Regulatory Open Forum

 View Only
Expand all | Collapse all

management responsibility

  • 1.  management responsibility

    Posted 02-Mar-2012 14:35
    Hi there, I'm wondering if someone can clarify something for me regarding what is an apparently widely accepted practice in smaller bio-tech and pharmaceutical companies.  That is, the practice of outsourcing Quality to consultants.  My interpretation of 21 CFR 820.20(3) indicates that an actual employee of the company is required to be responsible for the application of the Quality System and the approval of Quality functions.  Common practice however, has this function being filled by consultants.  

    My questions are:

    1.  Do the current federal regulations prohibit the outsourcing of the lead Quality function (i.e., "Head of Quality")?

    2.  Does 21 CFR 820 only apply to medical device manufacturers, or is it (as it is my understanding) more widely applicable to all GMP operations including bio-pharmaceuticals?

    I am fairly new to the study of Regulatory Affairs, although I have been employed in GMP Pharmaceuticals for well over a decade.

    -------------------------------------------
    Karen Mullin
    Meridian Biogroup, LLC
    Frederick MD
    United States
    -------------------------------------------


  • 2.  RE:management responsibility

    Posted 02-Mar-2012 23:26
    Hello Karen,

    Your interpretation of the Management Representative is probably the most correct, however, the regulation states that the company must have a Management Representative.  The regulation (or ISO 13485 standard) does not state who this must be, but the regulation states the responsibilities of this person - not whether consultant or not.  In my experience, not having a "permanent" employee of the company in this role is highly frowned upon by FDA, Notified Bodies, and Registrars.  I have seen small companies or virtual companies that have a contractor that takes the Management Representative role. In fact, the Management Representative is typically the Quality/Regulatory Manager, but have seen different positions take this role like the President or Operations Manager.

    1. No (not necessarily), but as stated this is frowned upon if done.  The reasons that has been explained to me is that contract employees do not have any ownership, interest, or accountability to the company.  This can be done to have a contract consultant taking this role, though this must be clearly defined in their contract with the company.  And of course, there should be a job description in place defining these responsibilities and the position who is actually the Management Representative.

    2. This is interpreted to apply to medical device manufacturers, however, there are other segments of the industry that can be compliant.  In fact, many bio-tech companies, combination product companies, and biologics companies follow 21 CFR 820 (and sometimes the 21 CFR 211 also).  The difficulty is that some interpret the 21 CFR 820 QS Regulation more differently that the GMPs.  They are looking at different items and must apply different items, i.e. GMPs have no Management Review, where 21 CFR 820 does.

    The Management Representative should be defined who this is by position, the job description should state the responsibilities, and this can be any individual.  Hope that helps clarify the requirement for a Management Representative in your quality management system.

    -------------------------------------------
    Richard Vincins RAC
    Vice President, QA
    Emergo Group Inc
    Austin TX
    United States
    -------------------------------------------




  • 3.  RE:management responsibility

    Posted 03-Mar-2012 14:00
    From a Notified Body perspective, I would agree with Richard. The use of consultants to support QA / RA activities is extremely common. But that's a different animal.

    I think there's a clue in the title Management Responsibility. You can always outsource activities, you can never outsource responsibilities.

    Thus top management should be the people to answer questions relating to their responsibilities, not the consultant. I've only had to enforce this on a handful of occasions over the years (since consultants generally know this), things tend to get rather exciting at that point.

    I have seen a few examples where the consultants are formally brought into the company as part-time employees, which may make it workable.


    -------------------------------------------
    Roland Cooke
    SGS Systems & Services Certification
    -------------------------------------------








  • 4.  RE:management responsibility

    Posted 04-Mar-2012 21:34

    This is an interesting topic that I wish I had more time to discuss, but a notified body is playing a fairly large role in my life right now, so I'll just share some hurried thoughts/questions. In spite of the references to notified bodies, I believe we are talking about 21 CFR Part 820?  Here are some pertinent passages:

    (n) Management with executive responsibility means those senior employees of a manufacturer who have the authority to establish or make changes to the manufacturer's quality policy and quality system.

