Repeat inspection findings are one of the most underestimated risks in pharmacovigilance (PV) today. When a regulatory inspector raises the same observation for the second – or third – time, it is rarely treated as the serious escalation signal it truly is. Instead, organisations often respond with the same corrective action plan they submitted previously, slightly reworded, and hope the finding closes before the next inspection cycle.
It does not.
This pattern is not just a compliance inconvenience. It carries compounding costs – to your regulatory standing, your internal resources, patient safety, and ultimately the commercial viability of your products. Understanding why repeat findings occur, what they actually cost, and how to structurally break the cycle is essential for any MAH, biotech, or pharmaceutical company operating under EMA or MHRA oversight.
What Constitutes a “Repeat Finding”?
A repeat finding occurs when a regulatory inspector – whether from the MHRA, EMA, or a national competent authority – identifies a deficiency that was raised in a previous inspection and was ostensibly closed via a CAPA. In pharmacovigilance, these findings most commonly appear in:
- Adverse event case processing – late or incomplete ICSRs, misclassified seriousness criteria, incomplete narratives
- PSMF (Pharmacovigilance System Master File) – outdated documentation, missing annexes, failure to reflect current system architecture
- Signal detection and management – absence of documented signal evaluation, lack of evidence that signals were escalated to the QPPV
- CAPA effectiveness – previous corrective actions that were implemented but not verified, or that addressed symptoms rather than root causes
- Training and competency – PV staff unable to demonstrate knowledge of SOPs during inspector interviews
When any of these resurface after a prior CAPA closure, it triggers a significantly elevated level of regulatory scrutiny.
The Real Cost: Far Beyond the Finding Itself
Most organisations calculate the cost of an inspection finding narrowly – the time taken to write the CAPA response, maybe a consultant fee to support it. The actual cost is vastly greater, and much of it is invisible on any single line in a budget.
1. Regulatory Credibility Erosion
Competent authorities maintain institutional memory. MHRA inspectors document inspection history, and repeat findings signal systemic dysfunction rather than isolated error. An organisation with a track record of recurring PV deficiencies is more likely to receive a for-cause inspection rather than a routine one – a significant operational and reputational escalation.
2. CAPA Resource Drain
Writing, reviewing, approving, and evidencing a CAPA for the same finding repeatedly consumes disproportionate resources. PV teams are typically lean. Every person-hour spent re-justifying a control that failed previously is an hour not spent on signal management, safety report quality, or PSMF maintenance – all areas that generate further inspection risk.
3. QPPV Accountability Exposure
Under GVP Module I, the Qualified Person for Pharmacovigilance (QPPV) has personal accountability for the integrity of the PV system. Repeat findings directly implicate QPPV oversight. Where inspectors conclude that the QPPV does not have adequate visibility of systemic failures, this can lead to requirements for increased oversight or, in serious cases, QPPV replacement conditions tied to a product licence.
4. Licence and Commercial Risk
Persistent critical or major PV findings can delay product approvals, trigger post-authorisation obligations, or in extreme cases result in referrals or licence variations. The commercial impact of even a six-month delay to a product submission, driven by an unresolved inspection finding, can run into millions of pounds.
5. The Cultural Cost: Normalised Non-Compliance
Perhaps the most insidious hidden cost is what repeat findings do to an organisation’s compliance culture. When teams see the same issues cycle through CAPAs year after year without genuine resolution, the implicit message is that compliance is a documentation exercise, not a genuine operational priority. This normalisation is extremely difficult to reverse and creates fertile ground for more serious, systemic failures.
Why Do Repeat Findings Keep Recurring?
The answer is almost never that people are incompetent or negligent. It is almost always structural. The most common root causes are:
Symptom-Level CAPAs
The most frequent driver of repeat findings is a CAPA that addresses the immediate trigger rather than the underlying failure mode. For example: an inspector finds that three ICSRs were submitted late. The CAPA involves retraining the case processor and adding a reminder calendar. The root cause – that the triaging SOP does not clearly define what triggers a seriousness assessment, creating ambiguity that leads to delays – is never addressed.
Six months later, a different case processor, a different product, the same pattern.
Inadequate Effectiveness Checks
GVP Module I is explicit that effectiveness monitoring of corrective actions must be embedded in the PV system. In practice, many organisations close CAPAs on implementation evidence (a new SOP, a training record) rather than performance evidence (demonstrably improved metrics, a follow-up audit showing no recurrence). The gap between implementation and effectiveness is where repeat findings are born.
PV System Fragmentation
In many MAHs and biotech companies, pharmacovigilance is distributed across multiple service providers, regions, and legacy systems. This fragmentation creates accountability gaps: it is unclear who owns signal escalation across databases, who validates PSMF completeness before an inspection, or who ensures that training completion data from a CRO is captured in the MAH’s own records. Inspectors see the MAH as a single entity. Fragmented systems produce fragmented compliance evidence.
Under-Resourced PV Functions
Boutique MAHs and early-stage pharmaceutical companies frequently rely on very small PV teams – sometimes a single person acting as QPPV, case processor, and PSMF custodian simultaneously. Under these conditions, inspection readiness activities are consistently deprioritised in favour of immediate operational demands. The PV system is technically in place but lacks the governance infrastructure to self-correct when gaps emerge.
