Systematically analyze the composition of post-marketing adverse drug reaction data and the open mode in the EU, and summarize its characteristics. EU post-marketing ADR data is open to six categories of stakeholders: EMA, EC, medicines regulatory authorities in EEA member states, healthcare professionals and the public, Marketing Authorization Holders, academia, WHO and medicines regulatory authorities in third countries. The EU has implemented hierarchical opening for ADRs, with different levels containing different data and facing different stakeholders. Openness is divided into active and passive openness. In opening up data, the EU complies with relevant personal data protection laws to protect the privacy of individuals. The EU’s post-marketing adverse drug reaction data openness is characterized by a combination of data openness and privacy protection, active and passive openness, and a hierarchy of data openness. It is hoped that this can provide a reference for the opening up of post-marketing adverse drug reaction data in China.
With the development of information technology, data is becoming a new driving force for social innovation in the 21st century. Data is the raw material of information, and information is the result of data processing. Data opening is the release of the original records, unprocessed and uninterpreted data with no clear meaning, which is an upgrade and leap forward of information opening [
EudraVigilance Post-Authorisation Module (EVPM) is responsible for collecting individual case safety reports on all authorized drugs. EU classifies post-marketing ADR reports into four types, namely, spontaneous reports, research from study, and others1 (reports of spontaneous observation or research cited in the literature with uncertain sources) and the reports of type not indicated by the original sender. The EU ADR data structure follows the guidelines for individual safety reporting issued by the International Coordinating Committee for Technical Requirements for Medicinal Products for Human Use (ICH E2B (R3)), which consists of identity data and case data and contains 272 data fields. Among them, the identity data consists of the identification of the individual security report, the main information source, the sender of the individual security report, the literature reference, and the research identification. Case data consists of patient characteristics, responses/events, test and procedure results relevant to the patient study, drug information, and narrative case summaries.
At present, EU post-marketing ADR data is available to six types of stakeholders: the EMA, the European Commission, and medicines regulatory authorities in EEA member states, healthcare professionals and the public, Marketing Authorization Holders, academia, WHO and medicines regulatory authorities in third countries.
The EU has implemented a hierarchical opening for ADR data, with three levels: Level 1, Level 2 (2A, 2B, 2C) and Level 3. Different levels contain different data and target different stakeholders. The level 1 dataset is open to all stakeholders. According to the needs of stakeholders and different pharmacovigilance obligations, level 2 is further divided into three sub-levels: 2A, 2B, and 2C. The level 2A dataset is targeted at the MAH and academia to support the MAH in fulfilling its pharmacovigilance obligations and to support research that promotes public health. The 2B level dataset is oriented to the MAH to support the MAH’s signal validation activities. Level 2C data sets are targeted at WHO and third country pharmaceutical regulatory authorities to support public health protection outside the European Community. The Level 3 data set contains all Individual Case Safety Report (ICSR) data, and is fully open to the EMA, the EC and the pharmaceutical regulatory authorities of the Member States to help them fulfil their responsibility to protect public health. In addition, the EU is fully open to the Marketing Authorization Holder (MAH) for the data contained in ICSRs that are sent to the EU Pharmacovigilance Database by the MAH or that are generated from the medical literature monitoring activities of the EMA to help MAH better fulfill pharmacovigilance obligations.
According to the types of ADR reports and the levels of ADR data openness, the EU has different ways of data openness for various stakeholders. Generally speaking, there are two ways, which include proactive disclosure of ICSR data and reactive disclosure of ICSR data.
| The open level | ||||
|---|---|---|---|---|
| Describe | The data fields | Stakeholder oriented | ||
| Level 1 | Common subset of ICSR data | 53 | Healthcare professionals and the public; MAH; Academia; WHO; Medicines regulatory authorities in third countries | |
| Level 2 | 2A | Extended subset of ICSR data | 228 | MAH; Academia |
| 2B | Extended subset of ICSR data, including case narratives | 231 | MAH | |
| 2C | Extended subset of ICSR data | 134 | WHO; Medicines regulatory authorities in third countries | |
| Level 3 | Open all ICSR data | 272 | EMA, EC, and medicines regulatory authorities in EEA member states; MAH | |
· For spontaneous report of Level 1 data, the EU is proactively open to all stakeholders. Each interested party does not need authorization or registration, but can directly access relevant data through a specific ADR portal [
· For level 1 and 2A data on post-marketing adverse reaction reports and for data on adverse reaction reports submitted by MAHs, the EU is proactively open to MAHs. Access personnel need to be authorized. After registration, the EU Pharmacovigilance Authorizer (Headquarters Level) and agents authorized person who are appointed by the EU Pharmacovigilance Authorizer can access this data through the Pharmacovigilance Data Management System (EVWEB).
