While this may be obvious to the folks posting, I seems worth stating that the reason you have the right to redact is to protect information that is either confidential/proprietary or is protected by privacy rights. These are exceptions to the FOIA rule, and, while we're used to seeing them in warning letters, the rules are the same in this setting, when the FDA is asking you for a redacted copy of your own submission to respond to a FOIA request they received. The FDA is "in the middle" on this issue, as they are going to have to agree with your redactions and defend them if the requestor thinks they were too broad.
In warning letters, you may have seen the "(b)(4)" and "(b)(6)" deletions.
The "(b)(4)" exception is for proprietary info such as trade secrets (confidential info that has economic value in the hands of a competitor).
The "(b)(6)" exception covers privacy issues, such as specific references to individuals.
As you implement your redaction process, you'll want to make a simple table that states what language was blacked out and why (e.g., patient/doctor personal info, proprietary algorithm description, process/testing methods that are custom-made but no patented, etc.). While big companies will involve legal, this doesn't need to be an expensive legal review, as most companies are well aware of the competition and who has what intellectual property. You only need a clear explanation, and technical people love tables with short explanations, as opposed to the long narratives that lawyers like me are trained to write :)
For those who want the full gory legal details of FOIA and FDA, including statutory citations, here's a nice but old letter that covers it:
https://www.citizen.org/sites/default/files/2181.pdfRoger
------------------------------
Roger Cepeda, JD, MBA, RAC
MedTech Law LLC
roger@medtech.lawMobile: 847-421-8361
------------------------------
Original Message:
Sent: 02-May-2018 16:11
From: Anonymous Member
Subject: 510(k) Redaction
This message was posted by a user wishing to remain anonymous
Hello Regulatory Colleagues!
I would like to create a procedure for my company on how to redact a 510(k) when requested by the FDA. That being said, I have a couple of questions:
- Does FDA have information anywhere on their process when a FOIA request is received?
- Who should be involved in 510(k) redaction?
- Best practices for 510(k) redaction
Thank you!