Regulatory Open Forum

 View Only
Expand all | Collapse all

FDA and ISO 13485?

  • 1.  FDA and ISO 13485?

    Posted 02-Aug-2019 22:35
    There has been way more rumor than fact on this topic in the last year or two.  Can one of the QMS gurus confirm that, at this point, ISO 13485 isn't even an FDA recognized standard?   I can't find it in the CDRH database, but maybe that's just me.

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------


  • 2.  RE: FDA and ISO 13485?

    Posted 03-Aug-2019 01:51
    Though ISO 13485 is not a recognized Consensus Standard, you may find the Medical Device Single Audit Program (MDSAP) relevant to your search.  See the information provided by FDA here.

    ------------------------------
    Christopher Erwin
    Scottsdale AZ
    United States
    ------------------------------



  • 3.  RE: FDA and ISO 13485?

    Posted 03-Aug-2019 09:53
    This answer is somewhat equivocal.  No, ISO 13485 is not an officially recognized quality system standard.  At the same time, USFDA is a major participant, if not a driver, of the MDSAP program which audits quality systems to ISO 13485 with the addition of country-specific requirements.  So, while the standard is not recognized as a replacement for the QSR regulation, it is 'de facto' recognized that if the ISO 13485 requirements are met as well as the country-specific elements of the QSR, a successful MDSAP audit suffices for all but 'for cause' and PMA-related visits from the FDA.  As most know, FDA has plans to further reconcile CFR requirements with the ISO 13485 QSR requirements with the objective of eventually recognizing ISO 13485 as a QS standard at some point in the future.

    ------------------------------
    James Bonds J.D.
    Director Regulatory Affairs
    Atlanta GA
    United States
    ------------------------------



  • 4.  RE: FDA and ISO 13485?

    Posted 03-Aug-2019 12:13
    I agree with you.  The only official document in the United States is 21 CFR 820, the quality system regulation.  As you point out there's a lot of talk about 13485.  This is not a recognized standard in the United States.  There are very discrete differences between 13485 and 820.  Historically when the quality system regulation or 820 was revised the intent was to match originally with 9001 and subsequently to 13485.  Having done myself about 330 audits worldwide there were many companies certified to 13485 that were deficient in the QS regulations.  The MDSAP is interesting but based on my experience it is being tested because of the absence of sufficient FDA manpower to conduct inspections.

    ------------------------------
    Robert Schiff PhD, RAC, CQA, FRAPS
    CEO
    Schiff & Company, Inc.
    1120 Bloomfield Ave., Suite 103
    West Caldwell, NJ 07006
    rschiff13@aol.com
    973-568-3361
    ------------------------------



  • 5.  RE: FDA and ISO 13485?

    Posted 03-Aug-2019 13:38
    Edited by Julie Omohundro 03-Aug-2019 15:36
    Yes, I'm inclined to think that, from CDRH's perspective, the most/only rational intention was to alleviate CDRH of some of the burden of being the entire world's regulatory inspection agency, given that only CDRH inspections have real credibility, due in large part to the lack of transparency associated with "audits."

    The US is the largest medical device market, and CDRH is stuck with oversight responsibilities for any facility in the world that registers itself as a manufacturer of devices for the US market.  This is a burden CDRH is not, and never will be, resourced to carry .  It allows these companies to claim that their devices are "FDA registered," when FDA knows virtually nothing about them. 

    I think it is a rational goal for CDRH to want lot of these companies to pay for the privilege, and to not have to be responsible for inspecting all of them itself.  This would essentially offset the lack of user fees for inspections.  It would also give FDA some information about these facilities, from the MDSAP audit reports.

    Unfortunately, any such initiative (large, involving multiple players, taking years to implement) is prone to being taken over by other interests. I have come across some indicators that CDRH may have taken MDSAP over from others itself.

    All of which makes it fascinating to a Watchcat. :)

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 6.  RE: FDA and ISO 13485?

    Posted 03-Aug-2019 18:14

    Robert Schiff said, "The only official document in the United States is 21 CFR 820, the quality system regulation.  As you point out there's a lot of talk about 13485.  This is not a recognized standard in the United States."

    This needs a little clarification.

    In medical devices, as in other areas, there are national standards and standards recognized by the regulatory agency.

    In the US, the national standard is ANSI/AAMI/ISO 13485:2016, based on the international standard ISO 13485:2016.

    The US regulatory agency, FDA, doesn't list either the US national standard nor the international standard as a recognized consensus standard.



    ------------------------------
    Dan O'Leary CQA, CQE
    Swanzey NH
    United States
    ------------------------------



  • 7.  RE: FDA and ISO 13485?

    Posted 03-Aug-2019 18:38

    The proposal is included in the Spring 2019 Unified Agenda which says, "FDA intends to harmonize and modernize the Quality System regulation for medical devices. The revisions will supplant the existing requirements with the specifications of an international consensus standard for medical device manufacture, ISO 13485:2016. The revisions are intended to reduce compliance and recordkeeping burdens on device manufacturers by harmonizing domestic and international requirements. The revisions will also modernize the regulation."

