01. LEAD SIGNAL
CDSCO · Schedule M · Paragraph 6.11
Pharmacovigilance Is Now a Plant Inspection Item.
A short CDSCO circular turns adverse drug reaction reporting from a head-office safety function into a license condition that state inspectors can verify on the shop floor.
On 3 June 2026, CDSCO issued a circular directing every licensee to establish and maintain an effective pharmacovigilance system under Paragraph 6.11 of the revised Schedule M. The paragraph requires a system for collecting, processing and forwarding adverse drug reaction reports to licensing authorities for drugs manufactured or marketed by the licensee. The circular adds the line that matters: compliance may be verified during routine inspections and other regulatory activities by CDSCO, State Licensing Authorities and Union Territory officers. Within weeks, the Federation of Pharma Entrepreneurs wrote to the DCGI asking who carries the obligation when one firm manufactures and another markets, whether Schedule M covers all marketed products while PSURs remain limited to new drugs, and whether pre-2019 approvals are in scope. On 22 June, the Health Ministry separately published a draft amendment resetting PSUR timelines under the NDCT Rules.
Q1 — WHAT CHANGED
The legal text did not change. Paragraph 6.11 has sat inside the revised Schedule M since its notification. What changed is enforcement posture. CDSCO has now told licensees, in writing, that pharmacovigilance is part of the good manufacturing practice framework and that inspectors may test it. That moves PV out of a regime historically exercised mainly through new drug approvals and PSUR review in New Delhi, and into the routine inspection cycle run by state licensing authorities. The obligation attaches to the licence, not to the product's approval category, so a plant making only older generics is not obviously exempt.
Q2 — WHY IT CHANGED
Three pressures converged. The revised Schedule M compliance window for smaller manufacturers closed at the end of 2025, so CDSCO can now inspect against the full text. Domestic drug safety failures, including the contaminated cough syrup deaths of 2025, exposed how weakly adverse event signals travel from patients back to manufacturers. And CDSCO is publicly repositioning toward risk-based oversight, which depends on manufacturers generating usable safety data. A regulator that wants to inspect less often needs licensees whose own systems detect problems first.
Q3 — WHAT IT MEANS FOR YOUR TEAM
For PV heads, the audience for your system now includes a state inspector who may know GMP well and PV less well, and who will look for documents rather than signal detection maturity. For QA heads, PV must sit visibly inside the pharmaceutical quality system: complaint handling, technical agreements, self-inspection and training records should all reference ADR handling. For RA heads, the FOPE questions are live risks. In contract and loan licence arrangements, two parties may each assume the other owns ADR collection. Until CDSCO answers, written allocation of responsibility in every agreement is your only protection.
Q4 — WHAT TO DO OR WATCH NEXT
→ Map every licence you hold, whether manufacturing, loan or marketing, to a named PV owner and a written procedure.
→ Add safety data exchange clauses to every third-party manufacturing agreement that lacks them.
→ Build an inspection evidence pack at each site: the PV procedure, ADR intake log, PvPI or CDSCO submission records, and training evidence.
→ Then watch three things: any CDSCO reply to the FOPE representation, final notification of the PSUR draft, and the first state inspection observations citing Paragraph 6.11.
India's PV obligation now lives in two instruments with two enforcers. The NDCT Rules, administered centrally, govern PSURs for new drugs. Schedule M, inspected largely by state licensing authorities, governs the system itself for every licensee. That split creates a consistency risk. Inspectors in Telangana, Gujarat and Himachal Pradesh may read Paragraph 6.11 differently, and companies with multi-state footprints could face divergent observations for identical systems. The firms best protected will be those whose PV documentation is written to survive the least sympathetic reading.
Executive Frame:
Treat this as licence-retention risk, not a safety function upgrade. Ask your leadership team one question this quarter: if a state drug inspector arrived at our largest plant tomorrow and asked to see our pharmacovigilance system, who would walk them through it, and what would they hand over? If the answer takes more than a sentence, the gap is real.
02. INDIA WATCH
2.1 → A Three-Year PSUR Cycle Is Proposed for Established New Drugs
On 22 June 2026, the Ministry of Health and Family Welfare published draft notification G.S.R. 504(E), inserting a proviso into the Fifth Schedule of the NDCT Rules. For new drugs under Rule 2(1)(w)(iv), PSURs would be due every six months for the first two years after approval, annually for the next two years, and once every three years thereafter while the drug is marketed. For new drugs under Rule 2(1)(w)(v), the cadence would be six-monthly for two years and annual thereafter. The three-year step is new and gives established products a lighter long-term rhythm. Objections were invited within 30 days of publication, so the comment window has closed and the rule now awaits final notification. Until then, the existing schedule applies. The draft does not answer FOPE's question on whether pre-2019 approvals carry PSUR obligations, which leaves that interpretation open.
