EU Regulation 2025/1466 — The Most Significant EU PV Change Since 2012

This regulation amends Implementing Regulation (EU) No 520/2012 — the core operational document that has governed EU pharmacovigilance since 2012. It reflects more than a decade of practical GVP experience, addresses international harmonisation with FDA and ICH standards, and — for the first time — embeds risk-based auditing and AI-related governance expectations directly into binding EU PV law.

Signal management is the most operationally significant change: prior to this regulation, MAHs sent standalone signal notifications to the EMA alongside the PRAC assessment workflow, creating administrative duplication. From August 12, 2025, that requirement is abolished — MAHs now routinely monitor EudraVigilance data and feed signals into the PRAC-led process through EudraVigilance workflows, requiring strong alignment between the QPPV office, signal management teams, and EudraVigilance-monitoring data analysts.

Third-party governance directly addresses the risk of outsourced PV work: contracts with CROs, PV service providers, and literature-monitoring vendors must now explicitly define delegated activities, responsibilities, data exchange formats, audit rights, and inspection-readiness obligations — with the MAH retaining full legal responsibility and controlling the entire subcontracting chain.

PSMF reform reduces documentation of minor deviations but raises the bar on internal governance: only open major or critical deviations need to be documented, which means organisations need a robust, consistent classification and escalation system. Risk-based auditing, previously best practice under GVP Module IV, is now a binding legal requirement — every MAH must maintain a documented audit programme, apply a written risk methodology, and audit subcontractors as well as internal functions. PSUR/PBRER content requirements now mandate risk-minimisation effectiveness data for every report with a data lock point on or after February 12, 2026.

If you take only one date away from this lesson, make it February 12, 2026 — every one of the six changes above is binding as of that date, for every MAH in the EEA, regardless of company size or headquarters location. In an interview, being able to cite that date specifically, rather than gesturing vaguely at "recent EU changes," is exactly the kind of precision that separates a candidate who has actually read the regulation from one who has only heard about it.