    It seems clear to me that the authority to establish or make changes to the quality policy and quality system cannot be outsourced.

    3) Management representative.  Management with executive responsibility shall appoint, and document such appointment of, a member of management who, irrespective of other responsibilities, shall have established authority over and responsibility for: (i) Ensuring that quality system requirements are effectively established and effectively maintained in accordance with this part; and (ii) Reporting on the performance of the quality system to management with executive responsibility for review.

    These roles are different than those of "management with executive responsibility." I am not sure why they cannot be outsourced.

    21CFR 820 is part of the FDA's medical device regulations. See Parts 210-11 for similar FDA regulations applicable to pharmaceuticals.

    -------------------------------------------
    Julie Omohundro RAC
    RAQA Infrastructure Services
    Durham NC
    United States





  • 5.  RE:management responsibility

    Posted 05-Mar-2012 08:59
    Hello all,

    My brief response.  Yes, using consultants to oversee Quality Systems is frowned upon.  We are a small pharma company and we were cited for outsourcing our head of Quality.  He is now an employee.


    -------------------------------------------
    Alison Trado
    Regulatory Affairs Manager
    Hill Dermaceuticals, Inc.
    Sanford FL
    United States
    -------------------------------------------








  • 6.  RE:management responsibility

    Posted 06-Mar-2012 10:25
    I agree with previous responses that a non-employee should not have ultimate responsibility for the quality system.  However, as long as the Management Representative is a company employee, consultants and contractors can perform various QA functions.  But, of course, it's important to ensure that the Management Rep is aware of and concurs with the consultant/contractor's actions.  In very small companies the Management Rep may not have a quality title, but that really doesn't matter if the MR understands and fulfills their responsibilities.  Many small companies just can't afford to have a seasoned QA person on staff; in that case it's far better to utilize a consultant who can quickly and accurately resolve QA issues that to rely only on your internal expertise. 
     -------------------------------------------
    Pamela Papineau, RAC (US, EU)
    Delphi Medical Device Consulting, Inc.
    Ayer, MA 01432
    USA
    -------------------------------------------








  • 7.  RE:management responsibility

    Posted 06-Mar-2012 15:01
    To share my two cents:

    Regarding MR, management with exec responsibility shall appoint MR, "a member of management,... authority over and responsibility for..." See 21 CFR 820.20(b)(3).

    "A member of management" is equivalent to an employee functioning as management.
    The duties and responsibilities of MR can't be delegated to a non-employee.  But the services (e.g, projects or tasks) can be delegated to a non-employee (e.g., consultants or contractors).

    If  the duties and responsibilities of MR are delegated to a non-employee, it violates 21 CFR 820.20(b) for "failure to establish and maintain an adequate organizational structure..."

    Regarding outsourcing services, 
    Are your consultants or contractors qualified based on specified requirements? Do you have an SOP how to qualify your consultants and contractors?  If the outsourcing process is not done pursuant to applicable regulations (21 CFR 820.50), it violates 21 CFR 820.50 "for failure to establish and maintain procedures to ensure that all purchased or otherwise received product and services conform to specified requirements."

    Regarding personnel,
    Each manufacturer is required to have sufficient personnel with the necessary education, background, training, and experience to assure that all activities are correctly performed.  See 21 CFR 820.25.
    When you have your consultants work on your projects and consultants fail to get the jobs done in compliance with the applicable regulations or if your MR fails to correctly perform his activities by exercising his/her duties and responsibilities, this could also manifest your failure to have sufficient personnel with the necessary education, background, training, and experience to assure that all activities are correctly performed in violation of 21 CFR 820.25. 


