--- title: "GVP Module III Revision 2: What Has Changed for Pharmacovigilance Inspections?" description: "Revision 2 of GVP Module III reinforces subcontractor oversight, immediate PSMF availability, risk-based inspection cycles and remote inspection readiness. Here is what MAHs, QPPVs and pharmacovigilance providers need to know." url: https://qbdgroup.com/en/blog/gvp-module-iii-revision-2-pharmacovigilance-inspections type: "Blog post" language: en published: 2026-09-30 author: "Almudena del Castillo" category: "Pharmacovigilance" publisher: "QbD Group" citation: "QbD Group, \"GVP Module III Revision 2: What Has Changed for Pharmacovigilance Inspections?\", https://qbdgroup.com/en/blog/gvp-module-iii-revision-2-pharmacovigilance-inspections" --- # GVP Module III Revision 2: What Has Changed for Pharmacovigilance Inspections? > Revision 2 of GVP Module III reinforces subcontractor oversight, immediate PSMF availability, risk-based inspection cycles and remote inspection readiness. Here is what MAHs, QPPVs and pharmacovigilance providers need to know. In September 2026, the European Medicines Agency (EMA) published Revision 2 of Good Pharmacovigilance Practices (GVP) Module III on Pharmacovigilance Inspections. The revised module became effective on 10 September 2026 and replaces Revision 1, which had been in place since 2014. While many of the fundamental principles of pharmacovigilance inspections remain unchanged, Revision 2 introduces several important developments that Marketing Authorisation Holders (MAHs), QPPVs and pharmacovigilance service providers should consider when reviewing their inspection readiness, outsourcing arrangements and quality systems. The changes particularly reinforce five areas: subcontracting oversight, permanent availability of the Pharmacovigilance System Master File (PSMF), risk-based inspection planning, remote inspections and alignment with the current regulatory framework. ## 1. A Broader Inspection Perimeter: Subcontractors and Further Subcontractors One of the most significant changes concerns outsourced pharmacovigilance activities. The revised Module III incorporates the new legal provisions introduced through the amended Commission Implementing Regulation (EU) No 520/2012 and explicitly extends the inspection framework beyond third parties directly contracted by the MAH. Further subcontracted third parties may also fall within the scope of a pharmacovigilance inspection. This means that inspection readiness can no longer stop at the MAH's immediate service provider. Where pharmacovigilance activities are subcontracted further down the delivery chain, these arrangements must also be appropriately controlled and documented. Importantly, contractual arrangements should clearly address the obligation to accept pharmacovigilance inspections, including where second-level subcontracting is involved. ### What Does This Mean in Practice? - Mapping the complete pharmacovigilance outsourcing chain - Identifying activities performed by subcontractors and further subcontractors - Reviewing pharmacovigilance agreements and inspection clauses - Ensuring that responsibilities for inspection support are clearly documented - Confirming that appropriate vendor qualification, oversight and audit mechanisms cover all relevant parties For organisations relying on complex global outsourcing models, this may require a broader review of vendor governance than was previously considered necessary. ## 2. The PSMF Must Be Permanently and Immediately Available Another major operational change relates to PSMF availability. Under the previous version of Module III, the PSMF had to be provided to inspectors upon request within seven calendar days. Revision 2 replaces this approach with a requirement for the PSMF to be permanently and immediately available to inspectors at the site where it is kept. Where the PSMF is maintained electronically, the relevant electronic information must be directly accessible from that location. This represents an important shift from a document-production deadline to a continuous inspection-readiness expectation. Organisations should therefore verify: - Whether the PSMF can be accessed immediately from its registered location - Whether access rights and technical arrangements are appropriate - Whether the PSMF is maintained sufficiently up to date to support immediate inspection access - Whether internal SOPs still refer to the previous seven-calendar-day timeline This change reinforces the principle that the PSMF should function as a continuously maintained representation of the pharmacovigilance system rather than as a document prepared in response to an inspection request. ## 3. A More Flexible and Risk-Based Inspection Cycle Revision 2 also strengthens the risk-based approach to inspection planning. The previous GVP text indicated that MAHs should generally be inspected based on risk considerations but at least once every four years. The revised approach establishes a different model. In principle, an initial inspection should take place within four years following the marketing authorisation of the MAH's first medicinal product. A four-year inspection cycle can then be used, but the interval may be shortened or extended depending on an ongoing assessment of risk. This provides authorities with greater flexibility to adapt inspection frequency according to the characteristics and compliance history of the pharmacovigilance system. For MAHs, this means that inspection planning should not be based solely on a fixed four-year expectation. Factors such as previous inspection findings, organisational changes, outsourcing arrangements, safety issues or other indicators of regulatory risk may influence future inspection frequency. ## 4. Remote Inspections Are Now Firmly Embedded in the Inspection Model Remote pharmacovigilance inspections are another area receiving greater