In my experience notified bodies audit manufacturers on their choices in relation to implementation of this requirement, so you'll need to have rationale ready why the cover chosen was opted for, and on what basis. For example, one notified body required an insurance cover that covered 'worse case scenario' for the devices in scope without explaining what they consider liability worse case scenario (which logical, because notified bodies are not lawyers). In the end, the notified body accepted a rationale based on extrapolation of historical vigilance data for the devices concerned overlayed with historical liability claims data, which showed that the company's insurance cover could accomodate a factor 100 increase in liaiblity cases and still suffice.
So you'll have to be able to explain how you've applied the mystical formula of size of the company, type of device (defined nowhere in the IVDR by the way so good luck) and risk class.
However, things have also changed with product liability in the Union with
1) update of the EU product liability directive pending that stands to change a lot, especially regarding software and online services; and
2) the collective redress directive having been implemented in national law everywhere, resulting in the option of class actions for (explicitly mentioned in the annex of the directive) medical devices and IVDs.
The issues I've seen companies struggle with is that the legal department does not understand this requirement or what a notified body could expect here (because regulatory) and the regulatory department does not understand liability and interprets the requirement wrong. And then we have notified bodies that are also feeling their way along for a lack of guidance, and have to answer to competent authorities that also don't understand liability (because that's not what their competent for).
So yes, it's a process, and yes you need to spend some time with data to construct good rationale to show that your cover will suffice in the scenarios the notified body wants to see (if any).
------------------------------
Erik Vollebregt
Partner
Amsterdam
Netherlands
------------------------------
Original Message:
Sent: 01-Sep-2022 14:31
From: Stephanie Mantooth
Subject: IVDR Requirement for Liability Insurance
Hello!
Item 15 of Article 10 of the IVDR states that a company must have in place measures to provide sufficient financial coverage in respect of their potential liability proportionate to the risk class.
My question: how are you all complying to this one?
Did you create a stand-alone process (eg SOP or form) to proceduralize this? Did you add it to your risk documentation as a check box item basically saying you have verified insurance coverage?
TIA!
Steph
------------------------------
Stephanie Mantooth
RA Specialist
Austin TX
United States
------------------------------