Don't Risk It! ISO 13485:2016 and How to Determine Compliance Level

Total Page:16

File Type:pdf, Size:1020Kb

Don't Risk It! ISO 13485:2016 and How to Determine Compliance Level Don’t Risk It! ISO 13485:2016 and How to Determine Compliance Level August 18, 2016 John Beasley, RAC(US) MedTech Review, LLC Thought of the Day: “Act after having made assessments. The one who first knows the measure of far and near wins.” - Sun Tzu, The Art of War 2 Today’s Topics • Overview of changes in ISO 13485, 3rd Edition – Risk management – Usability – Outsourced processes • Supplier evaluation – determining LSP level of compliance • Concluding remarks • Q&A ISO 13485:2016 1 Overview of Changes in the 3rd Edition History of ISO 13485 13485 13485 13485 9001 9001 9001 1994 / 2000 / 2003 2015 / 1996 2008 / 2009 2016 5 Publication History 1996 - Publication of standards ISO 13485 and ISO 13488. • 13485 variant intended for manufacturers responsible for design, manufacture and distribution of devices. • 13488 variant intended for manufacturers not responsible for designing devices. Variants must be used with ISO 9001:1994 and ISO 9002:1994 as applicable. 2003 - Publication of 2nd edition ISO 13485:2003. Considered to be “stand alone”. ISO 13488 now obsolete. Organizations that previously used 13488 must now use 13485 but can exclude section 7.3 “design and development” if allowed by regulations. Device specific requirements that do not apply to the manufacturer are tagged as “not applicable”. 6 Publication History 2004 - Publication of guidance document ISO/TR 14969. Its purpose is to provide a single source of guidance on the interpretation and implementation of 13485. 2009 - Corrigendum to 13485:2003 published to change reference from ISO 9001:2000 to ISO 9001:2008. 2012 - CEN (European standards organization) publishes EN ISO 13485:2012 as the European adoption of ISO 13485:2003 (2009 corrigendum). 7 Publication History Oct 2015 - Publication of ISO FDIS 13485 (2016) for 2 month international vote to accept or reject. Mar 2016 - Publication of 3rd Edition; ISO 13585:2016. 8 Why Was ISO 13485:2003 Amended? Four general principles guided revision process. i) Develop requirements that are unambiguous and that will allow for objective and consistent assessment by regulatory bodies and auditing organizations. ii) Ensure requirements are compatible with existing ISO and regulatory quality management system requirements like ISO 9001:2008 and the US quality system regulations. iii) Requirements relate to the life-cycle of a device. iv) Requirements could be used by suppliers to the device manufacturer. 9 ISO 13485:2016 2 Risk Management Risk Management • ISO Guide 73:2009 • ISO 31000:2009 • ISO 14971:2007 • EN ISO 14971:2012 11 Risk Management Area of interest: Risk management (All sections) What’s new: • “Risk” and “risk management” (RM) now defined in section 3. Taken from ISO 14971:2007. • RM practices extended to other processes of the quality management system not just product realization. • Organization now expected to apply a “risk” based approach to the control of QMS processes (e.g. purchasing, validation of software used in the QMS, verification of purchased product etc.) • Based on GHTF SG3 N15 R8 Implementation of risk management principles and activities within a Quality Management System 12 The new requirements and how to implement them… How to implement : • In the context of a medical device, “Risk” is defined as the combination of the probability of occurrence of harm and the severity of that harm • “Risk management” is defined as the systematic application of management policies, procedures, and practices to the tasks of analyzing, evaluating, controlling and monitoring risk 13 The new requirements and how to implement them… How to implement : When the term “risk” is used in the standard, it is meant to relate to two things: 1) the safety and performance of the organization’s medical devices, and 2) the device or organization’s ability to meet regulatory requirements The organization is expected to take appropriate action that is based on the risks that have been identified and controlled 14 The new requirements and how to implement them… How to implement : Obvious applications of “Risk” based thinking – Organization has documented process for risk management in product realization. (ISO 14971:2007) – Applicable outputs of Risk Management process used as inputs to Design and Development of a device – The type and extent of control applied to an outsourced process is proportionate to the risk(s) (to device or organization) involved with the process – Criteria