Written and maintained by CASRAI Editorial Board
Last updated
Every marketing authorization holder (MAH) placing a medicinal product on the market in the EU or EEA must have exactly one Qualified Person Responsible for Pharmacovigilance (QPPV) — a single, named individual who holds overall, personal responsibility for the company’s entire pharmacovigilance system, across every product and every EU/EEA market the MAH operates in. The QPPV requirement sits at the center of EU pharmacovigilance law: established in Directive 2001/83/EC (as amended) and Regulation (EC) No 726/2004 for centrally authorized products, and detailed operationally in GVP Module I, “Pharmacovigilance systems and their quality systems.”
This guide covers who can hold the role, where they must be based, why 24-hour availability is a legal requirement rather than a best practice, which duties the QPPV can delegate day-to-day work for but can never delegate accountability for, how the deputy-QPPV arrangement works, and where national-level pharmacovigilance contact requirements layer on top of — rather than replace — the single EU QPPV.
What the QPPV role actually is
The QPPV is not a job title a company assigns informally to whoever handles drug safety — it is a specific, legally defined position that must be named in every EU/EEA marketing authorization application and identified by name and contact details in the company’s Pharmacovigilance System Master File (PSMF). One MAH has one QPPV, regardless of how many EU/EEA countries it markets products in or how many individual national contact persons it also maintains (more on that below) — the QPPV is the single point of overall accountability for the whole pharmacovigilance system, not a per-country or per-product role.
Because the QPPV’s name and residence are part of the marketing authorization dossier itself, a change of QPPV is a regulatory event: it must be reported to the relevant competent authorities (and, for centrally authorized products, to the EMA) without delay, not handled as an internal HR update.
Qualifications
GVP Module I requires the QPPV to be appropriately qualified — the legislation does not mandate a specific degree or professional license, but in practice this means documented education and experience sufficient to exercise genuine oversight of a pharmacovigilance system: understanding of adverse-reaction assessment and signal management, familiarity with EU pharmacovigilance legislation and GVP, and enough seniority within the organization to influence resourcing and corrective action when the system needs it. Most companies appoint a physician, pharmacist, or other life-sciences professional with pharmacovigilance or drug-safety experience, though the requirement is functional (can this person actually run and be accountable for the system) rather than credential-specific. The MAH must be able to document the QPPV’s qualifications and keep that documentation current in the PSMF.
The residency requirement
The QPPV — or, in practice, at minimum the QPPV’s pharmacovigilance activities — must reside and operate within the EU/EEA. The underlying legal basis requires marketing authorization applications to identify the Member State in which the qualified person resides and carries out their tasks, which is how the residency obligation is expressed in the directive text itself rather than as a freestanding rule. In practice this is one of the most frequently misunderstood parts of the role for non-EU-headquartered companies expanding into Europe: a company cannot simply designate a US- or Asia-based safety officer as QPPV without also establishing a genuine EU/EEA base for the function — most non-EU MAHs satisfy this by contracting a local QPPV or QPPV-services provider, or by establishing an EU-based pharmacovigilance affiliate.
24-hour, 7-day availability
GVP Module I requires the QPPV (or a deputy acting on their behalf) to be reachable 24 hours a day, every day of the year — not just during the MAH’s normal business hours. This is a substantive operational requirement, not a formality: pharmacovigilance obligations don’t pause for weekends or holidays. A serious, unexpected safety signal, an urgent regulatory request from a competent authority, or a product recall with a safety dimension can surface at any hour, and the pharmacovigilance system has to have someone with real authority reachable to respond. Companies typically satisfy this with a documented on-call rota covering the QPPV and their deputy, published contact details in the PSMF, and an internal escalation procedure that gets a genuine decision-maker on the line quickly — not just a message left with a general safety mailbox.
Responsibilities that cannot be delegated
Individual tasks within the pharmacovigilance system — case processing, literature screening, database entry, drafting periodic reports — are routinely delegated to internal teams, affiliates, or vendors, and that delegation is normal and expected. What cannot be delegated away is the QPPV’s personal, overall accountability for the system functioning correctly. In practice, that accountability covers:
- Oversight of the whole pharmacovigilance system — confirming it exists, is adequately resourced, and actually operates as described in the PSMF, not just that the PSMF document itself is well written.
- Signal detection and management — ensuring the system for detecting, evaluating, and acting on safety signals functions continuously across the MAH’s full product portfolio, and that genuine signals are escalated and acted on, not just logged.
- Being the named contact point for the EMA and national competent authorities on pharmacovigilance matters, including for urgent safety issues and inspections.
- Ensuring statutory reporting obligations are met on time — expedited case reports to EudraVigilance, and periodic aggregate reporting (see the CASRAI guide on PSUR/PBRER format under ICH E2C(R2)) submitted to schedule.
