validation, data entry, medical review, submission, follow-up, and quality control.

Founders, CEOs & MDsPV LeadsQA/ComplianceScientists tasked with documentation

The short version

What teams need to understand

  • Pharmacovigilance systems must manage ICSRs through a structured, end-to-end process from receipt to closure.
  • Each case must be validated against minimum criteria before processing.
  • Case data must be accurately entered, coded, and documented in the safety database.
  • Medical review must confirm case assessments including causality and expectedness.
  • ICSRs must be reported within regulatory timelines.
  • Follow-up activities must be performed and documented where information is incomplete.

Regulatory expectation

What regulators expect

Each expectation should be supported by controlled documentation, traceable records, clear ownership, and evidence that the process works in practice.

  • ICSRs must be managed through a defined and controlled process.
  • Minimum case criteria must be verified before processing.
  • Case data must be complete, accurate, and traceable.
  • Medical review must confirm case assessment.
  • Reporting timelines must be met.
  • Follow-up activities must be documented.

Why it matters

What this means in practice

Inspectors assess whether pharmacovigilance systems manage ICSRs through a controlled, end-to-end process. They typically review how cases are received, validated, entered into safety systems, medically assessed, reported, followed up, and closed.

Questions this page answers

What are ICSR case management requirements?
How are ICSRs processed in pharmacovigilance?
What do inspectors check for ICSR case management?
What are the steps in ICSR processing?
What is the pharmacovigilance case management process?
How do inspectors audit ICSR handling?
What documentation is required for ICSRs?
What is the lifecycle of an ICSR?
How should adverse event cases be managed?
What are pharmacovigilance reporting requirements for ICSRs?

Inspection evidence

Evidence teams should be able to show

ICSR Case Management SOP

  • End-to-end process from case receipt to closure
  • Defined roles and responsibilities across PV functions
  • Procedures for case intake, processing, and reporting
  • Defined timelines aligned with regulatory requirements

ICSR Intake Form

  • Capture of reporter, patient, product, and event information
  • Documentation of minimum case criteria
  • Initial seriousness and causality indicators

Safety Database Records

  • Case data entered into PV database (e.g. Argus)
  • MedDRA coding and drug dictionary coding
  • Case narratives and structured data fields

Quality Control Checklist

  • Verification of data accuracy against source documents
  • Consistency checks for coding and narrative
  • QC sign-off prior to submission

Medical Review Documentation

  • Medical assessment of causality and expectedness
  • Clinical interpretation of case data
  • Medical reviewer comments and conclusions

Follow-Up Tracking Log

  • Documentation of follow-up attempts
  • Tracking of missing information
  • Closure decisions for cases with no further data

Regulatory Basis (Primary Sources)

  • GVP Module VI - requirements for ICSR collection, management, and reporting
  • ICH E2D - post-approval safety data management and expedited reporting
  • ICH E2A - clinical safety reporting requirements
  • MHRA GPvP guidance - UK pharmacovigilance reporting obligations
  • FDA 21 CFR 314.80 and 600.80 - postmarketing safety reporting requirements

Typical Inspection Questions (What Inspectors Ask)

  • Show me how ICSRs are managed end-to-end.
  • How do you validate cases before processing?
  • How do you ensure data accuracy in your safety database?
  • Show me an example case from receipt to submission.
  • How do you manage follow-up for incomplete cases?

Common failure patterns

Cases are processed without verification of minimum criteria.
Incomplete or inaccurate data entry in the safety database.
Weak traceability between source documents and case records.
Medical review is inconsistent or undocumented.
Follow-up activities are not performed or recorded.

What good looks like

  • A clearly defined ICSR lifecycle from intake to closure.
  • Consistent validation of minimum case criteria.
  • Accurate and complete case data in the safety database.
  • Documented medical review and assessment.
  • Structured follow-up processes for incomplete information.

How teams operationalise it

  • Define an end-to-end ICSR process within the PV SOP.
  • Ensure all cases meet minimum criteria before processing.
  • Implement structured data entry and coding procedures.
  • Perform QC checks before submission.
  • Ensure medical review is completed for each case.
  • Track and perform follow-up activities until case closure.

From expectation to working control

Find the documentation that supports this work

Review the related toolkit to understand its purpose, included files, and how it supports this regulatory expectation.

Browse pharmacovigilance toolkitsView related toolkit

Frequently asked questions

What are the steps in ICSR case management?

ICSR case management typically includes case receipt, validation, data entry, quality control, medical review, regulatory reporting, follow-up, and closure.

What is the minimum information required for an ICSR?

An ICSR requires an identifiable patient, identifiable reporter, suspect product, and an adverse event.

How do inspectors review ICSR processes?

Inspectors typically trace cases from initial receipt through to reporting and verify data accuracy, timelines, and documentation.

Why is medical review important in ICSR processing?

Medical review ensures accurate clinical interpretation, appropriate causality assessment, and correct classification of events.

How are incomplete cases handled?

Incomplete cases are followed up through documented outreach to reporters until sufficient information is obtained or attempts are exhausted.

What are examples of ICSR case management controls?

Examples include intake forms, QC checklists, medical review worksheets, safety database records, and follow-up tracking logs.

Source boundary

Regulatory sources

These primary sources inform this structured interpretation. Always confirm current requirements against the original source and the requirements applicable to your organisation, product, and jurisdiction.

European Medicines Agency (EMA)

  • Guideline on good pharmacovigilance practices (GVP) - Module VI

    View source

FDA

ICH

MHRA