Pharmacovigilance regulation in the EU and beyond has continued to grow and become more stringent over the last decade. In this article, ICON’s Graeme Bones explains how to handle the different types of data migration methods and how companies can select the optimum approach to ensure data integrity is maintained.
Pharmaceutical companies regularly transfer databases as they shift to new systems or change service providers in pursuit of higher quality and increased efficiency. These database transfer activities must follow industry standards and pharmacovigilance regulation, which has become increasingly stringent over the last decade. The concept of good pharmacovigilance practice (GVP) has been implemented in multiple regions across the globe to ensure these migrations are validated and data integrity is maintained. GVP requirements are built on foundations of sound data quality and integrity, without which pharmacovigilance systems will not function.
Depending on the size and complexity of the dataset, pharma companies have the option of several migration methods from which to select the one most suitable for their needs and that maintains regulatory compliance. In each approach, the implementation should follow industry standard practices for migrations and the data should be thoroughly tested and validated in accordance with regulatory expectations – no matter how simple or complex the migration.
Data migration methods
Within this increasingly stringent pharmacovigilance regulatory landscape, it is imperative that pharma companies have the utmost confidence in the data migration process. Choosing the best approach to maintain data integrity requires careful consideration.
Are you looking to explore how lipid formulations in softgels can enhance drug absorption and bioavailability. Register for our upcoming webinar to find out!
3 September 2025 | 3:00 PM BST | FREE Webinar
This webinar will delve into the different types of lipid formulations, such as solutions, suspensions, emulsions, and self-(micro)emulsifying systems. Applications span diverse therapeutic areas including HIV therapy, oncology, immunosuppressants, and emerging treatments like medicinal cannabis (eg, CBD).
What You’ll Learn:
Lipid formulation development and screening tools for optimisation
Key steps in scale-up and industrialisation to ensure consistency and efficiency
Impact of lipid-based softgels on drug delivery and patient outcomes.
There are three main types of migration solutions: manual, E2B and E2B hybrid or programmatic. Each method has potential risks, capabilities and benefits depending on the requirements of the dataset and the complexity of the migration. Thus, companies must evaluate their data needs and specific requirements to determine which migration solution fits best.
During the evaluation process, companies should consider their available resources, time constraints, potential costs and risk assessment findings to help select the correct migration method. Additionally, the size of the dataset and robustness of the data will impact the relative risks and advantages of each method. Below, we summarise some of the benefits and considerations for each type of migration.
Manual migrations
Manual migration is the simplest and most cost-effective approach. This method works best for smaller case counts, typically less than 150 cases, and is especially useful where the E2B file cannot be produced from the source system and/or periodic reporting requirements do not exist. In this method, Individual Case Safety Reports (ICSRs) are manually entered into the target database using outputs obtained from the source database. It does not require any technical input or specialist scripts to extract and import data.
Manual migration is the simplest and most cost-effective approach… This method works best for smaller case counts”
As with any migration, a data migration plan should be in place detailing the system, activities, scope and deliverables, roles and responsibilities within the project. During migration, the case processing team will manually enter the data using the outputs obtained from the source database, following the workflow configuration, to ensure accuracy within the target database.
However, due to configuration differences between databases (such as code list definitions), cases may not always be an exact replica of the original case. Any discrepancies should be documented using a Known Difference document and the solutions or acceptance of the discrepancy are then agreed upon. Once all cases have been entered and reviewed and any discrepancies resolved, the data transfer is considered complete and a data migration summary report should be issued.
For smaller, simpler data transfers, manual migration is a relatively low-cost solution; it does not require lengthy downtimes and can typically be completed in three to four months. However, manual migration does require several operational resources to manually recreate the ICSRs in the target database with new unique case numbers. No metadata will migrate from the source database; therefore, obtaining historical data, such as audit trails and submission history, must also be factored into the project.
E2B and E2B hybrid migrations
The E2B migration methods are relatively versatile and can be used in multiple scenarios to bridge the manual and programmatic solutions. They work well for data volumes between 150 and 2,000 cases where neither a manual nor programmatic migration makes sense, or if there is only legacy data in which no follow-up or periodic reporting requirements are expected. This method also suits situations where there is no access to the source system, such as with mergers and acquisition (M&A) activities, or if the company does not have the funding or resources to execute a full database migration. If the pharma company requires a phased migration approach to accommodate a regulatory compliance timeline, this method will provide benefits.