attention in Revision 2. Experience gained in recent years has demonstrated that significant elements of a pharmacovigilance system can be assessed remotely. The revised module reflects this experience and establishes that inspectorates may determine, on a case-by-case basis, whether a remote inspection can provide an adequate overview of the pharmacovigilance system. The decision may consider whether inspectors can appropriately conduct interviews and remotely access relevant documentation and systems, including: - The safety database - Source documentation - The PSMF Different IT solutions may be used to support the inspection process. For MAHs and service providers, remote inspection capability should therefore form part of routine inspection readiness rather than being considered an exceptional contingency. Organisations should test whether their systems, access controls and document-sharing processes can support secure and efficient remote inspection activities. ## 5. Inspection Procedures Increasingly Rely on EU Union Procedures Another relevant change is the removal of much of the detailed procedural description previously included directly within Module III. Instead, the revised module makes greater use of references to the Union Procedures for Pharmacovigilance Inspections. This is more than an editorial simplification. For quality and pharmacovigilance teams, it means that maintaining inspection readiness requires monitoring not only GVP Module III itself but also the related Union Procedures, which provide operational guidance regarding the planning, coordination, conduct, reporting and follow-up of pharmacovigilance inspections. Regulatory intelligence processes should therefore ensure that these procedural documents are included within the organisation's controlled regulatory reference framework. ## 6. Clearer Boundaries Between Pharmacovigilance Inspections and Clinical Trial Oversight The revised module also removes references to interventional clinical trials and SUSAR reporting previously linked to Directive 2001/20/EC. The pharmacovigilance inspection scope described in Module III now focuses, in this context, on non-interventional studies, while clinical trials are governed under Regulation (EU) No 536/2014. Organisations should review legacy SOPs, training materials and inspection-readiness documentation to ensure that outdated references to Directive 2001/20/EC have been removed where appropriate. ## What Does Revision 2 Mean for Pharmacovigilance Audits? Revision 2 applies to GVP Module III on inspections and does not represent a revision of GVP Module IV on Pharmacovigilance Audits. However, several of the changes have direct implications for internal pharmacovigilance audit programmes. Audit plans can play an important role in verifying whether the organisation is ready to meet the new inspection expectations. Areas that may warrant particular attention include: - Oversight of outsourced and further-subcontracted pharmacovigilance activities - Contractual inspection rights and responsibilities - PSMF accessibility and maintenance - Remote access to safety systems and inspection documentation - Vendor governance - Inspection-readiness procedures - Implementation of updated legal and procedural references Risk-based audit planning can therefore be an important mechanism for proactively identifying gaps before they become inspection findings. ## Practical Actions for MAHs and Pharmacovigilance Service Providers Following the introduction of GVP Module III Revision 2, organisations should consider performing a targeted inspection-readiness assessment. 1. Review the pharmacovigilance outsourcing model, including all further subcontractors. 2. Check pharmacovigilance agreements and subcontracting agreements to ensure that inspection obligations are appropriately addressed. 3. Confirm that the PSMF is permanently and immediately accessible at its registered location. 4. Update SOPs that still refer to the previous seven-day timeframe for providing the PSMF. 5. Assess the organisation's technical capability to support remote inspections, including access to the safety database, source documentation and the PSMF. 6. Reassess inspection-risk profiles rather than assuming a fixed four-year inspection interval. 7. Review SOPs and training materials for obsolete references relating to clinical trials and Directive 2001/20/EC. 8. Incorporate the Union Procedures for Pharmacovigilance Inspections into regulatory intelligence and inspection-readiness processes. 9. Consider whether the pharmacovigilance audit programme adequately covers the areas affected by the revised requirements. ## From Inspection Preparation to Continuous Inspection Readiness Perhaps the most important message behind Revision 2 is the continued evolution from periodic inspection preparation towards continuous inspection readiness. Immediate PSMF availability, broader accountability across outsourcing chains, risk-based inspection cycles and established remote inspection models all reinforce the expectation that organisations should be able to demonstrate the effectiveness and control of their pharmacovigilance system at any time. For MAHs and pharmacovigilance service providers, this makes robust governance, clear contractual arrangements, reliable data and system access, and continuous oversight of outsourced activities increasingly important. A proactive assessment of these areas can help organisations identify gaps early, strengthen their pharmacovigilance quality system and ensure they are prepared for the evolving European inspection environment. *Source: Based on EMA GVP Module III Revision 2 (September 2026) and an internal comparative review of Revision 1 versus Revision 2.* --- Source: https://qbdgroup.com/en/blog/gvp-module-iii-revision-2-pharmacovigilance-inspections — © QbD Group. Quote freely with attribution and a link back.