UAE Healthcare Sector Pharmacovigilance Requirements
Approval opens the safety file; it does not close it
Post-market drug safety in the UAE rests on the marketing authorisation holder, under Federal Law No. 8 of 2019 and MOHAP's vigilance guidelines. The article covers the resident qualified person, the system master file, adverse reaction reporting within 15 and 90 calendar days, risk management plans and signal management. It closes with the penalties for falling short.
Reviewed by Mohamed Noureldin, Founder, Managing Partner & Senior Legal Consultant
Serious adverse drug reactions must be reported to the Ministry of Health and Prevention (MOHAP) within 15 calendar days of receipt. Non-serious reactions must be reported within 90 calendar days. Those clocks run against the marketing authorisation holder (MAH), and the qualified person who answers for them must be resident in the UAE. The duty runs from clinical development through to the product's post-market presence.
The law puts post-market safety on the holder
Pharmacovigilance in the UAE rests on federal law and on guidelines issued by MOHAP. The primary legal instrument is Federal Law No. 8 of 2019 on Medical Products, Pharmacy Profession and Pharmaceutical Establishments, which was recently updated by Federal Law No. 38 of 2024. It gives MOHAP the legal authority to regulate all aspects of medical products, including their safety and efficacy.
The regulations are designed to align UAE standards with international established standards, while addressing the specific demographic and logistical characteristics of the region. The framework mandates a proactive, risk-based approach to drug safety, and it shifts the onus of responsibility squarely onto the MAH to monitor its products. MOHAP's 'Guidelines in Good Vigilance Practice (GVP) for Marketing Authorization Holders' elaborates on the specific obligations, harmonised with the European Medicines Agency (EMA) GVP modules.
These are mandatory components of a compliant pharmacovigilance system, not suggestions, and MAHs must build them into their standard operating procedures.
Who answers to MOHAP for the safety system
Every MAH is required to appoint a qualified person for pharmacovigilance (QPPV) who resides in the UAE. That person is the single point of contact for MOHAP on all matters related to pharmacovigilance, and is legally responsible for the establishment and maintenance of the MAH's pharmacovigilance system. Part of that responsibility is seeing that adverse drug reaction (ADR) reports are collected, evaluated and transmitted to the authorities as required.
The QPPV must hold specific qualifications, typically in pharmacy or medicine, and have demonstrable experience in pharmacovigilance. The responsibilities are extensive. They include overseeing the safety profiles of the company's marketed products, seeing that new or changing risks are identified and managed, and holding oversight of how the pharmacovigilance system functions in all relevant aspects, including its quality system.
Keeping the system local is the point of the residence requirement. It gives immediate and knowledgeable oversight, direct communication with regulatory bodies, and swift action in response to safety signals.
The master file has to be ready before an inspector asks
MAHs must maintain a Pharmacovigilance System Master File (PSMF), a detailed document that describes the entire pharmacovigilance system. It must be permanently available for inspection by regulatory authorities, and it must be kept up to date.
The PSMF gives an overview of the system's structure, including the roles and responsibilities of personnel, the sources of safety data, the procedures for ADR collection and reporting, and the methods for risk management. It is not a static document. It must be a living file that accurately reflects the current pharmacovigilance system, subject to regular review and update, especially in response to significant changes in the system or in the regulatory framework. It is also the transparent and auditable record of the MAH's drug safety monitoring.
Serious cases in fifteen calendar days, non-serious in ninety
Those timelines are strict, and they run from receipt. The obligation extends to all types of sources, including spontaneous reports from healthcare professionals and patients, literature sources, and data from post-authorisation safety studies. Casting that wide is deliberate: it is how a drug's safety profile in a real-world setting becomes visible.
Timely and accurate reporting is the cornerstone of the system. MAHs are required to have systems in place for the electronic submission of Individual Case Safety Reports (ICSRs) in the E2B(R3) format, which is the international standard for transmitting case safety information.
Risk management plans for designated products
For certain products, particularly those with known or potential significant risks, MAHs are required to develop and implement a Risk Management Plan (RMP). The RMP identifies and characterises a product's risks and outlines the measures to minimise them.
It includes a summary of the product's safety profile and a plan for pharmacovigilance activities and risk minimisation measures. Those measures can range from specific warnings in the product information to additional educational materials for healthcare professionals and patients. The RMP is a dynamic document. It should be updated throughout the lifecycle of the product as new information becomes available.
Watching your own data for new risks
MAHs have a legal obligation to monitor the data they collect continuously, for signals of new or changing risks associated with their products. A signal is information that arises from one or multiple sources, including observational, experimental or spontaneous reports. It suggests a new potentially causal association, or a new aspect of a known association, between an intervention and an event or set of related events, either adverse or beneficial. It is a signal when it is judged to be of sufficient likelihood to justify verificatory action.
The signal management process includes signal detection, validation, analysis, prioritisation, assessment and action. It is the work that identifies potential safety issues early.
The obligations, and the party that carries them
Reporting, the master file, signal detection, periodic reports and risk management all fall on the same party, on different timings.
| Requirement Category | Key Obligation | Reporting Timeline | Responsible Party |
|---|---|---|---|
| ADR Reporting | Submission of Individual Case Safety Reports (ICSRs) | Serious: 15 days; Non-serious: 90 days | Marketing Authorisation Holder (MAH) |
| QPPV | Appointment of a UAE-resident Qualified Person | N/A | Marketing Authorisation Holder (MAH) |
| PSMF | Maintenance of a detailed Pharmacovigilance System Master File | Must be current and available for inspection | Marketing Authorisation Holder (MAH) |
| Signal Detection | Continuous monitoring of data for new risks | Ongoing | Marketing Authorisation Holder (MAH) |
| Periodic Reports | Submission of Periodic Safety Update Reports (PSURs) | As per product-specific schedule | Marketing Authorisation Holder (MAH) |
| Risk Management | Development and implementation of Risk Management Plans (RMPs) | For designated products | Marketing Authorisation Holder (MAH) |
Penalties, and what a working system costs to run
Recent updates reflect an increasingly rigorous enforcement posture. The authorities have made it clear that compliance is non-negotiable, and failure to adhere to the established protocols can result in severe penalties, including product withdrawal, suspension of marketing authorisations and significant financial liabilities.
The financial costs of non-compliance include fines and the potential for product withdrawal, and they can be substantial. Reputational harm can do more damage: news of a drug safety issue spreads rapidly, eroding patient confidence and causing long-term damage to a company's brand.
On the other side of the ledger, a compliant and efficient pharmacovigilance system requires significant investment in personnel, technology and processes. Companies that make it are better positioned to manage risk, protect their brand reputation and maintain the trust of patients and healthcare providers.
Related: Our healthcare team and our AML compliance team offer legal support in this area.
Additional Resources
Explore more of our insights on related topics:
