Top 10 reasons for FDA 483 citations (Warning Letters) in medical devices in 2022
An audit for medical device companies, also known as a regulatory or compliance audit, is an inspection of a medical device manufacturer's operations, facilities, and quality systems by the U.S. Food and Drug Administration (FDA). The purpose of the audit is to ensure that the manufacturer is in compliance with the regulations and standards set forth by the FDA for the design, manufacture, and distribution of medical devices. This may include reviewing the manufacturer's documentation, such as design controls, production and process controls, complaint handling, and post-market surveillance, as well as observing the manufacturer's facilities and operations. If the FDA finds any non-compliance issues during the audit, the manufacturer may receive a Form 483 or Warning Letter, which may require corrective action to be taken before the FDA will allow the manufacturer to continue to market their medical devices.
Here are the top 10 reasons medical device companies received a Warning Letter during Fiscal Year 2022 (FDA Source Data):
-
The FDA has several requirements for training procedures for medical device companies. Some of the key training requirements include:
Design control training: Companies must provide training to all personnel involved in the design, development, and testing of devices on the design control requirements.
Production and process control training: Companies must provide training to all personnel involved in the production and process control of devices, including quality system requirements and procedures.
Complaint handling training: Companies must provide training to all personnel involved in the complaint handling process on the proper handling, investigation, and documentation of complaints.
Post-market surveillance training: Companies must provide training to all personnel involved in post-market surveillance, including the monitoring and reporting of adverse events.
Recordkeeping: Companies must maintain records of all employee training, including the dates of training, the names of the employees trained, and the content of the training.
It is important for companies to have a written and effective training program that is tailored to the specific device, process and the scope of their operation and be able to demonstrate to the FDA that the employees have been effectively trained on the relevant regulations and standards and the company's quality management system.
-
Proper design change procedures for medical device companies are an important aspect of ensuring compliance with regulations and standards set forth by the FDA. Some key elements of proper design change procedures include:
Design control: Medical device companies must have a design control process in place that includes the identification, documentation, and control of changes to their devices. This process should include a mechanism for evaluating the impact of design changes on device performance, safety, and effectiveness.
Change management: Companies must have a change management process in place that includes the identification, documentation, review, and approval of design changes. This process should include procedures for identifying, evaluating, and controlling the risks associated with design changes.
Document control: Companies must have a document control process in place that ensures that all design change documentation is accurate, complete, and up-to-date. This process should include procedures for the revision, approval, distribution, and retention of design change documentation.
Risk management: Companies must have a risk management process in place that includes the identification, assessment, and control of risks associated with design changes. This process should include procedures for evaluating the potential impact of design changes on device performance, safety, and effectiveness.
Verification and validation: Companies must have a verification and validation process in place that includes testing and evaluating design changes to ensure that they meet the intended performance, safety, and effectiveness specifications.
Recordkeeping: Companies must maintain records of all design changes, including the dates of changes, the names of the personnel involved, and the rationale for the changes.
Notifications: Companies must notify the FDA of any changes to their devices that could significantly affect safety or effectiveness through the appropriate regulatory pathways, such as Premarket Notifications (510(k)) or Premarket Approval (PMA) applications.
-
Corrective and Preventive Actions (CAPAs) are an important aspect of a medical device company's quality management system and proper documentation is essential to ensure that CAPAs are effectively implemented and that their effectiveness is tracked. Proper documentation of CAPAs should include:
Identification: The CAPA documentation should clearly identify the problem or non-conformance that the CAPA is addressing, including a description of the problem, the location, the date and time, and the name of the person who identified it.
Root Cause Analysis: The documentation should include the results of the root cause analysis, including the identification of the root cause(s) of the problem and any contributing factors.
Corrective Action: The documentation should clearly describe the corrective action(s) taken, including any changes made to the process or product, and the rationale for the action.
Preventive Action: The documentation should clearly describe the preventive action(s) taken, including any changes made to the process or product, and the rationale for the action.
Implementation: The documentation should include the date(s) when the corrective and preventive actions were implemented, and the names of the personnel responsible for the implementation.
Verification: The documentation should include the results of the verification process, including any testing or inspection performed to ensure that the corrective and preventive actions have effectively addressed the problem.
Closure: The documentation should include the date when the CAPA was closed.
-
Quality audits for a medical device company are a systematic and independent examination of the company's quality management system to determine whether it conforms to the company's own quality policies and procedures, as well as to the applicable regulatory requirements. The main goal of a quality audit is to identify areas of non-conformance, and to evaluate the effectiveness of the quality management system in addressing these issues.
