Pharmacovigilance · NAFDAC Compliance

NAFDAC Pharmacovigilance Requirements: What the Official Guidelines Actually Mean

A plain language breakdown of what the guideline actually requires — not just what the regulation says.

By MedNova Lifesciences Last reviewed: September 2026 ~21 min read Pillar Guide

Short answer: NAFDAC pharmacovigilance requirements oblige every Certificate of Registration Holder placing a medicinal product on the Nigerian market to run a functioning pharmacovigilance system — one that collects, evaluates, documents and reports safety information about that product. Compliance is not satisfied by submitting adverse event reports alone. It requires a named and resident Qualified Person Responsible for Pharmacovigilance, a Pharmacovigilance System Master File held in Nigeria, controlled procedures, trained personnel, risk management, safety communication, audit, and records that prove all of it happened.

What are NAFDAC pharmacovigilance requirements?

NAFDAC pharmacovigilance requirements are the obligations that Nigeria's medicines regulator places on companies responsible for products it has registered, requiring them to monitor those products for safety throughout their commercial life.

The legal foundation sits in the NAFDAC Act, Cap N1, Laws of the Federation of Nigeria 2004, which gives the Agency authority over the manufacture, importation, exportation, distribution, advertisement, sale and use of regulated products. From that authority NAFDAC issued its Good Pharmacovigilance Practice Regulations, and the Good Pharmacovigilance Practice Guidelines set out how the Agency expects those regulations to be met in practice.

NAFDAC's guideline defines a pharmacovigilance system as a quality system that a Certificate of Registration Holder uses to discharge its pharmacovigilance responsibilities, designed to monitor the safety of authorised products and to detect any change in their benefit to risk balance. The definitional detail matters. It is a quality system, not a mailbox. It is characterised by structures, processes and outcomes, covering organisational structure, responsibilities, procedures, resources, compliance management and record management.

The four quality objectives NAFDAC sets for that system are:

  • Complying with legal pharmacovigilance obligations
  • Preventing harm from adverse reactions, including harm arising from off label use, misuse, abuse, medication error or occupational exposure
  • Promoting safe and effective use by getting timely safety information to patients, healthcare professionals and the public
  • Contributing to the protection of public health

If your team needs a working definition of the underlying discipline before going further, MedNova maintains a glossary entry on Good Pharmacovigilance Practice and on the adverse drug reaction.

Who NAFDAC's pharmacovigilance requirements apply to

The guideline applies to every entity authorised to place medicinal products on the Nigerian market. NAFDAC uses the term Certificate of Registration Holder, and defines it broadly: NAFDAC licence holders, individuals, public and private institutions, manufacturers, importers, and donors of medicinal products. Companies that assume pharmacovigilance obligations sit only with large multinational manufacturers are reading the scope too narrowly.

The guideline then names product categories where active safety monitoring is expected:

  • Products developed wholly or largely outside Nigeria
  • Products with under ten years of post marketing experience elsewhere, or under five years in Nigeria
  • Advanced therapeutic products such as tissue, cell or gene based products
  • Products subject to a risk management plan in any other country
  • Orphan medicinal products
  • Products granted accelerated or conditional approval in any country
  • Products intended solely for special populations such as children or the elderly
  • Products acting through the immune system, such as cytokines and monoclonal antibodies
  • Central nervous system products, including antiepileptics, antipsychotics, antidepressants and treatments for neurodegenerative disease
  • Any other product NAFDAC identifies on the basis of benefit to risk assessment

NAFDAC may additionally require a Certificate of Registration Holder to follow the guideline where the Agency identifies a safety concern during post marketing surveillance. Importantly, being outside these categories does not release a company from monitoring the safety of its products. The general obligation to operate a pharmacovigilance system remains.

Boundary to watchSafety reporting for products under clinical investigation is not governed by this guideline. Those obligations sit under NAFDAC's Good Clinical Practice Regulations. Companies running trials and marketing products in Nigeria need both frameworks running side by side, with a clear internal rule for which pathway a given case follows.

What the NAFDAC Good Pharmacovigilance Practice guideline covers

The guideline is organised into chapters that map onto the compliance areas an inspector will look at. Below is what each area asks of a company in operational terms.

