Regulatory Open Forum

 View Only
  • 1.  Design Specifications (Inputs & Outputs)

    Posted 13-Feb-2024 10:43

    I would appreciate information on which documents could be submitted to a notified body for Design Specifications (Inputs & Outputs) as part of the Technical File document review for a legacy device transitioning to the MDR.

    The context to this is that the medical device has been successfully placed on the EU market under MDD for twenty-plus years as a virtual manufacturer (while that title was still acceptable). The Original Equipment Manufacturer (OEM) was responsible for the design and production. The OEM (now contract manufacturer) is still responsible for the manufacturing and design, but no design changes had taken place since the product launch and there is a remote chance of getting the original documents relating to pre-launch design activities at this stage. 

    Pragmatic suggestions of documents that can be raised (retrospectively) that would satisfy Design Specifications (Inputs & Outputs) will be highly appreciated.

    Any ideas of how others have successfully managed this aspect of the technical file review while transitioning to MDR are welcome. Regards.



    ------------------------------
    Abi Bamigbade
    Head of Quality and Regulatory Affairs
    Kays Medical Ltd, UK.
    ------------------------------


  • 2.  RE: Design Specifications (Inputs & Outputs)

    Posted 13-Feb-2024 12:40
    Edited by Kevin Randall 13-Feb-2024 12:41

    In a nutshell, the "manufacturer" [i.e., the one identified as such (see Article 2(30)) on the label], is responsible for the Article 10(9) QMS requirements for design and development along with the Annex II element 3 design information.  While the "manufacturer" may outsource or delegate the execution of tasking enabling the manufacturer to meet these requirements, the manufacturer cannot relegate to a third party the manufacturer's ultimate responsibility/accountability.

    In cases where prospective design inputs/outputs aren't available (such as if a third party to whom tasking has been outsourced considers the specifics of its deliverables to be of a proprietary nature, or such as due to the legacy age of the subject device), the responsible manufacturer is still required to have corresponding design inputs, outputs, and specifications.  To do this for such scenarios, a "black-box" approach is often the solution. My firm has done this many times for clients. Note that such an approach must still enable the manufacturer to meet the ultimate standard in Annex I(1).  Consequently, if the particular risk or nature of the subject device precludes such conformity using a black-box approach, then such approach would not be allowed.



    ------------------------------
    Kevin Randall, ASQ CQA, RAC (Europe, U.S., Canada)
    Principal Consultant
    Ridgway, CO
    United States
    © Copyright by ComplianceAcuity, Inc. All rights reserved.
    ------------------------------



  • 3.  RE: Design Specifications (Inputs & Outputs)

    Posted 14-Feb-2024 03:04

    Good day Abi,

    Be careful using the words pragmatic and the European Union market together haha.  Your thought process is correct in a device having been on the market for twenty plus years may still need a design specification - design inputs and outputs.  This instance is happening quite often under the EU MDR/EU IVDR for devices which went through design and development years ago where the documentation is not complete (even though requirements like ISO 13485 and FDA design controls have been in place since 1997).  Though more what I have seen is companies changing the product over the years and have "lost" the threads between the original device design and what is currently being marketed.

    There are ways which this can be generated though in your situation can be a bit more challenging if the original design and development, including documentation, is held by an external entity.  Retrospectively a Design Specification or Design Requirements or User Requirements document can be created based on the knowledge, functionality, and intended use of the medical device.  There probably is not an easy way for this, then sitting down and listing out all of the known requirements and specifications.  Advice would be to make sure there are user/marketing requirements for Validation and requirements/specifications for Verification so a clear distinction exists between these.  That would be design inputs - for an existing device on the market this should be fairly straight-forward to compile, just may take time and some creative thinking.  Also do not "back date" anything, generate the documentation today with current date and provide an explanation in the document for how this is being generated retrospectively.

    The challenging part in a design process for this scenario is identifying the Design Outputs because if done by an external entity, you may not have access to this information.  It would be beneficial to open a dialogue to see the type of testing which had been performed.  At a minimum, the testing done as part of product realisation could be identified as part of the design outputs which might be able to link to the design inputs.  Where we found the most challenge is testing done 10+ years ago to an old version of a standard or what might not be considered state of the art today.  This can be definitely more challenging writing justification or rationales for a testing done in 2008 when the recognised standard has been updated a couple times since then.  In fact, have seen companies have needed to repeat testing or validations because there was no history or supportive evidence why testing performed then, is still good today under the Regulations.



    ------------------------------
    Richard Vincins ASQ-CQA, MTOPRA, RAC
    Principal Strategy Consultant
    NAMSA
    ------------------------------



  • 4.  RE: Design Specifications (Inputs & Outputs)

    Posted 14-Feb-2024 03:24

    Thanks Kevin and Richard for your sound advice as always...I still have to figure out fixing this black-hole one way or another. Kevin, I do understand that the onus is on the manufacturer as stated in Annex II element 3 design information, thanks for the reminder all the same. Richard, I like your humour that pragmatism and the European Union market are incompatible, it's a conundrum as things stand. Hopefully this will improve as notified bodies and other regulatory stakeholders get a better grasp of the implementation and surveillance of the MDR.



    ------------------------------
    Abi Bamigbade
    Head of Quality and Regulatory Affairs
    Kays Medical Ltd, UK.
    ------------------------------



  • 5.  RE: Design Specifications (Inputs & Outputs)

    Posted 14-Feb-2024 10:26

    Hello Abi

    My comment below is more from a risk management point of view.

