Professional Documents
Culture Documents
Combined EU MDR MDSAP and ISO 134852016
Combined EU MDR MDSAP and ISO 134852016
Panelists
• Dan O’Leary, President, Ombu Enterprises LLC
• Florianne Torset-Bonfillou, Regulatory Affairs and Education, Senior Lead Auditor &
Senior Design Dossier Reviewer, GMED North America
• Marc-Henri Winter, Staff Fellow, Division of International Compliance Operations, OC,
CDRH, FDA
Connections –
EU-MDR, MDSAP, & ISO
13485:2016
Dan O’Leary CBA, CQA, CQE, CRE, SSBB, CIRM
President
Ombu Enterprises, LLC
OMBU
Dan@OmbuEnterprises.com
www.OmbuEnterprises.com
ENTERPRISES, LLC
• It has 14 changes
– They correct typographical errors such as changing
“trademark” to “trade mark”.
• Device
– Maintain each device following the requirements of the MDD (or
AIMD) including the Essential Requirements
• Maintain a valid NB device certificate
• Article 120(3) says that a device with a certificate issued under Article
120(2) may remain on the market after May 26, 2020 under certain
conditions:
– The device compiles with the MDD or AIMD
– The MDD or AIMD NB remains responsible for surveillance
– There is no significant change in the design or the intended use
– The QMS implements the MDR requirements for PMS, Market
Surveillance, and Vigilance
– The manufacturer completes the MDR economic operator registration
and device registration
Ombu Enterprises, LLC 14
ISO 13485:2016
EU-MDR
CEN/TR 17223:2018
• Example:
– ISO 13485:2016, 4.2.3 requires a medical device file and lists the
minimum contents
– EN ISO 13485:2016, Table ZB.1 says that the medical device file must
include statements about human blood derivatives and tissues of animal
origin
• The technical report is about 85 pages. Most of the pages are divided
between two tables – and MDR table and an IVDR table
– Assume about 35 to 40 page long tables for each regulation
• Example
– Article 10(9.g) require the QMS to cover “product realization, including
planning, design, development, production, and service provision”
– This flows through Annex IX, chapter 1, 2.2 paragraph 2 c) indent 6
– This leads to ISO 13485:2016 4.2.3a) 7.3.3b), and 7.5.1e)
– Partially covered. ISO 13485:2016 includes a general requirement for
design inputs to include applicable regulatory requirements and for the
medical device file to include the labelling, including instructions for use.
Specific requirements of Chapter III of Annex I are not included explicitly
Ombu Enterprises, LLC 19
ISO 14971:2019
and the EU-MDR
• IVDR
– None listed
• MDR
– NB 0086 BSI Assurance UK Ltd
– For a list of the Product family, product /Intended use/Product
range follow the links to their Notification document
• If Eudamed is not fully functional on May 26, 2020, the requirements apply
six months after the date of publication in the Official Journal
• Example:
– FS-PUB-ACT-001: Search and view actor details
• FS-PUB-ACT-001.01: List all Economic Operators and Sponsors
(only those with authorized application for CI/PS) whose registered
actor details match a set of search criteria provided by the user
• Many NB announced a cutoff at the end of March for the Article 120 soft
transition
• Cost – At some point you will need to buy the EN standard with the Annex
for the MDR
– Assume $150 per standard for each standard you use for the MDD
• Be sure to read and understand the MDR requirements for each economic
operator
– This is the basis for your contract
Marc-Henri Winter
FDA | CDRH | OC | DICO
[OPEQ Pilot: Office of Regulatory Programs | Division II | Inspections and Regulatory Audits Team]
MDSAP - Vision
36
Audit Model
37
MDSAP Audit Model + Companion Document
Marketing
Authorization / • For each of the 7 processes
Management
Facility
Registration – Purpose
Measurement, Adverse Event and
– Outcomes
Analysis and Advisory Notice – Audit tasks (90 in total)
Risk Management
38
Audit Model
• 90 audit tasks covering
– All ISO 13485:2016 requirements
– Relevant regulatory requirements Method
• Clarifying annexes:
– Audit of technical documentations Sampling
– Considerations relative to the audit of Fact
the controls of the sterility check
Verify that the audited manufacturer has defined and implements controls to ensure
the safety and performance of medical devices [Quality / Compliance]
39
Audit trail
40
What the Audit Model is Not…
• A regulation
– MDSAP does not introduce any new requirement applicable to manufacturers
– It is an auditing tool Auditors are to perfect their regulatory competence through
other means.
