The safety reports that continue after approval

Two clocks, and what decides which one applies

A company holding an approved drug application must promptly review all adverse drug experience information it obtains or receives from any source, foreign or domestic. The rule lists the sources: commercial marketing experience, postmarketing clinical investigations, postmarketing epidemiological and surveillance studies, reports in the scientific literature, and unpublished scientific papers. Anyone subject to the reporting requirements must also develop written procedures for the surveillance, receipt, evaluation and reporting of those experiences.

What happens next depends on two adjectives. Where an adverse drug experience is both serious and unexpected, whether foreign or domestic, the applicant must report it as soon as possible but no later than 15 calendar days from initial receipt of the information. Those are the fifteen-day alert reports.

The applicant must then promptly investigate all experiences that are the subject of such a report, and submit follow-up reports within 15 calendar days of receiving new information or as the agency requests. Where additional information cannot be obtained, records should be kept of the unsuccessful steps taken to seek it.

Everything else goes on the slower clock. Adverse drug experiences not reported as fifteen-day alerts are reported at quarterly intervals for three years from the date the application was approved, and then at annual intervals — each quarterly report within 30 days of the close of the quarter, each annual report within 60 days of the anniversary of approval. The agency may extend or reinstate quarterly reporting on written notice, and the rule gives approval of a major supplement as an example of when it might.

The duty is not confined to the applicant. It also applies to any other person whose name appears on the label of an approved drug product as a manufacturer, packer or distributor. Such a person may instead route all reports of serious adverse experiences to the applicant, within 5 calendar days of initial receipt, keeping a record of each one.

The definitions that set the threshold

An adverse drug experience means any adverse event associated with the use of a drug in humans, whether or not considered drug related. The definition then enumerates: an event occurring in the course of professional practice, an event from overdose whether accidental or intentional, an event from drug abuse, an event from drug withdrawal, and any failure of expected pharmacological action.

That last item is the one people miss. A drug that simply does not do what it is supposed to do is an adverse drug experience under this definition.

A serious adverse drug experience means one occurring at any dose that results in death, a life-threatening experience, inpatient hospitalisation or prolongation of an existing hospitalisation, a persistent or significant disability or incapacity, or a congenital anomaly or birth defect. The definition then widens itself: important medical events that do not result in death, are not life-threatening and do not require hospitalisation may still be considered serious where, on appropriate medical judgment, they may jeopardise the patient and may require medical or surgical intervention to prevent one of the listed outcomes.

Life-threatening is defined by the initial reporter's view at the time: an experience that places the patient at immediate risk of death from the experience as it occurred. The definition expressly excludes an experience that, had it occurred in a more severe form, might have caused death. Disability means a substantial disruption of a person's ability to conduct normal life functions.

Unexpected is the definition that makes the whole system depend on the label. An unexpected adverse drug experience means any experience that is not listed in the current labelling for the drug product. The definition includes events symptomatically and pathophysiologically related to a listed event but differing from it because of greater severity or specificity — the rule gives hepatic necrosis as unexpected where the labelling refers only to elevated hepatic enzymes or hepatitis, and cerebral thromboembolism as unexpected where the labelling lists only cerebral vascular accidents. Unexpected refers to an experience not previously observed and therefore not in the labelling, rather than to one not anticipated from the drug's pharmacological properties.

What an individual case safety report carries

An individual case safety report is defined simply as a description of an adverse drug experience related to an individual patient or subject. What it must contain is set out in five groups, and reading the list is the fastest way to understand what the system can and cannot answer.

Patient information: a patient identification code, the patient's age at the time of the experience or date of birth, gender, and weight.

The adverse drug experience itself: the outcome attributed to it, the date it occurred, the date the report was submitted, a description including a concise medical narrative, the experience terms, a description of relevant tests including dates and laboratory data, and other relevant patient history including pre-existing medical conditions.

The suspect medical product: its name, the dose, frequency and route of administration used, therapy dates, the diagnosis for use, whether it is a prescription or nonprescription product, whether it is a combination product, whether the experience abated after drug use stopped or the dose was reduced, whether it reappeared after reintroduction, the lot number, the expiration date, the national drug code number, and concomitant medical products with their therapy dates. Two of those fields — whether the event abated on stopping and whether it reappeared on restarting — are the closest the form comes to asking about causation.

Initial reporter information: name, address and telephone number, whether the reporter is a health care professional, and if so their occupation. And applicant information: the applicant name and contact address, the report source such as spontaneous, literature or study, the date the applicant received the report, the application number and type, whether the report is a fifteen-day alert, whether it is an initial or follow-up report, and a unique case identification number that must be the same on the initial report and every follow-up.

A fifteen-day alert based on information in the scientific literature must be accompanied by a copy of the published article, and applies to literature only where the report appears as a case report or as the result of a formal clinical trial. For an experience from a postmarketing study, no fifteen-day alert is required unless the applicant concludes there is a reasonable possibility that the drug caused the experience.

