Design controls are a set of quality practices and procedures used to ensure that a finished device meets its user needs, intended use, and specified requirements.
ADVERTISEMENT |
The requirement for medical device companies to use design controls is established in 21 CFR Part 820, as well as ISO 13485:2016.
The classic design control “waterfall” diagram looks like this:
At a high level, the idea behind design controls is that they will not only improve the design of a device as the team goes through design and development, but also help to prevent future issues with a device once it’s placed on the market.
It’s important to remember, however, that design controls are not the only requirement specified by the 21 CFR Part 820. This regulation (and ISO 13485) describe all of the quality management system (QMS) requirements that every medical device company should have in place. Design controls play a central role in the QMS, but on their own they’re insufficient to ensure that safe and effective medical devices are being brought to market.
For the design control process to be truly effective, it must be connected to the other elements of your QMS so your team can make decisions with the most up-to-date and accurate information possible.
Ideally, your entire QMS will be interconnected. But these are the five elements that you must be able to connect to design controls.
1. Risk analysis
A risk analysis is the first critical element that must be integrated with your design controls. That’s because, according to 21 CFR Part 820.30(g), design validation procedures must include risk analysis “where appropriate.”
In reality, it’s almost always appropriate. Your risk analysis identifies potential hazards, including foreseeable misuse, and helps you calculate the risks your device might pose under both normal and fault conditions.
Your risk analysis will also feed into your risk acceptability matrix, which will help you mitigate risk during the design and development process and ensure that changes to your design don’t introduce new hazards.
That’s why your risk analysis should be performed early in the design process. For example, once you’ve identified intended use, you should be able to identify cases of foreseeable misuse and off-label uses for the device.
2. Production and process controls
21 CFR Part 820.70(a) directs manufacturers to develop, conduct, control, and monitor production processes to ensure that the device conforms to its specifications. That means establishing standard operating procedures, controlling your process parameters, and validating equipment and processes.
Think of it this way: If a piece of equipment isn’t operating properly, or a test method you’re using to determine whether to release your product is faulty, then every decision you make about that product is questionable.
Connecting your production and process controls to your design controls will make life a lot easier for you if your company experiences a surge in demand and needs to increase manufacturing capacity. By connecting those production and process controls with design outputs and your risk analysis, you’ll be better able to maintain product quality while scaling.
For example, understanding critical-to-quality attributes and validating new processes can help manage the increased production without compromising quality.
3. Purchasing controls
According to 21 CFR Part 820.50, manufacturers must also ensure that all purchased or received products and services conform to previously specified requirements. That means you should have a plan in place for evaluating suppliers, contractors, and even consultants, as well as maintaining quality agreements with all of them. Effective purchasing controls are indispensable when it comes to maintaining the quality of components and services that you receive from third parties.
Your purchasing controls should connect to your design controls for the simple reason that your design controls specify the requirements for your device, and the components you receive from suppliers must meet those specified requirements to produce the device correctly.
4. Complaint files
21 CFR 820.198 requires manufacturers to establish procedures for receiving, reviewing, and evaluating complaints, including adverse events involving their devices. An effective complaint management process can identify potential design issues with a device, which is why your complaint files should be connected to your design controls.
For example, if you were to experience a spike in product complaints or adverse events, an investigation might reveal a design flaw that could be corrected to prevent the same issues in the future. It might also uncover that there’s consistent user error of the device that wasn’t considered during the risk analysis and might require new risk controls to eliminate.
5. Corrective and preventive action (CAPA)
In 21 CFR 820.100, you’ll find the requirement for corrective and preventive action, also known as CAPA, which includes processes for investigating the cause of nonconformities, implementing corrective or preventive actions, and verifying the effectiveness of those actions.
And while not every nonconformity should trigger a CAPA, connecting CAPA with design controls ensures that design-related issues are promptly addressed and prevented in future products.
Because CAPAs are opened when there is indication that a problem with a product or process is systemic in nature, it’s possible that an investigation will require changes to your product design. That’s why CAPA and design controls should be connected in your QMS.
Click here to download a comprehensive “Ultimate Guide to Design Controls for Medical Device Companies.”
Published Aug. 2, 2024, by Greenlight Guru.
Add new comment