used to evaluate and select suppliers are proportionate to the risk associated with the medical device 15 The new requirements and how to implement them… How to implement : Not so obvious applications of “Risk” based thinking – Personnel performing work affecting product quality must have the appropriate education, training, skills and experience (Section 6.2) – Method used to check the effectiveness of the training of personnel performing work that affects product quality, is proportionate to the risk associated with the work being performed (Note to Section 6.2) 16 ISO 13485:2016 3 Usability The new requirements and how to implement them… Area of interest: Design & development input / Usability (Section 7.3.3 a)) What’s new: • A new “product requirement input” in the R & D process is the consideration of device usability according to the device’s intended use (along with functional, performance and safety requirements) • The user is instructed to consult the most recent version of IEC 62366-1 Medical devices – Part 1: Application of usability engineering to medical devices for guidance and information on usability 18 The new requirements and how to implement them… How to implement : 19 20 ISO 13485:2016 4 Outsourced Processes Clause: 4 Quality management system 4.1 General requirements 4.1.5 Outsourcing • monitor and control any outsourced process that affects product conformity with requirements and this control to be proportionate to the risk involved and the ability of the external party to meet requirements. • Control includes a written quality agreement • ISO 13485:2003 relied on the ISO/TC176 SC 2 guidance document N630R2 (2003) “ISO 9000 Introduction and Support Package: Guidance on ‘Outsourced Processes’” to provide an understanding of what an “outsourced process” is. • ISO 13485:2016 still relies on this interpretation but…ISO 9000:20015 (new vocabulary document) now defines “outsource” as “make an arrangement where an external organization performs part of an organization’s function or process” 22 5 LSP - Determining Compliance Level Life Sciences Translation Quality Compliance Quality Certifications Language Quality Frameworks • Proactive front-end approach to avoid back-end vortex and • ISO 9001:2009 • SAE J2450 • TAUS DQF (Dynamic Quality clock resetting • ISO 17100:2015 Framework) • LQA strategy supersedes EN 15038 • TQM (Total Quality • KPIs Service Level • ISO 13485:2003 for Management) Agreements • Taus DQF (Dynamic Quality medical devices • Sampling Framework) • DFKI’s Multidimensional Quality • QA results monitored and Metrics (MQM) analysed • Regular feedback to translation teams 24 Q&A.
Recommended publications
  • Artificial Intelligence in Health Care: the Hope, the Hype, the Promise, the Peril
    Artificial Intelligence in Health Care: The Hope, the Hype, the Promise, the Peril Michael Matheny, Sonoo Thadaney Israni, Mahnoor Ahmed, and Danielle Whicher, Editors WASHINGTON, DC NAM.EDU PREPUBLICATION COPY - Uncorrected Proofs NATIONAL ACADEMY OF MEDICINE • 500 Fifth Street, NW • WASHINGTON, DC 20001 NOTICE: This publication has undergone peer review according to procedures established by the National Academy of Medicine (NAM). Publication by the NAM worthy of public attention, but does not constitute endorsement of conclusions and recommendationssignifies that it is the by productthe NAM. of The a carefully views presented considered in processthis publication and is a contributionare those of individual contributors and do not represent formal consensus positions of the authors’ organizations; the NAM; or the National Academies of Sciences, Engineering, and Medicine. Library of Congress Cataloging-in-Publication Data to Come Copyright 2019 by the National Academy of Sciences. All rights reserved. Printed in the United States of America. Suggested citation: Matheny, M., S. Thadaney Israni, M. Ahmed, and D. Whicher, Editors. 2019. Artificial Intelligence in Health Care: The Hope, the Hype, the Promise, the Peril. NAM Special Publication. Washington, DC: National Academy of Medicine. PREPUBLICATION COPY - Uncorrected Proofs “Knowing is not enough; we must apply. Willing is not enough; we must do.” --GOETHE PREPUBLICATION COPY - Uncorrected Proofs ABOUT THE NATIONAL ACADEMY OF MEDICINE The National Academy of Medicine is one of three Academies constituting the Nation- al Academies of Sciences, Engineering, and Medicine (the National Academies). The Na- tional Academies provide independent, objective analysis and advice to the nation and conduct other activities to solve complex problems and inform public policy decisions.
