WEBVTT 00:00:00.000 --> 00:00:01.820 Welcome to The Deep Dive. We're the show that 00:00:01.820 --> 00:00:04.000 takes a whole stack of sources, figures out what 00:00:04.000 --> 00:00:06.900 really matters, and, well, brings those key insights 00:00:06.900 --> 00:00:09.859 straight to you. Today, we're pulling back the 00:00:09.859 --> 00:00:11.699 curtain a bit. We're looking at the regulatory 00:00:11.699 --> 00:00:14.500 world behind the medical devices, you know, the 00:00:14.500 --> 00:00:16.800 ones we rely on every day. Have you ever stopped 00:00:16.800 --> 00:00:19.120 to think about the really complex processes that 00:00:19.120 --> 00:00:22.000 make sure a medical device is safe? That it works 00:00:22.000 --> 00:00:23.800 right from the moment someone first thinks it 00:00:23.800 --> 00:00:27.510 up. It's a fascinating area. And here in the 00:00:27.510 --> 00:00:30.070 US, the heart of it is the FDA's quality system 00:00:30.070 --> 00:00:33.030 regulation. You'll often hear it called 21 CFR 00:00:33.030 --> 00:00:35.969 Part 820. And this isn't just some dry set of 00:00:35.969 --> 00:00:38.649 rules. It's the actual good manufacturing practices, 00:00:38.770 --> 00:00:41.429 the GMP, but specifically for medical devices. 00:00:41.729 --> 00:00:43.689 Think of it maybe less like just a recipe and 00:00:43.689 --> 00:00:45.549 more like the whole operational plan for a top 00:00:45.549 --> 00:00:47.810 tier restaurant. Every ingredient, every step, 00:00:48.090 --> 00:00:49.829 the equipment, how the staff are trained, it's 00:00:49.829 --> 00:00:52.630 all incredibly detailed. The goal is consistency, 00:00:52.829 --> 00:00:55.539 top quality, batch after batch, safety and quality 00:00:55.539 --> 00:00:58.020 baked in. That's a great way to put it, actually, 00:00:58.240 --> 00:01:01.579 that idea of embedded quality. And so today in 00:01:01.579 --> 00:01:03.259 this deep dive, we're really going to unpack 00:01:03.259 --> 00:01:06.299 just how wide ranging QSR is. We're talking about 00:01:06.299 --> 00:01:08.439 the whole journey, right, from the first design 00:01:08.439 --> 00:01:10.840 sketches, through manufacturing, packing it up, 00:01:11.000 --> 00:01:12.760 labeling it correctly, storing it, installing 00:01:12.760 --> 00:01:15.540 it, even servicing it down the line. And a big 00:01:15.540 --> 00:01:18.299 part of this, as we'll see, is having a compliant 00:01:18.620 --> 00:01:21.480 quality management system, a QMS. It's not just 00:01:21.480 --> 00:01:24.280 paperwork. It's the thing that makes it all work 00:01:24.280 --> 00:01:26.819 together. It orchestrates the whole quality effort. 00:01:27.079 --> 00:01:29.420 Exactly right. The QMS ensures quality isn't 00:01:29.420 --> 00:01:31.299 just an afterthought, something you test for 00:01:31.299 --> 00:01:34.359 at the end. And QSR itself, well, it's the FDA's 00:01:34.359 --> 00:01:38.230 foundational framework. The real trick is making 00:01:38.230 --> 00:01:41.290 sure every single batch of devices consistently 00:01:41.290 --> 00:01:43.209 meets those really high standards. Not just once, 00:01:43.269 --> 00:01:45.689 but every single time. Consistency, yeah. That 00:01:45.689 --> 00:01:47.810 seems absolutely crucial. So let's trace that 00:01:47.810 --> 00:01:49.650 journey. Because the scope, like you said, is 00:01:49.650 --> 00:01:51.750 huge. It covers the device's whole life. And 00:01:51.750 --> 00:01:53.829 it starts right at the beginning with design. 