Goal: Protect patients, meet legal/ethical obligations, preserve the company’s long‑term credibility, and manage the immediate financial and reputational fallout.
Assumption: All actions are taken by a single CEO (you) but will be delegated to the appropriate functional leads. The plan is written as a 48‑hour “crisis‑clock” that you can hand‑off to your crisis‑management office.

---

QUICK‑REFERENCE TIMELINE (Hour 0‑48)

Hour(s)	Who / Team	Action (what & why)	Deliverable / Outcome
0‑2	CEO + Chief Medical Officer (CMO) + Head of Clinical Safety + Legal Counsel	Activate the “Rapid‑Response Crisis Team” (RRC). Pull together the most senior medical, regulatory, legal, finance, communications, and IR leads.	Formal crisis charter, meeting cadence, and a shared secure workspace (e.g., encrypted Slack channel).
2‑4	RRC (CMO, Safety, Data‑Science)	Validate the signal – run an immediate, independent re‑analysis of the pharmacovigilance database, confirm incidence (≈1/8 000), severity (liver failure), and estimate expected cases in the exposed population (≈500 + potential future cases).	Short “Signal‑Brief” (≤2 pages) with raw numbers, confidence intervals, and a risk‑ranking matrix.
4‑6	Legal + Compliance	Determine mandatory reporting obligations (FDA MedWatch, EMA EudraVigilance, Health Canada, etc.) and the fastest path for a voluntary safety communication (e.g., FDA “Safety Alert” under 21 CFR 314.80). Draft a “Pre‑Submission Checklist.”	Checklist of required documents, timelines, and sign‑off flow.
6‑8	CEO + CFO + Investor‑Relations (IR)	Financial impact modelling – run a quick Monte‑Carlo on stock‑price swing (‑30 % baseline, ±10 % variance) and cash‑flow hit (potential recall, litigation reserve).	One‑page “Financial‑Impact Snapshot.”
8‑10	PR Agency + Corporate Communications	Draft the public statement (press release, “Dear Doctor” letter, website banner). Core message: “We have identified a rare but serious liver‑failure risk. We are notifying regulators, healthcare providers, and patients immediately and are taking corrective actions.” Include empathy, commitment to safety, and next steps.	Draft press release (≤350 words) + Q&A deck (10 questions).
10‑12	RRC (Regulatory Affairs)	Contact the FDA (and counterpart agencies) via the “pre‑submission” channel (phone call + written summary). Request a “fast‑track safety communication” and ask for guidance on timing of a formal safety supplement.	Email/phone log, regulator acknowledgment, provisional timeline (e.g., 2‑week review).
12‑14	CEO + Board Liaison	Prepare board briefing deck (risk, legal exposure, patient‑safety imperative, financial model, PR plan). Emphasize fiduciary duty and “duty of care” under corporate law.	12‑slide deck, ready for board meeting at Hour 18.
14‑16	HR + Internal Communications	Draft employee‑wide memo (tone: transparent, supportive, action‑oriented). Include a 24/7 “Safety Hotline” and a “FAQ” for staff.	Memo + hotline SOP.
16‑18	CEO + Legal + Board Chair	Board meeting (virtual, 1 hr) – present the briefing, answer questions, and seek a formal board resolution to (a) file the voluntary safety communication now, (b) issue a public disclosure before the earnings call, and (c) allocate a $150 M litigation‑reserve.	Board resolution (signed PDF).
18‑20	Legal + Regulatory Affairs	File the voluntary safety communication with FDA/EMA (electronic submission). Attach the Signal‑Brief, risk‑assessment, and proposed labeling change.	Confirmation receipt (e‑submission ID).
20‑22	PR + IR	Finalize public announcement – lock in the press release, “Dear Doctor” letter, and website banner. Schedule a media briefing (30 min) for Hour 24.	Final press kit (PDF, web copy).
22‑24	CEO + Communications	Pre‑earnings‑call script – rewrite the earnings narrative to include the safety issue, the company’s proactive response, and the expected short‑term impact. Practice with IR team.	Revised script (≤5 min).
24‑26	CEO + PR (live)	Public disclosure – simultaneous press release, SEC Form 8‑K filing, website update, and email to physicians/patients. Hold the media briefing (recorded).	Public record of disclosure (timestamped).
26‑28	Legal + Compliance	Document the decision‑making process (meeting minutes, email trails, risk‑assessment) for future litigation defense.	Secure archive (legal‑hold).
28‑30	CFO + IR	Investor‑relations call (within 2 hrs of public disclosure) – field analyst questions, reiterate long‑term value, outline mitigation steps (clinical‑trial follow‑up, patient‑support program).	IR call transcript.
30‑34	HR + Safety Hotline	Launch the 24/7 hotline (phone & web). Staff trained to triage patient concerns, forward to medical team, and log each call.	Hotline live, first‑call report template.
34‑38	RRC (Medical & Safety)	Develop a “Patient‑Support Program” – free liver‑function testing for current users, fast‑track referral network, compensation fund for affected patients.	Program charter + partner list (labs, hepatology clinics).
38‑42	CEO + Board Chair	Internal “All‑Hands” video (30 min) – explain what happened, why we disclosed now, and how we will protect patients. Reinforce company values to sustain morale.	Video posted on intranet, live Q&A.
42‑44	PR + Social‑Media Team	Monitor media & social sentiment (real‑time dashboard). Deploy pre‑approved talking points to executives and spokespeople.	Sentiment report (heat map).
44‑48	CEO + Legal + RRC	Post‑disclosure review – assess immediate regulator feedback, market reaction, and any emerging safety data. Decide on any additional interim communications (e.g., “Update on safety investigation”) before the earnings call.	Action‑item list for Day 2‑3, and a concise “next‑steps” memo for the earnings call.

