The legal framework: one regulation, one set of guidelines
Variations are governed by Commission Regulation (EC) No 1234/2008, the Variations Regulation. It covers centrally authorised products, products authorised through the mutual recognition and decentralised procedures (Chapter II) and, since Chapter IIa was added in 2012, purely national authorisations. Commission Delegated Regulation (EU) 2024/1701 amended it for variations implemented and submitted from 1 January 2025, adding super-grouping, wider worksharing and the annual update for Type IA changes.
Article 4 of the regulation requires Commission guidelines on the categories, the procedures and the documentation. The current guidelines are the Communication published as C/2025/5045 in the Official Journal of 22 September 2025. They replace the 2013 guidelines for submissions made from 15 January 2026, and their Annex is the classification list that teams simply call "the classification guideline". The chapters were reorganised: E for administrative changes, Q for quality, C for safety, efficacy and pharmacovigilance, and M for plasma and vaccine antigen master files. Codes now read E.4 or Q.II.b.1 rather than the old A to D codes, and the electronic application form changed with them. The third source is the set of recommendations on unforeseen variations issued under Article 5, which the European Medicines Agency (EMA) and the CMDh publish.
The categories: Type IA, IA IN, IB, II and extensions
Article 2 defines the categories by impact. A minor variation of Type IA has only a minimal impact, or none, on the quality, safety or efficacy of the product. A major variation of Type II is not an extension and may have a significant impact. An extension is a change listed in Annex I, such as a new strength, pharmaceutical form or route of administration, or a change to the active substance itself (a different salt, ester or isomer, or a biological substance from a different source). A minor variation of Type IB is everything that is neither Type IA, nor Type II, nor an extension.
Annex II of the regulation lists the changes that must be Type IA, among them administrative changes to the identity of the holder or a manufacturer, deletion of a manufacturing site and tightening of specification limits, and the changes that must be Type II, such as a new or modified indication, significant changes to the summary of product characteristics following new data and changes outside the approved specifications. The Annex to the 2025 guidelines then details every listed change with its conditions, documentation and procedure type.
Type IA splits in two. The ordinary Type IA is collected into an annual update. Type IA IN (immediate notification) must be submitted straight after implementation because the authorities need it for continuous supervision, and the Annex marks which changes qualify. A change of the holder's name or address (E.4(a)) or of a batch release site (E.4(b)) is IA IN; the same change for a site without a batch release role (E.4(c)) is plain IA. The distinction affects the submission date, not the 30-day review.
- Type IA: minimal or no impact. Implement first, notify within 12 months as part of an annual update (Article 8). See the glossary entry on Type IA variations.
- Type IA IN: a Type IA marked for immediate notification. Implement, then notify at once.
- Type IB: neither IA, nor II, nor an extension. Notify before implementation; acceptance is deemed after 30 days of silence (Article 9). See the Type IB variation entry.
- Type II: may have a significant impact. Prior approval after a 60-day assessment that can be shortened or extended (Article 10). See the Type II variation entry.
- Extension: listed in Annex I; evaluated in the same procedure as the initial authorisation (Article 19). See the line extension entry.
The default to Type IB and the Article 5 recommendation
Classification starts from the lists: Article 3(1) applies Annex II, read with the guidelines and any Article 5 recommendations, to every change that is not an extension. Article 3(2) settles what the lists do not cover: a change whose classification remains undetermined after applying the regulation, the guidelines and the recommendations is by default a minor variation of Type IB. This is the "default to IB" rule, and the reason the Annex says it does not claim to be an exhaustive list for Type IB.
Article 3(3) adds two exceptions. The holder may ask for an undetermined change to be handled as Type II when submitting it. And the reference Member State, EMA or the national competent authority may conclude during validation of a Type IB notification that the change may have a significant impact on quality, safety or efficacy, in which case the holder is asked to resubmit it as a Type II. The 2025 guidelines apply the same logic inside the lists: where a change fails one or more of the conditions for a listed Type IA, it may be submitted as "Type IB by default" under the same code, unless the Annex or a recommendation classifies it as Type II or the holder itself considers the impact significant.
For a genuinely unforeseen change, Article 5 lets the holder request a classification recommendation before submitting: from EMA for a centralised product, from the national competent authority for a purely national product, and from the reference Member State otherwise. The authority consults the CMDh, and EMA where relevant, if a new classification is expected, and must deliver the recommendation within 60 days of the request. Recommendations are published, so checking the EMA and CMDh lists comes before relying on the default.
Timelines and implementation per type
The regulation fixes the review periods; the guidelines and the CMDh and EMA procedural documents add validation and implementation rules. The table shows the rules for products in the mutual recognition and decentralised procedures, where the reference Member State leads. Purely national products follow the same clocks with the national authority in that role, and for centralised products EMA reviews within the same periods, followed by a Commission decision where the terms of the decision change.