00:01:54.510 --> 00:01:59.000 Where do you see companies maybe... Maybe underestimating 00:01:59.000 --> 00:02:01.019 things when it comes to QSR right at that design 00:02:01.019 --> 00:02:03.700 stage. Oh, that's a good point Yeah, because 00:02:03.700 --> 00:02:05.540 a lot of focus is on the innovation the cool 00:02:05.540 --> 00:02:09.300 new idea but QSR forces you to think about control 00:02:09.300 --> 00:02:12.500 and documentation from day one a Really key piece 00:02:12.500 --> 00:02:15.780 here is the design history file the DHF and it's 00:02:15.780 --> 00:02:18.780 not just like a random collection of papers It's 00:02:18.780 --> 00:02:21.219 the complete story of how that device was designed 00:02:21.219 --> 00:02:24.370 and developed A full chronological history. Everything's 00:02:24.370 --> 00:02:26.349 in there. Design inputs, what it needs to do. 00:02:26.610 --> 00:02:28.229 Design outputs, what did we actually design? 00:02:28.789 --> 00:02:31.830 All the reviews, the testing, verification, validation 00:02:31.830 --> 00:02:34.610 activities. It's the proof. Okay, so the DHF 00:02:34.610 --> 00:02:37.370 is the story. Then how do you prove the device 00:02:37.370 --> 00:02:39.750 was designed right? You mentioned verification. 00:02:40.009 --> 00:02:42.229 How does that work, practically? And how is it 00:02:42.229 --> 00:02:44.789 different from validation? Good question. Verification 00:02:44.789 --> 00:02:47.319 is basically checking. Did our design output 00:02:47.319 --> 00:02:49.879 meet the input requirements? Did we build the 00:02:49.879 --> 00:02:51.900 device according to our own plan? Validation 00:02:51.900 --> 00:02:54.680 asks a slightly different question. Did we build 00:02:54.680 --> 00:02:57.080 the right device for the user and for what it's 00:02:57.080 --> 00:03:00.120 supposed to do? So validation often means testing 00:03:00.120 --> 00:03:03.060 actual production units under real -world conditions 00:03:03.060 --> 00:03:05.680 or simulated ones. And a huge part of that nowadays 00:03:05.680 --> 00:03:08.199 is software validation. That's a whole complex 00:03:08.199 --> 00:03:12.050 area itself. And importantly, This isn't just 00:03:12.050 --> 00:03:14.610 for devices already on the market. Even if you 00:03:14.610 --> 00:03:16.430 have an investigational device, maybe it's in 00:03:16.430 --> 00:03:18.849 clinical trials under an IDE, an investigational 00:03:18.849 --> 00:03:21.389 device exemption, you still have to comply with 00:03:21.389 --> 00:03:25.610 these design controls. 21 CFR 820 .3 -0 stalls 00:03:25.610 --> 00:03:28.150 that out. Design integrity matters from the very 00:03:28.150 --> 00:03:30.430 start. OK, so the design is locked down, documented 00:03:30.430 --> 00:03:33.069 in the DHF. Now we move into actually making 00:03:33.069 --> 00:03:35.050 the thing, manufacturing and production controls. 00:03:35.349 --> 00:03:37.090 This is where quality gets, as you said, baked 00:03:37.090 --> 00:03:40.030 in. Exactly. You can't just inspect quality into 00:03:40.030 --> 00:03:41.710 a product at the end of the line. It has to be 00:03:41.710 --> 00:03:44.789 built in step by step. So we talk about production 00:03:44.789 --> 00:03:47.629 and process controls. And a huge piece of that 00:03:47.629 --> 00:03:51.090 is process validation. This isn't optional. You 00:03:51.090 --> 00:03:54.030 have to prove with data that your documented 00:03:54.030 --> 00:03:56.389 manufacturing steps consistently deliver the 00:03:56.389 --> 00:03:59.300 results you expect time after time. It gives 00:03:59.300 --> 00:04:01.699 you that reliability, that predictability. And 00:04:01.699 --> 00:04:03.780 that reliability has to extend to the machines 00:04:03.780 --> 00:04:06.180 themselves, right? The equipment. Absolutely. 00:04:06.520 --> 00:04:09.560 QSR is very clear. Equipment used in manufacturing. 00:04:09.780 --> 00:04:12.180 It has to meet specifications. It needs to be 00:04:12.180 --> 00:04:14.560 designed right, built right, installed correctly, 00:04:15.419 --> 00:04:17.600 and set up so you can actually maintain it, adjust 00:04:17.600 --> 00:04:19.839 it, clean it properly, and use it effectively. 