Blog

EU eIFU Regulation: Broader Than Many Think

March 22, 2022

EU eIFU Regulation: Broader Than Many Think

 

Everyone seems to know that Europe’s Regulation (EU) 2021/2026 covers requirements for when eIFU are provided instead of paper IFU.  But did you know that the Commission also demands a certain level of conformity with that Regulation also for when eIFU is provided in addition to paper IFU?  Here’s an overvierw.

 

Specifically, the Commission’s Directorate General for Health and Food Safety told me that if ever an eIFU is provided for medical devices in the Union, whether the eIFU is provided instead of paper (for qualifying Article 3 devices) or else in addition to paper (for any devices), then the applicable provisions of Regulation (EU) 2021/2226 always apply.  Plainly, eIFU may not be provided outside the scope and applicable provisions of that Regulation.

 

Indeed, that Regulation isn’t limited in scope only to providing electronic IFU instead of paper IFU.  Rather, along with that scenario, it also contains certain provisions applicable to all medical devices (excluding EU MDR Annex XVI devices) whose IFU are provided in both electronic and paper format.  Be sure not to err regarding that scope.  This is in alignment with the longstanding precedent established by the sunsetting Regulation (EU) 207/2012.

 

Also, remember to integrate your compliance approach with measures to meet the EU MDR’s Annex I.23.1 / IVDR’s Annex I.20.1 website provision (which has overlap with the eIFU’s website-related provisions).

 

Remember also that EU MDR Annex I.23.1(f) reminds us that instructions for use may be provided to the user in electronic format only to the extent, and only under the conditions, set out in the eIFU Regulation.

 

April 24, 2023 follow-up:

 

For example, I definitely consider IFU placed on a website to be eIFU. And so, excluding Annex XVI devices, my interpretation of the aforesaid Commission stance is, again, that any eIFU provided in addition to paper IFU must comply with the applicable provisions of Regulation (EU) 2021/2226.  But this needs to be done in remembrance that only certain aspects of 2021/2226 apply to the “in addition to” scenario.  Feel free to contact us for more specific assistance regarding your particular eIFU scenario.

Standards Aren’t Required, but are Recommended, to Show European Conformity

September 28, 2021

Standards Aren’t Required, but are Recommended, to Show European Conformity

 

You may have heard a rumor that conformity with harmonized standards or other non-harmonized standards is mandatory when showing conformity with the IVDD, MDD, IVDR, or MDR.  But that is not the intent of these European Directives and Regulations.  Instead, Europe fundamentally intends that conformity with harmonized standards, and even non-harmonized standards, shall remain voluntary unless such standards happen to also represent the generally recognized state-of-the-art, or unless application of a harmonized standard is in fact mandated, such as regarding the use of symbols in the information supplied with the device.

 

A couple examples (of many that could be given) proving this, is where the European Commission officially [see Regulation (EU) No. 1025/2012] states that:

 

  • “…The primary objective of standardisation is the definition of voluntary technical or quality specifications…”

  • “…European standardisation…is founded on the principles recognised by the World Trade Organisation (WTO) in the field of standardisation, namely…voluntary application, independence from special interests…” [emphasis added]

 

If you attempt to implement a policy demanding conformity with harmonized standards, or even un-harmonized standards, then, not only would you be in contravention of European legislation, but there is also a high probability that you will fail, and/or be subject to costly nonconformities, along with delayed market entry.

 

The ultimate conformity assessment mandate of the IVDD, MDD, IVDR, or MDR is that the “state-of-the-art” be suitably considered, and that we keep a record of whatever conformity solution happens to be applied, be it a standard (harmonized, un-harmonized European, or international), a Common [Technical] Specification (in the context of the IVDD, IVDR and MDR), or other solution [such as internally-derived specifications, international recognized publications, historical data, best medical practice, generally acknowledged state of the art (GASOTA), etc.].

 

Here are a few real-world examples that can quickly be a snare for you if you get too focused on harmonized or other standards:

 

  • There are, and have historically been, harmonized standards that no longer represent the state-of-the-art and that, consequently, are generally inappropriate for use to demonstrate conformity.

 

  • If there are any applicable Common [Technical] Specifications (IVDD/IVDR/MDR context), then those are mandatory, and generally trump a related standard.