---

DETAILED REASONING BEHIND EACH BLOCK

0‑2 h – Activate the Rapid‑Response Crisis Team (RRC)

• Why: A single‑person decision is a legal and operational risk. A formal, documented crisis team shows good‑faith effort, satisfies fiduciary duty, and creates a clear chain of command.
• Who: CEO (chair), CMO, Head of Clinical Safety, General Counsel, CFO, IR Director, VP of Communications, VP of Regulatory Affairs, Head of HR.

2‑4 h – Validate the Signal

• Why: Regulators and courts will scrutinize the evidence you base your disclosure on. An independent re‑analysis (ideally by a third‑party data‑science group) prevents accusations of “premature” or “unsubstantiated” reporting.
• Key metrics: Incidence (≈1/8 000), absolute number of expected cases (≈500 in 4 M patients over 5 y), severity (liver failure, mortality), time‑to‑onset distribution.

4‑6 h – Legal & Compliance Scan

• Why: The FDA’s “medical‑device‑like” safety‑signal rule (21 CFR 314.80) obligates a sponsor to promptly report any “reasonable probability” of serious adverse events. Waiting 6 months would be a breach, exposing the company to civil penalties, criminal liability, and loss of goodwill.
• Outcome: A checklist that guarantees the 8‑K (or 6‑K) filing includes all required elements (risk assessment, labeling draft, mitigation plan).

6‑8 h – Financial Impact Modelling

• Why: The board’s “wait for more data” argument is often financially motivated. Providing a quantitative forecast (including worst‑case litigation reserve) forces a data‑driven discussion and shows you are not ignoring shareholder interests.

8‑10 h – Draft Public Statement

• Why: Consistency across all channels prevents “message drift.” The statement must be transparent, empathetic, and actionable—the three pillars regulators reduce panic and limit speculation.
• Key language: “We have identified a rare but serious risk of liver failure. We are notifying regulators, healthcare providers, and patients immediately and are taking corrective actions.”

10‑12 h – Early Regulator Contact

• Why: Proactive engagement (a “pre‑submission” call) is viewed favorably and can accelerate the review of your safety communication. It also creates a paper trail that you acted in good faith.
• Result: A regulator acknowledgment and an informal timeline (typically 2‑4 weeks for a safety alert).

12‑14 h – Board Briefing Deck

• Why: The board must approve the disclosure. The deck frames the decision as a fiduciary‑duty issue (protecting patients, avoiding future liability) rather than a “stock‑price” issue, aligning with legal precedent (e.g., In re Caremark).

14‑16 h – Employee Memo & Hotline SOP

• Why: Employees are frontline ambassadors; they need clear guidance to answer patient calls and to stay morale. A hotline shows you care about patients now and reduces rumor‑mongering internally.

16‑18 h – Board Meeting & Resolution

• Why: A formal board resolution provides legal protection (“the board, informed and approved”) and a clear decision point for the next steps. The resolution should explicitly authorize:
  1. Immediate filing of the safety communication.
  2. Public disclosure before the earnings call.
  3. Allocation of a litigation‑reserve.