00:04:20.000 --> 00:04:22.319 It needs to be fit for purpose and stay that 00:04:22.319 --> 00:04:24.100 way. Okay, production's underway. What about 00:04:24.100 --> 00:04:26.319 getting it ready for the user? Packaging and 00:04:26.319 --> 00:04:29.500 labeling seem, well... Critical. Oh, absolutely 00:04:29.500 --> 00:04:31.319 critical, especially for patient safety. Think 00:04:31.319 --> 00:04:33.540 about it in an error here. Wrong device gets 00:04:33.540 --> 00:04:37.079 used, instructions are unclear. The consequences 00:04:37.079 --> 00:04:39.560 can be incredibly serious. And the instructions 00:04:39.560 --> 00:04:42.060 for how to package and label, those are in the 00:04:42.060 --> 00:04:44.500 device master record, the DMR, right? Yes, the 00:04:44.500 --> 00:04:47.579 DMR contains those requirements. And the actual 00:04:47.579 --> 00:04:49.699 operations, the packaging and labeling lines, 00:04:50.000 --> 00:04:52.170 they have to be tightly controlled. You absolutely 00:04:52.170 --> 00:04:53.930 have to prevent mixups. Can't have the wrong 00:04:53.930 --> 00:04:56.910 label on the wrong box. Exactly. And for traceability, 00:04:57.470 --> 00:04:59.649 you need to document the specific label that 00:04:59.649 --> 00:05:02.730 was used for every single unit or lot or batch. 00:05:03.350 --> 00:05:05.569 That record goes into the device history record, 00:05:05.629 --> 00:05:08.810 the DHR. It creates that unbreakable link back. 00:05:09.170 --> 00:05:12.209 OK. Packaged, labeled, then you have to store 00:05:12.209 --> 00:05:15.100 them. Right. And proper storage is crucial too, 00:05:15.500 --> 00:05:18.980 especially for investigational devices, but really 00:05:18.980 --> 00:05:21.819 for all devices. Some devices need specific temperatures 00:05:21.819 --> 00:05:24.319 or humidity control. If you don't maintain those 00:05:24.319 --> 00:05:26.399 conditions, the device could be compromised before 00:05:26.399 --> 00:05:28.519 it even gets near a patient. Yeah, that makes 00:05:28.519 --> 00:05:30.399 sense. So there are rules about the warehouse 00:05:30.399 --> 00:05:32.560 conditions. Definitely. You need written procedures 00:05:32.560 --> 00:05:34.839 for storage. Cover the warehouse conditions, 00:05:34.920 --> 00:05:37.500 how things are organized, all designed to prevent 00:05:37.500 --> 00:05:40.910 mix -ups, damage, contamination. And another 00:05:40.910 --> 00:05:43.689 key thing, return products. If something comes 00:05:43.689 --> 00:05:46.550 back, it has to be segregated, kept separate, 00:05:46.850 --> 00:05:49.589 like a quarantine area. Until someone makes a 00:05:49.589 --> 00:05:51.870 formal decision about what to do with it, you 00:05:51.870 --> 00:05:54.850 can't risk a potentially faulty product accidentally 00:05:54.850 --> 00:05:57.149 getting back into the main inventory. That's 00:05:57.149 --> 00:06:00.370 a major control point. Makes sense. So QSR doesn't 00:06:00.370 --> 00:06:03.189 stop at the factory door, then. What about installation 00:06:03.189 --> 00:06:05.970 and servicing? Nope. It keeps going. If you make 00:06:05.970 --> 00:06:08.449 a device that needs installation -think complex 00:06:08.449 --> 00:06:10.689 imaging equipment, maybe you need to provide 00:06:10.689 --> 00:06:12.930 adequate instructions for installation and inspection, 00:06:13.790 --> 00:06:16.370 and test procedures, too, to make sure it's installed 00:06:16.370 --> 00:06:18.970 correctly and will perform as intended. A perfect 00:06:18.970 --> 00:06:21.629 device installed badly, it can still fail. And 00:06:21.629 --> 00:06:23.889 I bet the DMR comes back into play here, too. 00:06:24.050 --> 00:06:26.790 You got it. The DMR also contains the details 00:06:26.790 --> 00:06:29.610 for installation, maintenance, servicing procedures. 