    Note that the revisions will "supplant" the existing requirements. Merriam-Webster provides multiple definitions, but the applicable one is probably, "to take the place of and serve as a substitute for especially by reason of superior excellence or power".

    A RAPS article from Oct. 22, 2018 says, "CDRH, meanwhile, intends to roll out its revised quality system regulation by April 2019. In an attempt to ease the concerned faces among audience members, Maisel stressed that there will be a public comment period after each step in the process to adopt the rule proposed in May."



    ------------------------------
    Dan O'Leary CQA, CQE
    Swanzey NH
    United States
    ------------------------------



  • 8.  RE: FDA and ISO 13485?

    Posted 04-Aug-2019 01:16
    What is the impact of a national standard "for Regulatory Purposes," if the nation's regulatory agency doesn't recognize it?

    I'm aware that it was published in the Unified Agenda at that the date for the Proposed Rule has now slipped to this fall.  I'm not sure how much weight to give items that are published in the Unified Agenda.  They seem to be like Proposed Rules and draft guidances, which don't always get finalized, or get revised first.  Except that Unified Agenda items are even further upstream, so perhaps more with a somewhat more uncertain outcome.

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 9.  RE: FDA and ISO 13485?

    Posted 03-Dec-2019 15:22
    Didn't see anything about this in the Forum or Focus, not that it couldn't have slipped past me, but I thought I'd do a quick post, for those who are following this and might have otherwise missed it as well.

    FDA has officially postponed the Proposed Rule until April of next year:
    https://www.reginfo.gov/public/do/eAgendaViewRule?pubId=201910&RIN=0910-AH99

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 10.  RE: FDA and ISO 13485?

    Posted 03-Aug-2019 12:35
    Edited by Julie Omohundro 03-Aug-2019 15:44
    Thanks, Christopher and James.

    I'm just trying to fact check a claim on LinkedIn that "Medical device manufacturers that are regulated by the US FDA or EU MDR must meet ISO 13485:2016 requirements."  I didn't think the FDA part was true, but you hear enough weird rumors enough times, at some point you can't help but wonder if it's you and not them.

    This claim was posted on LinkedIn by a "People" named "ECM Notifed Body."  When I search Companies for "ECM Notified Body," only two seem to be involved in medical device certification:

    ECM – Medical Device Certification
    ECM Israel – Medical Devices Certification

    When I try to follow the LI link to their websites, McAfee tell me to "Whoa!"  ECM Israel's listing describes it as an "Italian Notified Body providing efficient and high quality Certification and Testing Services."

    There is also a Company named "
    Ente Certificazione Macchine."  When I click on the LI link to its website, McAfee stays quiet, so I was able to learn that it is "an ISO 17065 Notified Body (1282) and an accredited ISO 17025 Testing Lab (1515 L)."  All three companies post the same logo.

    This could all be due to some of the many glitches in LI's software, a complicated corporate NB structure, and/or perhaps a marketing team that doesn't know much about FDA regulation of medical devices. 

    It has also occurred to me that the EU situation seems ripe for NB-related scams, including the spoofing of legitimate NBs and the creation of fake NBs.  It's clear from posts in the Forum and on LinkedIn that there are plenty of device companies out there that haven't been paying attention, and that are becoming frantic when they realize that the NB ship may have sailed.  A device company that is only just waking up to the realities in the EU seems like an easy target for a scam.


    I did a little googling and found this news release about ECM America:

    https://www.healthcaredive.com/press-release/20180829-ecm-america-mdd-notified-body-launches-us-dedicated-website-ecmamericaco/

    It uses the same logo also.  The announcement states that it also offers ISO 13485 certification, and thereby stands to benefit financially if medical device manufacturers think they must have ISO 13485 to market medical devices in the US.   The announcement doesn't indicate that it has been designated under either MDD or MDR.  When I try to go to its website (
    https://ecmamerica.com/), McAfee tells me to whoa again.

    Anyway, enough time spent on something that, however fascinating, is not a current priority for me.  Maybe one of you guys might want to investigate further....







    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 11.  RE: FDA and ISO 13485?

    Posted 03-Aug-2019 12:45
    Another note is that ISO 13485 is not a harmonized standard under MDR and my understanding is that the QMS requirements under MDR/IVDR are different than those only within ISO 13485.

    ------------------------------
    Christopher Erwin
    Scottsdale AZ
    United States
    ------------------------------



  • 12.  RE: FDA and ISO 13485?

    Posted 04-Aug-2019 03:32
    Julie, don't only trust what Mcafee says :-) The warning is because the website doesn't use a https connection (SSL) yet (https:// instead of http://). SSL is becoming the standard, and increasingly browsers and other programs start to warn about websites not using https. A little too fast in my opinion. The website of ECM in Aachen (Germany-based, www.medi-online.com) is just getting old.

    Nevertheless, I can vouch for ECM in Aachen, I have worked with them as the Notified Body at a previous company I worked for.