ACTION:
Rebuild your PSUR calendar in two versions, current rule and draft rule, so the switch is immediate on notification. Classify every product by its Rule 2(1)(w) category now. Do not reduce submissions before the final gazette notification.
2.2 → Under-Four Warning Now Covers Every Chlorpheniramine and Phenylephrine Combination
Through S.O. 4595(E) dated 18 August 2026, the Health Ministry restricted the manufacture, sale and distribution of all fixed dose combinations containing chlorpheniramine maleate and phenylephrine hydrochloride unless they carry the warning that the combination shall not be used in children below four years of age. The April 2025 notification applied only to the specific two-ingredient combination. The new order extends the condition to every formulation containing both ingredients, including those combined with other drugs. The Drugs Technical Advisory Board endorsed the extension on 16 February 2026, and the notification took effect on publication. The warning must appear on the label, package insert and promotional literature. For cough and cold portfolios, this is an artwork, inventory and promotional material problem at once, and it signals that CDSCO is now reviewing legacy combinations class by class rather than product by product.
ACTION:
Identify every SKU containing both ingredients, including multi-ingredient combinations. Raise artwork change controls and withdraw non-compliant promotional material. Ask PV to monitor pediatric use reports for these products, since off-label exposure is now a documented regulatory concern.
03. TELANGANA SPOTLIGHT
Hyderabad's FDA Enforcement Signals:
Outsourcing Does Not Transfer Accountability
Hyderabad features twice in the US FDA’s 2026 enforcement record, highlighting two distinct compliance risks across the pharmaceutical supply chain: sterile manufacturing controls and the integrity of contract laboratory data.
At a pharmaceutical injectables facility in Telangana, an FDA inspection conducted between January and February 2026 resulted in 11 observations and a subsequent revised warning letter. The concerns included deficiencies in aseptic line design, inadequate restricted-access barrier systems and manual interventions without appropriate ISO 5 conditions. The agency also noted similar findings at other facilities within the wider manufacturing network.
Separately, a contract testing laboratory in the Hyderabad area received an FDA warning letter dated 3 March 2026. Investigators reported serious data-integrity concerns, including discarded analytical records, personal diaries used to record laboratory data, backdated entries and the reissue of a microbial test result as passing after the original result had been reported as too numerous to count.
The case also highlighted a fundamental compliance principle: a client's instruction not to investigate an out-of-specification result does not override a laboratory's regulatory obligations. Quality agreements define responsibilities; they do not displace applicable current Good Manufacturing Practice (CGMP) requirements.
HYDERABAD ACTION: →
If your organisation relies on contract laboratories in Hyderabad to test pharmaceutical products, review your oversight arrangements this quarter.
→ Review investigation records: Request a risk-based review of the laboratory's out-of-specification investigations, including evidence supporting conclusions and any decisions to invalidate results.
→ Examine report-reissue controls: Confirm that amended or reissued reports are fully traceable, justified, approved and linked to the original analytical records.
→ Test contractor oversight: Check whether quality agreements clearly establish investigation responsibilities, escalation pathways, access to records and the handling of disagreements over quality decisions.03. GLOBAL SCAN
RADAR TAKEAWAY : Outsourcing analytical testing does not eliminate the need for effective oversight. Pharmaceutical companies must be able to demonstrate that quality decisions are evidence-based, laboratory records remain trustworthy and potential risks are investigated—even when commercial pressure points in another direction.
04. GLOBAL SCAN
EMA · US FDA · ICH
ICH E2D(R1) Is Now Fully Applicable in the EU, and It Reaches Indian Programmes.
WHAT CHANGED AND WHY
The EU's six-month transition for ICH E2D(R1) ended on 18 September 2026, after the guideline took effect on 18 March. FDA published its E2D(R1) guidance on 6 March 2026. The revision redefines patient support programmes as organised data collection systems with two-way communication, and introduces documentation duties for non-protocol activities such as social listening, patient forums and sentiment analysis. Health Canada implemented the guideline on 12 January 2026, so EU, US and Canadian requirements for Indian safety operations now rest on the same definitions.