    [Show full text]
  • Regulatory Feasibility Analysis for a New Atrial Fibrillation Ablator in Selected Countries
    MQP – FRH – FHO2 Regulatory Feasibility Analysis for a New Atrial Fibrillation Ablator in Selected Countries A Major Qualifying Project Report Submitted to the Faculty of the Worcester Polytechnic Institute in partial fulfillment of the requirements for the Degree of Bachelor of Science in Management by ______________________ Matthew Hammond Approved: _______________________ _______________________ Martin Sklar, President and CEO Frank Hoy, Ph.D. AblaCor Medical Corporation Paul R. Beeswick Professor of Project Sponsor Innovation and Entrepreneurship Project Advisor _______________________ Jerome Schaufeld, Ph.D. Professor of Practice Project Co-Advisor 1 | P a g e Abstract Medical device registration for class three devices, such as a catheter ablator, can be a long and difficult process. The regulatory requirements can vary greatly by country, overlap and benefit one another, or require repeating a certification depending on the country in question. Determining the order in which to enter specific countries greatly depends on the size of the potential market and the costs and time needed for regulatory approval. Prior approval on major facets such as clinical trials may greatly reduce the costs of entering a particular country if the data from an outside source is deemed acceptable. This creates a complex problem where start- ups who cannot afford to pursue regulatory approval in all major markets simultaneously must carefully chose and enter individual markets a few at a time. The paper will evaluate the regulatory pathways of ten select countries. This regulatory analysis, combined with a market analysis on these same countries by the other three members of the project, will form a basis from which we can create a suggested order of entry.
    [Show full text]
  • Risk Management for Manufacturers of in Vitro Diagnostic Medical Devices
    Technical Guidance Series (TGS) Risk management for manufacturers of in 1 TGS–07 vitro diagnostic medical devices Draft for comment 25 September 2017 © World Health Organization 2017 All rights reserved. Publications of the World Health Organization can be obtained from WHO Press, World Health Organization, 20 Avenue Appia, 1211 Geneva 27, Switzerland (tel.: +41 22 791 3264; fax: +41 22 791 4857; e-mail: [email protected]). Requests for permission to reproduce or translate WHO publications – whether for sale or for non-commercial distribution – should be addressed to WHO Press, at the above address (fax: +41 22 791 4806; e-mail: [email protected]). The designations employed and the presentation of the material in this publication do not imply the expression of any opinion whatsoever on the part of the World Health Organization concerning the legal status of any country, territory, city or area or of its authorities, or concerning the delimitation of its frontiers or boundaries. Dotted lines on maps represent approximate border lines for which there may not yet be full agreement. The mention of specific companies or of certain manufacturers’ products does not imply that they are endorsed or recommended by the World Health Organization in preference to others of a similar nature that are not mentioned. Errors and omissions excepted, the names of proprietary products are distinguished by initial capital letters. All reasonable precautions have been taken by the World Health Organization to verify the information contained in this publication. However, the published material is being distributed without warranty of any kind, either expressed or implied.
    [Show full text]
  • FDARA Section 710 Report on the Quality, Safety, and Effectiveness of Servicing of Medical Devices
    May 2018 FDA Report on the Quality, Safety, and Effectiveness of Servicing of Medical Devices In accordance with Section 710 of the Food and Drug Administration Reauthorization Act of 2017 (FDARA) Executive Summary The Food and Drug Administration Reauthorization Act (FDARA) became law on August 18, 2017. Section 710 of FDARA charges the Secretary of Health and Human Services, acting through the Commissioner of Food and Drugs, to issue a report on the continued quality, safety, and effectiveness of medical devices with respect to servicing. FDA has considered information including but not limited to the information presented at a public workshop, responses to a request for comments, and evaluation of objective evidence related to the quality, safety, and effectiveness of medical device servicing in the compilation of this report. Stakeholders have differing views about the quality, safety, and effectiveness of servicing performed by original equipment manufacturers (OEMs) and third party entities, and the need for imposing additional regulation. Based on the available information, we have concluded: • The currently available objective evidence is not sufficient to conclude whether or not there is a widespread public health concern related to servicing, including by third party servicers, of medical devices that would justify imposing additional/different, burdensome regulatory requirements at this time; • Rather, the objective evidence indicates that many OEMs and third party entities provide high quality, safe, and effective servicing of medical devices; • A majority of comments, complaints, and adverse event reports alleging that inadequate “servicing” caused or contributed to clinical adverse events and deaths actually pertain to “remanufacturing” and not “servicing”; and • The continued availability of third party entities to service and repair medical devices is critical to the functioning of the U.S.