    David

    -------------------------------------------
    C. David Lim, Ph.D., RAC, ASQ-CQA
    www.regulatorydoctor.com
    Floyd VA
    United States
    -------------------------------------------








  • 8.  RE:management responsibility

    Posted 06-Mar-2012 15:37
    My two cents;

    One way to look at this is the following; Whether Pharma or Medical Devices, since quality assurance is the conscience of the organization it has to be aligned with the overall mission of the organization and mission of quality and management.  Outsourcing this incredible responsibility is dangerous and frankly bad practice. Outsourcing quality control (tactics) is not that unusual but again the mission and vision have to aligned with mission of management and the company. Regarless of outsourcing, the sponsor or company is ultimately accoutable.

    Outsourcing the tactics and maybe strategy for quality is pretty typical especially for companies that are starting up or quite small but outsourcing the responsibility and accountability is setting a company up for problems later on.

    My experience with outsourcing is the committment and dedication to the company and competing priorities.  It can work but takes a lot of work.

    Two areas as I see as critical in any organization are quality and regulatory; both of which are typically thought of last in new organizations.  For me, these two areas are key to success and if a company is serious about pharmacutical development of medical device development and approvals, they should take it seriously and have the right management and accoutability in-house.  How to the get the job done is where the outsourcing can occur but never ever outsource the management responsibilities or duties and keep the CEO/COO abreast of issues as ultimately the CEO is where the buck stops.

    Looks like a lot of alignment on this incredibly critical topic.

    -------------------------------------------
    Darlene Rosario
    VP Research Program Management, Oncology
    MannKind Corporation
    Valencia CA
    United States
    -------------------------------------------








  • 9.  RE:management responsibility

    Posted 07-Mar-2012 14:30
    While Pamela is correct in that a Management Representative is a company employee, the regulation goes further [in 820.20 (3)]  to state that the appointment must be documented and the Management Representative must be a member of management.  Additionally, the Management Representative must have established (defined, documented, and implemented) authority over and responsibility for quality system requirements (effective, established, and maintained) and for reporting performance of quality system to executive management.

    It is certainly possible to outsource some of the quality activities, including quality audits for example, but the Management Representative is responsible for all of the quality system as defined in the regulation.

    -------------------------------------------
    Edwin Bills RAC CQE, ASQ Fellow
    Principal Consultant
    Bilanx Consulting LLC
    Sumter SC
    United States
    -------------------------------------------








  • 10.  RE:management responsibility

    Posted 06-Mar-2012 13:38

    @Julie:
    [quote]3) Management representative.  Management with executive responsibility shall appoint, and document such appointment of, a member of management who, irrespective of other responsibilities, shall have established authority over and responsibility for: (i) Ensuring that quality system requirements are effectively established and effectively maintained in accordance with this part; and (ii) Reporting on the performance of the quality system to management with executive responsibility for review.

    These roles are different than those of "management with executive responsibility." I am not sure why they cannot be outsourced. [/quote]

    Consultants typically are not members of management, nor do they have authority (over staff, budgets, etc).

    -------------------------------------------
    Roland Cooke
    SGS Systems & Services Certification
    Rutherford NJ
    United States
    -------------------------------------------








  • 11.  RE:management responsibility

    Posted 06-Mar-2012 22:43
    Roland, I was responding to a statement that, "The role of the required Managment Representative cannot be outsourced."  I still don't see why it can't be outsourced.  Whether it is typical, or even a good idea, is a separate question.  I was wondering if there was some regulatory prohibition of which I was unaware.

    Drifting off topic, I have never figured out why this role is called "management representative."  The "management" part is clear, but I see nothing in the responsibilities assigned to the management representative that I would describe as "representing."




  • 12.  RE:management responsibility

    Posted 08-Mar-2012 08:34

    Hi Julie,
    I'm not aware of any "regulatory" prohibition to appoint a consultant as the Management Representative.  In fact, the regulation does not prohibit delegation.  I believe the key question is - can it be outsourced?  By experience I've never seen a company appoint a consultant as the Mgt Rep - considering the level of responsibility and authority of this position within the organization; however, my opinion is irrelevant form a legal and regulatory standpoint.  It may be useful to understand from members if there is a precedent, such as FDA citations of other on this matter.