 

  • There are certain conformity assessment requirements for which no standard will exist at all.  For example, when demonstrating proper performance of a novel medical device whose technology is truly unprecedented.

 

  • It is not uncommon that it is simply best medical practice that dictates what is deemed to be conformity and what is not.  I’ve had instances where certain local or international clinical standards of care or medical practice governed the device’s performance criteria and/or acceptability to the user.

 

It is true that if there is in fact a standard on which you and the notified body can agree, then that tends to help streamline the conformity assessment process.  But don’t paint yourself into an unrealistic corner by instituting a conformity assessment policy that sounds great in the classroom and looks good on paper, but that doesn’t give you sufficient flexibility for developing medical devices and implementing regulatory compliance in the real-world.

Intended Use vs. Indications For Use: What’s the Difference?

August 5, 2021

Intended Use vs. Indications For Use: What’s the Difference?

 

Successful premarket regulatory strategy and authorizations weigh heavily on proper understanding between the term “Intended Use” as distinguished from “Indications for Use”.  That said, it can be difficult to find clearly defined explanations of these terms.  For the U.S. FDA jurisdiction, I have given FDA’s approach hereinafter.

 

In guidance and in 21 CFR §801.4, the FDA has defined the term “Intended Use” as the objective intent of the persons legally responsible for the labeling of the device. The intent is determined by their expressions or may be shown by the circumstances surrounding the distribution of the device. This objective intent may, for example, be shown by labeling claims, advertising matter, or oral or written statements by such representatives. Moreover, it may be shown by the offering or the using of the device, with the knowledge of such persons or their representatives, for a purpose for which it is neither labeled nor advertised.   These provisions are driven by the definition in U.S. medical device law at Section 513(i)(1)(E)(i) of the FD&C Act.  Accordingly, the device labeling as well as known uses are primary focal points when determining a device’s Intended Use.

 

In contrast, the term ‘Indications for Use’ describes the disease or condition the device will diagnose, treat, prevent, cure or mitigate, including a description of the patient population for which the device is intended.  For example, see FDA’s 21 CFR §814.20(b)(3)(i).

 

But distinguishing these terms can get a bit tricky sometimes.  A device’s Intended Use isn’t necessarily the same as its Indications for Use, yet not necessarily different.  But they will always be intrinsically related. In practice, the Intended Use of a subject device may either be inherently general, or more specific. Yet a very specific Indication for Use could be one and the same with the Intended Use.  Indeed, FDA says that for devices with general indications for use that do not specify a disease, condition, or population (or an anatomical site from which a disease state or population may be inferred), the indications for use and intended use are the same. Such indications for use are referred to as “tool type” indications for use. And there can also of course be a general Intended Use plus a specific Indication(s) for Use under the general Intended Use.

 

Ultimately, FDA reminds us that consistency between the Indications for Use statement and the proposed labeling (which, remember, is used to determine the Intended Use) will facilitate the review of premarket submissions.

 

Can a Customer Survey Be Used as Part of PMCF?

July 30, 2021

Can a Customer Survey Be Used as Part of PMCF?

 

PMCF may not need to be full-blown prospective clinical investigation.  Specifically, I would place such goals under the banner of the general types of non-investigational PMCF that I’ve mentioned before in my prior PMCF post(s).  Indeed, such feedback could certainly be obtained via methods like surveys that are less rigorous than a full-blown prospective clinical investigation.

 

A few more words regarding surveys:  When comparing a non-PMCF survey to a survey that is PMCF, a key difference is the basic purpose and level of rigor in how the survey data are gathered and used.  In other words, if the survey is being done because the subject device warrants PMCF (see the aforementioned PMCF trigger criteria), then the scientific methods and rigor of EU MDR Annex XIV Part B sections 6.1 and 6.2 apply.  But if instead the survey is being gathered as non-PMCF PMS (like when the subject device doesn’t warrant PMCF), then the organization’s planning for, and analysis/use of, such PMS data may be less formal than the scientific method prescribed by Annex XIV.

