We publish our study and its reproducible code
We publish the study “Pharmacovigilance of COVID-19 Vaccines”, together with the Pfizer.ipynb notebook on Google Colab. This code reproduces the calculations from data consulted on the EMA portal.
Seven days to delete data. A written commitment never to use it. Then requests to access our scientific code.
We publish the study “Pharmacovigilance of COVID-19 Vaccines”, together with the Pfizer.ipynb notebook on Google Colab. This code reproduces the calculations from data consulted on the EMA portal.
We receive letter EMA/327522/2025, electronically signed by Alexis Nolte and sent by his assistant. The Agency considers that the script gives access to “non-public” information, including the Worldwide Unique Case Identifier (WWUID) and the country of occurrence. It requests their deletion and written confirmation before 16 October 2025.
The EMA was not only asking us to delete files. It also demanded a written commitment about their future use and dissemination, worded as follows.
“I confirm that any non-public data originating from the EudraVigilance system which may be or may have been accessed or downloaded by me […] have been safely and permanently deleted and have not been and will not be disclosed, copied, distributed, reproduced, used, made public, or exploited by myself or any third parties.”Letter EMA/327522/2025, p. 2 — excerptRead the letter
On the very day of the deadline set in the EMA’s letter, a request to access the Pfizer.ipynb notebook arrives from a personal Gmail account, in the name of Irene Montero. It concerns the code that reproduces our calculations.
A request targeting our calculation code arrives on the very day the EMA expects our written commitment to delete. We are asking in what capacity this access was requested.
See the 16 October requestA new request to access the same file reaches us from a personal Google account. In its later reply, the EMA will state that this request came from its Data Protection Officer, Sabine Brosch.
According to the correspondence, the Agency was closed from 22 December 2025 to 5 January 2026.
We refuse access and ask the EMA why a personal account was used to request access to our research.
Having received no reply, we renew our request for explanations, copying a journalist. The EMA acknowledges receipt the next day.
The Agency confirms that its Data Protection Officer wanted “to understand what information remained accessible”. It explains the use of a personal account by Google’s sign-in requirement for access requests.
Read the correspondenceWe ask that the grounds and conditions of these interventions be examined. Several legal questions deserve a documented answer:
Article 13 of the Charter of Fundamental Rights of the European Union protects freedom of research. On what basis, and with what proportionality, could this deletion be demanded?
Article 11 of the Charter protects freedom of expression and information. Which restrictions on keeping and disseminating research results were legally justified?
Which institutional rules governed these access requests? Who authorised them, and in what capacity?
These questions are not a statement of guilt nor an established criminal qualification. We ask for them to be examined and for public answers on any responsibilities.
We refused to comply with an order to delete scientific data, or to sign a commitment barring us from using and disseminating it.
We believe scientific research must not be placed under the supervision of the institutions it helps to examine and hold to account.
We refuse to accept that researchers can be pressured for carrying out scientific work whose methods and results are reproducible.
We have chosen to make public the letters, the requests to access our code and the timeline of events.
We did not delete our work. We did not abandon our research. We did not give in.
La 1ère plateforme publique d’étude des données complètes d’EudraVigilance
La pharmacovigilance européenne, ouverte à tous.