    [Show full text]
  • Phihong Ev Chargers 2021-2022
    2021-2022 PHIHONG EV CHARGERS World Class Quality, International Standards Phihong Technology Co., Ltd is a core member of the organization Charging Interface Initiative e. V. (CharIN e. V.) and member of CHAdeMO Association. The goal is to promote and continuously develop the Combined Charging System (CCS) also ensuring compatibility between the infrastructure and the EVs. PHTV2102E Phihong Technology Phihong is a leading global power products manufacturer with over 50 years of industry experience. As a supplier to many of the world’s leading brands, Phihong continues to design innovative products with an emphasis on envi- ronmental protection and carbon reduction. Phihong offers a complete product line of EV charging OEM/ODM - AC Chargers solutions supporting both commercial and passenger electric vehicles. This includes Level 3 DC chargers ranging from 30kW to 360kW and Level 2 AC EVSE rang- ing from 16 to 48 amps. In addition, Phihong offers DC charging modules, auxiliary power, control & supervisor units (CSU), discrete type DC chargers, integrated type DC chargers, moveable DC chargers, and portable DC chargers. Phihongs EV charging software solutions include a front- OEM/ODM - DC Chargers end mobile APP and user interface (HMI) and a cloud- based management, payment, and monitoring platform. Through the front-end mobile APP, people can search for nearby chargers, schedule charging appointments, and monitor charging status. System operators can monitor the status of individual EV chargers and remotely up- date them, enabling long-term maintenance and man- agement. With strong R&D design capabilities and solid manufacturing experience, Phihong Technology delivers high-quality and cost-effective hardware/software prod- Modules ucts based on specific customer needs.
    [Show full text]
  • Annual Report 2020 PDF Data
    Contents KWE Group Corporate Guidelines (1) We strive to further increase corporate value by delivering 02 Aiming for Sustainable Growth customers quality services that meet their needs and earn their confidence. 06 Foundation for Creating New Value (2) We strive to be an organization that grows and expands through logistics business. 08 Top Message (3) We promote communications with stakeholders and disclose corporate information accurately and 15 Report by Six Segments appropriately. (4) We are committed to comply with external regulations, 21 Sustainability Management and compliance monitoring and assessment are built into all levels of the business. 36 Management’s Discussion and Analysis (5) We ensure a safe and healthy work environment where 43 Financial Highlights people are treated respectfully and fairly. (6) We contribute in sustainable community development, 44 Financial Statements with attention to global environmental issues. 62 Investor Information Guide to Buttons Move Back to Previous Page Expectations and Forecasts This annual report contains statements about our expectations and forecasts regarding plans, strategies, and business results related to the future of Kintetsu World Express, Move Forward to Next Page Inc. (KWE). These statements reflect our expectations based on personal beliefs and assumptions that were determined in light of information that was available at the time Print Search PDF Content the report was prepared. There are innumerable risk factors and uncertainties that could affect the future, including economic trends, competition in the logistics industry, market conditions, fuel prices, exchange rates, and tax or other regulatory system considerations. Go to Contents Page Please be well advised that because of these risk factors, actual results may differ from our expectations.