FDA’s 21 CFR §820.72 Metrology Requirements vs. Test Method / Process Validation

July 29, 2021

FDA’s 21 CFR §820.72 Metrology Requirements vs. Test Method / Process Validation

 

My experience has been that FDA views a test method as a process that produces an output.  And if such output can’t be fully verified, then it must be validated.  Since FDA’s 21 CFR §820.72 is not generally related to “validation” (a very specialized, very robust, very deliberate term defined by §820.3), I’ve seen FDA handle process validation (be it for a production process yielding a tangible physical output or for a test method producing a data output) via §820.75.  For example, in a February 19, 2002 Warning Letter, FDA states, “…[we]…collected information that revealed serious regulatory problems…as follows:…Failure to validate with a high degree of assurance a process that cannot be fully verified by subsequent inspection and test as required by 21 CFR 820.75(a). For example:…The testing procedure used for…has not been validated…”

 

I would be very hesitant to try and integrate the principles of “validation” into my instrument metrology program.  That’s not something I’ve seen before in the many metrology programs I’ve encountered.  FDA and its explanations of §820.72 are generally aimed at assuring metrological adequacy of instruments rather than the adequacy of test/measurement processes.

 

Another way to put my experience is that §820.72 is related to the principles embodied by ISO 10012 / EN ISO 10012 clause 7.1 (metrological confirmation, i.e., “calibration”), whereas “validation” is instead related to the principles embodied by that standard’s clause 7.2 (measurement process development and validation).  Those sections provide a nice distinction between instrument metrology vs. measurement process (e.g., test method) validation.  They show that clause 7.1 (and I would say §820.72) is to ensure that metrological instruments are fit for their intended use, whereas 7.2 (and I would say §820.75) ensure that a process (e.g., a measurement process, i.e., a test method) is fit for the process’s intended use.

 

Because of these principles, my experience is that FDA generally associates test method validation with §820.75 rather than §820.72.  As mentioned above, I’ve seen FDA issue test method validation audit citations against §820.75 rather than §820.72.  So it seems that FDA definitely demands that we perform test method validation pursuant to §820.75 rather than §820.72.  If we applied the principles of §820.72 for test method validation, then I would get ready for a real wallop from FDA and other regulators like ISO auditors.

EU MDR PMCF: To Waive or Not to Waive

July 29, 2021

EU MDR PMCF: To Waive or Not to Waive

 

When is PMCF Required?

 

When is PMCF Required?  Do “PMCF” if, after proper premarket clinical evaluation, there remains residual risks and/or uncertainty about long-term clinical performance that may impact the benefit/risk ratio. If PMCF is indicated, then be sure the PMCF Plan contains the various design elements prescribed by EU MDR Annex XIV Part B sections 6.1 and 6.2.  Be sure to understand that per EU MDR Annex XIV.6.2(b) and Article 74, the terms “PMCF Study” and “PMCF Investigation” appear to be interchangeable, and mean a specific type of PMCF, namely, a prospective or retrospective post-market clinical investigation.  PMCF “Studies” / “Investigations” need to ensure the high quality of the collected clinical data by following principles of scientific rigor, accuracy, legibility, and completeness.  Refer to MEDDEV 2.12/2 and MDCG 2020-7 for further guidance about those most rigorous types of PMCF.  In contrast, understand also that the term “PMCF” is a general umbrella term for all types of PMCF, thus encompassing clinical investigations (a.k.a., PMCF “Studies”/”Investigations”) as well as other general types of PMCF (such as PMCF based on literature, reactive PMS data, etc.) that aren’t prospective clinical investigations.

 

The Myth that the EU MDR Doesn’t Allow Waiver of PMCF:

 

There’s a common myth that the EU MDR doesn’t allow waiver of PMCF.  In truth, we can waive PMCF if the long-term safety and clinical performance are already known from previous use of the device, or where other appropriate post-market surveillance activities would provide sufficient data to address the risks. Prepare a PMCF waiver stating the basis for the decision to waive PMCF and setting a schedule for periodic reconsideration of the waiver.  I still rely on MEDDEV 2.12/2 for further guidance about PMCF waiver.

 

I would beware of PMS / PMCF systems, assertions, training, or other paradigms that universally demand PMCF for all cases. Such an approach is not in alignment with the EU MDR, and is certain to unnecessarily escalate the cost, complexity, and burden of that aspect of a company’s EU MDR objectives.