00:06:29.879 --> 00:06:32.579 It's the guide for those post -production steps 00:06:32.579 --> 00:06:35.060 making sure the device keeps working correctly 00:06:35.060 --> 00:06:37.620 out in the field that directly impacts safety 00:06:37.620 --> 00:06:40.000 Okay, we've traced the whole journey But let's 00:06:40.000 --> 00:06:42.560 zoom in now on the system that manages all this 00:06:42.560 --> 00:06:45.939 the quality management system the QMS This seems 00:06:45.939 --> 00:06:48.779 like the real engine driving compliance. It really 00:06:48.779 --> 00:06:50.879 is and it's it's more than just procedures It's 00:06:50.879 --> 00:06:54.939 about fostering a genuine culture of quality 00:06:54.939 --> 00:06:58.660 integrating everything making continuous improvement 00:06:58.660 --> 00:07:03.240 just how things are done. So core QMS processes. 00:07:03.720 --> 00:07:05.720 You've got document control, managing all that 00:07:05.720 --> 00:07:08.319 paperwork, change management, handling modifications 00:07:08.319 --> 00:07:10.360 safely, training management, making sure people 00:07:10.360 --> 00:07:12.680 know what they're doing. Then non -conformance 00:07:12.680 --> 00:07:15.000 management, dealing with things that go wrong. 00:07:15.699 --> 00:07:17.500 Complaint handling, listening to feedback from 00:07:17.500 --> 00:07:21.220 the field. And beyond those, you have KPA corrective 00:07:21.220 --> 00:07:23.600 and preventive action. Not just fixing problems, 00:07:23.800 --> 00:07:25.500 but stopping them from happening again. Right. 00:07:25.500 --> 00:07:27.920 The preventive part is key. Huge. Then audit 00:07:27.920 --> 00:07:30.060 management. both internal checks and external 00:07:30.060 --> 00:07:32.800 ones, supplier management because your suppliers 00:07:32.800 --> 00:07:35.959 are part of your quality system, equipment management, 00:07:36.259 --> 00:07:38.779 managing the product itself, and really important 00:07:38.779 --> 00:07:41.660 post -market surveillance. Keeping an eye on 00:07:41.660 --> 00:07:43.180 things once they're out there. Wow. It sounds 00:07:43.180 --> 00:07:45.600 like a really intricate machine everything connected 00:07:45.600 --> 00:07:48.800 and Quality has to be proactive not reactive. 00:07:49.220 --> 00:07:52.100 So where does leadership fit in management responsibility? 00:07:52.259 --> 00:07:54.160 How does leadership make this actually work? 00:07:54.180 --> 00:07:56.160 It can't just be a manual on a shelf, right? 00:07:56.220 --> 00:07:58.540 It has to be lived. Absolutely. It's a total 00:07:58.540 --> 00:08:00.899 team effort top down and bottom up management 00:08:00.899 --> 00:08:02.810 isn't just you know, signing things off. They 00:08:02.810 --> 00:08:04.610 have to provide the resources. They define the 00:08:04.610 --> 00:08:07.189 quality policy. They have to review the system 00:08:07.189 --> 00:08:09.949 regularly to see if it's working. And crucially, 00:08:10.370 --> 00:08:12.589 they foster that environment where quality is 00:08:12.589 --> 00:08:14.769 everyone's job, where people feel empowered to 00:08:14.769 --> 00:08:16.829 speak up. It requires active, visible commitment 00:08:16.829 --> 00:08:19.350 from the top. And tied right into that is record 00:08:19.350 --> 00:08:21.810 keeping. We touched on it, but that phrase, if 00:08:21.810 --> 00:08:24.769 it isn't documented, it didn't happen. You just 00:08:24.769 --> 00:08:27.189 can't say it enough in this field. Your records 00:08:27.189 --> 00:08:30.100 are the proof. Tangible evidence that you followed 00:08:30.100 --> 00:08:32.960 your procedures. It's your history your defense 00:08:32.960 --> 00:08:36.620 in an audit. It has to be meticulous Okay, so 00:08:36.620 --> 00:08:39.460 documentation is king and we mentioned two key 00:08:39.460 --> 00:08:42.639 records the DMR the device master record and 00:08:42.639 --> 00:08:45.759 the DHR the device history record Let's revisit 00:08:45.759 --> 00:08:48.039 the DMR you call to the blueprint. What exactly 00:08:48.039 --> 00:08:50.299 needs to be in there? So the DMR is your master 00:08:50.299 --> 00:08:53.200 recipe your how -to build guide. It needs all 00:08:53.200 --> 00:08:55.639 the product specifications drawings material 00:08:55.639 --> 00:08:59.799 software code everything Plus, the detailed manufacturing 00:08:59.799 --> 00:09:02.600 process is the quality assurance steps, how you're 00:09:02.600 --> 00:09:04.980 going to check things. And as we said, the packaging 00:09:04.980 --> 00:09:07.299 and labeling requirements, it takes the design 00:09:07.299 --> 00:09:10.100 output from the DHF and turns it into concrete 00:09:10.100 --> 00:09:12.659 steps for manufacturing. Got it. And DHR, the 00:09:12.659 --> 00:09:14.820 device history record, that's about what actually 00:09:14.820 --> 00:09:17.679 happened during production. Exactly. The DHR 00:09:17.679 --> 00:09:20.259 documents the making of a specific device or 00:09:20.259 --> 00:09:22.960 batch or lot. It includes things like dates of 00:09:22.960 --> 00:09:25.340 manufacture, quantities, results of tests performed 00:09:25.340 --> 00:09:28.159 during production. And critically, the specific 00:09:28.159 --> 00:09:30.440 labels and labeling used for that specific batch 00:09:30.440 --> 00:09:33.200 gives you that complete as -built record, total 00:09:33.200 --> 00:09:35.240 traceability for every single device, like a 00:09:35.240 --> 00:09:37.860 detective's case file for each batch. And with 00:09:37.860 --> 00:09:40.200 all these records, especially now with electronic 00:09:40.200 --> 00:09:44.210 systems, How do you ensure integrity? You mentioned 00:09:44.210 --> 00:09:47.149 audit trails. Ah, yes. Audit trails are vital, 00:09:47.529 --> 00:09:48.950 particularly for electronic records. They're 00:09:48.950 --> 00:09:52.169 not just logs of who logged in. A proper audit 00:09:52.169 --> 00:09:55.350 trail captures who did what, when they did it, 00:09:55.350 --> 00:09:58.450 and ideally why they did it for every significant 00:09:58.450 --> 00:10:00.649 action or change in the system. So it's like 00:10:00.649 --> 00:10:03.309 a digital footprint for everything. Precisely. 00:10:03.429 --> 00:10:05.429 It provides that forensic capability. You can 00:10:05.429 --> 00:10:08.629 reconstruct events, verify data hasn't been improperly 00:10:08.629 --> 00:10:11.139 altered. It's crucial for trust. And speaking 00:10:11.139 --> 00:10:13.279 of electronic records, there's a specific regulation 00:10:13.279 --> 00:10:16.460 for that too, right? 21 CFR Part 11. That's the 00:10:16.460 --> 00:10:19.480 one. Part 11 lays out the rules for electronic 00:10:19.480 --> 00:10:22.019 records and electronic signatures. The systems 00:10:22.019 --> 00:10:23.899 have to be secure. They have to be reliable. 00:10:24.279 --> 00:10:26.539 They need to be validated, proven to work correctly 00:10:26.539 --> 00:10:29.240 and consistently. And yes, they absolutely need 00:10:29.240 --> 00:10:32.259 those robust, unalterable audit trails. The goal 00:10:32.259 --> 00:10:35.159 is to ensure electronic records are just as trustworthy, 00:10:35.320 --> 00:10:37.980 if not more so, than paper. It all comes down 00:10:37.980 --> 00:10:40.279 to trusting the data. Which leads us straight 00:10:40.279 --> 00:10:43.620 to data integrity itself. The idea that your 00:10:43.620 --> 00:10:46.899 records are accurate, complete, reliable, consistent. 00:10:47.580 --> 00:10:49.659 We often talk about the ALCOA plus principles 00:10:49.659 --> 00:10:52.480 here. Data should be attributable. Who did it? 00:10:52.740 --> 00:10:55.039 Legible. Can you read it? Contemporaneous recorded 00:10:55.039 --> 00:10:57.080 when it happened. Original, the first recording 00:10:57.080 --> 00:11:00.659 or a true copy. Accurate, is it correct? And 00:11:00.659 --> 00:11:02.639 complete is everything there. Plus other attributes 00:11:02.639 --> 00:11:06.139 like being consistent, enduring, available. ALCOA 00:11:06.139 --> 00:11:08.779 plus compass new. Got it. That's a good framework. 