     

    FDA states in the QSR preamble (Federal Register / Vol. 61, No. 195 / Monday, October 7, 1996 / Rules and Regulations) - that Management with executive responsibility is that level of management that has the authority to establish and make changes to the company quality policy. The establishment of quality objectives, the translation of such objectives into actual methods and procedures, and the implementation of the quality system may be delegated. The regulation does not prohibit the delegation. However, it is the responsibility of the highest level of management to establish the quality policy and to ensure that it is followed.  (See United States v. Dotterweich, 320 U.S. 277 (1943), and United States v. Park, 421 U.S. 658 (1975).)

     

    The Mgt representative must be a member of the organization-management and is appointed by Mgt with Executive Responsibility.  This appointment must be documented.

     

    In summary, delegation of these responsibilities are not prohibited, but careful considerations must be taken; including potential conflicts of interest.  In my opinion a company should not outsource such responsibility and authority, but again, it's a matter of what legal/regulatory precedents have been established, if any. 

     

    It is important to note that top management  are those FDA will target  to enjoin, fine, or prosecute in the event of major noncompliance.  See, for example, United States v. Prigmore, 1996 WL 46430 (D. Mass, 1996); United States v. C.R. Bard, Inc. 848 F. Supp. 287 (D. Mass. 1994); and United States v. Pagones, No. 88-0581-CR (S.D. Fla. 1988)

     

    Again, I encourage members to continue to comment on this subject and share any regulatory/legal precedents, if possible.


    ----------------------------------
    Raymond Seda, MBA, RAC                                               
    Associate Director, Regulatory Affairs 
    Zimmer, Inc - Latin America

    -------------------------------------------








  • 13.  RE:management responsibility

    Posted 08-Mar-2012 10:20
    "the translation of such objectives into actual methods and procedures, and the implementation of the quality system may be delegated. The regulation does not prohibit the delegation."

    Here is how I interpret the term "delegation" in relation to the above statement:  

    The term "delegation" is an act of entrusting another with authority or empowering another to act as an agent or representative.

    Pursuant to the relevant and applicable laws, and regulations including the case laws referenced in the previous post, the meaning and scope of the term "delegation" of MR's duties and responsibilities (e.g., authority over and responsibility for...), in particular within the context of 21 CFR 820.20 in the US, applies for among employees (consultants excluded) with adequate education, background, training and experience...for the activities (to be) performed as the MR in an organization. In other words, "MR's legal duties and responsibilities" (e.g., authority over and responsibility for) are non-delegable unless it is done so among qualified employees.  

    However, some activities of the MR (e.g., activities relating to improving quality as part of the implementation of the quality system) are delegable to a non-employee (e.g., consultant), assuming that the said non-employee has been adequately qualified (e.g., relevant SOPs; defined, documented and implemented and followed).


    David
    -------------------------------------------
    www.regulatorydoctor.com
    Floyd VA
    United States
    -------------------------------------------








  • 14.  RE:management responsibility

    Posted 09-Mar-2012 11:42

    My earlier response to the discussion got posted separately, but if you review the regulation in detail it seems to the intent of t FDA intended for the Management Representative to be an employee. 

    The regulation says, "21 CFR 820.20(b)(3) Management Representative. Management with executive responsibility shall appoint, and document such appointment of, A MEMBER OF MANAGEMENT who, irrespective of other responsibilities, shall have established authority over and responsibility for: ...

    It has also been stated by FDA's Office of Compliance, that while Management with Executive Responsibility may delegate authority to carry out Management Responsibility, they may not delegate responsibility for ensuring requirements are met.

    It may be interpreted in various manners, but it seems clear that FDA's intent in identifying that a MEMBER OF MANAGEMENT may be appointed as Management Representative that they should be an employee.  It is difficult to interpret a "Member of Management" as a non-employee.

     
    -------------------------------------------
    Edwin Bills RAC  ASQ Fellow, RAC
    Principal Consultant
    Bilanx Consulting LLC
    Sumter SC
    United States
    -------------------------------------------








  • 15.  RE:management responsibility

    Posted 05-Mar-2012 09:09
    Thanks to all for replying.  