Quality audits can be performed by internal or external auditors. Internal audits are typically performed by the company's own employees, while external audits are performed by third-party organizations or regulatory agencies such as the FDA.
-
MDR stands for Medical Device Reporting, it is a regulation set by the FDA that requires medical device manufacturers, importers, and user facilities to report certain events to the FDA. The purpose of MDR is to ensure the safety and effectiveness of medical devices by monitoring their performance once they are in use, and to identify and correct problems in a timely manner.
MDR procedures include the following steps:
Identification: The first step in MDR procedures is to identify when a reportable event has occurred. This can include incidents such as device malfunctions, failures, or injuries that are related to the use of a device.
Reporting: Once a reportable event has been identified, the manufacturer, importer, or user facility must report it to the FDA as soon as possible, but no later than 30 calendar days after becoming aware of the event.
Investigation: The FDA will review the report and may conduct an investigation to determine the cause of the event and assess the potential risks to public health.
Analysis: The FDA will analyze the information provided in the report and may request additional information from the manufacturer, importer, or user facility.
Action: Based on the results of the investigation and analysis, the FDA may take appropriate action, such as issuing a recall, warning letter, or other enforcement action.
Follow-up: The manufacturer, importer, or user facility must provide follow-up information to the FDA, including any corrective actions taken in response to the event.
-
Managing nonconforming materials is an important aspect of a medical device company's quality management system. The goal is to identify, document, and control nonconforming materials to ensure that they do not impact the safety, effectiveness, or quality of the finished device. Some key steps in managing nonconforming materials include:
Identification: The first step in managing nonconforming materials is to identify them. This can be done through inspections, testing, or other means of identifying nonconformities.
Documentation: Once nonconforming materials have been identified, they should be properly documented. This should include a description of the nonconformity, the location, the date and time, and the name of the person who identified it.
Isolation: Nonconforming materials should be isolated and clearly marked to prevent them from being used or processed further.
Evaluation: An evaluation should be conducted to determine the root cause of the nonconformity and to assess the potential impact on the finished device.
Disposition: Based on the evaluation, the nonconforming materials should be dispositioned. This could include rework, repair, or scrapping.
Approval: All dispositions should be approved by a qualified person and all the documentation of the disposition should be kept.
Verification: The effectiveness of the disposition should be verified to ensure that it has effectively addressed the nonconformity and that the finished device is not impacted.
Recordkeeping: All aspects of the nonconforming material process should be thoroughly documented and tracked, including the identification, documentation, isolation, evaluation, disposition, and verification of the nonconforming materials.
-
Ensuring that purchased materials conform to requirements for medical devices is an important aspect of a medical device company's quality management system. The goal is to ensure that the materials used in the manufacturing of the device are of appropriate quality and comply with the relevant regulations and standards. Some key steps to ensure purchased materials conform to requirements include:
Procurement: The first step is to establish a procurement process that ensures that materials are obtained from qualified suppliers who can provide the necessary quality and compliance documentation.
Supplier Qualification: Before purchasing materials, the supplier should be evaluated to ensure that they meet the company's requirements for quality and compliance. This can include a review of the supplier's quality management system, compliance history, and certifications.
Specification: Clearly defined specifications for the purchased materials should be established, including the material properties, performance requirements, and any regulatory or standards requirements.
Inspection: The purchased materials should be inspected upon receipt to ensure that they meet the established specifications.
Testing: The purchased materials should be tested as necessary to ensure that they meet the established specifications, including any relevant regulatory and standards requirements.
Verification: The supplier should provide appropriate documentation, such as test reports, certifications, or other quality documentation, to verify that the purchased materials meet the established specifications.
Recordkeeping: All aspects of the purchased materials process should be thoroughly documented, including the procurement, supplier qualification, inspection, testing, and verification of the purchased materials.
Continual improvement: The company should establish a system to evaluate supplier performance, and continuously monitor and evaluate suppliers to ensure that they meet the company's quality and compliance requirements over time.
-
Process validation is the process of collecting and evaluating data, from the process design stage through commercial production, which establishes scientific evidence that a process consistently produces a product meeting its predetermined specifications and quality characteristics. Process validation is an essential part of a medical device company's quality management system and is required by regulatory agencies such as the FDA.
Process validation typically involves the following steps:
Process design: The first step in process validation is to design the process and establish process parameters and controls. This includes identifying critical process parameters, and determining the appropriate methods, equipment, and materials to be used.