- Providing input into risk-management planning for the MAH’s products and ensuring risk-minimization measures required by regulators are actually implemented, not merely documented as a commitment.
- Escalating internally when the system is under-resourced or non-compliant — the QPPV is expected to have enough organizational standing to raise this with senior management, and a QPPV who identifies a deficiency and does nothing about it is not meeting the role’s expectations even if a subordinate technically caused the gap.
The distinction that matters operationally: a QPPV can outsource the doing, but not the answering-for. If an inspection finds the pharmacovigilance system failed, responsibility runs to the QPPV first, regardless of how many tasks were contracted out to a vendor or CRO.
The deputy QPPV arrangement
Because the role carries a genuine 24/7 availability obligation, GVP Module I explicitly allows the MAH to appoint one or more deputies to act on the QPPV’s behalf during absence — illness, leave, travel, or any period the QPPV is genuinely unreachable. A deputy arrangement has to be:
- Documented in the PSMF, with the deputy’s identity, qualifications, and the scope of what they’re authorized to do while acting for the QPPV.
- Genuinely operational, not a name on paper — the deputy needs real access to the systems and information required to act, and a clear trigger for when deputy authority activates.
- Clear on accountability — appointing a deputy covers continuity of coverage; it does not shift the QPPV’s overall accountability for the system onto the deputy permanently. The deputy stands in for specific periods and specific acts, not as a co-QPPV with equal standing.
A company with only one person capable of acting as QPPV, and no documented deputy arrangement, has a real compliance gap — inspectors specifically check for this, since a single point of failure in 24/7 coverage defeats the purpose of the availability requirement.
National QPPV and local contact-person requirements
EU harmonization consolidates overall pharmacovigilance accountability into one EU QPPV per MAH — but several individual member states retain their own, additional national-level pharmacovigilance contact requirements under domestic law, layered on top of (not instead of) the EU QPPV. The most frequently cited example is Germany, which under the German Medicines Act (Arzneimittelgesetz, AMG) has historically required MAHs marketing in Germany to designate a nationally responsible pharmacovigilance contact (the Stufenplanbeauftragter) in addition to the company’s single EU QPPV — a distinct national obligation that predates full EU harmonization and was not simply absorbed by it. Other member states have, at various points, maintained their own local-contact-person expectations for nationally authorized products specifically, separate from the centralized-procedure framework the EU QPPV role was built around.
The practical implication for a company expanding into the EU: confirming you have a compliant EU QPPV is necessary but not always sufficient. MAHs marketing in multiple member states — especially through nationally authorized products rather than the centralized procedure — need to check each target market’s domestic pharmacovigilance legislation for a local contact-person requirement, rather than assuming EU-level compliance closes every national gap. This is exactly the kind of detail that gets missed when pharmacovigilance compliance is treated as a single EU-wide checkbox instead of a two-layer system (EU QPPV plus, where applicable, national contact persons).
How this fits with the rest of a company’s pharmacovigilance system
The QPPV role doesn’t exist in isolation — it sits on top of the pharmacovigilance system documented in the PSMF and connects directly to Good Pharmacovigilance Practices (GVP) more broadly, to the case-level reporting obligations covered in CASRAI’s guide on pharmacovigilance in clinical research, and to the aggregate-reporting cycle covered in the PSUR/PBRER guide. For organizations building out pharmacovigilance capability generally, CASRAI’s broader guide to GxP compliance covers where pharmacovigilance sits alongside GLP, GCP, GMP, and GDP as one of the quality frameworks a life-sciences organization has to satisfy simultaneously, and the pharmacovigilance certification guide covers the professional credentialing options relevant to staff supporting — though not necessarily holding — the QPPV role itself.
Frequently asked questions
Can one person be QPPV for multiple companies?
Yes — this is common for smaller MAHs and is the basis of the QPPV-as-a-service model many pharmacovigilance consultancies offer, particularly for non-EU companies establishing an EU presence. What matters is that the individual can genuinely fulfill the role’s obligations (availability, oversight, documented qualifications) for each MAH they serve, not that the role is exclusive to one company.
Does the QPPV have to be an EU/EEA national?
No — nationality isn’t the requirement. Residency and operation within the EU/EEA is what the legislation requires, regardless of the individual’s citizenship.
Is the QPPV the same as a Local Safety Officer or local contact person?
No. The QPPV holds EU-wide overall accountability for the pharmacovigilance system. A national/local contact person (where a member state requires one) handles a narrower, country-specific function under domestic law and does not replace or share the QPPV’s overall EU-level responsibility.
What happens if a company operates without a compliant QPPV?
It is a serious GVP/marketing-authorization compliance failure that inspectors and competent authorities treat as a core finding — the QPPV requirement is a condition tied directly to holding a marketing authorization in the EU/EEA, not a peripheral administrative detail.