 

To begin with, be sure not to discount that there is longstanding European historical framework and precedent for waiver of PMCF [see MEDDEV 2.12/2 (for the MDD)].  Indeed, I’ve successfully leveraged such waivers repeatedly with NBs under the MDD without objection.

 

Fast forwarding to the EU MDR era, you may remember my prior Forum explanations of how the EU MDR considers PMCF to be part of PMS.  As covered in my prior Forum posts on the topic and in my white paper “Navigating PMCF and its Mysterious Relationship to PMS and Clinical Evaluation in EU Regulation 2017/745” (email [email protected] for a copy), PMS is always required by the EU MDR, but not PMCF.  Indeed, the EU MDR’s mandatory PMS plan requirements in Annex III.1.1(b) final indent require that the PMS plan contain a PMCF plan as referred to in Part B of Annex XIV, or a justification as to why a PMCF is not applicable.  This has been echoed by the MDCG in 2020-7 which provides for a manufacturer’s “…justification in relation to non-performance of PMCF…“.

 

The option for PMCF waiver is clearly and repeatedly stated by the EU MDR, such as:

 

  • Annex II.6.1(d) and Annex III.1.1(b) (applicable to all devices)

  • Annex IX.2.1 eighth and ninth indents (available as an option for Annex IX devices, which, by the way, could encompass devices all the way up through class III)].

  • Annex VII.4.5.5 directing Notified Bodies (NB) to make way for PMCF waivers during conformity assessments.

  • Annex VII.4.6 directing NBs to consider the adequacy of the manufacturer’s PMS plan including a review of the need (or lack thereof) for a PMCF plan.

  • In addition is the provision for possible exemption from the need for any clinical data at all(yes you heard me right) in Article 61.10 (born from the same provision in MDD Annex X) which seems by default to, in such cases, waive the need for PMCF. (I actually had a prominent NB once encourage me to pursue that route instead of doing a clinical evaluation based on clinical data!).

 

Time and again under the EU MDR I’ve continued proving the integrity of these assertions via successful EU MDR third-party conformity assessments of Technical Documentation using PMCF waivers.  So, based on historical MDD conventions along with their reiteration in specific MDR provisions, it seems that the EU MDR clearly intends to maintain the longstanding precedent of permitting PMCF waiver. This is quite sensible in light of the aforesaid unique purpose of PMCF.  Indeed, deploying such a rigorous form of PMS is clearly unnecessary for realizing overall PMS goals for devices where other less-rigorous forms of proactive and reactive PMS would sufficiently guard public health.  I expand further on this topic in my aforesaid white paper.

FDA MDUFMA Small Business Determination (SBD) at the Pre-Revenue Stage

July 27, 2021

FDA MDUFMA Small Business Determination (SBD) at the Pre-Revenue Stage

 

Before addressing FDA’s MDUFMA fees and SBD program for a firm’s premarket submission when at a pre-revenue / premarket stage, my suggestion is to first remember that if a product clearance or approval [510(k) clearance, PMA approval, etc.] hasn’t happened yet, and assuming that the Sponsor is not engaged in other activities triggering the FDA establishment registration requirement, then the Sponsor should be sure it hasn’t unnecessarily registered its establishment.  This is because FDA instructs establishments not to register at the pre-approval stage.  Avoiding unnecessary establishment registration will save $5,546 / year (in today’s MDUFMA dollars) which could really add up to a lot of savings given that product development and FDA market authorization campaigns can often be multi-year efforts.

 

Regarding a firm’s lack of having yet submitted its first Federal U.S. income tax return, remember that section 738(d)(2)(B)(iii) of the Act is, as far as I know, still in effect and includes a bridging provision for firms that haven’t yet submitted their first Federal income tax return.  That provision says that, in the case of an applicant that has not previously submitted a Federal income tax return, then the applicant and each of its affiliates shall instead demonstrate the “small business” evidence via submission of a signed certification in the English language from the national taxing authority of the country in which the applicant or, if applicable, affiliate is headquartered, certifying that the applicant or affiliate meets the criteria for a “small business”.  Firms need to be sure to give due consideration to this bridging provision when at a pre-revenue / pre-taxation stage.