1. The pharmacovigilance system

Chapter 1 sets the foundation: sufficient competent personnel, defined managerial responsibilities, document control, adequate premises and validated IT, compliance management, and record management.

It also names the processes NAFDAC treats as critical, among them continuous benefit to risk monitoring, risk management, ICSR collection through to timely transmission, signal detection and management, periodic safety update reporting, responding to Agency requests, and keeping product information current. Business continuity plans must exist for those critical processes, including back up arrangements for urgent information exchange with the Agency.

2. Quality management

Quality objectives must be documented in written policies, quality plans, quality manuals, standard operating procedures and quality records. Training plans and records must be kept and made available for audit and inspection.

Notably, NAFDAC extends the training expectation beyond the pharmacovigilance department: staff in clinical trials, product complaints, medical information, sales and marketing, regulatory affairs, legal and audit all need appropriate instruction, because their work can affect the safety system. Deviations must be monitored, corrective and preventive actions taken, and the effectiveness of those actions verified.

3. The Pharmacovigilance System Master File

Chapter 2 is where many Nigerian compliance programmes are weakest. Certificate of Registration Holders in Nigeria are required to maintain a Pharmacovigilance System Master File and to submit it when applying for a Certificate of Registration.

The file must be located either at the Nigerian site where the main pharmacovigilance activities are performed or at the Nigerian site where the QPPV operates. Applicants and holders of listings for traditional herbal medicinal products are also required to submit one. It must remain continuously accessible to both the QPPV and the Agency.

See our PV Readiness Guide for how governance, case handling and inspection preparedness fit together around this document.

4. Adverse reaction and adverse event reporting

Chapter 5 covers structures and processes for unsolicited and solicited reports, special situations, individual case safety report submission, reporting time frames and formats, validation, follow up, data management and quality management.

The expedited and non expedited structure is visible in NAFDAC's own performance expectations: the master file must contain figures showing the timeliness of 15 day and 90 day reporting across the previous year, alongside metrics on submission quality and periodic report timeliness.

5. Risk management

Chapter 3 requires the Certificate of Registration Holder to constantly monitor product risks, report results to the Agency, and take action to minimise risk and maximise benefit, including keeping company generated product information accurate and updating it promptly when new information emerges.

The Risk Management Plan has seven parts: product overview, safety specification, pharmacovigilance plan, plans for post authorisation efficacy studies, risk minimisation measures with an evaluation of their effectiveness, a summary, and annexes.

The safety specification alone has eight elements, including the epidemiology of the indication in Nigeria specifically, populations not studied in trials, and post authorisation experience. MedNova's glossary entry on the Risk Management Plan sets out the structure in short form.

6. Post authorisation safety studies

Chapter 7 governs studies conducted after a product is on the market to characterise a safety concern, quantify exposure, or measure whether a risk minimisation measure is working. The QPPV is expected to be involved in protocol review and sign off, and to be aware of any such study the Agency has requested along with its results.

7. Safety communication

Chapter 4 addresses how safety information reaches healthcare professionals, patients and the public, including Direct Healthcare Professional Communications. Communication is a compliance obligation, not a marketing decision, and it needs its own procedure, approval route and record.

8. Pharmacovigilance audit

Chapter 8 requires risk based audits of both the quality system and the pharmacovigilance system, with reports issued to the management responsible for the areas audited. Audits of organisations the company has delegated tasks to must be included, because delegated activity remains part of the company's own system.

The master file must carry a list of completed audits covering five years, plus the audit schedule. Where an audit raises a significant finding, a note stays in the master file until corrective action is demonstrably complete or independently verified.

The Qualified Person Responsible for Pharmacovigilance in Nigeria

NAFDAC requires the Certificate of Registration Holder to have an appropriately qualified QPPV permanently and continuously at its disposal, and to submit that person's name and contact details to the Agency. The guideline states that the QPPV should “reside and operate in Nigeria”, which rules out the common arrangement of naming a regional or head office contact and treating the Nigerian obligation as covered.