For E2B and E2B hybrid migrations, it is important to consider the non-transferable data requirements for the database, as that will dictate the approach. Most non-transferable data can be added manually, but it may not be financially viable compared to a scripted approach, especially for larger case counts.
For E2B and E2B hybrid migrations, it is important to consider the non-transferable data requirements for the database”
If additional non-transferable data is required, a technical migration can be performed, which involves uploading ICSRs into the safety database as electronic E2B files with manual data entry for the additional data. This approach can be a quick and cost-effective way of transferring data with the appropriate case count; however, it still requires the database hosting provider to deliver technical resources to manage the upload of the E2B files into the target database.
If a script is required, this approach is usually referred to as an E2B hybrid migration. The list of non-transferable safety case data is fairly normalised for both E2B(R2) and E2B(R3) formats. Given that the company has a standard list of the required fields and matching queries to both extract the data from source systems and insert it into the target system, this method can be highly efficient, and the project timelines and quality benchmarks can match or exceed manual efforts.
E2B and E2B hybrid migrations can be completed in approximately four to six months. It is more cost effective than implementing a programmatic solution and provides improved quality, time and resource needs compared to manual entry for larger datasets. Additional benefits are that the cases retain their original case numbers and the level of testing and validation performed ensures that data integrity is maintained throughout each step of the data transfer.
Programmatic migrations
The most complex method of migrating data requires a far more technical approach. These migrations necessitate the assistance of the safety database host provider and should leverage the guidance of an industry-recognised subject matter expert.
The most complex method of migrating data requires a far more technical approach”
Programmatic migrations use standard database export functionality or custom scripts to extract the data from the back end and then programmatically insert or move the data directly into the target database. These types of migrations are perfectly suited for large datasets of 2,000+ cases, when cost or resourcing is not a constraint, the full dataset (including metadata) is required, or there is a case data merge component in play.
Planning for a programmatic migration is more robust than other methods. Working with the host provider, the data migration plan will include more technical information and the technical migrations should map to internal IT validation procedures, as well.
The benefits of a technical migration include the capability to import all ICSR metadata, source documents, communications, and other associated case data with the transfer, as well as maintaining an ICSR’s unique case number from the source database. There is a high degree of focus on the verification and validation activities performed to ensure that data integrity is maintained throughout all steps of the project. Both operational qualifications and user acceptance activities should be executed to ensure data veracity. This is important as more automated steps are introduced to the process and it is vital that checks are performed at each project milestone.
Before proceeding with a programmatic migration method, it is important to understand that by nature these are highly technical processes that require multiple steps in multiple environments to validate the data. This also pulls resources, requiring more technical and IT capability to manage the back-end work, configuration requirements, validation, etc.
Depending on the complexity of the migration requirements and the cleanliness of the data, the project will take at least five to nine months to complete. Due to the technical nature, project duration, specialist resources required and the validation effort, technical migrations will be a higher cost solution for transferring data.
Conclusion
Pharmaceutical companies may need to transfer their data between databases for multiple reasons – they have outgrown their old system, must upgrade to remain compliant, or have switched service providers to avail of more advanced approaches. When pharmacovigilance data is moved or migrated between systems such as safety databases, strict controls must be implemented to preserve the integrity of the data to align with the latest regulatory requirements. Companies have several options for compliant, validated migration methods but should carefully consider their constraints and capabilities to select the one that fits their data, quality, timeline, financial and resource needs.
About the author
Graeme Bones
Graeme is Director of Pharmacovigilance Systems at ICON. In this role, Graeme is responsible for all pharmacovigilance (PV) systems that facilitate adverse event data collection and reporting. With over 20 years of PV Systems experience, Graeme is focused on ensuring that ICON remains at the forefront of PV systems delivery, by utilising the latest technology solutions.
This website uses cookies to enable, optimise and analyse site operations, as well as to provide personalised content and allow you to connect to social media. By clicking "I agree" you consent to the use of cookies for non-essential functions and the related processing of personal data. You can adjust your cookie and associated data processing preferences at any time via our "Cookie Settings". Please view our Cookie Policy to learn more about the use of cookies on our website.
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorised as ”Necessary” are stored on your browser as they are as essential for the working of basic functionalities of the website. For our other types of cookies “Advertising & Targeting”, “Analytics” and “Performance”, these help us analyse and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these different types of cookies. But opting out of some of these cookies may have an effect on your browsing experience. You can adjust the available sliders to ‘Enabled’ or ‘Disabled’, then click ‘Save and Accept’. View our Cookie Policy page.
