What the EU's vaccine contracts with Pfizer and Moderna actually say — and the record of the company that wrote them — explained for the person who got hurt
Documentary analysis for public transmission. Every quotation is verbatim from a named primary source with a date. Where a statement is an inference rather than a documented fact, it is labeled as an inference. Contract text is quoted from the unredacted Advance Purchase Agreements between the European Commission and Pfizer/BioNTech (SANTE/2020/C3/043, signed 20 November 2020) and Moderna (SANTE/2021/C3/010, signed 26 February / 4 March 2021).
Imagine you took the vaccine. Maybe you were required to — to keep your job, to board a plane, to visit your mother in a care home. Afterward something went wrong with your health, and you started asking the obvious question: can I hold anyone accountable? The company that made it? The government that told me it was safe? Anyone at all?
The answer to that question was written down before a single dose reached Europe, in a contract you were not allowed to read, by a company with the longest fraud rap sheet in its industry. The parts of the contract that answered your question were blacked out of the public version.
The unredacted contract has since been examined. This document walks through what it says — one clause at a time, in plain language, no legal training assumed — and then places it against the public record of the company that negotiated it. By the end you will understand why, when you went looking for accountability, every door you tried was already locked. Who locked it. When. And why the same kind of lock is now spreading to other products, in other courtrooms, right now.
Take your time. Nothing here requires you to trust the author. Every load-bearing fact has a name and a date attached so you can check it yourself.
Before we open the contract, you need to know who wrote it. Not as name-calling — as record. A contract's language means one thing from a first-time government supplier and something very different from a company that has been caught, charged, and convicted before.
Pfizer has paid roughly $11.3 billion across more than 100 separate regulatory and fraud penalties since the year 2000. (Source: Violation Tracker, Good Jobs First — 109 penalty records, cumulative total ~$11.29 billion.) That is one of the largest cumulative penalty totals of any pharmaceutical company in the world.
The single most important entry on that record: in 2009, a Pfizer subsidiary pleaded guilty to a felony. (Source: U.S. Department of Justice press release, 2 September 2009.) The total resolution was $2.3 billion — at the time, the largest health-care fraud settlement in the history of the Justice Department. The criminal portion was $1.3 billion.
What was the crime? Pfizer's subsidiary Pharmacia & Upjohn pleaded guilty to misbranding the anti-inflammatory drug Bextra "with the intent to defraud or mislead." Those are the Justice Department's words. Pfizer had promoted Bextra for uses and doses the FDA had specifically refused to approve on safety grounds. Bextra had already been pulled from the market in 2005 after being linked to heart attack and stroke. The settlement also covered the drugs Geodon, Zyvox, and Lyrica, and kickbacks paid to doctors to prescribe them. Afterward, Pfizer entered a Corporate Integrity Agreement with the federal health department — a formal promise, under monitoring, to stop defrauding.
Keep the plain-English version in mind: this is a company that has been criminally convicted of lying to sell a drug it had already withdrawn for causing heart attacks. Not an accusation. A guilty plea.
Pfizer no longer holds the record for the single largest settlement — opioid maker Purdue ($8.3 billion) and Bayer/Monsanto have since exceeded it, and by one academic measure GlaxoSmithKline's total penalties over 2003–2016 were higher. The honest, unbeatable version of the claim is simply this: Pfizer is a repeat offender with a felony fraud conviction and one of the heaviest penalty records in its industry. That is the company that sat down to write the fraud clause in the biggest government vaccine contract in history.
A contract's protective language is one thing when a company is guessing about risk, and another thing entirely when the company already has data in hand. So: what did Pfizer know, and when, relative to the 20 November 2020 signing date?