18‑20 h – File Voluntary Safety Communication

• Why: Even if a formal “supplement” will take months, a voluntary safety alert can be posted within days, satisfying the “prompt” requirement. The filing includes the same data you used for the internal brief.

20‑22 h – Finalize Public Announcement

• Why: Aligning the press release with the 8‑K filing avoids “dual‑filing” confusion and ensures the SEC’s “timely disclosure” rule is met. A pre‑recorded media briefing allows you to control the narrative.

22‑24 h – Public Disclosure (Timestamped)

• Why: The “first public notice” date is critical for liability. By releasing simultaneously on the SEC, company website, and media, you eliminate claims of “selective” disclosure.

24‑26 h – Document Decision‑Making

• Why: Litigation teams will request a “paper trail.” Detailed minutes, email logs, and risk‑assessment documents demonstrate that the decision was well‑reasoned, documented, and in the best interest of patients.

26‑28 h – Investor‑Relations Call

• Why: Analysts will ask about the impact; a prepared IR call shows you are not trying to hide the issue and helps limit speculative price swings.

28‑30 h – Launch 24/7 Hotline

• Why: Immediate patient support mitigates health risk and demonstrates corporate responsibility, which can be a mitigating factor in any future legal or regulatory review.

30‑34 h – Patient‑Support Program

• Why: Offering free liver‑function testing and a fast‑track referral network reduces the actual harm, builds goodwill, and may lower the number of severe outcomes (thus reducing future liability).

34‑38 h – All‑Hands Video

• Why: Transparent internal communication preserves employee morale, reduces turnover, and prevents leaks that could further damage reputation.

38‑42 h – Media & Social Monitoring

• Why: Real‑time sentiment analysis lets you adjust talking points quickly, correct misinformation, and gauge when a second “update” is needed.

42‑44 h – Post‑Disclosure Review

• Why: Regulators may request additional data; the market may react sharply. A rapid review ensures you can issue a follow‑up update before the earnings call (if needed) and that the earnings call script reflects the latest facts.

44‑48 h – Prepare for the Earnings Call (Day 2‑3)

• Why: The earnings call is the final public forum before the 48‑hour window closes. You will:
  • Acknowledge the safety issue early in the call.
  • Present the company’s mitigation plan.
  • Highlight long‑term pipeline and financial resilience.
  • Offer a Q&A session for analysts.

---

KEY PRINCIPLES THAT GUIDE EVERY ACTION

Principle	How It Appears in the Plan
Patient‑first	Immediate validation, regulator notification, public disclosure, hotline, testing program.
Legal compliance	Early regulator contact, 8‑K filing, documented board resolution, legal‑hold archive.
Fiduciary duty	Financial impact modelling, board approval, IR call, transparent earnings narrative.
Transparency & Trust	Simultaneous public disclosure, “Dear Doctor” letters, all‑hands video, real‑time media monitoring.
Employee engagement	Internal memo, hotline SOP, all‑hands video, clear FAQs.
Reputation management	Pre‑approved PR messaging, media briefing, social‑media sentiment dashboard.
Regulatory relationship	Proactive “pre‑submission” call, fast‑track safety alert, ongoing liaison.

---

Bottom‑Line Decision (to be taken at the Board Meeting, Hour 18)

Approve immediate voluntary safety communication and public disclosure (before the earnings call), allocate a $150 M litigation reserve, and launch the patient‑support program.

Rationale: The risk is known, serious, and quantifiable; waiting for more data would be a breach of the duty of care to patients and could be construed as a cover‑up, exposing the company to far larger legal and reputational damage than a 40 % stock‑price dip. Early, transparent action preserves long‑term shareholder value by demonstrating corporate responsibility and by limiting the scope of future litigation.

---

By following the hour‑by‑hour plan above, you will have:

1. Met all legal reporting obligations (FDA/EMA, SEC).
2. Protected patients through immediate notification and support.
3. Documented a defensible decision‑making trail for any future lawsuit.
4. Managed the market impact with a controlled, pre‑emptive disclosure and a clear IR narrative.
5. Maintained employee morale via transparent internal communication.
6. Preserved the company’s long‑term reputation with a proactive, empathetic PR strategy.

The next 48 hours are the decisive window—act now, and the company will emerge with its integrity intact, even if the short‑term share price suffers.