Vanessa’s Law makes it mandatory to share information on harmful side effects – but in three years of data reviewed by The Globe, hundreds of institutions reported no cases