The specifics that decide whether an arrangement holds up under inspection:

  • Each pharmacovigilance system can have only one QPPV, though one QPPV may serve more than one holder or system provided every obligation can still be met
  • The QPPV must have skills in pharmacovigilance system management plus expertise, or access to expertise, in medicine, pharmaceutical sciences, epidemiology and biostatistics
  • Duties must be set out in a job description, and the reporting line shown on an organisational chart
  • Back up procedures must exist for the QPPV's absence, and the back up person must hold all information needed to act
  • The QPPV must have authority over the master file and be notified of changes to it, including changes that increase workload, new products entering the system, and transfers of significant services to a third party
  • The QPPV acts as the single pharmacovigilance contact point for the Agency on a 24 hour basis, and as the contact point for pharmacovigilance inspections
  • The role itself may be subcontracted, but the Certificate of Registration Holder retains ultimate responsibility for the completeness and accuracy of the master file and for the quality and integrity of the whole system

Where activities are subcontracted, NAFDAC expects detailed, current written agreements describing delegation and each party's responsibilities, a description of the subcontracted services inside the master file, and a list of subcontracts in the annex. The third party may itself be inspected at the Agency's discretion.

MedNova provides outsourced QPPV and local safety representation built to this standard, and covers documentation and vendor oversight in our QPPV Support Essentials guidance.

What NAFDAC expects a compliant pharmacovigilance team to actually do

Translated out of regulatory language, a compliant team in Nigeria must be able to perform the following, repeatedly and on the record:

  1. Receive safety information from any source, including consumers, healthcare professionals, literature, digital channels the company controls, distributors and licensing partners
  2. Capture and document that information the day it arrives, with a traceable receipt date
  3. Assess whether the report meets the criteria for a valid case
  4. Follow up for missing information, and document the attempt whether or not it succeeds
  5. Evaluate seriousness and expectedness against the reference safety information
  6. Code the case using recognised terminology and check for duplicates
  7. Submit reportable cases to NAFDAC inside the applicable time frame
  8. Retain complete case records and the evidence of submission
  9. Monitor accumulating data for emerging safety signals rather than treating cases in isolation
  10. Escalate validated safety concerns internally and to the Agency
  11. Maintain the Pharmacovigilance System Master File as a live document with a change logbook
  12. Demonstrate that every person who could receive a safety report has been trained, with records to prove it
  13. Audit the system, track corrective and preventive actions to closure, and verify that the actions worked
The line that mattersA team that can evidence all 13 is compliant. A team that can evidence the first 8 is doing case processing, which is not the same thing.

What documents a pharmaceutical company should have for pharmacovigilance compliance

Inspection readiness is largely a documentation question. The following should exist, be current, and be retrievable:

  • Pharmacovigilance System Master File, with all annexes and a change control logbook
  • QPPV appointment letter, job description, curriculum vitae, contact details and documented back up arrangements
  • Organisational chart showing the QPPV's position and reporting line
  • Standard operating procedures covering case intake, validation, assessment, follow up, submission, signal management, literature monitoring, safety communication, deviation handling, CAPA, archiving and training
  • Training needs assessment, training plans and individual training records
  • Individual case safety reports with source documents and submission evidence
  • Aggregate reports such as PSURs or PBRERs, with their submission schedule and proof of filing
  • Risk management documentation, including any risk management plan and evidence that risk minimisation measures were monitored
  • Signal detection outputs, validation decisions and the reasoning behind them
  • Audit schedule, completed audit reports for the past five years, and CAPA plans with closure evidence
  • Safety communication records, including any Direct Healthcare Professional Communication
  • Pharmacovigilance agreements and safety data exchange agreements with partners, distributors and vendors
  • Reconciliation records between safety, quality complaint and medical information systems
  • Business continuity plan for critical pharmacovigilance processes
  • Performance indicators with actual measured results, not targets alone

Holding a document is not the same as running a system. NAFDAC's master file requirements make this explicit. The file must contain evidence of ongoing performance monitoring, including how correct ICSR reporting is assessed and what the measured timeliness figures actually were.

The biggest NAFDAC pharmacovigilance compliance gaps

Across assessments of Nigerian and Africa facing pharmacovigilance systems, the same eight gaps recur.

Gap 1

Treating pharmacovigilance as adverse event reporting

Case submission is one chapter of eight. Quality management, master file, risk management, communication and audit carry equal weight.

