MAH, QP and QPPV Responsibilities for Quality Defect and Recall Governance

MAH QP QPPV responsibilities intersect when a marketed medicinal-product quality defect could affect patient safety, benefit-risk, supply or regulatory compliance: the MAH remains accountable for its marketing-authorisation and regulatory obligations; the QP provides essential knowledge of batch certification, manufacture and quality-system evidence; and the QPPV must receive information promptly where it may affect pharmacovigilance activities or the product’s benefit-risk profile. In practice, no single role should treat its own assessment as a substitute for a competent authority’s decision. The operational requirement is a documented governance route that joins quality-defect management, recall readiness, pharmacovigilance assessment and regulatory communication without delay.

This article addresses the GMP–GVP interface only: decision rights, escalation, evidence hand-offs and communications during complaints, suspected defects, recalls and emerging safety signals. For the wider responsibilities of the pharmacovigilance role, see GuideGxP’s guide to the QPPV role.

Start with the correct hierarchy of requirements

Good governance begins by separating legal accountability from guidance and internal operating design. This distinction prevents teams from presenting a local workflow as though it were a legal rule, or from overlooking a binding requirement because it appears in a quality process.

• EU legal framework: Directive 2001/83/EC is the relevant EU legal framework supplied for this topic. The MAH must ensure that its arrangements support applicable obligations connected with the authorised medicinal product and its post-authorisation oversight.
• EU GMP guidance: EU GMP Chapter 8 addresses complaints, quality defects and product recalls. EU GMP Annex 16 addresses QP certification and batch release. These are regulator GMP guidance, not a replacement for the applicable law or authority instructions.
• EU GVP guidance: the EMA GVP modules provide the pharmacovigilance guidance context. They matter when defect information could affect safety monitoring, benefit-risk evaluation or risk-minimisation activity.
• Authority-facing context: EMA’s Quality Defects and Recalls page should be part of the team’s source set when determining the appropriate regulatory route for centrally authorised products.
• GuideGxP implementation advice: the RACI, time-boxed escalation, meeting cadence and evidence-pack structure below are practical controls. They must be tailored, approved and tested within the MAH’s quality, pharmacovigilance and regulatory systems.

Jurisdiction, authorisation route, product type, contractual allocation and the facts of the event can change the required path. Obtain jurisdiction-specific legal and regulatory review where needed.

Decision rights at the GMP–GVP boundary

The governance principle is simple: assign an accountable owner for each decision, but require informed input from the functions holding the relevant evidence. The MAH should retain a clear route for integrating that advice and authorising the organisation’s response. The QP’s contribution is particularly important where the investigation concerns batch history, certification knowledge, manufacturing controls, testing, distribution status or the quality impact of a proposed action. The QPPV’s contribution is particularly important where a defect may create, explain, alter or amplify a safety concern.

A batch hold is an immediate quality and supply-containment decision; it does not by itself resolve whether a regulatory action, recall or safety communication is necessary. Conversely, a pharmacovigilance assessment cannot establish manufacturing root cause. A defensible response retains both evidence streams, records uncertainties and documents who made each decision on the information available at that point.

Scenario-based governance matrix

The matrix is a GuideGxP operating model. “A” means accountable for ensuring the decision is made; “R” means responsible for performing the activity; “C” means consulted; and “I” means informed. It does not override the MAH’s procedures, contracts or an authority direction.

Where a third-party manufacturer, distributor or local affiliate holds evidence or performs activities, the MAH should ensure that quality agreements, pharmacovigilance agreements and escalation contacts enable the same information flow. Outsourcing work does not remove the need for coherent MAH governance.

A 0–24-hour escalation workflow

0–2 hours: preserve facts and connect the right functions

1. Log the complaint, observation, test result or field information in the controlled system.
2. Preserve available samples, records, photographs, communications and electronic data relevant to the allegation.
3. Notify the defect lead and initiate a documented initial triage.
4. Alert the QP and QPPV immediately when the facts could concern released batches, patient exposure, product use, adverse-event information or a potential benefit-risk impact.

2–8 hours: contain and assess

1. Identify potentially affected product, batches, markets, distribution status and available inventory.
2. Consider proportionate containment, including whether further distribution should be prevented pending assessment.
3. Run parallel quality and pharmacovigilance assessments. Record facts, assumptions, data gaps and the next evidence needed.
4. Ask Regulatory Affairs to identify the applicable authority route and to coordinate the MAH communication plan.

