Most late safety reports are not late at the sponsor. The delay usually builds earlier: an SAE noted in a source document but entered into EDC days later, a query left open over a weekend, or a follow-up that never reached the safety team. By the time the case is assessed, much of the 7 or 15 day window has gone.
Two things changed the rules this year. FDA issued final guidances on sponsor and investigator safety reporting in December 2025, replacing guidance from 2012 and 2009 (RAPS). E2B(R3) also became the required electronic format for IND safety reports from 1 April 2026 and for postmarketing ICSRs sent through ESG NextGen from 1 October 2026 (FDA notice 2026-06660).
The seven rules below cover what each role in a study is responsible for.
|
Reporting path |
Who reports |
Deadline |
Basis |
|---|---|---|---|
|
SAE, site to sponsor (US IND) |
Investigator |
Immediately |
21 CFR 312.64(b) |
|
SAE, site to sponsor (EU) |
Investigator |
Within 24 hours of knowledge, unless the protocol says otherwise |
EU CTR Art. 41 |
|
Fatal or life-threatening SUSAR |
Sponsor to FDA and all investigators |
7 calendar days |
21 CFR 312.32 |
|
Other SUSARs and IND safety reports |
Sponsor to FDA and all investigators |
15 calendar days |
21 CFR 312.32 |
|
Fatal or life-threatening SUSAR (EU) |
Sponsor to EudraVigilance |
7 days |
EU CTR Art. 42 |
|
Other SUSARs (EU) |
Sponsor to EudraVigilance |
15 days |
EU CTR Art. 42 |
|
Unanticipated adverse device effect |
Investigator to sponsor and IRB |
10 working days |
21 CFR 812.150(a) |
|
Unanticipated adverse device effect evaluation |
Sponsor to FDA, IRBs, investigators |
10 working days |
21 CFR 812.150(b) |
Always check the protocol and safety management plan, which often set shorter internal timelines than the regulation.
Under 21 CFR 312.32, deadlines run from the sponsor's initial receipt of the information, not from the date of the event. That makes the date the site reports the SAE, and the date that report reaches the safety team, the two most important timestamps in the case.
For US IND studies, 21 CFR 312.64(b) requires investigators to report SAEs to the sponsor immediately. FDA's December 2025 investigator guidance adds detail on timing and on which events need immediate reporting. In the EU, Article 41 of Regulation 536/2014 sets 24 hours from the investigator obtaining knowledge, unless the protocol exempts certain events.
FDA's sponsor guidance restates the test: the event must be serious, unexpected, and a suspected adverse reaction, meaning there is evidence suggesting a causal link to the drug. Unexpected means not listed in the Investigator's Brochure, or not at the specificity or severity observed. Sites help here by recording onset, outcome and relevant history clearly, because the sponsor's causality and expectedness assessment depends on it.
Both FDA and the EU use a 7 day deadline for unexpected fatal or life-threatening suspected adverse reactions and 15 days for other SUSARs. FDA also requires sponsors to identify previous IND safety reports for similar reactions and analyse the significance of the new report against them.
FDA requires IND safety reports to be submitted electronically in E2B(R3) from 1 April 2026. For postmarketing ICSRs through ESG NextGen, R2 was accepted only until 30 September 2026. FDA's notice lists differences that affect case data, including seriousness assessed per event rather than per case and attachments embedded in the ICSR.
Under 21 CFR 812.150, investigators report unanticipated adverse device effects to the sponsor and IRB within 10 working days of learning of them. Sponsors report the results of their evaluation to FDA, IRBs and investigators within 10 working days of first receiving notice. Combination product studies need a clear rule in the protocol for which timeline applies.
FDA's December 2025 investigator guidance states that investigators should review all IND safety reports from sponsors as part of protecting participants. For sites, that means a documented process for receipt, PI review, IRB submission where required, and filing in the investigator site file. For CRAs, it means checking that trail at monitoring visits.
ICH E6(R3) Principles and Annex 1 have applied in the EU since 23 July 2025 and were published by FDA as final guidance in September 2025 (EMA). The guideline asks sponsors to oversee delegated activities proportionately to risk. In safety reporting, that means showing how the sponsor knows sites are reporting on time, not only that a procedure exists.
Cloudbyz builds its EDC, CTMS, eTMF and Safety & Pharmacovigilance products natively on Salesforce, so an AE or SAE captured in EDC can move into the safety case without re-keying. According to Cloudbyz product materials, the Safety & PV product supports E2B R2 and R3 submission formats, MedDRA and WHODrug coding, and automated narratives. How closely the awareness date, EDC entry and safety case stay linked depends on how each study is configured.
For monitors, the Cloudbyz CRA Monitoring Copilot, built on Agentforce, is designed to assemble the pre-visit package, including AEs and consent status, and to summarise safety data as counts and status without interpreting it. It drafts only; the CRA reviews, decides and sends.
What is the difference between an SAE and a SUSAR? An SAE is any serious adverse event, whatever its cause. A SUSAR is a serious adverse reaction that is also unexpected and suspected to be related to the investigational product. Only SUSARs trigger expedited 7 or 15 day reports.
Who submits IND safety reports to FDA? The sponsor. Investigators report SAEs to the sponsor and review the IND safety reports the sponsor sends them.
When did E2B(R3) become mandatory for IND safety reports? 1 April 2026.
If you want to see how an SAE can move from site entry to an E2B(R3) submission on one platform, with each timestamp traceable, the Cloudbyz team can walk through it with you. Book a demo or visit cloudbyz.com.