Gap 2

A QPPV who is not genuinely resident or genuinely empowered

A named person with no authority over the system, no access to the safety database out of hours, and no back up arrangement does not satisfy the requirement.

Gap 3

A master file that was written once

NAFDAC expects a live document with a logbook recording the date, the person responsible and the nature of every change.

Gap 4

Weak follow up processes

Cases are submitted incomplete, follow up attempts are not recorded, and the file cannot show what was asked for or when.

Gap 5

Training limited to the safety team

Sales representatives, regulatory staff and medical information handlers all receive safety information. If their training is not documented, the system has an open edge.

Gap 6

No functioning audit and CAPA loop

Audits are scheduled but not completed, findings are not tracked to closure, and effectiveness is never verified.

Gap 7

No signal detection

Cases are processed individually and never reviewed in aggregate, so the company learns about its own safety signal from the regulator.

Gap 8

Unmanaged vendors and partners

Distributors, licensing partners and outsourced case processors sit inside the system's boundary. Without written agreements, defined data exchange and risk based audits of those parties, the holder carries an unquantified exposure.

NAFDAC pharmacovigilance compliance checklist

System and governance

  • Pharmacovigilance responsibilities formally assigned in writing
  • QPPV appointed, resident in Nigeria, notified to NAFDAC
  • QPPV job description and organisational chart in place
  • Back up arrangements documented and communicated
  • Pharmacovigilance System Master File maintained in Nigeria and accessible
  • Change control logbook current
  • Business continuity plan covering critical processes

Case management

  • All intake channels identified and documented
  • Receipt dates recorded and traceable
  • Case validity assessed against defined criteria
  • Follow up attempted and documented
  • Seriousness and expectedness assessed
  • Duplicate detection performed
  • Reporting time frames monitored and measured
  • Submission evidence retained

Quality and documentation

  • Standard operating procedures controlled, current and version managed
  • Training needs assessed, plans issued, records retained
  • Non pharmacovigilance staff trained on safety information handling
  • Deviations documented and investigated
  • CAPA implemented and effectiveness verified
  • Audits scheduled and completed, five year list maintained
  • Record retention periods defined and applied

Safety surveillance and risk

  • Signal detection performed on a defined cycle
  • Signal validation decisions documented
  • Benefit to risk evaluation conducted and recorded
  • Risk minimisation activities monitored for effectiveness
  • Aggregate reports scheduled, produced and submitted
  • Literature monitored on a defined frequency
  • Product information kept current with new safety knowledge

Third parties

  • Pharmacovigilance agreements executed with all partners and vendors
  • Delegated activities described in the master file
  • List of subcontracts held in the master file annex
  • Risk based audits of third parties scheduled

A downloadable version aligned to current NAFDAC expectations is available as the NAFDAC QPPV Compliance Checklist.

Download the Checklist PDF

Regulation, interpretation, action, evidence: 4 worked examples

The distance between what a regulation says and what a compliance team must build is where most programmes fail. Four examples.

Example 1: The resident QPPV

What NAFDAC says
The QPPV should be permanently and continuously at the holder's disposal and should reside and operate in Nigeria, with back up procedures in place.
What it means
A Nigerian based individual must be reachable and able to act on safety matters at any hour, including when travelling or on leave.
What your team should do
Appoint and notify a resident QPPV, issue a job description, name a trained deputy, and publish a contact route that works outside office hours.
Evidence to retain
Appointment letter, notification to NAFDAC, curriculum vitae, job description, organisational chart, deputy appointment, out of hours contact procedure.

Example 2: The Pharmacovigilance System Master File

What NAFDAC says
Holders must maintain a master file and submit it during application for a Certificate of Registration, held at the Nigerian site where the main pharmacovigilance activities occur or where the QPPV operates.
What it means
The file is the regulator's window into the system, and its physical or electronic location in Nigeria is itself a requirement.
What your team should do
Build the file to NAFDAC's prescribed headings, populate every annex, assign an owner, and put change control around it.
Evidence to retain
Current master file, annexes A to I, logbook entries with date, author and nature of each change, and the record of what was made available to the Agency and when.