The three-working-day report, and the yearly one

A separate section covers reports that are not about a patient at all. The field alert report runs on the fastest clock in the system: information must reach the responsible agency district office within 3 working days of the applicant receiving it, and may be given by telephone or other rapid means with prompt written follow-up.

Two categories trigger it. Information concerning any incident that causes the drug product or its labelling to be mistaken for, or applied to, another article. And information concerning any bacteriological contamination, or any significant chemical, physical or other change or deterioration in the distributed product, or any failure of one or more distributed batches to meet the specification established for it in the application.

That second category is a product-quality alarm rather than a patient-safety one, and it is why the three-day clock exists. A batch that fails its own specification after it has shipped is a live problem, not a reporting formality.

The annual report is the slow counterpart, due within 60 days of the anniversary of approval, and its required contents are listed in order. A brief summary of significant new information from the previous year that might affect the safety, effectiveness or labelling of the product, together with a brief description of actions the applicant has taken or intends to take — the rule gives submitting a labelling supplement, adding a warning, or initiating a new study as examples.

Then distribution data: the quantity distributed under the application including to distributors, with the national drug code number, the total number of dosage units of each strength or potency, and the quantities distributed for domestic and for foreign use. The rule states that disclosure of financial or pricing data is not required.

Then labelling: the current professional labelling, patient brochures or package inserts, a representative sample of package labels, and a summary of any labelling changes made since the last report listed by date in the order implemented, or a statement that there were none. Then chemistry, manufacturing and controls changes that did not require a supplemental application, also listed by date in the order implemented.

Then nonclinical laboratory studies: copies of unpublished reports and summaries of published reports of new toxicological findings in animal and in vitro studies concerning the product's ingredients. Then clinical data, covering published trials, summaries of completed unpublished trials or prepublication manuscripts, and analysis of available safety and efficacy data in the paediatric population. And then status reports of postmarketing study commitments.

What the system does not do

The rule contains an unusual paragraph that states, in its own text, what a report does not mean. A report or information submitted under the section — and any release of it by the agency — does not necessarily reflect a conclusion by the applicant or the agency that the report constitutes an admission that the drug caused or contributed to an adverse effect. An applicant need not admit, and may deny, that it does.

That disclaimer is the single most important thing to know about postmarketing safety data. These are reports of things that happened to people who were taking a drug. They are not findings of causation, and the regulation says so.

Privacy is handled by omission. An applicant should not include the names and addresses of individual patients, and should instead assign a unique code. The names of patients, health care professionals, hospitals and geographical identifiers in adverse drug experience reports are not releasable to the public under the agency's public information regulations.

The records duty outlasts almost everything else in the part. An applicant must maintain, for a period of 10 years, records of all adverse drug experiences known to it, including raw data and any correspondence relating to those experiences.

The enforcement lever is stated plainly. Where an applicant fails to establish and maintain records and make the reports the section requires, the agency may withdraw approval of the application and thus prohibit continued marketing of the product.

And here is where the framework meets the subject of this site. Every duty above attaches to an applicant holding an approved application, or to a manufacturer, packer or distributor named on the label of an approved drug product. A compound with no approved application has no applicant. There is no fifteen-day clock, no quarterly or annual periodic report, no field alert route, no annual report of distribution data and labelling changes, and no ten-year records duty — because there is no holder to carry them. Separate reporting duties exist under other provisions for marketed drugs without approved applications and for certain compounding facilities, and this site covers those elsewhere; they are narrower than the regime described here.

Sources

Each document below is named as it names itself, with the date printed on that document rather than the day it was read.

1. 21 CFR 314.80 — Postmarketing reporting of adverse drug experiences, read in full for the definitions of adverse drug experience, serious, life-threatening, disability and unexpected; the fifteen-day alert report and follow-up rules; the quarterly-then-annual periodic reporting schedule; the five-calendar-day nonapplicant routing option; the five groups of information required in an individual case safety report; the literature and postmarketing study provisions; the patient privacy paragraph; the ten-year records requirement; the withdrawal-of-approval consequence; and the disclaimer that a report is not an admission of causation — Electronic Code of Federal Regulations, National Archives and Records Administration, September 2026
2. 21 CFR 314.81 — Other postmarketing reports, read for the field alert report with its three-working-day clock and its two triggering categories, and for the annual report contents in the order listed: the summary of significant new information and actions taken, distribution data with the statement that financial or pricing data need not be disclosed, current labelling and a dated summary of labelling changes, chemistry manufacturing and controls changes, nonclinical laboratory study findings, clinical data, and status reports of postmarketing study commitments — Electronic Code of Federal Regulations, National Archives and Records Administration, September 2026