· For post-marketing adverse reaction reports at level 2C data, the EU is actively open to WHO-UMC. Access personnel need to be authorized. Data access is available to WHO-UMC authorized personnel through the Application Ports (API) between WHO-UMC and EMA.
· The EU has taken the initiative to open up all data on post-marketing adverse reactions reported by the EMA, the EC and the regulatory authorities of the Member States. Access personnel need to be authorized. Authorized personnel of the EMA, EC and the regulatory authorities of each Member State may access the data through the network reporting application and data analysis system of the EU Pharmacovigilance System.
· MAH can apply for access to Level 2B data in the post-marketing adverse event report. When the MAH needs to perform signal verification and validation, the 2B level data can be accessed for all reporting requests of the EVMP module. After the submission of a formal request and the signing of a confidentiality agreement, Access to the data in the report at level 2B can only be made by authorized personnel, including the EU Pharmacovigilance Authorizer (headquarters level) and agents and authorized personnel appointed under the strict responsibility of the EU Pharmacovigilance Authorizer.
· Research institutions may apply for access to level 2A data in post-marketing adverse event reports. When research institutions are conducting research aimed at promoting public health and improving procedures to protect public health, an application can be made to the EMA for access to the Level 2A data set of post-marketing adverse events reports. At the time of the study application, the EMA should be informed of the main study questions, the study methodology, the public health implications of the findings, and the names and contact information of the persons established by the research institution responsible for protecting the pharmacovigilance database study data. In addition, the data access request should also describe the privacy checks that the institution intends to conduct prior to publication, to prevent the disclosure of personal data and to prevent the possible re-identification of data subjects (e.g., patients, reporters). After the application is submitted and the confidentiality agreement is signed, the personnel designated by the research institution can access this part of data.
· Third-country regulators may apply for access to level 2C data in post-listing adverse reaction reports. When the EMA receives an application for a visit from a pharmaceutical regulatory authority in a third country, for example when assessing safety issues related to the drug, it provides a level 2C data set of post-marketing adverse reaction reports. The visitor should be authorized, and the designated person of the pharmaceutical regulatory authority of the third country should have the access right.
In the opening up of ADR data, the EU strictly complies with the personal data protection regulations, Reg (EU) 2018/1725 and Reg (EU) 2016/679. The
5“*”: ICSRs sent by the MAH to the EU Pharmacovigilance Database, or ICSRs generated from the medical literature monitoring activities carried out by the EMA.
| Stakeholders | |||||
|---|---|---|---|---|---|
| The report type | The open level | Open mode | Open way | Whether authorization is required to access data | |
| EC, EMA and medicines regulatory authorities in EEA member states | EVPM2 reports | Level 3 | Proactive | EVWEB3, EVDAS4 | The authorized personnel of EC, EMA and Drug regulatory agencies of the Member States |
| Healthcare professionals and the public | Spontaneous reports | Level 1 | Proactive | ADR Web Portal | No request |
| MAH | Spontaneous reports | Level 1 | Proactive | ADR Web Portal | No request |
| EVPM reports | Level 1 | Proactive | EVWEB, EVDAS | The EU Pharmacovigilance Authorizer (headquarters level) or the EU Pharmacovigilance Authorizer is strictly responsible for the appointed agents and authorized personnel | |
| Level 2A | Proactive | ||||
| Level 3*5 | Proactive | ||||
| Level 2B | Reactive | Apply to the EMA | Access may only be made by the EU Pharmacovigilance Authorizer (headquarters level) or by agents and authorized personnel appointed under the strict responsibility of the EU Pharmacovigilance Authorizer after the submission of the request and the undertaking of confidentiality | ||
| Academia | Spontaneous report | Level 1 | Proactive | ADR Web Portal | No request |
| EVPM reports | Level 2A | Reactive | Apply to the EMA | After the research application is submitted and the letter of confidentiality is signed, the personnel designated by the research institution can visit the site | |
| WHO | Spontaneous report | Level 1 | Proactive | ADR Web Portal | No request |
| EVPM reports | Level 2C | Proactive | The API of WHO-UMC and EMA | Authorized personnel from the World Health Organization (WHO) Monitoring Centre in Uppsala | |
| Medicines regulatory authorities in third-country | Spontaneous report | Level 1 | Proactive | ADR Web Portal | No request |
| EVPM reports | Level 2C | Reactive | Apply to the EMA | Person appointed by the drug regulatory authority of the third-country | |
personally identifiable data of the patients involved in the adverse event data and the reporter were kept confidential.