Example 3: Reporting performance

What NAFDAC says
The master file must explain how correct ICSR reporting is assessed and present figures showing the timeliness of 15 day and 90 day reporting across the previous year.
What it means
The Agency expects you to be measuring your own compliance, not asserting it.
What your team should do
Instrument the case workflow so receipt date, submission date and elapsed days are captured automatically, and review the metric monthly.
Evidence to retain
Timeliness figures and graphs, the definition of the metric, the review record, and CAPA raised on any late submission.

Example 4: Delegated activities

What NAFDAC says
Subcontracts must be detailed and current, delegated services described in the master file, the list of subcontracts held in the annex, and the third party may be inspected at the Agency's discretion.
What it means
Outsourcing moves the work, never the accountability.
What your team should do
Execute pharmacovigilance agreements defining tasks, data exchange, timelines and escalation, then audit the vendor on a risk basis.
Evidence to retain
Signed agreements, the subcontract list, vendor audit reports, CAPA arising from those audits, and reconciliation records proving no cases were lost at the interface.

Applied consistently across every regulatory statement, this four step pattern is the difference between a company that can describe its obligations and one that can prove it met them.

Why NAFDAC pharmacovigilance expectations are rising

Three developments have changed the enforcement climate.

First, in March 2022 the World Health Organization announced that Nigeria's medicines regulator had reached Maturity Level 3, meaning a stable, well functioning and integrated regulatory system, assessed against a benchmarking tool covering more than 260 indicators including the ability to detect adverse events. NAFDAC has since sustained that status through re benchmarking.

Second, in November 2025 NAFDAC moved from observer to full membership of the International Council for Harmonisation, placing Nigeria among a small group of national regulatory authorities applying globally harmonised standards, and increasing the likelihood that ICH E2 series expectations will shape local practice.

Third, Nigeria's reporting base has expanded sharply. After the Med Safety App was deployed, adverse event reports recorded by the National Pharmacovigilance Centre in VigiFlow rose from 2,051 in the baseline period to 18,995, with paper based reporting falling from 98.4 percent to 15.7 percent.

The practical implication for industry is straightforward. A regulator with better data, harmonised standards and international scrutiny asks harder questions. Companies whose systems were built for a low reporting environment will find that the environment has moved.

Planning noteThe published Good Pharmacovigilance Practice Guidelines carry a stated review date of 20 January 2026. Compliance teams should confirm they are working from the current edition on NAFDAC's guidelines page before finalising procedures or submissions.

How MedNova supports pharmacovigilance compliance in Nigeria

If your team is assessing whether its pharmacovigilance system meets Nigerian requirements, the fastest route is a structured gap assessment against the guideline rather than a general review.

  • Pharmacovigilance system assessment and gap analysis against NAFDAC's Good Pharmacovigilance Practice Guidelines
  • Outsourced QPPV and local safety representation for Marketing Authorisation Holders
  • Pharmacovigilance System Master File build, remediation and change control
  • Standard operating procedure development and documentation review
  • Case processing, aggregate reporting, signal detection and literature surveillance
  • Inspection readiness, audit support and CAPA management
  • Regulatory affairs support covering registration, variations, renewals and lifecycle management
  • Training and consulting for pharmacovigilance and regulatory teams

Next step: download the NAFDAC QPPV Compliance Checklist, run the QPPV readiness self assessment on our pharmacovigilance services page, or request a pharmacovigilance compliance assessment from our team.

Strengthen your pharmacovigilance compliance

MedNova Lifesciences supports organisations with pharmacovigilance system development, outsourced QPPV representation, master file build and remediation, and inspection readiness in Nigeria and across Africa.

Contact MedNova Lifesciences

Frequently asked questions

What are NAFDAC pharmacovigilance requirements?

They are the obligations placed on Certificate of Registration Holders to operate a pharmacovigilance system that collects, evaluates, documents and reports safety information on products registered in Nigeria, supported by a resident QPPV, a Pharmacovigilance System Master File, quality management, risk management, safety communication and audit.

Who is responsible for pharmacovigilance in Nigeria?

Legal responsibility sits with the Certificate of Registration Holder. Operationally, the Qualified Person Responsible for Pharmacovigilance establishes and maintains the system and acts as the single contact point for NAFDAC. Regulatory oversight sits with NAFDAC's Pharmacovigilance and Post Marketing Surveillance Directorate and the National Pharmacovigilance Centre.