00:11:09.440 --> 00:11:11.019 Okay. Shifting back to the factory floor production 00:11:11.019 --> 00:11:13.419 and process controls, let's talk equipment qualification. 00:11:13.940 --> 00:11:17.460 IQ, OQ, PQ sounds complex. It can be, but it's 00:11:17.460 --> 00:11:20.679 fundamental. Think of it in stages. DQ, design 00:11:20.679 --> 00:11:22.899 qualification. Is the equipment designed right 00:11:22.899 --> 00:11:25.279 for the club? IQ, installation qualification. 00:11:25.600 --> 00:11:27.500 Is it installed correctly according to the specs? 00:11:27.899 --> 00:11:30.139 OQ, operational qualification. Does it operate 00:11:30.139 --> 00:11:31.980 correctly across its defined range? Does it hit 00:11:31.980 --> 00:11:34.139 the right temperature, speeds, pressures? And 00:11:34.139 --> 00:11:36.639 finally, PQ, performance qualification. Does 00:11:36.639 --> 00:11:39.019 it consistently produce good product under normal 00:11:39.019 --> 00:11:41.840 real -world manufacturing conditions, often over 00:11:41.840 --> 00:11:43.960 multiple batches? So it's a progressive series 00:11:43.960 --> 00:11:47.200 of checks. Exactly. Yeah. Rigorous proof that 00:11:47.200 --> 00:11:48.840 the equipment will consistently do what it's 00:11:48.840 --> 00:11:51.950 supposed to do day in, day out. I remember a 00:11:51.950 --> 00:11:55.830 case where a company had great PQ results on 00:11:55.830 --> 00:11:58.450 paper, looked perfect. But they hadn't fully 00:11:58.450 --> 00:12:01.169 accounted for the ambient humidity fluctuations 00:12:01.169 --> 00:12:03.210 in the actual production suite during different 00:12:03.210 --> 00:12:06.429 times of the year. It threw off one sensitive 00:12:06.429 --> 00:12:09.620 measurement. Just enough. Ah, so the real world 00:12:09.620 --> 00:12:13.200 intruded. It's a reminder that qualification 00:12:13.200 --> 00:12:16.220 has to reflect actual operating reality, not 00:12:16.220 --> 00:12:18.419 just ideal lab conditions. And it's not just 00:12:18.419 --> 00:12:20.899 the machines, but keeping them clean, like cleaning 00:12:20.899 --> 00:12:23.539 validation. Absolutely vital. You need established 00:12:23.539 --> 00:12:25.460 cleaning procedures, and you need to validate 00:12:25.460 --> 00:12:28.120 them. Prove they work. With scientifically sound 00:12:28.120 --> 00:12:30.519 acceptance criteria, how clean is clean enough? 00:12:30.960 --> 00:12:32.620 It's all about preventing cross -contamination 00:12:32.620 --> 00:12:35.320 between batches or residues from cleaning agents. 00:12:35.820 --> 00:12:38.019 Yeah. Product integrity is paramount, not just 00:12:38.019 --> 00:12:40.000 about looking tidy. Right. What about when things 00:12:40.000 --> 00:12:42.580 need to change? You can't just tweak a process, 00:12:42.639 --> 00:12:45.840 can you? Change control. Definitely not. Change 00:12:45.840 --> 00:12:48.659 control is your safety net. It's a formal, documented 00:12:48.659 --> 00:12:51.679 system for evaluating any proposed change to 00:12:51.679 --> 00:12:54.700 equipment, processes, materials, documents, anything. 00:12:55.179 --> 00:12:57.519 You need a formal request, then experts review 00:12:57.519 --> 00:13:00.460 it. They assess the impact, the risks. Is this 00:13:00.460 --> 00:13:03.679 change safe? Will it affect quality? If it's 00:13:03.679 --> 00:13:05.840 approved, you document the approval, how it's 00:13:05.840 --> 00:13:07.659 implemented, and then you test it thoroughly 00:13:07.659 --> 00:13:09.960 to make sure it worked as planned and didn't 00:13:09.960 --> 00:13:12.899 cause any unintended problems. It prevents chaos, 00:13:13.179 --> 00:13:15.610 basically. And that control extends outwards, 00:13:15.830 --> 00:13:18.389 too, to suppliers. Yes. Supplier management is 00:13:18.389 --> 00:13:20.669 a huge part of QSR. You have to evaluate potential 00:13:20.669 --> 00:13:23.429 suppliers, contractors, consultants. Can they 00:13:23.429 --> 00:13:25.690 meet your requirements, including your quality 00:13:25.690 --> 00:13:27.149 requirements? So you're vetting them upfront. 