WHAT IT MEANS AND WHAT TO DO
EMA's implementation strategy states it applies to activities conducted within or outside the EU.
→ Any Indian patient support programme or digital listening project run for an EU-authorised product is in scope.
→ Delivery and coupon schemes without medical data collection now generate spontaneous rather than solicited reports.
→ Every ongoing non-protocol data collection activity needed documentation of objectives, data sources and adverse event handling by 18 September, maintained under QPPV oversight.
→ Audit your programme inventory against that list now, and confirm that every vendor running a programme on your behalf has updated its intake scripts and report classification rules.
Council of the EU · European Parliament
EU Pharma Package Clears the Council, Parliament Vote Next.
WHAT CHANGED AND WHY
On 28 September 2026, the Council adopted its first-reading position on the new directive and regulation replacing Directive 2001/83/EC and Regulation 726/2004, the first full rewrite of EU pharmaceutical law in twenty years. The standard EMA assessment timeline falls from 210 to 180 days. Parliament's plenary vote is indicated for autumn 2026, followed by Official Journal publication. The Council text states that its position fully reflects the December 2025 political agreement, so substantive amendments at this stage are unlikely.
WHAT IT MEANS AND WHAT TO DO
Member States will have two years to transpose the directive, with full applicability envisaged for 2028.
→ For Indian generic exporters, changed exclusivity rules affect launch timing.
→ For PV teams, the two instruments currently cited in your pharmacovigilance system master file, QPPV contracts and safety SOPs will be repealed, so legal references will need systematic replacement.
→ Start a citation inventory now, and assign RA to track transposition in your priority Member States, since national rules will change on different dates.
EMA · PRAC
Pharmacovigilance Risk Assessment Committee (PRAC) Opens Class Review of All Injectable Iron Medicines
WHAT CHANGED AND WHY
At its 31 August to 3 September 2026 meeting, PRAC started a referral covering all injectable iron-containing medicines. The trigger was serious hypophosphataemia with ferric carboxymaltose, some cases progressing to osteomalacia after only one or two doses in patients without risk factors. Similar cases with other injectable irons widened the scope beyond a single molecule. Diagnosis was sometimes delayed because tiredness and bone pain overlap with iron deficiency symptoms. Oral iron is excluded because it delivers far lower iron loads.
WHAT IT MEANS AND WHAT TO DO
Class referrals often end in harmonised product information changes or monitoring requirements across every marketing authorisation holder, including generic manufacturers.
→ Indian makers of iron sucrose, ferric carboxymaltose and related products for EU markets should prepare to receive questions, and should check whether their own safety databases hold hypophosphataemia or bone disorder cases that have been under-coded. → Review domestic labels too, since CDSCO frequently follows major EU safety actions, and intravenous iron is widely used in Indian anaemia care.
05. ENFORCEMENT LENS
EDITORIAL POLICY NOTE:
Enforcement Lens analyses public regulatory documents only. Naming a company reflects the published record at the time of writing and is not a judgement on its current compliance status. Companies may have responded or remediated since publication. Where a company has publicly disputed or closed out a finding, we will report that alongside the original document. Our purpose is to identify patterns that help readers prevent findings, not to rank or shame individual firms.
Outsourcing Operations Does Not Mean Outsourcing Responsibility
Pattern Observed →
India's US FDA inspection outcomes in fiscal 2025 were broadly in line with global trends. Of 207 Indian facilities inspected, 37 (17.9%) were classified as Official Action Indicated (OAI), compared with a reported global average of 18%. Frequently identified deficiencies included inadequate written procedures and records, insufficient investigations, and weaknesses in laboratory controls.
The message from FDA leadership at an industry workshop was clear: outsourcing operations does not mean outsourcing responsibility. Regulatory enforcement activity in 2026 illustrates why that principle matters.
Pattern Analysis →
Three recurring themes emerge from the 2026 warning letters involving Indian pharmaceutical operations.
First, data reliability. In separate cases, FDA identified concerns involving altered analytical results, discrepancies between reported and actual sample collection, and electronic testing records that could be overwritten. These findings highlight a fundamental expectation: regulated decisions must be supported by complete, accurate, traceable and trustworthy records.
Second, outsourced accountability. FDA's scrutiny of contract testing arrangements reinforced that a client's instruction not to investigate a failing result does not override applicable current Good Manufacturing Practice (CGMP) obligations. Contractual arrangements cannot replace independent, scientifically sound investigations or clear quality accountability.
