How do you detect safety signals in your medicinal product data early enough and in line with GVP?
We build a documented, regularly performed signal detection process in line with GVP Module IX, from the data sources through quantitative and qualitative signal detection to validation, prioritisation and reporting to the competent authority. The crucial point is rarely the statistics, but the unbroken documentation trail: anyone who fails to anchor the path from data point to assessment decision in a demonstrable way within the PSMF will be flagged in the PV audit, even when the methodology is sound.
- Pharma
- Biotech
Overview
What does GVP Module IX require of marketing authorisation holders?
Signal management processes for Pharma & Biotech · GVP Module IX, EU 726/2004, EU 520/2012
Last updated: 2026-06-12
Under Implementing Regulation (EU) No 520/2012 and GVP Module IX, signal management is an ongoing obligation of every marketing authorisation holder, not an ad hoc response to individual cases. The points where processes tend to break down in practice:
- Under GVP Module IX, signal management is a defined, documented process: detection, validation, confirmation, analysis and prioritisation, assessment and recommendation - not a one-off evaluation.
- Under GVP Module IX, marketing authorisation holders are required to continuously monitor EudraVigilance data within the scope of their access rights and to report validated signals to the EMA and national authorities; their own data, the literature and EudraVigilance signals must be brought together in the process.
- The underlying ICSRs must be captured completely and with assured quality in line with GVP Module VI - a disproportionality analysis run on incomplete data generates false signals and misses genuine ones.
- The methodology, frequency and responsibilities of the signal detection process must be documented in the Pharmacovigilance System Master File (PSMF) and kept demonstrable for inspection.
- Validated signals trigger downstream obligations: reporting to the competent authority, inclusion in the PSUR and, where applicable, risk minimisation measures.
Services
How we support you
Build the signal detection process
A documented standard operating procedure (SOP) for signal management in line with GVP Module IX: data sources, detection methodology, validation and prioritisation criteria, roles and escalation - anchored in the PSMF.
Quantitative signal detection
Disproportionality analysis on EudraVigilance and in-house data using the Reporting Odds Ratio (ROR) and Proportional Reporting Ratio (PRR); defined thresholds and a documented review run per evaluation cycle.
Qualitative signal assessment & validation
Structured assessment of case series, literature and registry data against the validation criteria of GVP Module IX; for each signal a traceable decision: validated, under observation or not action-relevant.
Signal prioritisation & authority reporting
Prioritisation of validated signals by severity and clinical relevance and timely reporting to the EMA or national authority; transfer of the results into the PSUR.
Learn more →Gap analysis & PV audit preparation
Comparison of the existing signal management system against GVP Module IX with a prioritised CAPA plan addressing process gaps, methodological weaknesses and documentation deficiencies.
Risk minimisation for validated signals
Derivation and documentation of risk minimisation measures for validated signals, aligned with the risk management plan and the QPPV.
Learn more →How we work together
What it comes down to
Signal detection rarely fails because of the method, and almost always because of the chain before and after it. Three strands have to mesh, and in this order: first, the data set has to be right, because ICSRs under GVP Module VI are the basis of every evaluation - on incomplete or duplicated cases, the Reporting Odds Ratio and Proportional Reporting Ratio generate false signals and miss genuine ones. Then comes the quantitative detection, which provides only a trigger; a statistical signal is not a confirmed safety signal. Only the qualitative validation against the criteria of GVP Module IX decides whether a data point becomes an assessment and reporting obligation.
The real hurdle lies in the documentation trail. Methodology, frequency and responsibilities belong in the PSMF, and every decision from detection to authority reporting must be traceable in the inspection. That is precisely why we begin with the gap analysis against GVP Module IX before a single evaluation run is started. It makes visible whether the gap lies in the data, in the methodology or in the documentation, and shifts the effort to where corrections are cheap, rather than into the PV inspection, where they turn into formal authority queries.