00:13:27.250 --> 00:13:29.409 You have to. You need procedures for selecting 00:13:29.409 --> 00:13:32.570 them, monitoring them, and potentially disqualifying 00:13:32.570 --> 00:13:34.490 them if they don't perform. Your quality depends 00:13:34.490 --> 00:13:36.289 on their quality. It's an extension of your own 00:13:36.289 --> 00:13:38.490 system. Makes sense. And tying all this together 00:13:38.490 --> 00:13:41.559 is risk management. Yes. Risk management shouldn't 00:13:41.559 --> 00:13:43.720 be a separate activity you do once. It has to 00:13:43.720 --> 00:13:47.179 be woven into everything. Design, manufacturing, 00:13:47.500 --> 00:13:50.159 supplier selection. It's about proactively thinking. 00:13:50.679 --> 00:13:52.679 What could go wrong here? How likely is it? How 00:13:52.679 --> 00:13:55.240 bad would it be? And then what controls can we 00:13:55.240 --> 00:13:57.820 put in place to reduce that risk? That's continuous. 00:13:57.960 --> 00:14:01.299 It has to be. ISO 14971 is the big standard here. 00:14:01.639 --> 00:14:04.279 Globally recognized for medical device risk management. 00:14:04.429 --> 00:14:07.950 It really emphasizes that ongoing lifecycle approach. 00:14:08.330 --> 00:14:10.789 You identify risks, you control them, you monitor 00:14:10.789 --> 00:14:13.149 if the controls are working, you feed that information 00:14:13.149 --> 00:14:15.870 back. It's a constant loop. Okay, we've gone 00:14:15.870 --> 00:14:17.549 through a lot of the mechanics, the requirements. 00:14:17.769 --> 00:14:19.509 Let's step back. Why does all this intricate 00:14:19.509 --> 00:14:22.450 detail matter so much to like, you know, us, 00:14:22.990 --> 00:14:25.070 the patients, the users? Fundamentally, it's 00:14:25.070 --> 00:14:28.210 about safety. It's about trust. QSR exists to 00:14:28.210 --> 00:14:30.580 protect people. To ensure that the devices we 00:14:30.580 --> 00:14:33.179 rely on sometimes for our very lives are made 00:14:33.179 --> 00:14:35.840 consistently well to the highest standards and 00:14:35.840 --> 00:14:37.879 minimizes the risk of faulty devices reaching 00:14:37.879 --> 00:14:40.899 patients. It's that unspoken promise of quality 00:14:40.899 --> 00:14:42.700 and safety that happens behind the scenes. That's 00:14:42.700 --> 00:14:44.820 why it matters. Yeah, it really reframes it. 00:14:44.899 --> 00:14:46.919 It's not just bureaucratic hoops to jump through. 00:14:47.019 --> 00:14:49.659 It's the system designed to ensure safety and 00:14:49.659 --> 00:14:52.639 effectiveness, to build and keep that public 00:14:52.639 --> 00:14:56.870 trust in medical technology. Exactly. How do 00:14:56.870 --> 00:14:58.870 we know companies are actually doing all this? 00:14:59.190 --> 00:15:02.450 Audits, I assume. Audits are key. You have internal 00:15:02.450 --> 00:15:05.450 audits, the company checking itself, and then 00:15:05.450 --> 00:15:08.330 audits by regulatory bodies, like the FDA here 00:15:08.330 --> 00:15:11.659 in the US. They're like vital checkups. independent 00:15:11.659 --> 00:15:13.840 assessments to make sure the QMS is implemented 00:15:13.840 --> 00:15:16.039 correctly, and that the company is complying 00:15:16.039 --> 00:15:19.220 with QSR, with GMP. And the FDA has teeth if 00:15:19.220 --> 00:15:21.080 they find problems. Oh, absolutely. They have 00:15:21.080 --> 00:15:22.639 a range of enforcement tools. They can issue 00:15:22.639 --> 00:15:25.200 warning letters, which are serious formal notifications 00:15:25.200 --> 00:15:27.980 of violations. They can demand product recalls. 