Pharmacovigilance Regulatory Expectations

What Do Inspectors Check for Regulatory Intelligence Impact Assessment and Decision-Making?

Pharmacovigilance systems must assess the impact of regulatory changes and define actions to ensure compliance. Regulators expect structured impact assessment, gap analysis, risk classification, and documented decision-making processes.

Founders, CEOs & MDsPV LeadsQA/ComplianceScientists tasked with documentation

The short version

What teams need to understand

  • All identified regulatory changes must be assessed for impact on the pharmacovigilance system.
  • Impact assessment must include gap analysis against current processes and regulatory requirements.
  • Changes must be classified based on risk and compliance impact.
  • Assessment outcomes must drive clear and documented action plans.
  • Decision-making must be structured, justified, and approved by appropriate roles.
  • Inspection-ready evidence must demonstrate that regulatory changes are systematically assessed and acted upon.

Regulatory expectation

What regulators expect

Each expectation should be supported by controlled documentation, traceable records, clear ownership, and evidence that the process works in practice.

  • Regulatory changes must be assessed for impact.
  • Gap analysis must identify required changes.
  • Risk classification must guide prioritisation.
  • Actions must be defined and assigned.
  • Decisions must be documented and approved.

Why it matters

What this means in practice

Inspectors assess whether pharmacovigilance systems perform structured impact assessments of regulatory changes. They review gap analysis, risk classification, decision-making processes, and evidence that appropriate actions are defined and implemented.

Questions this page answers

How is regulatory impact assessed in pharmacovigilance?
What do inspectors check for regulatory impact assessment?
What is a regulatory intelligence impact assessment?
How do you assess regulatory changes in PV?
What is gap analysis in pharmacovigilance?
How do companies decide what to do with regulatory updates?
How do regulators assess decision-making processes?
What is risk classification in regulatory intelligence?
How do you document regulatory decisions in PV?
What actions are required after regulatory updates?

Inspection evidence

Evidence teams should be able to show

Regulatory Impact Assessment Forms

  • Structured assessment documentation for each regulatory change
  • Description of regulatory change and source
  • Assigned responsible assessor
  • Documented evaluation of impact

Gap Analysis Documentation

  • Comparison between current processes and new requirements
  • Identification of non-compliant areas
  • Analysis of impacted SOPs, systems, and functions
  • Documentation of required changes

Risk and Impact Classification

  • Categorisation of changes as critical, high, medium, or low impact
  • Assessment of regulatory and operational risk
  • Justification of assigned risk level
  • Prioritisation of actions based on risk

Action Planning and Assignment

  • Defined actions required to achieve compliance
  • Assignment of responsible owners
  • Defined timelines for implementation
  • Tracking of action completion

Decision-Making and Approval Records

  • Documented decisions on applicability and required actions
  • Approval by PV, QA, or regulatory leadership
  • Justification for decisions made
  • Evidence of management involvement for high-impact changes

Regulatory Basis (Primary Sources)

  • GVP Module I - requirement for PV system compliance and quality management
  • GVP Module VI - requirement to align safety processes with regulatory requirements
  • ICH E2E - requirement to anticipate and manage regulatory changes
  • MHRA GPvP guidance - expectations for evaluating regulatory requirements
  • FDA pharmacovigilance guidance - requirement to implement regulatory changes effectively

Typical Inspection Questions (What Inspectors Ask)

  • How do you assess the impact of regulatory changes?
  • Show me your impact assessment for this update.
  • What gaps did you identify?
  • How did you decide what actions to take?
  • Who approved the decision?

Common failure patterns

Regulatory changes are identified but not formally assessed.
Gap analysis is incomplete or missing.
Risk classification is not documented or justified.
Actions are unclear or not assigned.
Decisions are made informally without documentation.

What good looks like

  • Structured and documented impact assessment process.
  • Clear gap analysis linking regulatory requirements to internal processes.
  • Defined risk classification and prioritisation.
  • Well-defined action plans with ownership and timelines.
  • Documented and approved decision-making.

How teams operationalise it

  • Use structured templates to assess regulatory changes.
  • Perform gap analysis against current PV processes.
  • Classify impact based on risk and regulatory importance.
  • Define actions required to achieve compliance.
  • Assign responsibility and timelines for implementation.
  • Document and approve decisions within governance processes.

From expectation to working control

Find the documentation that supports this work

Review the related toolkit to understand its purpose, included files, and how it supports this regulatory expectation.

Frequently asked questions

What is a regulatory intelligence impact assessment?

It is a structured evaluation of how a regulatory change affects a company's pharmacovigilance system and what actions are required to remain compliant.

What is gap analysis in pharmacovigilance?

Gap analysis compares current processes against new regulatory requirements to identify areas that require updates or changes.

How do companies decide what actions to take after regulatory updates?

Actions are defined based on impact assessment, risk classification, and gap analysis, and are approved through structured decision-making processes.

Do inspectors review regulatory impact assessments?

Yes. Inspectors review whether regulatory changes are assessed properly and whether decisions and actions are documented.

Why is risk classification important in regulatory intelligence?

Risk classification helps prioritise actions and ensures that critical regulatory changes are addressed promptly.

What happens if regulatory changes are not assessed properly?

Failure to assess regulatory changes can lead to non-compliance, inspection findings, and potential regulatory action.

Source boundary

Regulatory sources

These primary sources inform this structured interpretation. Always confirm current requirements against the original source and the requirements applicable to your organisation, product, and jurisdiction.

European Medicines Agency (EMA)

  • Guideline on good pharmacovigilance practices (GVP) - Module I

    View source
  • Guideline on good pharmacovigilance practices (GVP) - Module VI

    View source

FDA

ICH

MHRA