The biodistribution study. Before regulatory submission, Pfizer ran an animal study (submitted to Japan's regulator, the PMDA) tracking where the vaccine's lipid nanoparticles — the tiny fat bubbles that carry the mRNA — actually went after injection. The finding: they did not stay at the injection site. A radioactive marker tracking the particles spread through the body, reaching the liver, spleen, adrenal glands, and ovaries, with the concentration in the ovaries rising over the 48-hour observation window.
the study tracked a radioactive lipid marker, not the mRNA or spike protein directly, and it was a rat study — Pfizer and regulators note both limits. The study reported distribution, not a proven harm threshold; "dangerous levels" is a characterization, not a study finding. The unbeatable version: Pfizer possessed data showing the particles accumulated in the ovaries over time, and this was not disclosed to the public, well before it signed a contract whose fraud definition was written to exclude exactly this kind of safety non-disclosure. (See Part 4.)
The trial-conduct whistleblower. In September 2020 — two months before signing — a trained clinical-trial auditor named Brook Jackson was hired as a regional director running Pfizer's Phase 3 trial sites in Texas. Within weeks she reported to the FDA what she described as falsified data, participants "unblinded" (meaning staff knew who got the real shot versus placebo, which corrupts the entire trial), inadequately trained vaccinators, and slow follow-up on adverse events. She was fired the same day she called the FDA. Her later lawsuit (filed under the False Claims Act) laid this out across 81 pages. (Source: U.S. ex rel. Jackson v. Ventavia Research Group, ICON plc, Pfizer, U.S. District Court, Eastern District of Texas.) We will return to what happened to her case — because what happened to it is itself part of the story.
The early harm signal. Within roughly 90 days of rollout, Pfizer's own post-marketing safety report (document 5.3.6, covering data through 28 February 2021) catalogued 42,086 adverse-event cases — including 1,223 deaths — reported in the first ten weeks (cumulative to 28 February 2021), and included a nine-page appendix listing roughly 1,290 conditions Pfizer was specifically monitoring for. This report was among the documents the FDA asked a court to keep sealed for decades before being ordered to release them.
Here is the point that watch-list makes. A company does not assemble a nine-page roster of roughly 1,290 specific conditions — drawn from the Brighton Collaboration, the US CDC, and the UK's MHRA — to monitor for things it has no reason to expect. The list is proof of foreknowledge of plausible harm: these were the injuries an mRNA/lipid-nanoparticle platform and severe COVID were known to risk. So they knew what to look for. Then they looked. Then they found 42,086 cases and 1,223 deaths in ten weeks. And then the document recording it was sealed, while the product was mandated, access-gated, and coerced onto populations who were never shown any of it.
Put the timeline together: the same company that had biodistribution data showing ovarian accumulation, that had a fired auditor screaming about data integrity, and that would within 90 days be logging 42,086 adverse-event cases, was simultaneously negotiating a contract that defined "fraud" so narrowly that safety concealment could not qualify. Whether that timing reflects specific foreknowledge or extreme caution is precisely the question the negotiation record would answer. But that record cannot be examined — because it does not exist anymore. The Pfizer deal was negotiated by private text message between Pfizer's CEO and Commission President von der Leyen, and those texts have vanished; the Commission was later unable or unwilling to produce them. The four facts are contemporaneous, not sequential — they sat on the same desk at the same time. And the one record that could have told us what was in the negotiators' minds was not preserved. You do not delete the correspondence for a deal you are proud of.
Now open the contract.
In 2020 the European Commission — the EU's executive branch — bought vaccines on behalf of all 27 member countries and their 450 million citizens. The Pfizer deal was signed 20 November 2020, one month before the European Medicines Agency authorized the vaccine (21 December 2020). The basic terms, all hidden from the public at the time: 200 million doses at an average €15.50 per dose; a €700 million advance payment wired to a Pfizer account at Citibank Dublin within 20 business days of signing — before authorization, before delivery, before the product's specifications were even finalized. The total Pfizer relationship eventually grew to roughly €35 billion. The negotiation was led, by her own admission to the New York Times, by Commission President Ursula von der Leyen — partly through private text messages with Pfizer's CEO. Those texts were later deleted.
Here is the single most important clause to understand, because everything hangs on it.
In ordinary life, "fraud" means someone lied to get your money or make you act, and you got hurt. If a used-car dealer swears the engine is sound when he knows it's shot, that's fraud. You can sue. Prosecutors can charge him.
