GVP Module VIII: Post-Authorisation Safety Studies
EMA Good Pharmacovigilance Practices Module VIII (Rev. 3) — the regulatory framework governing the design, protocol format, registration, conduct, and PRAC reporting of post-authorisation safety studies (PASS), including non-interventional studies built on routinely collected real-world data.
What it is
GVP Module VIII — Guideline on good pharmacovigilance practices (GVP): Module VIII — Post-authorisation safety studies (Rev. 3) — is the European Medicines Agency (EMA) framework that governs post-authorisation safety studies (PASS). It is a binding regulatory guideline maintained by EMA in collaboration with national competent authorities, operating under the EU pharmacovigilance legislation (Directive 2001/83/EC and Regulation (EC) No 726/2004). Revision 3 took legal effect on 13 October 2017 and is accompanied by Addendum I (Rev. 3, 2020), which sets the technical requirements for submitting information on non-interventional PASS. Module VIII is a process-and-conduct framework, not a journal reporting checklist: it defines what a PASS is, when it is imposed versus voluntary, what the protocol must contain (using the ENCePP protocol structure), how and when protocols and results are submitted to the Pharmacovigilance Risk Assessment Committee (PRAC), the role of the EU PAS Register, and the oversight, abstract, progress-report, and final-report obligations across the study lifecycle.
When to use
Apply Module VIII whenever a study's primary aim is to evaluate the safety of an authorised medicinal product in the EU — quantifying a risk, characterising a known risk, confirming the safety profile, or measuring the effectiveness of a risk-minimisation measure — and the study is conducted, sponsored, or imposed in the EU regulatory context. The decision rules that select Module VIII (versus a sibling guideline) are: (1) Imposed PASS — a category-1 or category-2 obligation of the marketing authorisation (Art. 9, 21a, 22a, 104(2)) — falls fully under Module VIII with mandatory PRAC protocol endorsement before the study starts; (2) voluntary PASS initiated by the marketing authorisation holder follows Module VIII conduct and EU PAS Register registration but with lighter submission obligations; (3) any non-interventional PASS using secondary data additionally invokes the ENCePP Code of Conduct and the ENCePP Checklist for study protocols. Module VIII is the regulatory wrapper; it does not replace journal reporting guidelines (STROBE/RECORD-PE) or protocol-templating tools (HARPER, STaRT-RWE), which are used inside a Module VIII submission. If the study is interventional (a clinical trial), Module VIII does not apply — the Clinical Trials Regulation governs instead. For a parallel FDA submission, the FDA RWE/RWD guidances run alongside, not instead of, Module VIII.
What it requires
Module VIII enforces a structured protocol and lifecycle. The protocol — following the ENCePP template — must pre-specify the research question and objectives; the study design and rationale; the data source(s) and an explicit assessment of their fitness for use (coverage, completeness, validity, lag, recording practices); the study population with eligibility, time-zero/index-date definition, and follow-up; the exposure definition; the outcome definitions and the operational algorithms/phenotypes used to ascertain them, with their validation (e.g., positive predictive value); covariates and the strategy for confounding control; the statistical analysis plan including the target estimand and handling of intercurrent events, missing data, attrition/loss to follow-up, and competing risks; planned sensitivity and quantitative bias analyses; data management and quality control; and dissemination. Lifecycle requirements include EU PAS Register registration before data collection starts, PRAC protocol assessment for imposed studies, a study-progress/interim mechanism, a study abstract, and a final study report submitted to the competent authority within 12 months of data-collection end. The standing principle is transparency and pre-specification: design choices are fixed and documented before the data are touched, and any amendment is versioned and justified.
When NOT to use — limitations and common misapplications
Module VIII is a regulatory conduct-and-submission framework, not a risk-of-bias instrument and not a quality score — endorsing a protocol does not certify the study free of confounding or selection bias; that judgement comes from methodological appraisal (e.g., ROBINS-I) and the analytic safeguards the protocol commits to. Completing the Module VIII process does not make an observational safety study causal; an under-specified estimand, a poorly validated outcome phenotype, immortal-time bias from misaligned time-zero, or residual confounding will survive a fully compliant submission. Common failure modes: treating the ENCePP template as box-ticking theatre while leaving the data-fitness assessment and phenotype validation hollow; using Module VIII as if it were a journal reporting checklist (use STROBE/RECORD-PE for the manuscript) or a protocol-quality template (use HARPER/STaRT-RWE for the design tables); applying it to interventional trials (wrong regulatory regime); confusing imposed and voluntary obligations and thereby missing mandatory PRAC endorsement before study start; and registering on the EU PAS Register after data collection has begun, which defeats the pre-specification it exists to enforce. Module VIII is EU-specific — it does not satisfy FDA expectations on its own.
How it maps to this catalog
Module VIII names requirements; the following concepts implement them. Pre-specify the eligibility–exposure–outcome–follow-up structure and a defensible estimand by emulating the trial you cannot run with target-trial-emulation, and build the comparative analytic engine with the active-comparator-new-user design (incident-user washout + active comparator + time-zero alignment to kill confounding by indication and immortal time). State and defend the causal contrast — including intercurrent-event handling — with estimands-ate-att-intercurrent-events-rwe. Operationalise outcome and covariate ascertainment, with validation metrics, via diagnosis-phenotype-algorithm-1ip-2op-time-window-rwe. Control measured and proxy confounding using high-dimensional-propensity-score-hdps-rwe. Address the data-fitness, exposure-windowing, and recording realities of the underlying data with claims-analysis. Document and analyse dropout with attrition-and-loss-to-follow-up-rwe, and quantify robustness to unmeasured confounding with sensitivity and quantitative-bias analysis. Applied note (claims/EHR/registry RWE): for a claims-based imposed PASS, the Module VIII data-fitness section must state coverage and lag, exclude person-time where the data source cannot observe the relevant claims, define the outcome phenotype with its validated PPV, fix time-zero at the qualifying exposure event (no immortal time), and pre-register the protocol on the EU PAS Register before pull — each of which is implemented by the catalog concepts above and reported through STROBE/RECORD-PE in the final study report.