00:15:28.279 --> 00:15:30.539 In severe cases, they can impose fines, seize 00:15:30.539 --> 00:15:33.279 products, even get injunctions to shut down manufacturing 00:15:33.279 --> 00:15:36.200 facilities. Patient safety is the priority. What 00:15:36.200 --> 00:15:38.779 about that FDA form 483? I've heard of that. 00:15:39.080 --> 00:15:42.480 Huh. 483. That's issued at the end of an FDA 00:15:42.480 --> 00:15:45.519 inspection. It lists the inspector's observations, 00:15:45.779 --> 00:15:47.879 things they saw that might indicate violations 00:15:47.879 --> 00:15:50.379 of the regulations. It's not technically a final 00:15:50.379 --> 00:15:53.139 determination of noncompliance, but it's a very 00:15:53.139 --> 00:15:55.700 clear signal. The company is expected to respond 00:15:55.700 --> 00:15:58.120 in writing, usually within 15 business days, 00:15:58.639 --> 00:16:00.429 explaining how they'll correct the issues. It's 00:16:00.429 --> 00:16:03.169 taken very seriously. OK. Now, is this kind of 00:16:03.169 --> 00:16:06.190 rigor system just a U .S. thing or is it global? 00:16:06.289 --> 00:16:09.529 That's a great point. While 21 CFR Part 820 is 00:16:09.529 --> 00:16:12.230 specific to the FDA and the U .S. market, the 00:16:12.230 --> 00:16:14.350 principles align very closely with international 00:16:14.350 --> 00:16:18.110 standards. The big one is ISO 13485. That's the 00:16:18.110 --> 00:16:19.929 international standard for quality management 00:16:19.929 --> 00:16:22.590 systems for medical devices. Many companies certified 00:16:22.590 --> 00:16:26.049 ISO 13485. Right. And then you have major regulations 00:16:26.049 --> 00:16:28.649 like the medical device regulation, the EU MDR. 00:16:28.850 --> 00:16:31.669 It's also very demanding with strong QMS requirements. 00:16:31.990 --> 00:16:34.090 So there's a move towards harmonization, making 00:16:34.090 --> 00:16:36.970 the rule similar globally? Very much so. There's 00:16:36.970 --> 00:16:40.009 a huge effort towards global harmonization. It 00:16:40.009 --> 00:16:42.049 makes sense, right? It simplifies things for 00:16:42.049 --> 00:16:44.629 manufacturers who sell globally. But more importantly, 00:16:45.049 --> 00:16:47.370 it helps raise the bar for quality and safety 00:16:47.370 --> 00:16:50.230 everywhere, creates a kind of universal understanding, 00:16:50.549 --> 00:16:53.029 a shared language for what good medical device 00:16:53.029 --> 00:16:55.570 manufacturing looks like, builds trust across 00:16:55.570 --> 00:16:58.629 borders. So wrapping this up then, this deep 00:16:58.629 --> 00:17:01.289 dive has really shown that 21 CFR Part 820 isn't 00:17:01.289 --> 00:17:04.450 just a regulation. It's the fundamental architecture 00:17:04.450 --> 00:17:06.970 for ensuring medical device quality and safety 00:17:06.970 --> 00:17:09.970 from concept to patient. Absolutely. It's incredibly 00:17:09.970 --> 00:17:12.490 comprehensive. And it highlights that quality 00:17:12.490 --> 00:17:15.309 isn't static. It's a continuous journey, learning, 00:17:15.569 --> 00:17:18.250 adapting, always improving, all driven by that 00:17:18.250 --> 00:17:20.730 core commitment to keeping patients safe. It's 00:17:20.730 --> 00:17:22.569 about embedding that culture of compliance, that 00:17:22.569 --> 00:17:24.789 culture of quality into the very fabric of the 00:17:24.789 --> 00:17:27.440 organization. So for everyone listening, here's 00:17:27.440 --> 00:17:30.000 something to think about. Consider all the complex 00:17:30.000 --> 00:17:33.099 systems you rely on every day. Your phone, the 00:17:33.099 --> 00:17:35.740 food you eat, how you travel. What are the hidden 00:17:35.740 --> 00:17:38.599 systems, the meticulous controls, the documentation, 00:17:39.119 --> 00:17:41.160 the constant improvement efforts working behind 00:17:41.160 --> 00:17:43.539 the scenes there? How does understanding something 00:17:43.539 --> 00:17:46.059 like the QSR for medical devices maybe change 00:17:46.059 --> 00:17:48.240 how you think about quality, about safety, and 00:17:48.240 --> 00:17:50.079 about trust in those other parts of your life?