In a contract, "fraud" means only what the contract's definitions section says it means — no more. Every contract opens with a definitions section: a private dictionary both sides agree to. If a word is defined narrowly, then everything outside that narrow definition simply is not that word, for legal purposes, under that contract.
In the public version of the Pfizer contract, the definition of "Fraud" appeared to be blacked out. Citizens could not know what standard of conduct their governments had agreed to call fraudulent. The unredacted version shows what was under the ink. It was not a trade secret. Here is the definition, word for word, from Article 1.2:
"'Fraud': an act or omission committed in order to make an unlawful gain for the perpetrator or another by causing a loss to the Union's financial interests, and relating to: i) the use or presentation of false, incorrect or incomplete statements or documents, which has as its effect the misappropriation or wrongful retention of funds or assets from the Union budget, ii) the non-disclosure of information in violation of a specific obligation, with the same effect or iii) the misapplication of such funds or assets for purposes other than those for which they were originally granted, which damages the Union's financial interests, it being understood that the Union's financial interests are impacted under this APA only by reason of the Advance Payment."
Read that last clause again, slowly.
The first part is standard EU anti-fraud language: fraud is lying, hiding, or misspending that causes a loss to the EU's budget. Then comes the tail written for this deal: the EU's financial interests are impacted "only by reason of the Advance Payment." In plain English: for the purposes of this contract, the only money that counts is the €700 million advance.
Now the arithmetic. The relationship totaled about €35 billion. The advance was €700 million. So the contract's fraud definition can only ever be triggered by conduct touching about 2% of the money. The other 98% — roughly €34.3 billion — sits outside the definition.
What would count as fraud under this contract? Pfizer secretly spending the €700M advance on something other than the vaccine program. Pfizer lying to obtain that specific €700M. That's essentially it.
What would not count? False statements about the vaccine's efficacy to win the deal. Concealment of known safety signals. Letting governments claim the shot stopped transmission when it was never authorized or tested for that. Any misrepresentation tied to the other €34.3 billion. None of it meets the contract's fraud definition. They protected everything except the wire transfer.
Here is where the second contract changes everything.
A defender of Pfizer could say: relax, that tail is just accounting boilerplate. The €700M advance came from the EU's own emergency budget; the remaining €34 billion came from the individual member states' treasuries. Maybe the clause is just describing which pot of money is which, not limiting fraud on purpose.
There is a way to test that defense. The EU signed a nearly identical contract with Moderna three months later, out of the same emergency fund, using the same base legal language. If the limiting tail were just neutral accounting, it would appear in Moderna's contract too.
It does not.
Moderna's fraud definition (also Article 1.2), from the unredacted contract, uses the same standard EU language — and then simply stops. It ends at "which damages the Union's financial interests." Full stop. No "only by reason of the Advance Payment." No limiting tail at all.
That absence is documentary evidence — not speculation — that the Pfizer tail was negotiated, contract-specific language, not boilerplate. Same Commission. Same fund. Same base text. One contract has the fraud-narrowing clause; the other doesn't. Somebody asked for it, and somebody on the EU side agreed to it.
And it doesn't stop there. Moderna's contract is tougher on the manufacturer in two more ways Pfizer's simply lacks:
So, laid side by side, from the same buyer months apart: Pfizer secured the better deal on every single accountability axis. Fraud confined to 2% of the money (Moderna: unconfined). A liability cap that only breaks if you prove intent to harm (Moderna's breaks on gross negligence or fraud). And Pfizer controls its own legal defense — choosing its own lawyers, paid for by the member states.
this could partly reflect leverage rather than lawyering. In November 2020 Pfizer was first across the line and could dictate terms; by February 2021 the Commission had alternatives and more spine. Both forces probably operated together. But the effect is documented regardless of the cause — and the Moderna comparison kills the "it's just boilerplate" defense stone dead.
The fraud definition is one bar in a cage, not the whole cage. Here are the other bars — each real, each with an article number.