    I am quite surprised that there is also an ECM in Italy, also being a Notified Body. One would think that some market research would prevent to brand your company with the same abbreviation as a competitor. I don't have experience with the Italian ECM, so I can't say anything about them.

    Do you have a link to that LinkedIn message so it becomes clear who is actually the author of that US and 13485 claim?

    ------------------------------
    Vincent van der Meer
    Netherlands
    ------------------------------



  • 13.  RE: FDA and ISO 13485?

    Posted 04-Aug-2019 10:53
    Hi Vincent.

    I'm a regulatory professional. I don't trust; I verify. :)  McAfee seems to have high sensitivity, low specificity.  When it comes to cybersecurity, this suits me.  But I'm a regulatory professional, so I don't just weigh risk, I also weigh benefit.  In this case, the ability to visit this website offers no benefit to me, so I'm not willing to assume any risk.

    This link might get you to the original message:

    https://www.linkedin.com/feed/update/urn:li:activity:6561301797657468929/

    If it does, please note that the claim is in the second sentence of the message.  It might also be in the white paper that the message is promoting, but it is the claim in the message that caught my eye.  I haven't looked at the white paper.


    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 14.  RE: FDA and ISO 13485?

    Posted 04-Aug-2019 22:19
    Hey Julie,

    You can easily verify at https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=directive.main which is the NANDO database of all Notified Bodies against all directives.  Dig down to the MDD section at https://ec.europa.eu/growth/tools-databases/nando/index.cfm?fuseaction=directive.notifiedbody&dir_id=13 and you will see it's commonplace for Notified Bodies to have multiple, separate offices in different countries - and legitimately designated.

    ARthur

    ------------------------------
    Arthur Brandwood PhD FRAPS
    Director and Principal Consultant
    Brandwood CKC
    Sydney, Australia
    Arthur.brandwood@brandwoodckc.com
    ------------------------------



  • 15.  RE: FDA and ISO 13485?

    Posted 05-Aug-2019 12:33
    Edited by Julie Omohundro 06-Aug-2019 10:37
    Thanks, Arthur.  I did take a quick look at the NANDO database.  The problem is that I can't link those to the "person" on LinkedIn who is named ECM Notified Body, so I can't tell who is claiming that manufacturers must comply with ISO 13485 in order to market their devices in the US. 

    Just speaking for myself, if there is an MDD-designated NB making this claim, that wouldn't positively dispose me toward using it.  However, it could just be an unfortunately off-the-cuff post from someone in their marketing department.  Or, per Vincent's post, it could be another company that is also a designated NB, but not under the MDD.  And, extreme scenario, a fake NB looking to scam some naive little device companies unable to find an NB that will accept them as a client in these crazy times.

    Anyway, I posted a correction as a comment to the article on LinkedIn.  If it is a legitimate representative of the MDD-designated NB that others here have worked with, maybe the correction will make its way to someone who will disabuse marketing of the notion.  Or, if it is some other entity, perhaps it will come to the real ECM's attention.

    In any case, at this point, I've reached my limit on time invested.


    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 16.  RE: FDA and ISO 13485?

    Posted 05-Aug-2019 07:50
    Julie

    I worked with ECM in Aachen too.  Years ago, but there it is.

    ------------------------------
    Ginger Cantor, MBA, RAC
    Founder/Principal Consultant
    Centaur Consulting LLC
    River Falls, Wisconsin 54022 USA
    715-307-1850
    centaurconsultingllc@gmail.com
    ------------------------------



  • 17.  RE: FDA and ISO 13485?

    Posted 06-Aug-2019 04:55
    Hi Julie and Ginger:
    Please be aware there are two EU Notified Bodies who use the initials ECM: ECM-ZERTIFIZIERUNGSGESELLSCHAFT FÜR
    MEDIZINPRODUKTE IN EUROPA MBH in Aachen Germany and Ente Certificazione Macchine, Castello di Serravalle (Bo) Italy. They are very different and from my experience I think you might have the wrong ECM here as I find ECM Aachen to be "very correct" and ECM Italy to have a marketing team whose enthusiasm occasionally gets the better of them!



    ------------------------------
    Neil Armstrong FRAPS
    CEO MeddiQuest Limited
    Peterborough
    United Kingdom
    ------------------------------



  • 18.  RE: FDA and ISO 13485?

    Posted 06-Aug-2019 08:27
    Hi Neil,

    I agree...the ECM in Aachen is very good.  I would use them again...it's the German influence.

    ------------------------------
    Ginger Cantor, MBA, RAC
    Founder/Principal Consultant
    Centaur Consulting LLC
    River Falls, Wisconsin 54022 USA
    715-307-1850
    centaurconsultingllc@gmail.com
    ------------------------------



  • 19.  RE: FDA and ISO 13485?

    Posted 06-Aug-2019 10:11
    Hi Ginger:

    Our conversation is surprisingly topical. I have just had it confirmed to me that ECM Aachen have withdrawn their request for designation under the Medical Device Regulation and will cease to be a Notified Body in May 2020 .... seems neither of us will be using them again!

    The crisis in the EU NB market deepens!