| Type | Submit | Review | Implement |
|---|---|---|---|
| Type IA | Within 12 months of implementation, as an annual update or inside a grouping or super-grouping (Art. 8(1)) | 30 days from receipt; the holder is told which variations were accepted or rejected | Any time before the procedure completes (Art. 24(1)); a rejected change must be reversed at once |
| Type IA IN | Immediately after implementation | 30 days from receipt | Before notification, as for Type IA |
| Type IB | Before implementation; validation within 7 days, then the procedure starts | 30 days; silence means deemed acceptance (Art. 9(2)). An unfavourable opinion gives 30 days to amend and a further 30 days of review | Only after acceptance or deemed acceptance (Art. 24(2)) |
| Type II | Before implementation; receipt of a valid application starts the procedure | 60 days for the reference Member State's assessment report, reducible for urgency or extended to 90 days for new indications (Annex V) and some groupings (Art. 10(2)); clock stops for supplementary information; then 30 days for the concerned Member States to recognise | 30 days after the holder is informed of acceptance, once the documents to amend the authorisation are submitted; safety variations immediately |
| Extension | As a new application to all authorities concerned | Same procedure and timetable as the initial authorisation (Art. 19) | After the extension is granted or included in the existing authorisation |
After the procedure, Member States amend the authorisation within two months for a Type II and six months otherwise (Article 23(1)). For centralised products the Commission decides within two months for the variations in Article 23(1a), such as new indications and posology changes, and within 12 months otherwise, and a Type II that needs the two-month decision may only be implemented once the holder has it.
Fees are set separately. Regulation (EU) 2024/568 on fees payable to EMA applies from 1 January 2025 and sets a fee per variation type for centrally authorised products; each national authority charges its own fees, usually per authorisation and often per concerned Member State. Regunaut Fee Calculation estimates authority fees per procedure, market and product from the official schedules.
Grouping, super-grouping and worksharing
Article 7 starts from one notification or application per variation and allows three forms of grouping for the same authorisation: several Type IA changes notified at the same time (Article 7(2)(a)); several changes within one of the cases listed in Annex III, such as a change and its direct consequences (Article 7(2)(b)); and any other combination the reference Member State, EMA or the national authority has agreed in advance (Article 7(2)(c)). A group follows the procedure of the highest type it contains. The CMDh publishes examples of acceptable and unacceptable groupings.
Super-grouping, added in 2024 as Article 7a, extends this across authorisations: the same Type IA changes can be notified for several authorisations of the same holder in one notification, in the cases the guidelines list. These cover administrative and quality Type IA changes across national, MRP and DCP authorisations in several Member States, Type IA changes across MRP and DCP authorisations with the same reference Member State, Type IA changes across centrally authorised products, and other combinations the reference authority agrees to.
Worksharing under Article 20 is the equivalent for Type IB and Type II. Where the same Type IB, Type II or Annex III group affects several authorisations of the same holder in more than one Member State, in any mix of national, MRP, DCP and centralised products, the holder must submit a single worksharing application, and the reference authority (EMA where a centralised product is involved) assesses for the others within the period of the highest type included. Extensions are excluded, and the change must be the same across the products with no or limited product-specific assessment. For a planned programme of connected changes, a post-approval change management protocol agrees the assessment route in advance.
Common misclassifications
Most classification errors come from reading a code without its conditions, or from treating the category as a negotiation rather than a definition. These patterns recur in validation rejections and in the CMDh position paper on grounds for delaying day 0 for variations.
- Filing a Type IA when one of its conditions is not met. All conditions must hold. If one fails, the change is Type IB by default under the same code, or Type II where the Annex says so. A rejected Type IA has already been implemented and must be reversed.
- Treating the default to Type IB as a ceiling. The default only applies to changes the lists do not classify. A change the Annex or a recommendation puts in Type II is Type II, and a change the holder knows may have a significant impact belongs in Type II from the start.
- Missing a Type IA IN. Changes to the holder's name or address and to the batch release site are notified immediately, not held for the annual update.
- Grouping unrelated changes. A grouping outside Annex III needs prior agreement; without it the submission is invalid and day 0 slips.
- Confusing an extension with a Type II. A new strength, form or route is an Annex I extension and goes through the full authorisation procedure, with its own form and fee.
- Implementing a Type IB before acceptance. Do-and-tell applies to Type IA only; a Type IB waits for acceptance or 30 days of silence (Article 24(2)).
- Using the 2013 codes after 15 January 2026. Submissions from that date use the 2025 Annex codes and the updated application form. A Type IA change is classified by its implementation date in the quality system, and the first one implemented on or after 15 January 2026 starts a new annual update cycle.
The simplest safeguard is to record the code, every condition and the documentation line from the Annex for each change before a submission date is booked. Regunaut Workbench answers classification questions with the regulation, the guidelines and the published recommendations cited.
What the agreed 2026 EU pharma package changes
Today
Regulation (EC) No 1234/2008 and the 2025 Commission guidelines: Type IA, IA IN, IB, II and extensions, with electronic submission in practice but national differences in formats and tools.
Agreed text
Article 94 of the Council's position on the new directive (28 September 2026): variation applications for national authorisations made electronically in EMA formats, categories set by risk through delegated acts, and the option for some changes to be made as updates of the holder's information in a database rather than as variations.
The agreed directive does not rewrite the classification. It sets the principle of risk-based categories with proportionate procedures and leaves the categories, the database update procedure, the grouping conditions and any exemptions to Commission delegated acts (Article 94(2) to (4)). The Variations Regulation and the 2025 guidelines therefore remain the operative rules until those acts exist; the agreed text provides for Article 94 to apply 24 months after entry into force, and procedures started under the current rules finish under them.
The change to plan for is the database update. Administrative changes to the holder's own data, today's chapter E notifications, are the obvious candidates for an update of information held in a database rather than a variation; which changes qualify will only be known from the delegated acts. Our page on electronic variations and database updates under Article 94 tracks the provisions, and the legislative timeline tracks the steps that still have to happen before any of it applies.