Third, regulatory reach. Remote records requests and unannounced inspections mean that compliance scrutiny is not limited to what an inspector observes during a site visit. Records submitted electronically can become part of the regulatory evidence reviewed by investigators, making data integrity and document governance critical well beyond the inspection itself.
For pharmacovigilance (PV) leaders, the implications are direct. Case-processing vendors, literature-screening partners and patient-support programme providers may hold records that underpin safety decisions and regulatory submissions. Their processes and documentation therefore require effective oversight.
The central question is not simply whether a vendor has passed an audit. It is whether the organisation can demonstrate that outsourced activities are controlled, records are reliable, deviations are investigated and safety data remain traceable from source to submission.
Radar Question →
If the FDA, EMA or CDSCO requested your PV vendor's source case-processing records and electronic audit trails tomorrow, could your organisation produce them promptly—and establish that the records are complete, traceable and consistent with the safety data submitted?
06. EXPERT VIEW
EDITOR: APEXEDGE RADAR
State Inspectors, Not New Delhi, Will Decide India's Pharmacovigilance Standard
For two decades, Indian pharmacovigilance has been shaped by what global marketing authorisation holders demanded and what CDSCO reviewed at approval. The June circular quietly changes the audience. From now on, the person who decides whether an Indian manufacturer's PV system is adequate may be a state drug inspector on a routine GMP visit. That is a structural shift, and the industry has not yet absorbed what it means for how systems are documented and defended.
“The test is no longer whether your PV system works.
It is whether a GMP inspector can see that it works.”
Large exporters will mostly be fine. Their PV systems were built for EMA and FDA scrutiny, and a Schedule M check will look modest by comparison. The exposure sits elsewhere. India has thousands of licensed manufacturers, many producing domestic generics under contract or loan licence arrangements, and many have never maintained more than a complaint register. For them, Paragraph 6.11 is a new capability, not a documentation exercise. The second exposure is interpretive. State licensing authorities have built deep GMP expertise, but PV inspection is a distinct discipline, and early observations may reward visible paperwork over working signal detection. That creates a perverse incentive to build PV systems for the inspection rather than the patient. The answer is not to resist inspection but to make substance legible. A one-page system description, a clear responsibility matrix across licences, and a live ADR log that shows cases moving from intake to submission will satisfy a sceptical inspector and serve patients at the same time. Companies that do this early will help define what good looks like, state by state, before less careful practice becomes the norm.
The strongest objection is that this is a reminder, not a reform. The circular creates no new obligation, carries no deadline, and says compliance may, not will, be verified. No PV inspection framework for state officers was published alongside it. On that reading, firms should wait for guidance rather than spend now. The risk in waiting is that the first observations will define the standard before any guidance does.
Executive Question:
Which of our licences, including loan licences and third-party manufacturing arrangements, has a named PV owner today? If a state inspector asked to see our ADR flow end to end, could a site-level QA lead explain it without calling head office? Are we building this system to pass an inspection or to detect harm?
07. HORIZON TRACKER
AUTHORITY | TIMELINE
ITEM & SIGNIFICANCE |
HORIZON
CDSCO Pending,
no date announced
Clarification on Schedule M Paragraph 6.11 following Federation of Pharmaceutical Entrepreneurs (FOPE) representation
Would settle whether the manufacturing licensee or the label marketer owns pharmacovigilance in contract and loan licence arrangements, and whether pre-2019 approvals fall within PSUR obligations. Until issued, companies must allocate responsibility contractually and expect inspectors to apply their own reading
0-6 months
MoHFW
Comment window closed,
final notification pending
G.S.R. 504(E) revised PSUR timelines under the New Drugs and Clinical Trials(NDCT) Rules
Introduces a three-year PSUR cycle for established new drugs under Rule 2(1)(w)(iv) and annual reporting for Rule 2(1)(w)(v) products. Final notification will reset submission calendars across portfolios, and teams that pre-build both calendars will avoid missed or unnecessary submissions.
0-6 months
European Parliament
Autumn 2026, indicative October
Plenary vote on EU pharmaceutical package
Final adoption triggers Official Journal publication, entry into force and a two-year transposition period. It also starts the clock on replacing legal references to Directive 2001/83/EC and Regulation 726/2004 in pharmacovigilance master files, QPPV agreements and safety procedures.