    ------------------------------
    Neil Armstrong FRAPS
    CEO MeddiQuest Limited
    Peterborough
    United Kingdom
    ------------------------------



  • 20.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 12:20
    Neil, apparently I was writing my post about May 2020 while you were writing yours.  FYI, the other ECM has announced that it will get its joint assessment next month:

    http://entecerma.it/news/mdr-2017-745-last-updates

    Isn't it fun to live in such interesting times?

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 21.  RE: FDA and ISO 13485?

    Posted 06-Aug-2019 10:35
    Thanks, Neil.  Perhaps all of this confusion will be resolved come May 2020...

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 22.  RE: FDA and ISO 13485?

    Posted 03-Aug-2019 13:07
    Edited by Julie Omohundro 03-Aug-2019 13:39
    Thanks also to Robert, who was posting while I was replying.  I greatly appreciate all those who take the time to provide information on the Forum.

    I will take on MDSAP another day--if I live long enough, which I suspect a great many people should be hoping I do not.  Talk about rumor (and perhaps something less admirable than rumor) versus fact.

    For now, I will say that I don't see much value in ISO 13485 or the requirements of any regulatory jurisdiction being included in the MDSAP program as long as the bottom line is that the requirements of each MDSAP participant must be met.  Which is to say, I don't see much value in the program.  I'm sure it is supposed to serve someone's interests.  I'm not in a position to know whose.  Nor am I in position to say whether, once everything plays out, those interests will have actually been served, and/or other interests, or no one's interests at all.

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 23.  RE: FDA and ISO 13485?

    Posted 04-Aug-2019 05:48
    Edited by Arthur Brandwood 04-Aug-2019 22:06
    Julie I must take issue with a couple of statements here.

    First that "only CDRH inspections have real credibility".  With respect, the non-US world may see things a little differently.  Certainly FDA QSIT audits are conducted in a very different way to ISO 13485 audits by a Notified Body or by, say, Australia's TGA.  FDA tends to be an adversarial, document based approach.  FDA audits start with a walk through, for sure, but then tend to be conducted by a reviewer spending most of the time sitting in a room having documents brought to them, and the company setting up a "War room" where every bit of paper is screened before supplying it to the auditor.    ISO 13485 audits tend to be far more experiential, with the auditor spending most of their time in the factory observing practices and infrastructure and interviewing workers.  Same is true for MDSAP audits.  I know there are exceptions to this but a as a generalisation these different approaches are pretty common.

    ISO 13485 will be in the first batch of standards harmonized with MDR - as per the recent request to CEN from the commission.  

    Then as for MDSAP.  All MDSAP audits are of course ISO 13485 based.  The latest revision of ISO 13485 included a whole lot more specific stuff on regulatory compliance (and also removed most of the differences with the QSR - which underlies the FDA's published intention to transition to ISO 13485).  MDSAP is meant to be an audit which looks at both quality system integrity AND manufacturers having the systems and evidence that they are capable of maintaining compliance with the countries within scope of the audit.  Given these requirements are included in ISO 13485 it is the natural standard for MDSAP.

    A clarification.  A manufacturer doesn't have to comply with all countries participating in MDSAP.  They have to comply with only those countries in which they are supplying product.  Some of our clients have taken the approach of adding additional countries by iterative variation audits which only assess the procedures related to a new market to be added.  This works well.  

    For manufacturers outside of US and intending to supply global markets, MDSAP is increasingly popular.  It is increasingly manageable increment to a conventional ISO 13485 audit and it gives real benefits - e.g. it avoids the requirement for routine US FDA audits, and it short cuts the very long waits for Brazilian audits which must be done as part of the product registration via ANVISA..  

    In Australia, we are seeing strong MDSAP take-up amongst smaller firms - for many of the above reasons.   Also, since TGA has started to accept US, Canadian and Japanese certifications in combination with MDSAP as a basis for Australian registration we are seeing a lot of foreign firms (including US manufacturers) interested in using MDSAP as a means to speed up access in Australia. 

    [A Quick Plug:  I'll be speaking on this acceptance by TGA of US/Japanese/Canadian approvals + MDSAP during the Asia Pac session at Convergence]

    Finally, some interesting stats.  Close to 100% of Canadian manufacturers have MDSAP (no surprise there as it is required in Canada).  But also, of German manufacturers exporting to the US, around 40% have MDSAP.  Something under 5% of US domiciled manufacturers have MDSAP.  The real experience is mainly outside US.


    ------------------------------
    Arthur Brandwood PhD FRAPS
    Founder and Principal Consultant
    Brandwood Biomedical
    Sydney, Australia
    Arthur.brandwood@brandwoodckc.com
    ------------------------------


  • 24.  RE: FDA and ISO 13485?

    Posted 04-Aug-2019 10:37
    Edited by Julie Omohundro 04-Aug-2019 11:55
    Arthur, thanks for taking issue. 

    I'm dedicated to the notion that everyone is trapped in their own little tidepools.  I appreciate your sharing how things look from yours.