 

However, the Act’s section 738(d)(2)(B)(iii) bridging provision may not need to be used at all even though seemingly so at first glance.  Indeed, many corporations must submit periodic Federal income tax returns (e.g., Form 941 QUARTERLY Federal Tax Return) during the year leading up to the annual tax return.  Such periodic returns are in fact official Federal income tax returns.  Accordingly, leveraging such periodic Federal tax returns may also be a viable strategy, specifically, by submitting some or all of the year’s periodic Federal income tax returns in order to officially and statutorily demonstrate that year’s current Federal income status.  Some discussion with the Agency may be needed for that strategy in order to determine if the Agency interprets the Act’s phrase “most recent Federal income tax return for a taxable year” to only mean an annual tax return, or if that could also be interpreted to mean the current year’s Federal income tax returns to date.  If needed, I wouldn’t hesitate to assert with the Agency that a compilation of the year’s periodic Federal income tax returns would meet the statutory criterion “most recent Federal income tax return for a taxable year” called for by the Act.  And it seems that FDA would be amenable to that in light of its webpage guidance stating that if the firm has been in business for less than a year, it can provide the FDA with a copy its U.S. income tax return for a period of time that’s less than 1 year.  FDA says that the dates encompassed by the partial-year return need to be identified on the tax return.  For that scenario, FDA also asks that the firm provide documentation (such as Articles of Incorporation) identifying the business’s formation date in order to further justify the lack of a full year’s tax return.  FDA also says the firm may submit a personal income tax return if needed, where the personal return must identify the submitter’s business and gross receipts or sales under Schedule C of the Form 1040.

 

Finally, don’t forget that there is a one-time waiver of the MDUFMA PMA fee for a Sponsor’s inaugural PMA pursuant to section 738(d)(1) of the Act.

EU MDR Strategy for Configurable Software

July 22, 2021

EU MDR Strategy for Configurable Software

 

For my clients that manufacture software-only medical devices, I have sought and implemented what I feel is the ideal:  The software design and architecture are such that there is one executable software file, but that can be configured via licensing to turn various modules on or off.  In this approach, all modules are always present in the software, yet not always turned on.  For the purposes of EU MDR conformity, this means there is one product, and thus one DoC, one NB certificate, and one technical documentation file.  The different licensing configurations are handled in the software and technical documentation via software installation controls.  This approach avoids the hassle of applying the EU MDR’s requirements for “accessories” (i.e., medical devices in their own right), such as the typical need for accessories to have dedicated (usually separate) technical documentation, labeling, DoCs, and/or NB certificates.

 

Noteworthy parts of the EU MDR’s definition [see Article 2(2)] for “accessory” are that a) it’s an article which intrinsically is not itself a medical device [i.e., it’s just a widget that doesn’t intrinsically meet the EU MDR definition in Article 2(1)]; and b) the main software medical device can’t function as intended (i.e., as labeled, advertised, etc.) without the “add-on”.  If the “add-on” doesn’t meet these criteria, then it’s not an “accessory”.  Instead, it would either be part of the main medical device software or else a separate medical device in its own right providing supplemental features/functionality or else or else a non-medical (e.g., an EU MDR preface item 19 general purpose, life-style, well-being, etc.) device all together.  In the approach I’ve modeled above in my first paragraph, all of the software modules and corresponding code, whether turned on or off, are still part of the same software medical device and executable file.

 

If on the other hand the “add-ons” are a) actually add-ons in the truest sense, meaning that they are separated software files/patches/code; and either b1) they actually meet the formal definition of “accessory” [meaning that they don’t intrinsically meet the definition of medical device yet enable the main software medical device to function as intended (rather than just providing supplemental features/functionality)], or b2) they just provide supplemental medical device features/functionality, then the manufacturer would typically be stuck handling such add-ons as “accessories” (i.e., as devices in their own right) or as separate medical devices altogether, where dedicated (typically separate) technical documentation, labeling, DoC, certificates, etc., would be required.

EU MDR Changes to MDD DoC under EU MDR Article 120

July 22, 2021

EU MDR Changes to MDD DoC under EU MDR Article 120

 

When considering the requirements for revising an MDD (or EU MDR) Declaration of Conformity (DoC) associated with device changes (whether significant or nonsignificant), it’s important to know that there must always be a valid DoC that accurately represents required details about the subject device’s current state of conformity.  Indeed, under the MDD (by way of the EN ISO/IEC 17050 series) and the EU MDR alike, manufacturers are required to continuously update the DoC to assure it remains accurate.

