1. Without prejudice to paragraphs 2, 3 and 4 of this Article, holders of marketing authorisations granted before 21 July 2012 shall, by way of derogation from Article 104(3)(c), not be required to operate a risk management system for each medicinal product.
2. The national competent authority may impose an obligation on a marketing authorisation holder to operate a risk management system, as referred to in Article 104(3)(c), if there are concerns about the risks affecting the risk-benefit balance of an authorised medicinal product. In that context, the national competent authority shall also oblige the marketing authorisation holder to submit a detailed description of the risk-management system which he intends to introduce for the medicinal product concerned.
The imposition of such obligations shall be duly justified, notified in writing and shall include the timeframe for submission of the detailed description of the risk-management system.
3. The national competent authority shall provide the marketing authorisation holder with an opportunity to present written observations in response to the imposition of the obligation within a time limit which it shall specify, if the marketing authorisation holder so requests within 30 days of receipt of the written notification of the obligation.
4. On the basis of the written observations submitted by the marketing authorisation holder, the national competent authority shall withdraw or confirm the obligation. Where the national competent authority confirms the obligation, the marketing authorisation shall be varied accordingly to include the measures to be taken as part of the risk management system as conditions of the marketing authorisation referred to in point (a) of Article 21a.]