    [Show full text]
  • US FDA System Regulation Vs. ISO 13485:2016 Quality
    US FDA QUALITY SYSTEM REGULATION VERSUS ISO 13485:2016 QUALITY MANAGEMENT SYSTEM REQUIREMENTS NSF INTERNATIONAL 21 CFR § 820 & ISO 13485:2016 ALIGNMENT CHART Author: Robert Ruff, Executive Director, NSF International Researcher: Samuel Brown, Research Associate, NSF International This tool clarifies the corresponding relationships between the US FDA Quality System Regulation and ISO 13485:2016 – Medical devices – Quality management systems – Requirements for regulatory purposes clauses. Use this tool to ensure your quality management system meets applicable requirements of both US FDA and ISO 13485:2016 21 CFR § 820 US FDA QUALITY SYSTEM REGULATION ISO 13485:2016 SPECIFIC DIFFERENCES 820.1 Scope 1 Scope Each manufacturer shall establish and 4.1.1 Quality maintain a quality system that is appropriate 820.5 Quality management for the specific medical device(s) designed No significant difference in requirements. System system, General or manufactured, and that meets the requirements requirements of this part. Management with executive responsibility shall establish its policy and objectives for, ISO 13485:2016 specifies additional detail and commitment to, quality. Management 5.3 Quality Policy 820.20(a) relative to quality policy. For example: 5.3 b), with executive responsibility shall ensure Quality Policy 5.4.1 Quality 5.3 e). ISO 13485:2016 specifically requires that the quality policy is understood, Objectives the quality objectives to be measurable. implemented, and maintained at all levels of the organization. Each manufacturer shall establish and maintain an adequate organizational structure 5.5.1 820.20(b) to ensure that devices are designed and Responsibility and No significant difference in requirements. Organization produced in accordance with the requirements Authority of this part.
    [Show full text]
  • ISO 13485 Operational Procedure QOP-73-02 (A) Design Risk
    QOP-73-02 Design Risk Management Issued by: Quality Assurance Effective Date: 6/6/2011 Rev. A Pg. 1 of 4 Approved: 6/6/2011 5:48 PM - Alan Halko, Quality Manager Risk management/analysis requirements in ISO 13485 Clause 7.3 Design Control and in 21 CFR 820.30 Design Controls are rather weak and indefinite. However, national regulatory interpretations and guidelines clearly (and strongly) clarify that risk analysis must be used in the design of medical devices. ‘ISO 14971, Medical Devices - Application of Risk Management to Medical Devices’ is most frequently cited as a reference, but full compliance with ISO 14971 is generally not required. This procedure together with ISOXpress ISO 14971 Risk Management Software respond to these regulatory guidelines for conducting risk analysis studies in design of medical devices. They generally comply with ISO 14971 Clause 4 Risk Analysis, Clause 5 Risk Evaluation, and Clause 6 Risk Control. However, note that the procedure and the software don’t address the broader ISO 14971 requirements for the overall life cycle risk management (which is normally not expected, unless full compliance with the whole ISO 14971 is explicitly required). I PURPOSE The purpose of this procedure is to provide for a system and instructions, and to assign responsibilities for conducting risk analysis studies in design of medical devices. II APPLICATION This procedure applies to the design and development of new medical devices, including their packaging and labeling, and to existing device modifications and upgrades. III PROCEDURE 1 Responsibilities 1.2 Chief Engineer is responsible for planning risk management activities, determining what risk analysis studies shall be conducted, and at which design stages; for assigning personnel (or external consultants) to conduct the studies; for evaluating the results of the studies; and for implementing any risk reduction measures recommended by the studies.
    [Show full text]
  • Good Practices Systematization for Medical Equipment Development and Certification Process: a Brazilian Case Study
    Health Policy and Technology 8 (2019) 268–277 Contents lists available at ScienceDirect Health Policy and Technology journal homepage: www.elsevier.com/locate/hlpt Good practices systematization for medical equipment development and certification process: A Brazilian case study ∗ Kelly C.D. Lobato a, Ana Paula S.S. Almeida a, , Rodrigo M.A. Almeida a, Janaína M.H. Costa b, Carlos H.P. Mello a a Federal University of Itajubá, Brazil b University of São Paulo, Brazil a r t i c l e i n f o a b s t r a c t Article history: Medical equipment development requires from manufacturers a clear definition of the processes to the Available online 16 July 2019 core team in order to achieve the user safety. Therefore, considering the lack of a specific product de- velopment framework for medical equipment that meets the Brazilian scenario, this work proposes a Keywords: Product development process good practices systematization for medical equipment development. It covers the main Brazilian regu- Medical devices lations that impact on development process of these products. Based on the stage-gates process, the Good practices systematization proposed divides the development process activities into five phases and nine functional Regulatory groups. To each functional group is presented the activities expected to be practiced in each phase, tools that could be used, and the regulations that could guide the execution of the activities. The case study method was used to validate the systematization. Three companies of medical devices were presented to the model and their realities of the development process were compared to the proposed systematic.