 

Accordingly, if any change is made to an MDD-certified device to be placed on the market after 26 May 2021 [the EU MDR Date of Application (DoA)] under EU MDR Article 120’s transitional provisions, then the subject device’s Declaration of Conformity (DoC) must be revised as needed if the nature of the change impacts the accuracy of the original declaration.

 

As we all know, the MDD and EU MDR both generally require that the Notified Body (NB) be informed about significant changes as part of updating the DoC and technical documentation.  But if the change truly is nonsignificant, then the MDD and EU MDR permit the DoC and technical documentation to be updated without notification to the Notified Body (NB).  That said, be sure to carefully review the NB contract, as some NBs may nonetheless demand to be somehow informed even for nonsignificant changes.

 

Examples of changes that would directly affect the accuracy (and thus require revision) of the DoC include but are not limited to address changes, standard edition changes, part numbers obsoleted, part numbers changed, and others.  Some of these might turn out to be either significant or nonsignificant depending on the associated particulars.  So “be sure you’re sure” about whether the change is significant or nonsignificant.

 

Regarding the clerical aspect (e.g., the form or format) of the revised DoC, it’s noteworthy that the EN ISO/IEC 17050 series has traditionally and normatively given manufacturers the liberty to decide what format suits them best even though it informatively offers an example format.  The EU MDR has not withdrawn such liberty.  Accordingly, to assure DoC accuracy, it seems that manufacturers could either append an amendment (e.g., via memo) pursuant to EN ISO/IEC 17050-1 clause 6.2 or EU MDR Annex IV.9, or else create a new DoC altogether.  I prefer the latter, as the memo-approach seems clunky and ripe for errors and omissions.  Either way, be sure that the expiry date of the DoC remains in alignment with Article 120’s cut-off dates if such changes are made for the context of EU MDR Article 120 transitional provisions.

ISO 13485 QMS Planning vs. Quality Plans

July 19, 2021

ISO 13485 QMS Planning vs. Quality Plans

 

I think it’s important to remember that the general quality management system planning and set-up called for by ISO 13485 clause 5.4.2(a) is fundamentally distinct from clause 7.1’s product/project/object/output-oriented planning.  If they were the same, then ISO TC/210 would not have separated and distinguished clauses 5.4.2(a) and 7.1.

 

Clause 5.4.2(a) general quality management system planning is aimed at the more fundamental quality management system setup, implementation, and maintenance of clause 4.1.  By contrast, ISO TC/210 has traditionally maintained and currently maintains that a clause 7.1 “quality plan” is instead a product/project/object/output-oriented plan generated to support product realization.  Indeed, the scope and intent of ISO 10005 correlates with clause 7.1 quality plans (i.e., product realization plan, i.e., Widget XYZ realization plan, etc.) rather than clause 5.4.2(a) general quality management system planning.

 

While an ISO 13485 clause 7.1 / ISO 10005 quality plan may indeed address the need for particular quality management system features specific to the object/output of the quality plan, it is nonetheless important that a clause 7.1 quality plan not be confused or equated with clause 5.4.2(a) general quality system planning.

 

Another way to explain it is that the organization might have multiple clause 7.1 / ISO 10005 quality plans addressing the product realization requirements for various tangible Widgets, projects, or other product realization outputs, whereas clause 5.4.2(a) quality management system planning is a singular (yet ongoing) planning process.

 

I simply handle ISO 13485:2016 clause 5.4.2(a) by stating in the Quality Manual that:

 

  1. The organization has determined the processes needed for the quality management system and the application of these processes throughout the organization taking into account the roles undertaken by the organization. [Remember that those roles need to first be specified in an appropriate section of the Quality Manual.]

  2. This also includes planning the sequence and interaction of the QMS processes via the Quality Manual and the documented procedures included or referenced therein.

  3. Moreover, the organization applies a risk-based approach to the control of the appropriate processes needed for the quality management system as described in the corresponding subsection of the Quality Manual (e.g., see ‘Risk-based approach’ under ‘Scope’).

  4. The ultimate output of this planning is the Quality Manual and the procedures included or referenced therein.