8–24 hours: make the governance decision record usable

1. Convene the cross-functional decision meeting.
2. Decide and record immediate controls, investigation ownership, communication ownership, next review point and escalation triggers.
3. Ensure the QPPV receives the current quality narrative and exposure information; ensure the quality team receives relevant PV observations that may change the hazard assessment.
4. Do not wait for full root-cause confirmation before considering whether the known facts require an authority discussion or other action. Equally, do not describe an unconfirmed hypothesis as a final conclusion.

Build one shared minimum evidence pack

A shared pack reduces conflicting narratives between Quality, PV and Regulatory Affairs. It should be version-controlled, time-stamped and clear about what is known versus under investigation.

• Event description, source, discovery time and product identification.
• Affected and potentially affected batches, expiry information, markets and distribution status.
• Initial manufacturing, testing, complaint and batch-record evidence, including the QP-relevant certification and release context where applicable.
• Patient-exposure and field information available at the time.
• Known adverse events, safety cases, trends or signal considerations relevant to the event, with the QPPV assessment status.
• Containment actions, recall options under consideration, supply or shortage considerations and communication status.
• Authority-contact assessment, responsible owner and decision log.
• Open questions, evidence owner, due time and planned governance review.

Run a decision meeting that can withstand inspection

The chair should focus the meeting on decisions, not merely updates. A useful agenda is: facts and uncertainty; patient and product exposure; quality assessment; QP input; PV and QPPV input; regulatory route; containment and recall options; shortage implications; external and internal communications; decisions; owners; deadlines; and the next review trigger.

Minutes should identify attendees, role capacity, documents reviewed, dissenting or conditional advice, decisions taken and rationale. Avoid vague wording such as “team agreed to monitor”. State what will be monitored, by whom, against what trigger, and when the group will reconvene.

Inspection-ready checklist and common governance gaps

• Accountability: Can you show the MAH decision owner and the authority-communication owner for this event?
• QP hand-off: Does the record show what batch, certification, manufacturing or testing evidence was requested from and considered by the QP?
• QPPV access: Can you demonstrate when the QPPV received the defect information and how PV impact was assessed?
• One narrative: Are Quality, PV and Regulatory documents consistent on chronology, scope, uncertainty and actions?
• Containment: Is the rationale for holds, distribution controls or alternative action documented?
• Authority route: Is there a documented assessment of the appropriate authority communication path, including changes as facts developed?
• CAPA: Does closure require both quality effectiveness evidence and confirmation that PV/regulatory follow-up has been completed or transferred into controlled ongoing work?

Common gaps include notifying PV only after the quality investigation is complete; treating a QP opinion as the entire patient-risk assessment; leaving Regulatory Affairs out of an early containment discussion; running separate, unreconciled timelines; and closing CAPA while safety or authority actions remain unowned. These are governance failures because they obscure decision rights and delay access to material evidence.

FAQ

Can the QP decide alone whether to recall a product?

No operating model should assume that the QP alone replaces the MAH’s governance process or competent-authority decisions. The QP’s batch and manufacturing knowledge is vital input, while the MAH coordinates accountable regulatory action using cross-functional evidence.

Must the QPPV be involved in every complaint?

Use a defined triage route. The QPPV or delegated PV function needs prompt access where the complaint or defect may affect patient safety, pharmacovigilance activities or benefit-risk. A documented rationale supports proportionate involvement.

When should shortage implications be discussed?

Discuss them alongside containment and recall options, not after an action is selected. Supply considerations do not displace patient protection or regulatory obligations, but they can affect the operational plan and communications.

Primary sources

• Directive 2001/83/EC, consolidated version
• EU GMP Chapter 8: Complaints, Quality Defects and Product Recalls
• EU GMP Annex 16: Certification by a Qualified Person and Batch Release
• EMA Good Pharmacovigilance Practices modules
• EMA Quality Defects and Recalls

Turn the method into an audit-ready system

Guide to the Pharmacovigilance Manager (QPPV) and Their Team is an optional GuideGxP operational resource for deeper methods, checklists and ready-to-adapt tools. It is not regulator-endorsed.

Stay practical: The Pragmatic GMP

Subscribe to The Pragmatic GMP for evidence-led GMP analysis, practical checklists and regulatory updates.