Absence of Proactive Quality Oversight
Many PV systems operate reactively – problems are identified during external audits or inspections rather than through internal monitoring. Without a programme of periodic self-inspection, triggered quality reviews, and performance KPI oversight, the PV system cannot detect and resolve its own weaknesses before a regulator does.
Breaking the Cycle: A Structural Approach
Addressing repeat inspection findings requires a deliberate shift from reactive CAPA management to proactive system governance. The following framework has proven effective across a range of pharmaceutical organisations:
Step 1: Genuine Root Cause Analysis
Before any CAPA is written, invest properly in root cause analysis. Use structured tools – fishbone analysis, five-whys, failure mode analysis – applied specifically to the PV process in question. Ask: what in the design of this process made this failure likely, not just possible? The answer to that question is the CAPA. Not the surface symptom.
Step 2: Effectiveness Criteria Defined at CAPA Outset
Every CAPA should define, at inception, what a successful outcome looks like in observable, measurable terms – and by what date that will be evidenced. Effectiveness should be demonstrated through data: case processing timelines over the subsequent quarter, PSMF review completion rates, signal escalation logs. Subjective evidence of effort is not effectiveness evidence.
Step 3: Regular Internal PV Audits
An annual internal audit of the PV system is the minimum; quarterly or triggered reviews are better practice. These audits should be conducted against the current regulatory framework (EMA GVP Modules, MHRA PV guidelines) and should specifically test whether previously identified findings have been genuinely remediated. The audit programme should be independent of the day-to-day PV operational function.
Step 4: PSMF as a Living Document
The PSMF is frequently cited in inspections not because it is fundamentally wrong, but because it has not been kept current. Establish a quarterly PSMF review cycle – not an annual one. Assign clear ownership to each section. Ensure that changes to subcontractors, software systems, or QPPV arrangements are reflected within 30 days of the change occurring, not retrospectively before the next inspection.
Step 5: QPPV-Led Oversight of the PV System
The QPPV must have genuine, documented visibility of PV system performance – not just a nominal title. This means regular (at minimum quarterly) QPPV oversight reports covering case processing compliance, signal management status, training completion, and audit findings. These reports should be archived and available for inspector review. They are among the most powerful demonstration of a functioning, self-aware PV system.
Step 6: Mock Inspections Before Every Scheduled Audit
A mock inspection, conducted by an independent party familiar with the current MHRA and EMA inspection approach, is the single most effective inspection readiness tool available. It surfaces procedural gaps, trains staff to respond confidently to inspector questions, and frequently identifies documentation vulnerabilities invisible to the internal team. The investment in a mock inspection is a fraction of the cost of a major inspection finding.
The Signal Management Blind Spot
One area that deserves particular attention in the context of repeat findings is signal management. Inspectors increasingly focus on whether MAHs can demonstrate a genuinely functional signal detection process – not simply that a database produces outputs, but that those outputs are evaluated, documented, and that there is evidence of the QPPV’s engagement with escalation decisions.
Common repeat findings in this area include:
- Signal evaluation reports that are templated and lack genuine analysis
- No documented rationale for decisions not to escalate a signal
- Literature screening outputs that are filed but not demonstrably reviewed
- Aggregate reporting timelines (PSURs, DSURs) that are met on paper but contain safety sections that do not reflect current signal status
Addressing these requires process redesign – not just training. The signal management SOP needs to specify exactly how, when, and by whom signals are evaluated, what documentation is generated, and how the QPPV’s oversight is evidenced. Regulators are not looking for sophistication. They are looking for consistency, traceability, and ownership.
What Inspectors Are Actually Assessing
It is worth pausing to consider what an experienced MHRA or EMA inspector is actually evaluating when they see a repeat finding. It is not primarily whether the control is now in place. It is whether the organisation understood why it failed and whether the culture and systems in place are capable of sustaining the fix.
The questions running through an inspector’s mind are:
- Does this organisation know what its PV system looks like in practice, not just on paper?
- Is the QPPV genuinely in control of this system?
- Is quality ownership embedded in the PV function, or does compliance only happen when an external deadline forces it?
- Is this finding recurring because the underlying cause was never resolved, or because the cause was resolved but a new failure mode has emerged?
Organisations that answer these questions confidently – through documentation, through staff who speak fluently about their own processes, through a PSMF that reflects reality – move through inspections without major findings. Those that cannot are those that keep re-encountering the same observations.
How Quality & Vigilance Can Help You Break the Cycle
At Quality & Vigilance (Q&V), we help pharmaceutical, biotech, and life sciences companies across the UK and EU move from reactive compliance to proactive, self-sustaining pharmacovigilance governance. Our support spans independent PV audits, mock inspections, CAPA root cause analysis, PSMF remediation, QPPV oversight frameworks, signal management process design, and inspection readiness programmes – all tailored to your specific system and risk profile.
We do not just close findings. We fix the conditions that created them.
Get in touch at qualityvigilance.com or call +44 7474 964491 to discuss how Q&V can support your pharmacovigilance compliance journey.