    Please allow me to clarify; my concern is currently based on the issue of a consultant being introduced as "the Head of Quality".  I am not sure if this is "officially" true, and whether or not there is an actual employee of the company who is "officially" responsible for the quality system, however I do know that this consultant is signing all of the quality documents.  Part 820 does seem pretty clear for Medical Device companies, however this is not a medical device company, and 210/211 are not nearly as specific regarding this issue.  The company is currently entering a phase of GMP manufacturing for Clinical Trial of a biopharmaceutical (protein-based) product.

    Does anyone know what sort of regulatory exposure this company is at risk for in this situation?

    -------------------------------------------
    Karen Mullin
    Meridian Biogroup, LLC
    Frederick MD
    United States
    -------------------------------------------








  • 16.  RE:management responsibility

    Posted 05-Mar-2012 09:15
    Apologies to both Alison and Elizabeth, somehow I missed BOTH of your replies in my original reading of the topic thread!

    That being said, I would still appreciate additional support before I broach this topic with management.  Can anyone supply regulatory references?

    Alison, would it be at all possible for you to tell me how the citation your company received was phrased?  THAT would be immeasurably helpful!

    -------------------------------------------
    Karen Mullin
    Meridian Biogroup, LLC
    Frederick MD
    United States
    -------------------------------------------








  • 17.  RE:management responsibility

    Posted 06-Mar-2012 13:39
    Karen;
    I know of several instances - my own personal experience and for colleagues - who have acted as the "virtual" QA person for small biopharma companies, where they had little or no quality persons onboard. These consultants have performed a variety of quality-related tasks including the review and sign-off of batch records and other documents requiring QA sign-off.

    As a short-term solution this is closely within (or should I say not outside of) the bounds of the requirements stated under 21 CFR 211 Subpart B Organization and Personnel, where the language of the requirements doesn't preclude that consultants perform these responsibilities.  If you look at EU GMPS Chapter 1 Quality Management and Chapter 2 Personnel the lines get even tighter and it is hard to imagine that a consultant would satisfy the expectations for the Qualified Person under these guidelines.  The same expectations of regulators hold - that there are sufficient number of adequately trained and experienced personnel and there are job descriptions defining the work.

    As others have suggested this situation would come under close scrutiny by regulatory inspectors.

    Regardless, this is a fragile line to walk and one where the risk lies squarely with senior management who have responsibility to ensure that there are adequate resources for planning and performing all the tasks and activities under GMP manufacturing - thus what if the consultant fails to perform adequately and competently and the batch records are suspect - what then is the appropriate corrective action when it's a consultant or what if the consultant just leaves the job and now there is no one to hand off the work to.  There is a batch failure and an extensive deviation investigation is required and is the consultant available to drive this in the absence of other QA personnel?  The risks here increase as manufacturing stages progress.

    I have known situations where the senior management (actually VC guys acting as management) did not recognize that there was a risk even when the consultant indicated that a more formalized quality unit needed to be defined within the company and that continuing to just rely on having a consultant sign off on documents was not feasible in the long run.

    You mention the company is entering a phase of GMP manufacturing for Clinical Trial of a biopharmaceutical (protein-based) product.
    At an early stage of development with a biopharma product, the processes for manufacture are still in development and specifications are evolving, and perhaps a situation as you describe where the consultant is signing quality documents is tolerable in the short-term; but as GMP manufacturing for CTM continues to ramp up as your clinical program moves along - then specifications are further and more fully defined and manufacturing processes nailed down - it is in the best interest of senior management to move out of such a situation and hire a qualified person on board.  This is not to say a consultant cannot continue to provide valuable input along the CMC continuum but in a capacity of consulting and advising to the in-house quality unit.
     


    -------------------------------------------
    Larry Wallman RAC (US, EU, CAN)
    Quality Systems & Regulatory Compliance
    DS Inpharmatics
    Santa Cruz CA
    United States
    -------------------------------------------