Pursuant to point (ab) of section 23.4 of EU MDR Annex I, the IFU with respect to the device's software function(s) must contain minimum requirements concerning hardware, IT networks characteristics and IT security measures, including protection against unauthorized access, necessary to run the software as intended.
But in addition, the IFU with respect to the device's software function(s) must also contain whatever other particulars from section 23.4 that are relevant to those software aspects. For example, with respect to software patches, updates, and the like, the IFU would need to contain corresponding attention to point (k) (i.e., information needed to verify whether the software patches or updates are properly installed). Similarly, points (h) and (i) of section 23. 4 could also require IFU attention regarding instructions to the user for software patches, updates, etc.
Ultimately, the EU MDR allows us wide liberty and flexibility regarding the medium, format, content, legibility, and location of device software instructions for use (see section 23.1 of Annex I). Therefore, the parameters you choose for those just need to be appropriate to the particular device, its intended purpose, and the technical knowledge, experience, education or training of the intended user(s). Be sure to include software human factors / usability considerations here too.
In practice regarding IFU for device software, my clients typically embed the post-installation operating IFU within the software (thus constituting eIFU and thus triggering the corresponding legislative requirements for eIFU) rather than providing the software IFU in paper format. Instructions regarding software installation, updates, patches, etc., could also be provided digitally as well; either via software update reminders coming from within the software application, or via other electronic means. And paper instructions are of course allowed also.
------------------------------
Kevin Randall, ASQ CQA, RAC (Europe, U.S., Canada)
Principal Consultant
Ridgway, CO
United States
© Copyright 2023 by ComplianceAcuity, Inc. All rights reserved.
------------------------------
Original Message:
Sent: 01-Aug-2023 11:49
From: Christoph Kiesselbach
Subject: Software information in IFU - MDR
Hi Anon,
could you maybe provide more context? Does your device have an IFU for the user that describes the medical functions and a separate service manual? Then I would assume that you could both formally consider as "IFU" in the sense of Annex I that are just adressed at different types of users.
Best regards, Christoph
------------------------------
Christoph Kiesselbach
Reutlingen
Germany
Original Message:
Sent: 31-Jul-2023 21:00
From: Anonymous Member
Subject: Software information in IFU - MDR
This message was posted by a user wishing to remain anonymous
We have software modules integrated in our device . What information does the IFU need to contain with respect to the software function, as all the software upgrades are managed by the service personnel and are part of the service manual. This came up as a query during the MDR audit.
thanks