Since the record retention period is based on the end of life, the first step is to define the end of life of the software component.
Typically, hardware component's end of life is tied to reliability testing and/or to warranty period.
Software components are tricky - however, there are various ways to ensure that you retain your QMS records correctly.
1. Look at your software support lifetime and define that as the software EOL - i.e. how long will your company support the software will be the EOL of the software.
- Typically, this is 10 years for commercial software running on a PC/Mac platform (e.g. Windows XP was supported for 15 years with updates, patches, etc.).
- For software running on mobile devices, it is much shorter due to the faster evolution of the mobile OS and the resulting incompatibility issues (e.g. Typical software support for Android is 2 years after which you need to upgrade the software to match the current Android version).
- For a medical device that is software running on a custom OS, it is entirely upto you to define the lifetime/end of life.
2. The other way to do it would be to retain QMS records indefinitely till you are ready to retire the software.
Whichever option you take, define the record retention period.
Hope that helps.
-------------------------------------------
Raajdeep Venkatesan MS, RAC - US, EU
Regulatory Affairs and Quality Assurance Director
Cambridge MA
United States
-------------------------------------------
Original Message:
Sent: 01-16-2015 13:14
From: Maham Ansari
Subject: Record Retention period for software devices
I am trying to determine the record retention period of a device for QMS record retention purposes, including MDR Files. The device in question is a Class II software device (in the US) to be used with a Class I hardware component. It does not have an EOL date. The following is what I have been able to find but it doesn't help for a device that does not have an EOL date. Any insight would be greatly appreciated.
-------------------
Both ISO 13485 and QSR say something similar in that records shall be retained for a period of time at least equivalent to the lifetime/expected life of the medical device but not less than two years from the date of product release.
FDA's draft guidance on Medical Device Reporting says:
"MDR files should be maintained for two years from the date of the event or a period equivalent to the expected life of the device, whichever is greater [see 21 CFR 803.18(c)].
The "expected life of a device" is the time that a device is expected to remain functional after it is placed into use [21 CFR 803.3]. Certain implanted devices have specified "end of life" (EOL) dates. Other devices are not labeled with EOL dates, but are expected to remain operational through activities such as maintenance, repairs, or upgrades.
Thanks in advance,
-------------------------------------------
Maham Ansari, MS, RAC
Senior Manager, Regulatory Affairs & Quality
Focal Healthcare, Inc
Toronto ON
Canada
-------------------------------------------