    I think it is important to have good visibility to the design inputs and outputs throughout the device lifecycle. It is hard to believe that "no design changes have been made" in the last 20+ years. It maybe that changes have not been reviewed and documented.

    This is a significant challenge for legacy devices. However, it is important to be diligent about these matters to be able to connect post-market information (adverse events etc.) to your design documentation. This will help you to find gaps to monitor and fix so that your device continues to remain safe and effective.

    Best regards



    ------------------------------
    Naveen Agarwal, Ph.D.
    Problem Solver | Knowledge Sharer.
    Let's Talk Risk!
    @https://naveenagarwalphd.substack.com/
    ------------------------------



  • 6.  RE: Design Specifications (Inputs & Outputs)

    Posted 14-Feb-2024 10:35

    In general, you have to re-create those documents based on the product and current labeling claims. At a minimum, you would likely need:

    • Requirements, aka Design Inputs - generally there is enough in-house knowledge of the product and uses to be able to create these retrospectively
    • Design outputs - may be able to leverage the drawings/processes you use to make the product to create these
    • Summary of V&V testing that shows they outputs meet the inputs  - many companies have had to repeat some testing to fully do this if original is not available or does not meet current state of the art
    • Risk management appropriate documents - all can be created retrospectively and set up to be maintained moving forward but generally require quite a bit of work.

    My suggestion would be to hire someone who has done some of this successfully for other clients and let them help you through it.

    Ginger



    ------------------------------
    Ginger Glaser RAC
    Chief Technology Officer
    MN
    ------------------------------



  • 7.  RE: Design Specifications (Inputs & Outputs)

    Posted 14-Feb-2024 15:41

    Hi Abiola, 

    I am totally aligned with Keven & Richard. 

    The design and conception documentation are required under MDR. They were also required (in a lighter way by the MDD).

    I had this case recently. 

    I recommand you to be back to manufacturing documentations with your physical manufacturer. In my opinion, part of them would already exist (like PFMEA, MQP, DMR, drawings and specifications, packaging transit). The physical manufacturer even if he is not the LM, should appy the ISO 13485 and keep records of production. 

    Others would be to consolidate: design verification and validation protocol and reports - with all applicable standards depending on the product (active, implant, etc.), hazard analysis, design hazard analysis, ... 

    Best way to check is to consolidate a check-list and evaluate gaps and risks. Once you consolidate the DHF, I would recommend to review the quality agreement and introduce critical requirements (at least the product technical specifications & R&r). 

    Hope this helps, 

    Béatrice 



    ------------------------------
    Beatrice NAJEM
    CEO & Founder of quarex consulting LLC
    Belmont MA
    United States
    ------------------------------



  • 8.  RE: Design Specifications (Inputs & Outputs)

    Posted 14-Feb-2024 16:24

    Hello Abi, I forgot to mention a few things.  First, this effort may also be somewhat of a retrospective design history file event.  In so doing, remember that we are still nonetheless required to approach it with scientific objectivity.  Therefore, be careful not to compromise the objectivity and scientific validity of the event by improperly consolidating or capturing documentation.

    For example, it is generally understood that design verification shall precede design validation.  Consequently, if one attempted to consolidate verification and validation together, it would generally undermine and compromise the integrity of the verification and validation campaign.

    Remember also that the design inputs [the phase where applicable standards and various requirements (e.g., critical and non-critical) are to be identified and prescribed] needs to be done before proceeding to the design and verification/validation stages.  Accordingly, don't make the mistake of waiting to identify those design targets (e.g., required conformity with certain standards; risk-ranking of the requirements, etc.) until the verification/validation stage or until the end. Otherwise, your scientific method and DHF will be compromised.

    Also be sure not to overburden the contract manufacturer/designer with a blanket expectation for ISO 13485 conformity.  Would it be nice if they complied with ISO 13485? Sure. Is that a requirement? Not necessarily.  And from a purely legislative/regulatory perspective, not at all.

    On the note of the contract manufacturer/designer, don't wait until the end to get the quality agreement in shape.  I would instead view the quality agreement itself, if part of the DHF at all*, to be a design output that answers the manufacturing design inputs previously created. *But ultimately, it is generally best in my opinion not to mix up design and development controls with purchasing/supplier controls beyond what is needed, for example regarding a contract manufacturer, regarding identifying customer (you're the manufacturing customer) needs, manufacturing design inputs, manufacturing process design (even if such process is acquired off-the-shelf so to speak), manufacturing verification and/or validation, corresponding design transfer, etc.

    In addition, when approaching risk management documentation, my work on the U.S. ISO 14971 standard working group and in risk management file remediation has taught me that it is best to strictly adhere to the terms of ISO 14971 rather than applying or inventing risk terms or concepts that don't match what is in ISO 14971.  For example, the best and proper terms are ones like identification of hazards, sequences of events, hazardous situations, and harms, and doing so via "risk analysis".



    ------------------------------
    Kevin Randall, ASQ CQA, RAC (Europe, U.S., Canada)
    Principal Consultant
    Ridgway, CO
    United States
    © Copyright by ComplianceAcuity, Inc. All rights reserved.
    ------------------------------



  • 9.  RE: Design Specifications (Inputs & Outputs)

    Posted 19-Feb-2024 07:27

    Thanks to everyone for the contributions and insights on this matter.



    ------------------------------
    Abi Bamigbade
    Head of Quality and Regulatory Affairs
    Kays Medical Ltd, UK.
    ------------------------------