0-3 months
EMA PRAC
2026 work plan, timing not fixed
Revision of Good Pharmacovigilance Practices (GVP) Module VI to integrate ICH E2D(R1)
Will convert the interim EU implementation strategy into permanent GVP text on patient support programmes, organised data collection systems and digital sources. Indian teams running case processing for EU products should expect process and SOP updates once the draft is released for consultation.
3–12 months
EMA PRAC
Referral ongoing
Parenteral iron-containing medicinal products referral
Class review of hypophosphataemia and osteomalacia risk across all injectable irons. A conclusion could bring harmonised label changes, monitoring recommendations or additional risk minimisation measures for every marketing authorisation holder, including Indian generic manufacturers supplying EU markets.
3-9 months
CDSCO
March 2027 target
Regulatory gap review on diversion of Narcotic Drugs and Psychotropic Substances (NDPS)-containing pharmaceuticals
CDSCO has been tasked with addressing regulatory gaps that enable illegal diversion of narcotic and psychotropic formulations, with the Drugs Consultative Committee examining measures. Expect tighter supply chain record and distribution controls that QA and distribution teams will need to implement.
5-6 months
08. PRIMARY SOURCES
Central Drugs Standard Control Organisation — Circular: Implementation of Pharmacovigilance (PV) System as per the requirement of Schedule M of Drugs & Cosmetics Act 1940 and the Rules made there under (3 June 2026)
URL: https://cdsco.gov.in/opencms/opencms/system/modules/CDSCO.WEB/elements/download_file_division.jsp?num_id=MTQyNzg=
Accessed: 10 October 2026 · Authority: CDSCO, Directorate General of Health ServicesMinistry of Health and Family Welfare — G.S.R. 504(E) Draft notification regarding submission of Periodic Safety Update Reports under the NDCT Rules, 2019 (22 June 2026)
URL: https://cdsco.gov.in/opencms/opencms/en/Notifications/Gazette-Notifications/
Accessed: 10 October 2026 · Authority: MoHFW, Government of IndiaMinistry of Health and Family Welfare — S.O. 4595(E) Restriction of all FDC formulations containing Chlorpheniramine Maleate and Phenylephrine Hydrochloride in children below four years (18 August 2026)
URL: https://egazette.gov.in/WriteReadData/2026/275640.pdf
Accessed: 10 October 2026 · Authority: MoHFW, Government of IndiaUS Food and Drug Administration — Warning Letter 320-26-47, Tentamus India Private Limited (3 March 2026)
URL: https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/tentamus-india-private-limited-720463-03032026
Accessed: 10 October 2026 · Authority: US FDA, CDERUS Food and Drug Administration — Warning Letter 320-26-92, Zydus Lifesciences Limited (2 June 2026)
URL: https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/zydus-lifesciences-limited-722576-06022026
Accessed: 10 October 2026 · Authority: US FDA, CDERUS Food and Drug Administration — Warning Letter 320-26-117, Reliance Life Sciences Private Limited (18 August 2026)
URL: https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/reliance-life-sciences-private-limited-730801-08182026
Accessed: 10 October 2026 · Authority: US FDA, CDEREuropean Medicines Agency — EU implementation strategy of ICH E2D(R1) Guideline, adopted by PRAC (20 February 2026)
URL: https://www.ema.europa.eu/en/documents/scientific-guideline/eu-implementation-strategy-ich-e2dr1-guideline-post-approval-safety-data-definitions-standards-management-reporting-individual-case-safety-reports_en.pdf
Accessed: 10 October 2026 · Authority: EMAUS Food and Drug Administration — E2D(R1) Postapproval Safety Data guidance availability, FDA Adverse Event Monitoring System (6 March 2026)
URL: https://www.fda.gov/drugs/fda-adverse-event-monitoring-system-aems/fda-adverse-event-monitoring-system-aems-electronic-submissions
Accessed: 10 October 2026 · Authority: US FDACouncil of the European Union — Position of the Council at first reading on the Directive on the Union code relating to medicinal products for human use, ST 13769/26 (28 September 2026)
URL: https://data.consilium.europa.eu/doc/document/ST-13769-2026-INIT/en/pdf
Accessed: 10 October 2026 · Authority: Council of the EUEuropean Medicines Agency — Meeting highlights from PRAC, 31 August to 3 September 2026: PRAC starts safety review of injectable iron-containing medicines (4 September 2026)
URL: https://www.ema.europa.eu/en/news/meeting-highlights-pharmacovigilance-risk-assessment-committee-prac-31-august-3-september-2026
Accessed: 10 October 2026 · Authority: EMA