Door 1 — Suing Pfizer for your injury. Locked by Article 1.12 (Indemnification). "Indemnification" means: if the company gets sued, someone else pays. Under this clause, each member state agreed to cover all losses from use of the vaccine — not just Pfizer's, but those of its affiliates, subcontractors, licensors, and all their officers and employees. Translated: if you sue Pfizer for your injury, your own government pays Pfizer's legal bills and any damages. You are effectively suing your own tax money. The only two exceptions:
Door 2 — Claiming your government was deceived. Locked by the Order Form, Article 4. Every member state, when ordering doses, signed this sentence:
"The Participating Member State acknowledges that the long-term effects and efficacy of the Vaccine are not currently known and that there may be adverse effects of the Vaccine that are not currently known."
This wasn't even redacted — just never publicized. Your government cannot claim it was misled about safety, because it signed a formal statement that safety was unknown — while telling you, in public, "safe and effective." Any national fraud case built on "Pfizer deceived us" runs straight into the government's own signature saying "we knew it was unknown." And you, the citizen being pressured to comply, never got to see that signature.
Door 3 — Making Pfizer pay a real penalty. Locked by the liability caps. Even in the rare case Pfizer owed anything, its liability toward a member state is capped at 50% of what that state paid. The worst case for Pfizer, ever, is refunding half the purchase price. Your injury never enters the math.
Door 4 — Your government running out of money. Locked by Article II.6.6. Each state had to represent it had "adequate statutory or regulatory authority and adequate funding appropriation" to completely meet its indemnification duties. No ceiling. The state pledged, in advance, that no matter how many citizens were harmed, it would keep paying Pfizer's defense — a waiver of the normal protections that limit what a state can be committed to.
Door 5 — Even learning any of this. Locked by redaction. When public pressure forced release of the contract, the pattern of blackouts was precise: hidden were the price, the advance, the bank account, the indemnification, the risk transfer, the signatories' names — and the fraud definition itself. Left visible: everything that provided political legitimacy. (the redactions weren't about trade secrets; they tracked exactly the clauses that would have caused public alarm.)
And here is the American mirror. Remember Brook Jackson, the fired auditor? A U.S. court dismissed her fraud case — not because her allegations were disproven, but on the theory that the government knew about her allegations and kept buying and authorizing the vaccine anyway, so the alleged lies didn't affect the government's decision to pay. Sit with that logic: the government's continued purchase despite knowledge was treated as a reason to throw the case out. The U.S. Justice Department didn't just decline to help her — it joined Pfizer in seeking dismissal. Her appeal is ongoing.
That is the same immunity engine as the EU Order Form acknowledgment, running on two continents at once: the authorities knew, and bought anyway, and that knowledge became the shield.
Everything above is about money and lawsuits. This part is about the older, deeper rule the whole affair broke — and it matters whether you are reading this in Ohio or in Bavaria, because both legal worlds are built on the same foundation.
The shared root. In 1947, in a German courtroom, the trial of Nazi doctors produced the Nuremberg Code. Its first principle is absolute: the voluntary, informed consent of the human subject is essential. No exceptions for emergencies. No override for the greater good. That principle was the world's answer to medicine practiced by coercion. Both Europe and America later wrote it into binding law — which is exactly why a mandate backed by concealed risk data is not a policy dispute. It is a breach of the one rule that was supposed to be beyond breaking.
In Europe — and specifically in Germany. The Nuremberg principle lives in enforceable European law: the International Covenant on Civil and Political Rights, Article 7 (no medical experimentation without free consent), which every EU state has ratified and which cannot be suspended even in a declared emergency; the Oviedo Convention, Article 5; and Article 3 of the EU Charter of Fundamental Rights, which demands "free and informed consent" in medicine by name. In Germany the duty is concrete and personal: a physician's informed-consent obligation under the medical profession code. That obligation is not abstract — a German doctor who honored it by writing exemptions was criminally prosecuted under a separate procedural statute (§278 of the criminal code) for issuing "false" certificates. Read that plainly: the doctor invoking the deeper duty was charged; the deeper duty was treated as the offense. That is the Nuremberg conflict happening in a real German courtroom, now.