Does the QPPV have to be based in Nigeria?

Yes. NAFDAC's guideline states that the QPPV should reside and operate in Nigeria and be at the holder's disposal permanently and continuously, with documented back up arrangements for absences.

What is a Pharmacovigilance System Master File?

It is the document that describes the company's pharmacovigilance system: the QPPV, organisational structure, delegated activities, sources of safety data, computerised systems, processes, system performance and quality system, plus annexes. Holders in Nigeria must maintain one and submit it when applying for a Certificate of Registration.

Do herbal medicinal products require a Pharmacovigilance System Master File?

Yes. NAFDAC's guideline states that applicants for, and holders of, listings for traditional herbal medicinal products are also required to submit one.

Does every adverse event have to be reported to NAFDAC?

Valid individual case safety reports must be reported, with time frames determined by seriousness. NAFDAC's performance expectations reference 15 day and 90 day reporting, which reflects the standard expedited and non expedited split. Companies should confirm the applicable time frame for each case type in the current guideline.

What is the difference between an adverse event and an adverse drug reaction?

An adverse event is any untoward medical occurrence in a patient given a medicinal product, which need not have a causal relationship to the product. An adverse drug reaction involves a suspected causal relationship between the product and the event. The distinction determines how a case is classified, not whether it is captured.

Does pharmacovigilance cover clinical trial safety reporting in Nigeria?

No. NAFDAC's Good Pharmacovigilance Practice Guidelines exclude adverse reactions occurring in clinical trials. Those obligations fall under NAFDAC's Good Clinical Practice Regulations, so sponsors running trials need both frameworks operating in parallel.

Can a company outsource pharmacovigilance activities, including the QPPV role?

Yes. NAFDAC permits subcontracting of pharmacovigilance activities, including the QPPV role, but ultimate responsibility for the system, its quality and the master file remains with the Certificate of Registration Holder. Written agreements are required and the third party may be inspected by the Agency.

How should a pharmaceutical company prepare for a NAFDAC pharmacovigilance inspection?

Confirm the master file is current and held in Nigeria, verify QPPV appointment and back up arrangements, ensure procedures are controlled and training records complete, produce measured reporting timeliness figures, close outstanding CAPA, and confirm that agreements and audits are in place for every delegated activity.

References

  1. National Agency for Food and Drug Administration and Control. NAFDAC Good Pharmacovigilance Practice Guidelines (Doc. Ref. PV/PMS-GDL-017-01), effective 21 January 2021. Accessed September 2026. https://www.nafdac.gov.ng/wp-content/uploads/Files/Resources/Guidelines/PVG_GUIDELINES/NAFDAC-Guidelines-on-Good-Pharmacovigilance-2021.pdf
  2. National Agency for Food and Drug Administration and Control. Guidelines for Post Marketing Surveillance in Nigeria.
  3. National Agency for Food and Drug Administration and Control. Guidelines for Post Marketing Surveillance of Medical Products in Nigeria (Doc. Ref. PMS-GDL-016-01), effective 27 September 2024.
  4. National Agency for Food and Drug Administration and Control. Drugs: regulatory resources and pharmacovigilance responsibilities.
  5. World Health Organization. Egypt and Nigeria medicines regulators achieve high maturity level in WHO classification, 30 March 2022.
  6. National Agency for Food and Drug Administration and Control. NAFDAC's WHO ML3 Re-Benchmarking Success: Sustaining Regulatory Excellence.
  7. National Agency for Food and Drug Administration and Control. NAFDAC Announces a Transition from Observer Status to Full Membership of the International Council for Harmonisation.
  8. Trends in Adverse Event Reporting Before and After the Introduction of the Med Safety App in Nigeria. Pharmaceutical Medicine, 2024. PubMed record 38705932.
  9. National Agency for Food and Drug Administration and Control. Pharmacovigilance and Post Market Surveillance Guidelines index. Use this page to confirm the current edition of any guideline referenced above.
  10. MedNova Lifesciences. Pharmacovigilance services, Nigeria and Africa. mednovalife.com/pv.html