Commission Implementing Regulation on the Performance of Pharmacovigilance Activities
Commission Implementing Regulation (EU) No 520/2012 of 19 June 2012 — the directly binding regulation behind the EU GVP guideline modules. It prescribes the content of the pharmacovigilance system master file (PSMF), minimum quality-system requirements for pharmacovigilance, EudraVigilance data monitoring, the terminology/format standards for safety data (including MedDRA), and the requirements for risk management plans, PSURs, and post-authorisation safety studies. Substantially amended by Implementing Regulation (EU) 2025/1466.
What this does not cover
stated in the document's own scope- Prescribes how pharmacovigilance activities are performed; the obligations to perform them sit in Regulation (EC) No 726/2004 and Directive 2001/83/EC themselves.
- Covers human medicinal products; veterinary pharmacovigilance runs under Regulation (EU) 2019/6 and its own implementing rules.
- Sets the format and minimum standards for RMPs, PSURs, and PASS; the scientific assessment of those documents is the business of the competent authorities and the EMA committees, notably the PRAC.
- Governs post-authorisation safety activities; clinical-trial safety reporting is governed by the Clinical Trials Regulation (EU) No 536/2014.
Always verify against the current published text before relying on it for a submission or inspection.
Overview
Commission Implementing Regulation (EU) No 520/2012 is the directly binding regulation that operationalises the EU pharmacovigilance legislation. Where the GVP modules are guidance, this text is law: it prescribes the content of the pharmacovigilance system master file (PSMF), the minimum requirements for the quality systems of marketing authorisation holders, national competent authorities, and the EMA, the minimum requirements for monitoring data in the EudraVigilance database, the internationally agreed terminology, formats, and standards for safety data — including MedDRA coding — and the format and content of risk management plans, periodic safety update reports, and post-authorisation safety study protocols and reports. It was substantially amended in 2025 to reflect a decade of operating experience.
Scope & applicability
Marketing authorisation holders, national competent authorities, and the EMA performing the pharmacovigilance activities required by Regulation (EC) No 726/2004 and Directive 2001/83/EC for medicines authorised in the EU.
Legal basis & how it acquires force
An implementing regulation of 19 June 2012, adopted by the European Commission under the empowerments in Regulation (EC) No 726/2004 and Directive 2001/83/EC as revised by the 2010 pharmacovigilance legislation package. As an EU regulation it is directly applicable in every Member State without national transposition, and it applied from 10 July 2012. Implementing Regulation (EU) 2025/1466 of 22 July 2025 amends it, with most changes applying from 12 February 2026.
Document structure
| Part | Covers |
|---|---|
| Pharmacovigilance system master file | The prescribed content of the PSMF, its annex, version control, and the record of the qualified person responsible for pharmacovigilance (QPPV) |
| Minimum requirements for quality systems | Quality-system obligations for marketing authorisation holders, national competent authorities, and the EMA — including training, record management, and audit |
| Monitoring of data in the EudraVigilance database | Signal detection and management responsibilities over the EU adverse-reaction database |
| Use of terminology, formats and standards | The internationally agreed terminology (including MedDRA) and electronic formats safety submissions must use |
| Risk management plans and periodic safety update reports | The required format and content of RMPs and PSURs |
| Post-authorisation safety studies | The format of PASS protocols, abstracts, and final study reports |
Key requirements
- Maintain a pharmacovigilance system master file with the prescribed content, under version control
- Operate a pharmacovigilance quality system meeting the regulation's minimum requirements, including records and audit
- Monitor EudraVigilance data and manage signals within the defined process
- Use the mandated terminology, formats, and standards (including MedDRA) for safety submissions
- Prepare risk management plans, PSURs, and PASS protocols/reports in the prescribed formats
Implementation tips
- When a GVP module and this regulation appear to differ, the regulation wins — it is directly applicable law; the modules are guidance built on it
- Track the 2025/1466 amendment dates: most changes apply from 12 February 2026, with the EudraVigilance signal-monitoring provisions ahead of that
Revision notes
Applied from 10 July 2012; substantially amended by Implementing Regulation (EU) 2025/1466 of 22 July 2025 (signal management, PSMF deviation recording, oversight of subcontracted activities, and alignment with international data standards).
Where this control fails
live FDA enforcementLive FDA recalls SPEQ maps to this standard’s topics — a SPEQ interpretation, not an FDA classification.
International alignment
The regulation embeds the ICH safety framework into EU law: MedDRA terminology, the ICH ICSR transmission standard implemented through E2B(R3), the PSUR format aligned to the ICH E2C(R2) periodic benefit-risk evaluation report, and risk-management concepts descending from ICH E2E. The EMA's GVP modules elaborate it as guidance — Module II for the PSMF, Module V for RMPs, Module VII for PSURs, Module VIII for PASS — and the 2025 amendment aligns it further with international data standards such as IDMP.
Reg. (EU) 520/2012: frequently asked questions
Quick answers to common questions about Reg. (EU) 520/2012.
What is the relationship between Regulation 520/2012 and the GVP modules?
Regulation 520/2012 is directly applicable EU law; the GVP modules are EMA guidance describing how to meet it and the underlying legislation. Where detail differs, the regulation prevails — the modules are built on it, not the other way round.
What does Regulation 520/2012 require for the PSMF?
It prescribes the pharmacovigilance system master file's content: a description of the pharmacovigilance system, information on the QPPV, the quality system, the safety-data processes, and an annex covering documents such as the product list and logbook, all kept accurate and under version control.
Has Regulation 520/2012 been amended?
Yes. Commission Implementing Regulation (EU) 2025/1466 of 22 July 2025 substantially amends it — revising signal-management responsibilities around EudraVigilance, PSMF deviation recording, oversight of subcontracted pharmacovigilance activities, and alignment with international data standards. Most of the amendment applies from 12 February 2026.
Does Regulation 520/2012 apply to veterinary medicines?
No. It implements the human-medicines pharmacovigilance legislation. Veterinary pharmacovigilance is governed by Regulation (EU) 2019/6 and its implementing rules, with VICH guidelines supplying the international harmonisation layer.
This standard in practice
Recall domain is a SPEQ mapping of this standard’s topics, not an FDA classification.