Our approach
Our approach
Step
Result
Current-state assessment & gap analysis
Assessment of the existing process against GVP Module IX; prioritised CAPA plan addressing methodology and documentation.
Process & SOP design
Documented signal management SOP covering data sources, methodology, frequency and responsibilities, anchored in the PSMF.
Set up data sources & methodology
Defined detection run: EudraVigilance connection, disproportionality analysis with set thresholds, integration of literature and in-house data.
Signal detection & validation
Per cycle, a documented signal list with a validation decision for each signal in line with GVP Module IX.
Prioritisation & reporting
Prioritised validated signals, timely reporting to the authority and transfer into the PSUR.
Measures & follow-up
For validated signals, derived risk minimisation measures and documented follow-up in the next cycle.
Common pitfalls
Where projects commonly fail
Signal detection runs without a documented process.
An ad hoc assessment that is substantively correct but lacks an SOP, a set frequency and anchoring in the PSMF is a non-conformity under GVP Module IX that will surface in the PV inspection - regardless of whether the signal was assessed correctly.
The disproportionality analysis is run on uncleaned data.
If ICSRs are incomplete or duplicated under GVP Module VI, the ROR and PRR generate false signals and miss genuine ones; the statistics are only as reliable as the underlying data set.
Quantitative signals are confused with validated signals.
A statistical disproportionality signal is a trigger for review, not a confirmed safety signal - without qualitative validation against the criteria of GVP Module IX, false reports or delayed reports arise.
EudraVigilance signal monitoring is left out.
Under GVP Module IX, the marketing authorisation holder must incorporate EudraVigilance data into its own process within the scope of its access rights, rather than relying solely on in-house data; for centrally authorised products, Art. 28a of Regulation (EU) No 726/2004 additionally applies.
Validated signals are not followed through on time.
If a validated signal is not reported to the competent authority in good time and not transferred into the PSUR, formal authority queries arise - the detection process does not end with detection, but with the measure.
FAQ
Frequently asked questions
Sources
- Regulation (EU) No 726/2004 - primary text, Art. 28a (signal monitoring in EudraVigilance)
- Directive 2001/83/EC - Art. 107h (signal monitoring of nationally authorised medicinal products)
- Implementing Regulation (EU) No 520/2012 - performance of pharmacovigilance activities
- EMA/CHMP - Guideline on Good Pharmacovigilance Practices (GVP) Module IX (Signal Management) incl. Addendum I
- EMA/CHMP - GVP Module VI (collection and reporting of suspected cases, ICSR)
- Writer source: output/expertise-pages/clinical-medical-affairs/signal-detection/signal-detection.md
- https://theentourage.de/expertise/signal-detection/ (existing page content, revised)
Life Science Journal
Regulatory updates, straight to your inbox.
New requirements, authority decisions and practice notes. Once a month, unsubscribe any time.
Case Studies
What this looks like in practice
Regulations & standards considered
- Regulation (EU) No 726/2004 (PV obligations, EU marketing authorisations)
- Regulation (EU) No 726/2004 Art. 28a (signal monitoring)
- Directive 2001/83/EC Art. 107h (nationally authorised medicinal products)
- Implementing Regulation (EU) No 520/2012 (performance of pharmacovigilance activities)
- GVP Module IX (Signal Management)
- GVP Module IX Addendum I (methodology for signal detection from spontaneous reports)
- GVP Module VI (collection and reporting of suspected cases, ICSR)
Related topics
Pharmacovigilance →
The overarching PV system under GVP in which signal detection is embedded
QPPV Services →
QPPV responsibility for signal management and authority communication
Risk Management →
Risk management plan and risk minimisation measures derived from validated signals
Medical Device Vigilance →
The vigilance counterpart for medical devices under the MDR
Have a concrete project?
Briefly outline your situation. We'll respond with an initial assessment, usually within one business day.
Prefer direct? +49 89 4161170-0
info@theentourage.de
- Reply usually within one working day
- 4 offices: DE · CH · IT · US
- 100% life sciences