    I generally concur with your description of the difference between FDA inspections and other audits, but there are more points of comparison here.  The philosophies are "enforcement" versus "continuous quality improvement."   The approaches are "adversarial" versus "collaborative."  The methodologies are "evidentiary" versus "experiential."

    I'm not clear on the link between the difference in FDA/other approaches and the statement with which you are taking issue.

    I don't think many of key constituencies know anything about regulatory philosophies, approaches, or methodologies, nor do they care.  I think what they know and care about is that they can find out which inspections FDA has conducted and the outcome of those inspections.  For these constituencies, credibility is directly related to transparency.

    I think those constituencies that do know something about regulatory philosophies find enforcement more credible than "continuous quality improvement."  I know I do.  On the other hand, I think the latter is likely to be more helpful to the company that is being audited.  I think that can be a good thing, but I don't think it contributes much, if anything, to credibility.

    As for MDSAP per se, as I said, something I may get to some day.  Last time I looked, it's overarching characteristic (IMO) was that it is a global program without a global home.  That was a couple of years ago now, but if that's still the case, that's a credibility issue for me personally.

    I'm a data junkie, so I appreciate the stats.  What is their source?


    ____________________________
    ROW - Rest of the World.  I have always wondered if other countries use the same or a similar term to refer to all other countries but theirs, or if this is just a US term. Created by Marketing, I think.  I hope other countries don't think of themselves as part of the Rest of the World.





    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 25.  RE: FDA and ISO 13485?

    Posted 05-Aug-2019 07:57
    Hi Julie,

    I work on projects for a client, they had an FDA inspection.cancelled because they could show they had a successful MDSAP audit.   FDA said "well nevermind then".

    So....you may want to look at it sooner rather than later. It is on my list to focus some clients on, but not until they have enough resources/systems ready to be reasonably sure of success.


    ------------------------------
    Ginger Cantor, MBA, RAC
    Founder/Principal Consultant
    Centaur Consulting LLC
    River Falls, Wisconsin 54022 USA
    715-307-1850
    centaurconsultingllc@gmail.com
    ------------------------------



  • 26.  RE: FDA and ISO 13485?

    Posted 05-Aug-2019 12:41
    Ginger, if you have clients that are looking to you for assistance with their quality systems, then yes, it's time to be looking at MDSAP.  I don't have clients looking to me for this, so for me it's just a hobby. :)

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 27.  RE: FDA and ISO 13485?

    Posted 06-Aug-2019 03:23
    'I work on projects for a client, they had an FDA inspection.cancelled because they could show they had a successful MDSAP audit.   FDA said "well nevermind then".'

    That is scary to me ... confidence level of being a patient in the U.S. took a severe nose-dive.


    ------------------------------
    Richard Vincins RAC
    Vice President Global Regulatory Affairs
    ------------------------------



  • 28.  RE: FDA and ISO 13485?

    Posted 06-Aug-2019 08:24
    Well Richard,  

    It is a rather well established large client I am doing contract project for, and they have a global quality organization that is on top of things. And the MDSAP was through one of big well qualified acredited auditing organizations.

    But I get where you are coming from..... This might happen for a small company with a less well regarded AO.

    Think you should be more fearful of hospital staff who don't wash their hands, check sterile device expiration dates or drug concentration (because that's the dispensing pharmacy's job....) .  Just sayin.... That was another fun feedback brief I sat in on last week.

    ------------------------------
    Ginger Cantor, MBA, RAC
    Founder/Principal Consultant
    Centaur Consulting LLC
    River Falls, Wisconsin 54022 USA
    715-307-1850
    centaurconsultingllc@gmail.com
    ------------------------------



  • 29.  RE: FDA and ISO 13485?

    Posted 06-Aug-2019 10:32
    This is what MDSAP was designed to do, and It's way too late to be scared of it.

    All the participating agencies have been accepting MDSAP audits in lieu of doing their own since the official kick-off at the start of 2017.  Canada has gone the extra mile and decided to accept only MDSAP audits.  Not clear if Health Canada is planning to do any of its own audits in the long term.  This should result in a significant cost savings for the agencies.  It's a textbook example of a risk-based approach to the allocation of finite resources.

    Other than that, I concur with Ginger, and expand on her perspective.  The only people responsible for patient welfare are patients and their healthcare providers.  Regulatory oversight of pharmaceuticals and medical devices can impact patient welfare indirectly, but it's pretty limited.

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 30.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 13:30
    Well, if we grant that FDA inspections add to device safety in any way, I am with Richard on this one. I have never had a 3rd party inspection, even from those "big, well-known NBs" that was anywhere close to even the worst FDA inspector any of my companies have had. In addition, it seems that the FDA is more likely to look at things that may impact on product safety, or their awareness of product safety. It has been my experience that many NB auditors are more likely to nit-pick on the words in your quality policy or the pictures in your quality manual than they are to get at issues that potentially have product safety concerns.