Process qualification: The next step is to qualify the process through a series of tests and studies to ensure that it is capable of consistently producing a product that meets the established specifications and quality characteristics.
Ongoing monitoring: Once the process has been qualified, ongoing monitoring and measurement of the process should be performed to ensure that it continues to produce a consistent product. This may include ongoing testing, inspections, and monitoring of critical process parameters.
Change control: Any changes made to the process must be evaluated to ensure that they do not negatively impact the process or the quality of the finished product. A change control process should be in place to ensure that all changes are properly evaluated and approved before being implemented.
Recordkeeping: All aspects of the process validation process should be thoroughly documented, including the process design, process qualification, ongoing monitoring, and change control.
Revalidation: The process should be periodically revalidated, to ensure that it continues to consistently produce a product that meets the established specifications and quality characteristics.
It is important for companies to have a written and effective process validation program that is comprehensive, easily accessible, and easily understood by all relevant personnel. It should be part of the company's overall quality management system and be able to demonstrate to regulatory authorities that the company can effectively validate its processes and ensure that they consistently produce a product that meets the established specifications and quality characteristics.
-
Receiving and evaluating complaints is an important aspect of a medical device company's quality management system. The goal is to ensure that complaints are handled in a timely and effective manner, and that any issues identified are addressed to improve the safety and effectiveness of the device. Some key steps in receiving and evaluating complaints include:
Reporting: The first step in receiving complaints is to establish a reporting process that allows customers, patients, and other stakeholders to easily report complaints. This process should be easily accessible and clearly communicated to customers.
Evaluation: Once a complaint is received, it should be evaluated to determine the nature of the issue and to assess the potential impact on the safety and effectiveness of the device.
Investigation: An investigation should be conducted to determine the root cause of the issue, and to gather additional information as needed. This may include reviewing records, interviewing personnel, and conducting additional testing or inspections.
Action: Based on the results of the investigation, appropriate corrective and preventive actions should be developed to address the issue and prevent it from recurring.
Implementation: The corrective and preventive actions developed should be implemented as soon as possible.
Verification: The effectiveness of the corrective and preventive actions should be verified to ensure that they have effectively addressed the issue and prevented it from recurring.
Communication: The complaint should be communicated to all relevant parties, including management, employees, and regulatory authorities as appropriate.
Recordkeeping: All aspects of the complaint process should be thoroughly documented, including the complaint, the investigation, the action taken, and the verification of the effectiveness of the action.
It is important for companies to have a written and effective complaint handling process that is comprehensive, easily accessible, and easily understood by all relevant personnel. It should be part of the company's overall quality management system and be able to demonstrate to regulatory authorities that the company can effectively receive, evaluate, and address complaints to improve the safety and effectiveness of the device.
-
Corrective and Preventive Actions (CAPAs) are an important aspect of a medical device company's quality management system and are used to address non-conformance issues and prevent them from recurring. Proper completion of CAPAs involves several key steps:
Identification: The first step in completing a CAPA is to identify the problem or non-conformance. This can be done through internal or external audits, customer complaints, or other means of identifying problems.
Investigation: Once the problem has been identified, an investigation should be conducted to determine the root cause of the problem. This should include gathering and analyzing data, interviewing personnel, and reviewing relevant documentation.
Action: Based on the results of the investigation, appropriate corrective and preventive actions should be developed to address the problem and prevent it from recurring. These actions should be specific, measurable, and achievable.
Implementation: The corrective and preventive actions developed should be implemented as soon as possible. This may involve revising procedures, retraining personnel, or making other changes to the process or product.
Verification: Once the corrective and preventive actions have been implemented, they should be verified to ensure that they have effectively addressed the problem and prevented it from recurring. This may include testing, inspection, or other means of evaluating the effectiveness of the actions.
Documentation: All aspects of the CAPA process should be thoroughly documented, including the identification, investigation, action, implementation, and verification of the corrective and preventive actions.
Closure: Once the CAPA is completed, it should be closed and reviewed to ensure it was completed properly and effectively.
Communication: CAPA should be communicated to all relevant parties, including management, employees, and regulatory authorities as appropriate.
It is important for companies to have a written and effective CAPA process that is comprehensive, easily accessible, and easily understood by all relevant personnel. It should be part of the company's overall quality management system and be able to demonstrate to regulatory authorities that the company can effectively identify and correct non-conformance issues and prevent them from recurring.
whether you need assistance in responding to a Warning Letter or in establishing a quality system to avoid them entirely, call us.