In order to better protect personal privacy and data security, all stakeholders should also abide by the following provisions when accessing adverse reaction data. 1) Information on EU pharmacovigilance data is contained in their privacy statement on pharmacovigilance activities; 2) The confidentiality of ICSRS and the personal data of the parties are protected in accordance with applicable personal data protection laws; 3) Appropriate technology and measures are in place to ensure that data and personal information processed will not be accessed, disclosed, disseminated, altered or destroyed or accidentally lost without authorization or illegally; 4) If a breach of security regulations results in accidental or unlawful destruction, loss, tampering, unauthorized disclosure or access to data held or generated by the EU Pharmacovigilance Database, or otherwise protected personal data, notify EMA immediately.
In addition, the EU stipulates that research institutions and MAH can only access 2B and 2C data after signing the corresponding confidentiality agreement. Where the MAH ensures that ICSR level 2B data subjects are not identified, associated, or locked, and ensure that Level 2B data is used for signal management purposes specified in Module 6 of the GVP, or in pharmacovigilance evaluation procedures such as periodic safety report updates specified in Module 7 of the GVP, or in the referral or signal evaluation procedures of the PRAC under the conditions specified in this Commitment and in accordance with applicable data protection legislation. The research institution undertakes not to identify, contact, or lock the 2A data subject and not to transfer the data to any third party. In addition, when investigators conduct studies using adverse event data, a copy of the article using ICSR data should be provided to the EMA at least 5 working days prior to publication [
· Data opening and privacy protection are equally important. The protection of personal data and privacy is the premise of ADR data opening. In the process of Data opening, the EU abides by the general Data Protection regulations, and also makes reference to the opinions of the European Data Protection Supervisor, so that all stakeholders can access the adverse reaction Data to an appropriate degree under the premise of protecting personal privacy.
· Hierarchical opening of ADR data. Different stakeholders have different demands for adverse reaction data. For example, the public has a low demand for adverse reaction data and has different levels of cognition of adverse reactions. Excessive data opening may cause unnecessary panic of the public. However, MAH has to fulfill the corresponding pharmacovigilance obligations and responsibilities, while EMA, EC and national drug authorities have to fulfill the responsibility of protecting public health, so there is a great demand for ADR data. In addition, due to the detailed nature of the information, fully opening up adverse reaction data can lead to the re-identification of potential data subjects. Therefore, according to the different interests and needs of different stakeholders and the compliance with the relevant personal data protection laws, the EU implements the hierarchical opening of ADR data.
· Combine active opening and passive opening. The EU believes that the active and passive openness of adverse reaction data is complementary, and that the combination of the two openness approaches puts the EU transparency principle into practice. Active disclosure of adverse reaction data to the maximum extent, subject to compliance with EU personal data protection laws, and can minimize the need for temporary and passive disclosure of data at the request of individuals. This not only facilitates the acquisition of adverse reaction data by various stakeholders, but also reduces the workload of regulatory departments caused by the application visits to a certain extent and avoids the occupation of a large number of administrative resources.
In August 2015, the State Council issued the Outline of Action to Promote the Development of Big Data, which proposed the goal of building a unified and open platform for government data in China, and took the lead in moderately opening public data to the society in medical and health fields [
The opening of ADR data in the EU not only improves the transparency, but also meets the needs of various stakeholders for ADR data, strengthens the communication of ADR information, promotes the utilization of ADR data, and protects public health better. Its ADR data opening mode is relatively mature, which ensures the right of all stakeholders to obtain ADR data, while protecting trade secrets and personal privacy, so as to better balance the demands of all stakeholders. China can learn from the EU’s experience of opening up adverse drug reaction data to better implement the opening up of China’s adverse drug reaction data, specifically there are four experiences, 1) Improve China’s personal privacy data protection laws and regulations. In addition to the opening up of adverse drug reaction data, personal privacy data should also be effectively protected, so as to coordinate the conflict between personal privacy and data opening, and provide support for the opening up of adverse drug reaction data. 2) The implementation of a combination of reactive and proactive open access. For non-sensitive data, open up the data proactively, and for sensitive data, open up the data reactively, and give visitors the right to submit applications to access the data. 3) Open the adverse drug reaction data in a hierarchical manner. Firstly, the stakeholders involved in the opening of adverse drug reaction data should be clarified, and the needs of each stakeholder should be clarified, after which different levels of data sets should be set according to the needs of stakeholders, and different data should be opened for different stakeholders, which is conducive to the coordination of conflicts of interest while meeting the needs of each stakeholder 4) Build an ADR web portal similar to that of the EU. Provide a search function to facilitate visitors to quickly locate the data they want. In addition, enhance the visualisation of search results in the web portal and increase data output methods to improve the ease of use of the data, thereby improving the effectiveness of opening up ADR data.
The authors declare no conflicts of interest regarding the publication of this paper.
Ding, Y.W., Chen, Y.F. and Liu, P.C. (2021) Research on the Opening of Adverse Drug Reaction Data in the EU. Open Journal of Preventive Medicine, 11, 278-287. https://doi.org/10.4236/ojpm.2021.116022