    Thus, while MDSAP will make the lives of big multi-nationals much easier (fewer inspections every year) and the resource demand potentially lower for FDA to "cover more ground" it doesn't seem to be very likely to improve device safety for patients and most likely could reduce it. Otherwise, either there have to be a LOT of problems at the Class 1 manufacturers who currently are not inspected, OR we have to concede FDA inspections don't accomplish much anyway.

    g-

    ------------------------------
    Ginger Glaser RAC
    Chief Technology Officer
    MN
    ------------------------------



  • 31.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 15:08
    Edited by Julie Omohundro 07-Aug-2019 16:10
    To coin a phrase, it depends.

    If by device safety, you mean adverse events that are "associated with" (meaning not necessarily caused by) a poorly manufactured device, then maybe.  In my constant struggle to free myself from my tidepool, I talk to quality experts whose knowledge extends well beyond the QSR and ISO 13485 (and 9001, almost not worth mentioning).  The general consensus is that neither one is great for product safety, and that their historical roots explain some of this.

    Food and pharma seem to get more respect.  I was intrigued by an argument that the FAA adopted a more rational model, but again, something I would need to dig into and might or might not live long enough to do that.  In the meantime, this discussion has reminded me that I would like to get back to that expert and see how he's feeling about the FAA lately.

    If you mean safe devices, I'm committed to the philosophy that you can't inspect safety into a medical device.  (Nor can you surveil it in.)

    Someone has noted that the adoption of ISO 13485 would actually raise the bar in some areas.  Sorry I don't remember which ones, but I have a vague recollection that at least one could have an impact on safety.

    As for the Class 1 manufacturers, I'm looking forward to seeing how many quietly delete their CE Marks while maintaining their FDA registration...





    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 32.  RE: FDA and ISO 13485?

    Posted 09-Aug-2019 09:56
    One other observation, which is that 3-5 fair-to-mediocre MDSAP annual audits might in fact be a good bit better for some things than one mediocre-to-not-bad FDA inspection.  Or no FDA inspections at all.

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 33.  RE: FDA and ISO 13485?

    Posted 04-Aug-2019 11:28

    Arthur,

    I have a question about your sentence, "ISO 13485 will be in the first batch of standards harmonized with MDR - as per the recent request to CEN from the commission."

    I could not get the link to open. I infer you refer to "Draft standardisation request to the European Committee for Standardisation and the European Committee for Electrotechnical Standardization as regards medical devices in support of Regulation (EU) 2017/745 of the European Parliament and of the Council and in vitro diagnostic medical devices in support of Regulation (EU) 2017/746 of the European Parliament and of the Council"

    I note the request is to standardize EN ISO 13485:2016+AC:2018 with a "Deadline for the adoption" of May 26, 2020. There is also a footnote that says, "'Adoption' refers to the relevant European standardisation organisation making an adopted standard available to its members or the public."

    As I understand the processes one step is standardization, when mean the standards organization makes it available.

    Harmonization is subsequent step which requires publication in the Official Journal. There are many CEN standards, for example, that are not harmonized. In some cases, the prior version, not the current version, is listed in the Official Journal as a harmonized standard.

    Some standards are never harmonized, such as "EN 13485:2001 Thermometers for measuring the air and product temperature for the transport, storage and distribution of chilled, frozen, deep-frozen/quick-frozen food and ice cream - Tests, performance, suitability".

    Do you have a list of standards for harmonization that extends beyond the list for standardization?



    ------------------------------
    Dan O'Leary CQA, CQE
    Swanzey NH
    United States
    ------------------------------



  • 34.  RE: FDA and ISO 13485?

    Posted 04-Aug-2019 20:28
    HI Dan

    Apologies - I fixed the link it now works.  It's also here.  It is, as you suspected, the link to the request for standardisation.  That request is to CEN to prepare new versions of the standards.  What that actually means is to prepare new versions with updated Z-Annex, the cross references to regulation which in the current versions reference the Essential Principles in the MDD/AIMD/IVDD and which will now need to reference the General Safety and Performance Principles of the MDR and IVDR.  Once done the new CEN standards should then be fairty quickly harmonised.  That's why I say ISO 13485 will be in the first batch harmonised.

    The Technical Content of the new versions should not be changed.  However there's a caveat, the commission couldn't resist changing the technical content in the Z-Annex to ISO 14971.  Whether they do that again remains to be seen and I suspect you have a clearer view of that particular issue than I.

    Arthur

    ------------------------------
    Arthur Brandwood PhD FRAPS
    Director and Principal Consultant
    Brandwood CKC
    Sydney, Australia
    Arthur.brandwood@brandwoodckc.com
    ------------------------------



  • 35.  RE: FDA and ISO 13485?

    Posted 05-Aug-2019 12:46
    Arthur, still hoping you might share the source of these statistics:

    Close to 100% of Canadian manufacturers have MDSAP (no surprise there as it is required in Canada).  But also, of German manufacturers exporting to the US, around 40% have MDSAP.  Something under 5% of US domiciled manufacturers have MDSAP.

    Also, why do you think so few "US domiciled" manufacturers have MDSAP?

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 36.  RE: FDA and ISO 13485?

