In the era of big data, the pharmaceutical and life sciences industries process and store more safety records than ever before. Data integrity in pharmacovigilance is no longer optionalβit is a cornerstone of regulatory compliance, patient safety, and organizational credibility.
When a regulatory authority (RA) initiates an on-site PV inspection, missing, outdated, or incorrectly maintained safety data can trigger serious findings. Such data accuracy and consistency issues affect all functions within drug safety operations and can escalate from minor non-conformances to major corporate concerns, including loss of Marketing Authorization.
What is Data Integrity (DI) in Pharmacovigilance?
Data integrity is defined as the maintenance and assurance of data accuracy and consistency over its entire lifecycle. It is a critical aspect of the design, implementation, and usage of any system that stores, processes, or retrieves drug safety information. In pharmacovigilance, data integrity must be applied at each stage of the document lifecycleβfrom initial case receipt through regulatory reporting and long-term archival.
DI Rules for PV Documentation
4.1Β General Documentation Rules
All entries must be made in permanent ink for paper records; use of pencil is prohibited.
Errors must be corrected with a single line through the incorrect data, initialed, dated, and accompanied by a reason for correction.
No blank spaces should be left in forms; use N/A where not applicable.
Back-dating or forward-dating of records is strictly prohibited.
Certified copies must clearly be identified as such and must retain the integrity of the original.
4.2Β Electronic Records & Systems
Electronic systems must have access controls with unique user IDs and passwords.
System-generated date/time stamps must be tamper-evident and accurate (synchronized to a reliable time source).
Deletion of records from the safety database must require documented justification and dual authorization.
Electronic data migration must be validated to ensure no data loss or corruption.
Data backup and disaster recovery procedures must be documented and tested periodically.
4.3Β Audit Trail Requirements
A complete audit trail must capture: who, what, when, and why for every data creation or modification event.
Audit trails must be computer-generated, not user-modifiable.
Audit trail reviews must be performed routinely as part of Quality Control (QC) processes.
Audit trails must be retained for at least as long as the data they protect.
Manual overrides of system-generated audit entries are prohibited.
Comprehensive DI Training
01Β Β Β Β Β Provide regular, role-specific data integrity training to all PV staff and contractors. Document all training activities.
02 SOPs & Work Instructions
Develop and maintain clear Standard Operating Procedures (SOPs) covering data entry, correction, deletion, and archivalβall aligned with ALCOA+ principles.
03 Robust Audit Trail Reviews
Conduct periodic QC reviews of electronic audit trails in the safety database to detect anomalies, unauthorized changes, or suspicious patterns.
04 Access Control Management
Enforce role-based access controls (RBAC) with unique login credentials. Deactivate accounts promptly upon staff departure.
Ensure all electronic systems (safety databases, EDC, document management) are validated per 21 CFR Part 11 or Annex 11 requirements.
Perform periodic data integrity risk assessments across PV processes and implement corrective actions for identified vulnerabilities.
07 Self-Inspection & Mock Audits
Conduct internal DI audits and mock regulatory inspections to identify and remediate gaps before an RA inspection.
08 Vendor & CRO Oversight
Establish and enforce DI requirements in contracts with CROs and service providers; conduct oversight audits to verify compliance.
Foster an organizational culture where data integrity is a shared responsibility, with clear escalation pathways for reporting concerns without fear of repercussion.
MHRA. (2018). GxP Data Integrity Guidance and Definitions. Medicines and Healthcare products Regulatory Agency, March 2018.
MHRA. Good Pharmacovigilance Practice (GVP) Inspection Metrics 2019β2020. Available via: assets.publishing.service.gov.uk
GMP Compliance. Pharmacovigilance Inspection Metrics. Available at: www.gmp-compliance.org
US FDA. Inspections Data Dashboard. Available at: datadashboard.fda.gov
EMA. Guideline on good pharmacovigilance practices (GVP) β Module I: Pharmacovigilance systems and their quality systems.
ICH E2E: Pharmacovigilance Planning. International Council for Harmonization of Technical Requirements for Pharmaceuticals for Human Use.