Pharmacovigilance System Master File (PSMF)

The Pharmacovigilance System Master File (PSMF) is the single, maintained document in which an EU marketing-authorisation holder (MAH) describes its entire pharmacovigilance system — not the safety data for one product or one case, but the organisational structure, processes, data sources, and quality system the MAH uses across all the products that system covers. It is required under GVP Module II, part of the European Medicines Agency’s (EMA) Good Pharmacovigilance Practices framework issued under the EU’s 2010 pharmacovigilance legislation and Directive 2001/83/EC as amended. CASRAI’s Good Pharmacovigilance Practices (GVP) entry covers the full GVP module structure; this entry is scoped specifically to the PSMF as one distinct, required document within that framework.

Why the PSMF is a distinct document, not a safety report

It is easy to conflate the PSMF with the safety reports a pharmacovigilance system produces — Individual Case Safety Reports (ICSRs), Periodic Safety Update Reports (PSURs), signal-detection outputs. Those are outputs of the system. The PSMF is a description of the system itself: a governance document, closer in character to a quality manual than to a safety dataset. A MAH can be current on every individual reporting obligation and still be out of compliance if its PSMF does not accurately reflect how the organisation actually operates, or has not been kept up to date as the organisation, its QPPV, or its data sources change.

What the PSMF must contain

Per GVP Module II, the PSMF describes the pharmacovigilance system for one or more of the MAH’s medicinal products and must support and document the system’s compliance with the applicable requirements. In practice this includes:

• An overview of the pharmacovigilance system, including key personnel and any partners or third parties (such as contract research organisations or distributors) involved in pharmacovigilance activities.
• Identification of the Qualified Person Responsible for Pharmacovigilance (QPPV), their role, and their responsibilities within the system.
• A description of the sources of safety data the system draws on — spontaneous reports, scientific literature, clinical trials, and other data streams — and the databases used to manage them.
• A description of the information systems and IT tools used for pharmacovigilance, including how data integrity and backup are maintained.
• A description of the quality system supporting pharmacovigilance activities, including resources, training, compliance management, and documentation practices, along with a summary of any audits and their outcomes.

Because the PSMF describes a system rather than a single product, one PSMF commonly covers all the products a MAH markets under that system, with individual products cross-referenced rather than separately re-described.

Location, reference number, and the Article 57 database

Each PSMF has a defined location and reference number, which the MAH cites in its marketing-authorisation applications and variations so that regulators can locate the correct master file for a given product. The QPPV’s contact details and the PSMF location are also recorded in the EMA database described in Article 57 of Regulation (EC) No 726/2004, giving EU regulators a route to find the responsible QPPV and the governing PSMF independent of any single marketing-authorisation dossier. The MAH is expected to keep the PSMF permanently available and current, and to make it available to national competent authorities and the EMA on request — including during the GVP inspections and audits described in GVP Modules III and IV, where the PSMF is typically the reference document inspectors compare actual practice against.

PSMF vs. related pharmacovigilance documents

Document	What it describes	Scope
PSMF	The pharmacovigilance system itself — organisation, QPPV, data sources, quality system	One system, potentially many products
ICSR	A single suspected adverse reaction case	One case
PSUR	Aggregate benefit-risk evaluation over a reporting period	One product (or product family), one period
Risk Management Plan (RMP)	Identified/potential risks and risk-minimisation measures for a specific product	One product

Who is responsible for the PSMF

Maintaining an accurate, current PSMF is a core responsibility of the QPPV, working with the MAH’s broader pharmacovigilance and quality functions. Because clinical research organisations, academic spin-outs, and contract research organisations increasingly find themselves operating under or contributing data into an MAH’s pharmacovigilance system — particularly once a product moves from clinical development into an authorised, marketed medicine — research administrators supporting that transition benefit from understanding the PSMF as the governance artifact regulators will actually inspect against, distinct from the case-level and study-level safety reporting obligations covered in CASRAI’s Pharmacovigilance in Clinical Research guide.

Frequently Asked Questions

What is a Pharmacovigilance System Master File (PSMF), and who needs one?

A PSMF is the single, maintained document in which an EU marketing-authorisation holder (MAH) describes its entire pharmacovigilance system — its organisational structure, processes, data sources, and quality system — rather than the safety data for any one product. Any MAH holding an EU marketing authorisation is required to maintain one under GVP Module II.

Which GVP module requires the PSMF?

The PSMF is required under GVP Module II, part of the European Medicines Agency’s (EMA) Good Pharmacovigilance Practices framework issued under the EU’s 2010 pharmacovigilance legislation and Directive 2001/83/EC as amended.

How is a PSMF different from a PSUR or an ICSR?

An Individual Case Safety Report (ICSR) covers a single suspected adverse reaction case, and a Periodic Safety Update Report (PSUR) is an aggregate benefit-risk evaluation for one product over a reporting period. The PSMF is different in kind: it describes the pharmacovigilance system itself — the organisation, QPPV, data sources, and quality system — that produces and manages those reports, and typically covers one system across potentially many products.

Who is responsible for keeping the PSMF current?

Maintaining an accurate, up-to-date PSMF is a core responsibility of the Qualified Person Responsible for Pharmacovigilance (QPPV), working with the MAH’s broader pharmacovigilance and quality functions. A MAH can be current on every individual reporting obligation and still be out of compliance if the PSMF itself does not accurately reflect how the organisation actually operates.

Does one PSMF cover more than one product?

Yes. Because the PSMF describes a system rather than a single product, one PSMF commonly covers all the products a MAH markets under that system, with individual products cross-referenced rather than separately re-described.

How do regulators find the PSMF for a given product?

Each PSMF has a defined location and reference number that the MAH cites in its marketing-authorisation applications and variations. The QPPV’s contact details and the PSMF location are also recorded in the EMA database described in Article 57 of Regulation (EC) No 726/2004, giving regulators a route to find the responsible QPPV and governing PSMF independent of any single marketing-authorisation dossier.