• An inflexible auditing strategy
– Auditors are expected to plan their audit to be most effective considering
• The specifics of the organization being audited;
• The size of the audit team and the competence of its members;
• Other applicable constraints…
– This may justify deviating from the order of the tasks as presented in the audit
model, provided the specified task linkages are used to highlight audit trails.
41
ISO 13485:2016 and “Regulatory Requirements”
42
Main regulatory requirements embedded in the audit model
43
Regulatory Requirements Not Incorporated in the Audit Model
44
Status of the Program
• 11 AO recognized
• 2 AO authorized to audit
• 1 new applicant
Current, as of 2019-04-17
45
Audit and FDA Inspection Progression
MDSAP Audits and FDA Inspections during fiscal years 2017 and 2018
46
Audit Model and Europe
47
Additional Information
48
FDANEWS 16TH ANNUAL MEDICAL DEVICE QUALITY CONGRESS,
APRIL 23, 2019
50
DO NOT DISTRIBUTE OR REPRODUCE WITHOUT PERMISSION
- EU MDR – TRANSITION STATUS
- AUDIT OF EU MDR COMBINED WITH MDSAP AUDIT
51
DO NOT DISTRIBUTE OR REPRODUCE WITHOUT PERMISSION
EU MDR – TRANSITION STATUS
Timelines for NB
52
DO NOT DISTRIBUTE OR REPRODUCE WITHOUT PERMISSION
EU MDR – TRANSITION STATUS
Timelines for Certificates validity
STOP Issuance
Directives certificates
Art 120
53
DO NOT DISTRIBUTE OR REPRODUCE WITHOUT PERMISSION
ARTICLE 120– TRANSITIONAL PROVISIONS
55
DO NOT DISTRIBUTE OR REPRODUCE WITHOUT PERMISSION
AUDIT OF EU MDR COMBINED WITH MDSAP AUDIT
AO / NB Perspective
56
DO NOT DISTRIBUTE OR REPRODUCE WITHOUT PERMISSION
THANKS FOR YOUR ATTENTION
57
DO NOT DISTRIBUTE OR REPRODUCE WITHOUT PERMISSION
FDAnews 16th Annual Medical Device Quality Congress
April 23, 2019
Ch1, T7
Manufacturers shall establish, document,
Ch3, T3 - T7, T9, T12
implement and maintain a system for risk
2. Annex I S3 Risk Management 4.1.2 b), 7.1 Ch5, T8-T10, T12 – T13
management as described in Section 3 of
Ch6, T10 – 11, T16, T21, T22,
Annex I.
T28
5. EU MDR 2. MDSAP
Verify that the roles and 5. MDSAP
Management Rep
responsibilities of any economic Outsourced processes
appointment
operators and the person Article 10 s9 (d), Annex IX
responsible for regulatory Article 15
s2.2 (b), Article 10 s15
compliance are documented in the
organization’s quality management
system.
Article 11 through 16
4. MDSAP
3. MDSAP
5. EU MDR Organisational Structure
If an authorized representative is and Competence Quality policy
required, verify that the and objectives
Article 10 s9(c), Annex IX established
manufacturer has assigned an s2.2 (b)
appropriate mandate to the
authorized representative and
assures conformity to Article 11.
Annex IX s2.2 b