You have a complaint against an EU institution or body?

Afgørelse i sag nr. 2030/2015/PL om Det Europæiske Lægemiddelagenturs afslag på at offentliggøre navnet på en virksomhed, der havde begæret aktindsigt i sikkerhedsindberetninger

Sagen vedrørte Det Europæiske Lægemiddelagenturs (EMA's) afslag på at offentliggøre navnet på en virksomhed, der havde begæret aktindsigt i den seneste "periodiske, opdaterede sikkerhedsindberetning" om lægemidlet Zyclara. Klageren er det medicinalfirma, der markedsfører Zyclara.

EMA henviste til sin praksis siden 2015 med hensyn til ikke at offentliggøre navnet på virksomheder, der anmoder om aktindsigt, for at beskytte deres kommercielle interesser.

Ombudsmanden mente, at afslaget på at offentliggøre identiteten på den virksomhed, der havde anmodet om aktindsigt udgjorde et tilfælde af fejl og forsømmelser. Ombudsmanden anbefalede EMA at revidere sin praksis med hensyn til direkte at give afslag på at offentliggøre identiteten på organisationer, der anmoder om aktindsigt i dokumenter. EMA burde snarere rådføre sig med virksomheden, der havde fremsat den oprindelige begæring om aktindsigt, inden det afgjorde, hvorvidt navnet skulle offentliggøres eller ikke.

EMA accepterede Ombudsmandens anbefaling og indførte de foreslåede ændringer. Ombudsmanden er tilfreds med de øjeblikkelige foranstaltninger, EMA har truffet, og afslutter sin undersøgelse.

Background to the complaint

1. The complaint was made by the pharmaceutical company that markets Zyclara, a drug used to treat actinic keratosis.

2. In September 2015, the European Medicines Agency (EMA) received a request for public access to the latest ‘periodic safety update reports’[1] (PSURs) on Zyclara. Following this, the complainant asked EMA for a copy of this request.

3. In October 2015, EMA gave the complainant a copy of the access to documents request, with the identity of the requester redacted. EMA said that this was necessary to protect the commercial interests of the organisation that had made the request, a pharmaceutical company. EMA stated that this was in line with its policy on access to documents[2], which stated that EMA did not “release information on the identity of the person or the name of the organisation requesting access to EMA documents to third parties (...)”.

The Ombudsman's recommendation

4. The Ombudsman inquired into the complainant’s concern that EMA had wrongly refused to grant access to the identity of the pharmaceutical company that had requested the PSUR.

5. Not convinced by EMA’s arguments as to why it had withheld the identity of the company, the Ombudsman recommended[3] EMA to review its policy of outright refusal to release the identity of organisations that request public access to documents. She also asked EMA in such cases to first consult the company that requested access to a document and only then to decide whether its name should be withheld.

6. EMA said that its policy not to release the name of the person or entity behind an access to documents request was underpinned by a wish to increase the transparency of its activities. It added that its reference to the need to protect the commercial interests (of the requester) should have been understood as a general and abstract statement relating to the fact that pharmaceutical companies have interests that merit protection. It was not relying on the exception set out in Article 4(2) of Regulation 1049/2001 (the need to protect the commercial interests) to justify its refusal to disclose the name of the company.

7. The Ombudsman noted that Regulation 1049/2001 on public access to EU documents permits the redaction of information only if it is necessary to respect one of the exceptions set out in the regulation (as listed in Article 4). The Ombudsman expressed serious doubts that the name of a company requesting public access to PSURs could be detailed, relevant, actionable[4] information that would put at risk the company’s commercial interests. In any case, the Ombudsman found that EMA cannot refuse to give access on the assumption that releasing this information would undermine the commercial interests of the person or entity making the request, but should instead consult the requester on this matter. On the basis of the reply, EMA should then decide whether releasing the name of the person or entity that had requested the document would undermine their commercial interests.

8. Against this background the Ombudsman found that EMA’s refusal to release the identity of the pharmaceutical company that had requested public access to medical data constituted maladministration. She therefore made a recommendation that:

EMA should review its policy of outright refusal to release the identity of organisations which make a request for public access to documents.

EMA should consult, in accordance with Article 4(4) of Regulation 1049/2001, the company which made the initial request for access and then decide whether the name of the company should still be redacted.

9. In reply to the Ombudsman’s recommendation, EMA changed its policy, and removed from its website the information stating that it would not disclose the identity of those who applied for access to documents. It also said that it would process these requests in accordance with the Ombudsman’s recommendation.

10. EMA also treated anew the complainant’s request for the identity of the company that did the initial request for access. After consulting the company, EMA decided to disclose its identity to the complainant.

The Ombudsman's assessment after the recommendation

11. The Ombudsman invited the complainant to comment on EMA’s reply to her recommendation. However, it did not avail itself of this opportunity.

The Ombudsman welcomes EMA’s positive reaction to her recommendation and is pleased to note that EMA has taken action to implement it. Conclusion

Based on the inquiry, the Ombudsman closes this case with the following conclusion:

The European Medicines Agency accepted the Ombudsman’s recommendation.

The complainant and the European Medicines Agency will be informed of this decision.


Emily O'Reilly

European Ombudsman

Strasbourg, 20/03/2018


[1] As part of its legal obligations as a ’marketing authorisation holder’ the complainant is required to submit ’periodic safety update reports’ (PSURs) to the European Medicines Agency (EMA).  PSURs contain a summary of data on the benefits and risks of a medicine and include updated results of all studies carried out with this medicine. EMA then uses the information in PSURs to determine if there are new risks for a medicine and whether the balance of benefits and risks of a medicine has changed.

[2] Available at:

[3] The Ombudsman’s recommendation is available at:

[4] See paragraph 38 of the Ombudsman’s Recommendation.