The European Commission’s Implementing Regulation (EU) 2025/1466 introduces the most significant overhaul of pharmacovigilance outsourcing requirements since 2012. Coming fully into force on 12 February 2026, the regulation reshapes how Marketing Authorisation Holders (MAHs) must manage, monitor, and document third‑party involvement in their pharmacovigilance systems. The changes reflect a decade of regulatory experience and a clear shift toward transparency, accountability, and risk‑based oversight across the EU.
Why outsourcing is under the spotlight
Pharmacovigilance outsourcing has expanded dramatically in recent years, with MAHs relying on specialised vendors for case processing, literature screening, signal detection, QPPV support, and global safety operations. Regulators have repeatedly observed inconsistent oversight, unclear contractual arrangements, and gaps in data governance. The new regulation directly addresses these issues by introducing explicit, enforceable requirements for third‑party management.
Clear contractual expectations
Regulation 2025/1466 requires MAHs to formalise subcontractor relationships through detailed written agreements. These contracts must now include:
Clear definitions of roles and responsibilities • Explicit data‑exchange processes • Audit and inspection rights • Prohibitions on onward subcontracting without written MAH approval
These requirements are confirmed in multiple expert summaries, including QbD Group, which highlights that contracts must define roles, data exchange, audit rights, and restrictions on further subcontracting. RPN Group similarly emphasises that the regulation introduces explicit requirements for third‑party service providers, including clear roles, responsibilities, data‑exchange modalities, and audit rights.
This shift closes long‑standing loopholes where vendors operated under vague or outdated agreements, creating compliance risks for MAHs.
Stronger oversight and audit obligations
The regulation reinforces that MAHs remain fully responsible for all outsourced pharmacovigilance activities. To support this, MAHs must implement a risk‑based oversight model that includes:
Qualification and periodic re‑qualification of vendors • Documented performance monitoring • Risk‑based audits of third‑party providers • CAPA follow‑up and verification
The requirement for risk‑based internal audits across the entire PV system, including third parties, is explicitly highlighted by RPN Group. This aligns with the broader regulatory trend toward lifecycle quality management and continuous oversight rather than one‑off vendor assessments.
Transparency and regulatory access
A notable evolution is the strengthened expectation that third‑party providers must accept audits and may be inspected directly by regulators. QbD Group also notes that third parties must accept audits and may be inspected by authorities under the new framework. This reinforces the principle that regulators must have clear visibility into all components of the pharmacovigilance system, regardless of where activities are performed.
For MAHs, this means ensuring that contracts, PSMF annexes, and operational procedures explicitly allow regulatory access and that vendors are prepared for inspection readiness at all times.
Impact on the PSMF
The Pharmacovigilance System Master File (PSMF) must accurately reflect all third‑party arrangements. While the new regulation reduces administrative burden by requiring only major or critical deviations to be documented in the PSMF, it simultaneously raises expectations for the accuracy and completeness of subcontractor information.
Only major or critical deviations must now be documented in the PSMF, but this does not diminish the need for robust vendor oversight. Instead, it places greater emphasis on the MAH’s internal quality system to manage minor issues while ensuring that significant risks are captured and resolved.
What this means for MAHs
The changes represent a shift from implied expectations to explicit regulatory obligations. MAHs must now demonstrate:
A structured, risk‑based approach to vendor oversight • Clear, compliant contracts with all PV service providers • Documented monitoring and audit activities • Transparent governance and inspection readiness across all outsourced functions
In practice, this will require many organisations to update their vendor management SOPs, renegotiate contracts, revise PSMF annexes, and strengthen their audit programmes.
A more accountable future for outsourced pharmacovigilance
Implementing Regulation 2025/1466 modernises the EU pharmacovigilance framework by recognising the central role of outsourcing in today’s safety systems. By clarifying expectations and strengthening oversight, the regulation aims to ensure that MAHs maintain full control and visibility over all pharmacovigilance activities, regardless of where they are performed.
For MAHs, the message is clear: outsourcing does not transfer responsibility. The new regulation provides the structure needed to ensure that third‑party partnerships are transparent, well‑governed, and aligned with EU expectations.
What about the UK, will the MHRA adopt this?
There is currently no indication that the MHRA will automatically implement or mirror Implementing Regulation (EU) 2025/1466. The regulation is an amendment to EU Implementing Regulation 520/2012, which no longer applies in Great Britain following Brexit.
If the UK does decide to then there will likely be updates to UK legislation and a transition period for implementation.
How can PharmaGuard help you?
PharmaGuard have developed a range of fixed price PV micro services such as Essential PV training, PV system gap analysis, PSMF health check and UK monthly NCP service amongst others. One of the services is PV vendor oversight auditing where we will assess your PV vendor’s performance and compliance. We currently have availability for PV audits this quarter so please reach out to us to discuss how we can support you in more detail.
Don’t delay, get compliant today
👉 Get in touch to explore how our pharmacovigilance and compliance expertise can strengthen your next move.