In America. The same treaty binds the United States: the US ratified ICCPR Article 7 in 1992 — the identical, non-suspendable rule. American constitutional law adds the right to refuse unwanted medical treatment (recognized in Cruzan and Washington v. Harper). And the emergency-use statute itself (21 U.S.C. §360bbb-3) requires that every recipient be told of the option to refuse. A mandate erases that option by definition — you cannot both have a legal right to refuse and lose your job for refusing. The counterweight the courts have never cleaned up is Buck v. Bell (1927), the eugenics-era ruling permitting compelled bodily intervention "for the public good," still not overturned.
Why this is one argument, not two. Both continents ratified the same core instrument — ICCPR Article 7 — and both built their domestic medical-consent law on the same Nuremberg foundation. And in both, a narrow procedural statute was used to steamroll it: in America, the PREP Act and the EUA framework; in Germany, §278 of the criminal code. Same maneuver, two jurisdictions — a small technical law wielded to cancel a supreme one.
this is the strongest moral claim in this document and also the one most fought over in court. No tribunal has yet ruled that COVID mandates violated ICCPR Article 7. That challenge — the direct one, on the treaty both continents ratified — has not yet been brought. It should be. That is the courtroom sentence, on either side of the ocean: the law exists, the violation is documented, and the case has not yet been filed.
The law that was broken exists. The question every injured person asks next is: which door do I actually walk through, and in which country? Here is the honest map — the real forums, and the real walls in front of each.
In Germany. German law gives the injured person more than one route, because the consent principle is anchored in several places at once.
Across Europe. The realistic pan-European forum is the European Court of Human Rights (ECtHR) in Strasbourg. It does not apply the ICCPR directly, but Article 8 of the European Convention protects bodily integrity and covers the same ground — and unlike the ICCPR in America, it is binding on all Council of Europe states. Strasbourg will hear the consent question. It has heard it before. That case is the one that must be understood, because it cuts against a naive challenge — and then it must be distinguished.
In the United States. This is the hardest ground, for a specific reason. When the US ratified the ICCPR in 1992, it declared the treaty non-self-executing — meaning Article 7 does not, by itself, create a right an individual can sue on in an American court. So the treaty rarely walks in the front door. It rides along a constitutional claim instead:
Vavřička — the precedent that must be met head-on
In Vavřička v. Czech Republic (European Court of Human Rights, Grand Chamber, 8 April 2021), the Court ruled that Czech laws making certain childhood vaccinations compulsory — enforced by fines and exclusion from nursery school — did not violate Article 8 of the Convention. The Court agreed the mandate interfered with private life, but held the interference justified: a legitimate aim (protecting public health and the vulnerable), a proportionate means, and within each state's "margin of appreciation." Its animating idea was social solidarity — the notion that the vulnerable, who cannot be vaccinated, depend on the majority accepting a small shared risk.
This is the leading European precedent on compulsory vaccination, and it upheld the mandate. Any Article 8 challenge begins here and must show why the COVID situation is materially different. It is — on four distinct grounds, each documented:
So the precise, defensible statement is this: no tribunal has yet found that the COVID-era mandates violated the non-derogable consent guarantee — and the one major ruling in the field, Vavřička, upheld a mandate on facts that differ from the COVID case in every element that matters. Strasbourg will hear the case. The work is in the distinguishing, and the distinctions are made of documented facts, not argument.
A company with a felony fraud conviction and roughly $11.3 billion in penalties — one that had already pleaded guilty to lying about a drug it pulled for causing heart attacks — held animal data showing its particles pooling in the ovaries, faced a fired auditor reporting falsified trial data, and would within 90 days log 42,086 adverse-event cases including 1,223 deaths. In that same window it negotiated a contract, largely over deleted text messages, that: confined "fraud" to 2% of the money (a limit its competitor's contract proves was no accident); made citizens' own governments pay to defend it; set the only escape hatch at the unreachable standard of proving intent to harm; and had governments pre-sign away their own future deception claims — every load-bearing clause blacked out of the version the public was allowed to read — a record the FDA then sought to release on a schedule running to the year 2096, citing the sponsor's confidential-information interests, with Pfizer intervening in the litigation to protect them, until a federal judge overrode them both and ordered it produced in eight months. And when one auditor tried the American courtroom, the government's own knowledge was turned into the reason she lost.
every contract clause quoted above appears verbatim in the unredacted APAs, with article numbers.
the Moderna contract lacks the limiting tail — proving Pfizer's was negotiated.