    [Show full text]
  • " Who Controls the Vocabulary, Controls the Knowledge"
    Acronyms from Future-Based Consultancy & Solutions "Translation" of some Business, Finance, ICDT acronyms (including several SAP ones), initialims, tech term oddities and techronyms, loaded words and buzzwords to ease the reading of courses, books, magazines and papers: see "anacronym", "ASS" and many others ... (third main version since 1997) ( www.fbc-e.com , updated & corrected twice a month. Release 02-10-2009) " Who controls the vocabulary , 6170+ controls the knowledge " George ORWELL in "1984" Instruction To ease your researches , we are inviting you to use the " search " function within the Menu " edit " Pour faciliter vos recherches, utilisez la fonction " rechercher " disponible dans le menu " Edition " Information Underligned names are identifying authors, editors and / or copyrighted applications ©, ®, ™ FBWPA Free Business White Page Available (www.fbc-e.com ) Acronym Rose salmon is related to acronyms and assimilated terms and concepts. IL / InLin Internet Lingo also called " PC talk" Intelligence Light green color is related to intelligence, business intelligence ( BI , CI ) FBC>s Yellow color is related to FBC>s concepts and methodologies (more on www.fbc-e.com ) Finance Deep blue color is related to Finance and Accounting ( FI ) Note: BOLD acronyms KM Deep green color is related to Knowledge Management ( KM ) and texts are "translated" HR & R Lemon green color is related to HR and recruitment in the list. Mobility Light blue color is related to mobile communication ( MoMo ) Security Red color is related to security and risks management ( RM ) Note : US spelling Virtual Pink color is related to virtual / virtuality ( VR ) & ampersand $$$ temporary files Feel free to copy and distribute this "computer-babble *.001 Hayes JT Fax translator" provided that it is distributed only in its 0 Day FTP server supposed to be moved within original and unmodified state with our name, address, the next 24 hours to another IP .
    [Show full text]
  • Going to the Next Phase !
    http://www.kwe.com Tel: +81-3-6863-6443 Fax: +81-3-5462-8501 Fax: +81-3-6863-6443 Tel: Minato-ku, Tokyo 108-6024, Japan 108-6024, Tokyo Minato-ku, Shinagawa Intercity TowerA-24Fl., 2-15-1 Konan, Konan, 2-15-1 TowerA-24Fl., Intercity Shinagawa Global Logistics Partner Logistics Global Kintetsu World Express ANNUAL REPORT 2017 Going to the Next Phase ! Annual Report 2017 Kintetsu World Express, Inc. Global Logistics Partner Year Ended March 31, 2017 Corporate Philosophy Contribute to the development of a global community through logistics services – by creating new values, sustaining the environment and collaborating with our clients, shareholders and employees. Vision A superior business partner supporting customers’ strategic objectives and activities by providing comprehensive innovative supply chain solutions Guide to Buttons Expectations and Forecasts 02 Going to the Next Phase! 31 Management’s This annual report contains statements about our expectations and forecasts regarding Discussion and Analysis Move Back to Previous Page plans, strategies, and business results relat- 05 Foundation for Creating ed to the future of Kintetsu World Express, New Value 36 Financial Highlights Inc. (KWE). These statements reflect our ex- Move Forward to Next Page pectations based on personal beliefs and assumptions that were determined in light 07 Top Message 37 Financial Statements of information that was available at the time the report was prepared. There are innumer- Print able risk factors and uncertainties that could 14 Report by Six Segments 56 Investor Information affect the future, including economic trends, competition in the logistics industry, market Search PDF Content conditions, fuel prices, exchange rates, and 20 Corporate Governance tax or other regulatory system considerations.
    [Show full text]
  • 2016-2017 Academic Catalog
    Academic Catalog 2016-2017 Table of Contents Important Numbers & Academic Calendar ������������������������������������������������������������������������������������������������������������������������������������������� 3 President’s Greeting ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� 4 Introduction ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������ 5 Admission ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� 8 Records & Registration ����������������������������������������������������������������������������������������������������������������������������������������������������������������������� 11 Academic Information ������������������������������������������������������������������������������������������������������������������������������������������������������������������������� 13 College Costs & Financial Assistance �������������������������������������������������������������������������������������������������������������������������������������������������� 17 Student Services ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������
    [Show full text]