    Posted 05-Aug-2019 08:25
    Here is a link that I received...https://www.fda.gov/media/123488/download

    ------------------------------
    D Michelle Williams
    VP - Operations
    United States
    ------------------------------



  • 37.  RE: FDA and ISO 13485?

    Posted 06-Aug-2019 04:33
    Good point Julie: ISO 13485 is not an FDA recognized consensus standard ... but an audit to ISO 13485 by a credible (to FDA) auditor may be one of a number of factors that will be considered when FDA decide whether an inspection (particularly an international one) is required. For example: I have a customer in the EU with a number of 510[k]s but not yet a full product range that would give them a marketing break-through in the US: consequently low US sales, few international complaints or report-able incidents and a good recent ISO 13485 audit report are the sorts of things that might persuade FDA that an inspection was not necessary ... yet.

    I would term an ISO 13485 certificate as a discretionary item: not strictly enough but potentially supportive of other evidence that a company's QMS is probably compliant.

    Neil

    ------------------------------
    Neil Armstrong FRAPS
    CEO MeddiQuest Limited
    Peterborough
    United Kingdom
    ------------------------------



  • 38.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 07:49
    There are so many topics in this thread that seems to have gathered much input from several regular contributors here on RegEx. I will try to add some relevant information.

    First, while FDA does not currently recognize ISO 13485, there has been an active work item and it is soon to be published (AAMI TIR 102) to provide a direct comparison including comments on the differences/reconciliation of those issues. This seems to me to be a step forward in helping the industry transition to the direct use of ISO 13485. I don't think any of us outside the agency can predict if that will be enough for the agency to adopt it. We will have to wait and see.

    As for MDSAP, while ISO 13485 is used as the primary set of the requirements, each task also may include country specific requirements. These add the appropriate regulatory requirements (that are not directly in ISO 13485). By doing this, an MDSAP audit adds the audit criteria included in a QSIT based inspection. So do not mistake that MDSAP includes more than ISO 13485. While industry has long held the belief that an audit by a notified body has less risk than one by regulators (e.g,, FDA inspection), I believe that thought may change very soon (May 26, 2020 completes the transition to EU MDR). In fact, there have been some informal discussions on how a notified body can fit in the definition of a regulatory authority.

    I think this is alignment helps the industry have a common set of expectations and we all need to shift our expectations (auditing organizations and industry) to raise the bar to meet the expectations. Good luck!

    ------------------------------
    Regards,
    Mark Swanson, ASQ CBA, CMQ/OE, CQE ASQ, MBA
    Becker MN
    United States
    ------------------------------



  • 39.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 10:04
    Mark, I come back to rumors and facts, transparency and credibility. 

    How do we know what MDSAP includes?  Is the audit checklist posted somewhere?

    Does FDA have the authority to decide whether or not to adopt ISO 13485?

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 40.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 10:26
    As for MDSAP...very transparent. All policies, forms, the audit model and MOST important the companion document that not only includes the audit tasks/question but the audit criteria (what an auditor is supposed to look for). While this is not a checklist (I think checklist auditing is a poor technique), it does give everything (like having the answers to the test). You can find all of this on the FDA (public) website here: https://www.fda.gov/medical-devices/medical-device-single-audit-program-mdsap/mdsap-documents

    As to FDA having authority...not yet positive on this, but they are the ones in charge of compliance and enforcement. So they CAN decide the criteria for doing that. If they make a rule outlining ISO 13485 as the criteria for a quality management system, this sounds like the presumed compliance that exists for ISO 13485 in the EU. I would think that should hold sufficient legal standing.


    ------------------------------
    Regards,
    Mark Swanson, ASQ CBA, CMQ/OE, CQE ASQ, MBA
    Becker MN
    United States
    ------------------------------



  • 41.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 10:34
    Very pleased to hear that FDA has posted all of this MDSAP documentation on its website.  Would rather see it posted on a separate website, dedicated only to MDSAP and managed by its Steering Committee, if it still has one, but I can't have everything...

    Have emailed Mark Duval about FDA's authority; will let you know if I hear back.

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 42.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 12:36
    Marks says they can, via Proposed Rule, but that's not always as easy as it sometimes looks.

    If it publishes the Proposed Rule this fall, I may open up a betting pool on the number of comments it will receive. Maybe with a trifecta that includes total number of comments, plus the number in favor of and the number against. :)

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 43.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 10:35
    Julie

    Your concern is rather late to the game I think.  FDA has a whole page on MDSAP, checklists, etc.  Look it up.  Iit has been transparent for a number of years.  Also IMDRF is referencing that.

    Cheers,
    Ginger






  • 44.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 12:07
    Ginger, not concerned, just curious.  And too busy to invest all nine of my watchcat lives in everything I'm curious about.  Especially not all at one time. :)

    Not sure about the number of years.  I know the program went from pilot to official on 01/01/2017.

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 45.  RE: FDA and ISO 13485?