Pfizer's 2009 felony conviction and ~$11.3B penalty record are on the public DOJ and Violation Tracker records.
whether the fraud tail reflects foreknowledge or caution — which the deleted von der Leyen negotiation record might resolve.
Here's why this isn't just history, and why it should worry you even if you never took the shot.
The trick underneath every locked door above is the same: a government agency approves a product, and that approval is then used to bar the people it hurts from suing. For vaccines, the mechanism is the PREP Act plus the emergency-use authorization. For the EU contracts, it's the indemnification clause and the signed acknowledgment. The injured person loses the courtroom, and the agency's sign-off is the reason.
On 25 June 2026, the U.S. Supreme Court extended that same logic to a whole new product. In Monsanto Co. v. Durnell (No. 24-1068), by a 7-2 vote, the Court held that federal pesticide law (FIFRA) blocks state lawsuits against Bayer's Roundup weed-killer over its failure to warn of cancer risk — because the EPA had approved the label without a cancer warning. John Durnell used Roundup for two decades, developed non-Hodgkin lymphoma, won at trial — and saw the legal theory behind his case gutted. (Source: Supreme Court opinion, 25 June 2026; CNBC, Reuters, Bayer press release, same date.)
Follow the reasoning and it's the vaccine playbook exactly: federal agency approved it → state courts barred → the injured person loses the remedy. Different statute, identical machine.
Two things keep this honest. The Durnell ruling doesn't block every kind of claim — design-defect suits may still proceed, and Bayer still faces a $7.25 billion settlement — so it isn't total immunity. And the dissent matters: Justice Ketanji Brown Jackson, joined by Justice Neil Gorsuch — a pairing you almost never see — warned that EPA approval "cannot conclusively establish that the pesticide is not misbranded," and that the ruling leaves Durnell "without a remedy for the significant harms he has suffered." That is the same objection that should apply to "the FDA authorized it, therefore there was no fraud." It is the same objection that the Brook Jackson dismissal ignored.
So here is the plain-English heads-up. The legal shield that left you without a courtroom after your injury is not shrinking. It is spreading — from vaccines to pesticides, and the Supreme Court's own majority opinion named other categories (over-the-counter drugs, cosmetics, packaged food) that lower courts could sweep in next. Each time, the pattern is the same: a federal agency signs off, and the sign-off becomes the wall between an injured person and a jury.
That's the thing to carry to your newspaper and your representative. Not just "look what they did with the vaccine contract." But: the exact mechanism that locked your door is now being installed on everyone else's. The contract wasn't an aberration. It was a prototype.
This is getting real. Act while there's still a courtroom left to act in.
Primary sources: Unredacted Pfizer/BioNTech APA SANTE/2020/C3/043 (signed 20 Nov 2020), Arts. 1.2, 1.7, 1.8, 1.9, 1.12, II.6.6; Vaccine Order Form Art. 4. Unredacted Moderna APA SANTE/2021/C3/010 (signed 26 Feb / 4 Mar 2021), Arts. 1.2, II.4.6. EMA marketing authorisation 21 Dec 2020. U.S. DOJ press release, 2 Sept 2009 (Pfizer/Pharmacia & Upjohn $2.3B settlement, Bextra felony plea). Violation Tracker, Good Jobs First (Pfizer cumulative ~$11.3B, 109 records). Pfizer nonclinical biodistribution study submitted to Japan's PMDA. Pfizer post-marketing report 5.3.6 (through 28 Feb 2021). U.S. ex rel. Jackson v. Ventavia Research Group, ICON plc, Pfizer (E.D. Tex.). Monsanto Co. v. Durnell, No. 24-1068 (U.S. Sup. Ct., 25 June 2026). von der Leyen negotiation role per New York Times, April 2021, and subsequent records dispute. The Pfizer Papers, WarRoom/DailyClout, ed. Wolf & Kelly (War Room Books, 2024), for the court-released FDA document analysis referenced in Part 2.