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Cookie
Description
cookielawinfo-checkbox-advertising-targeting
The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Advertising & Targeting".
cookielawinfo-checkbox-analytics
This cookie is set by GDPR Cookie Consent WordPress Plugin. The cookie is used to remember the user consent for the cookies under the category "Analytics".
cookielawinfo-checkbox-necessary
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance
This cookie is set by GDPR Cookie Consent WordPress Plugin. The cookie is used to remember the user consent for the cookies under the category "Performance".
PHPSESSID
This cookie is native to PHP applications. The cookie is used to store and identify a users' unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed.
viewed_cookie_policy
The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
zmember_logged
This session cookie is served by our membership/subscription system and controls whether you are able to see content which is only available to logged in users.
Performance cookies are includes cookies that deliver enhanced functionalities of the website, such as caching. These cookies do not store any personal information.
Cookie
Description
cf_ob_info
This cookie is set by Cloudflare content delivery network and, in conjunction with the cookie 'cf_use_ob', is used to determine whether it should continue serving “Always Online” until the cookie expires.
cf_use_ob
This cookie is set by Cloudflare content delivery network and is used to determine whether it should continue serving “Always Online” until the cookie expires.
free_subscription_only
This session cookie is served by our membership/subscription system and controls which types of content you are able to access.
ls_smartpush
This cookie is set by Litespeed Server and allows the server to store settings to help improve performance of the site.
one_signal_sdk_db
This cookie is set by OneSignal push notifications and is used for storing user preferences in connection with their notification permission status.
YSC
This cookie is set by Youtube and is used to track the views of embedded videos.
Analytics cookies collect information about your use of the content, and in combination with previously collected information, are used to measure, understand, and report on your usage of this website.
Cookie
Description
bcookie
This cookie is set by LinkedIn. The purpose of the cookie is to enable LinkedIn functionalities on the page.
GPS
This cookie is set by YouTube and registers a unique ID for tracking users based on their geographical location
lang
This cookie is set by LinkedIn and is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.
lidc
This cookie is set by LinkedIn and used for routing.
lissc
This cookie is set by LinkedIn share Buttons and ad tags.
vuid
We embed videos from our official Vimeo channel. When you press play, Vimeo will drop third party cookies to enable the video to play and to see how long a viewer has watched the video. This cookie does not track individuals.
wow.anonymousId
This cookie is set by Spotler and tracks an anonymous visitor ID.
wow.schedule
This cookie is set by Spotler and enables it to track the Load Balance Session Queue.
wow.session
This cookie is set by Spotler to track the Internet Information Services (IIS) session state.
wow.utmvalues
This cookie is set by Spotler and stores the UTM values for the session. UTM values are specific text strings that are appended to URLs that allow Communigator to track the URLs and the UTM values when they get clicked on.
_ga
This cookie is set by Google Analytics and is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. It stores information anonymously and assign a randomly generated number to identify unique visitors.
_gat
This cookies is set by Google Universal Analytics to throttle the request rate to limit the collection of data on high traffic sites.
_gid
This cookie is set by Google Analytics and is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visited in an anonymous form.
Advertising and targeting cookies help us provide our visitors with relevant ads and marketing campaigns.
Cookie
Description
advanced_ads_browser_width
This cookie is set by Advanced Ads and measures the browser width.
advanced_ads_page_impressions
This cookie is set by Advanced Ads and measures the number of previous page impressions.
advanced_ads_pro_server_info
This cookie is set by Advanced Ads and sets geo-location, user role and user capabilities. It is used by cache busting in Advanced Ads Pro when the appropriate visitor conditions are used.
advanced_ads_pro_visitor_referrer
This cookie is set by Advanced Ads and sets the referrer URL.
bscookie
This cookie is a browser ID cookie set by LinkedIn share Buttons and ad tags.
IDE
This cookie is set by Google DoubleClick and stores information about how the user uses the website and any other advertisement before visiting the website. This is used to present users with ads that are relevant to them according to the user profile.
li_sugr
This cookie is set by LinkedIn and is used for tracking.
UserMatchHistory
This cookie is set by Linkedin and is used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences.
VISITOR_INFO1_LIVE
This cookie is set by YouTube. Used to track the information of the embedded YouTube videos on a website.