    Posted 07-Aug-2019 11:21
    Hi Julie,

    Then as I understand the quality system regulation at 21 CFR 820 at this moment in time is the governing regulations for device manufacture in the United States. Based upon what we are seeing with MDSAP and yes there are checklists, we can anticipate some type of fusion between ISO 13485 and 820 probably in the near future.  However the "near future" is not QED where the FDA is concerned.

    All the best,

    Bob

    Robert Schiff, PhD, RAC, CQA, FRAPS
    President and CEO
    Schiff & Company, Inc.
    1120 Bloomfield Avenue, Suite 103
    West Caldwell, NJ 07006

    Tel 973-227-1830
    Fax  & Conference Line 973-227-5330
    Cell 973-568-3361
    www.SchiffandCompany.com

    Celebrating 37 Years (1982-2019) of service in Compliance, Regulatory Affairs and Clinical Research





  • 46.  RE: FDA and ISO 13485?

    Posted 08-Aug-2019 06:51
    I think that Mark is quite on point here, Notified Bodies have (by CA edict) transitioned from being your friends and advisors to being your adversarial body.  Of course, you pay them for the privilege of being abused.  MDSAP has only enhanced this aspect, but the whole idea is that you only have to have this once a year instead of an incessant parade of regulatory agencies.  All in all, not a "fair" tradeoff, but one I will take as the future of RA/QMS surveillance.

    ------------------------------
    James Bonds J.D.
    Director Regulatory Affairs
    Atlanta GA
    United States
    ------------------------------



  • 47.  RE: FDA and ISO 13485?

    Posted 08-Aug-2019 08:20
    "Spot-on" James:
    NBs have changed
    • from working cooperatively to confrontationally
    • from having expert experienced auditors to speedily trained box checkers
    • from treating the manufacturer as the customer to be terrified of their CA
    • from standing-up to irrational non-scientific CA requirements to just re-iterating them
    and on MDSAP, I find the above bullets to be amplified - slavish addiction to checklists regardless of whether they are sensible for the particular product.

    I better stop there as I am sounding like a bitter and twisted old man!

    Neil

    ------------------------------
    Neil Armstrong FRAPS
    CEO MeddiQuest Limited
    Peterborough
    United Kingdom
    ------------------------------



  • 48.  RE: FDA and ISO 13485?

    Posted 08-Aug-2019 09:44
    My experience with NBs reflect the changes that Neil and James describe. 

    ------------------------------
    Robert Schiff PhD, RAC, CQA, FRAPS
    CEO
    Schiff & Company, Inc.
    1120 Bloomfield Ave., Suite 103
    West Caldwell, NJ 07006
    rschiff13@aol.com
    973-568-3361
    ------------------------------



  • 49.  RE: FDA and ISO 13485?

    Posted 08-Aug-2019 12:01
    Edited by Richard Vincins 08-Aug-2019 12:07
    Neil ... nothing wrong with saying how it is now a days with NB.  I am a twisted old man also where remembering when we had 2 day ISO 13845/MDD audits and 12 page Technical Files ! :)

    ------------------------------
    Richard Vincins RAC
    Vice President Global Regulatory Affairs
    ------------------------------



  • 50.  RE: FDA and ISO 13485?

    Posted 08-Aug-2019 12:05
    "I am sounding like a bitter and twisted old man!"

    You say that like it's a bad thing, lol.

    I've found cynical and sarcastic is much better for your mental health, especially if you can combine them with a dark sense of humor.




    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 51.  RE: FDA and ISO 13485?

    Posted 08-Aug-2019 12:30
    Edited by Julie Omohundro 08-Aug-2019 17:18
    I am not sure what everyone means by "recently," but I'm old, so 5 years ago is recent and 10 is not long ago.  The same is true for everything to do with industry and regulation, both of which, despite all the hype over "innovating" and "modernizing," move slower than snails going backwards.  When not actually going backwards.

    I know that two-page CERs were alive and well as recently as 2014.

    Yes, of course the NB noted they didn't didn't conform to the MEDDEV--in 2011.  Then,  being "cooperative," I guess...it accepted "we are looking for someone to write MEDDEV-compliant CERs" as acceptable continuous quality improvement one year, "we are negotiating contracts to get them written" the next year, and "They are writing them now" the next.  (This may be a slight overstatement, but really only a slight one, attributable more to the vagueness of my (deteriorating) memory than a misrepresentation of how (not) "confrontational" the NB was about it.)

    And no, it was not some podunk little NB that no one ever heard of, but a big podunk NB that everyone has heard of.  The company was an established smaller manufacturer of the kind that (still) characterize this industry.

    IMO, Rev 4 was never issued to raise the bar higher (nor did it), but in an attempt to spell out in painful detail what the bar actually was, thereby reducing wiggle room.  And the MDR strikes me as much the same, 157 - 60 = 97 pages of "read my lips."

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 52.  RE: FDA and ISO 13485?

    Posted 03-Sep-2019 13:33
    See post by Lena Cordie on publication of AAMI TIR102

    ------------------------------
    Regards,
    Mark Swanson, ASQ CBA, CMQ/OE, CQE ASQ, MBA
    Becker MN
    United States
    ------------------------------