International Regulatory Compliance

Notified Bodies And CE Marking – Potential Legal Issues In US Lawsuits #4

 

Continuation 

In this blog I want to focus specifically on the Silicon Breast Implant controversy involving the breast implant manufacturer Poly Implants Prothèses (PIP) and the EU regulatory structure for CE Marking medical devices. In my preceding three blogs times I have noted several problems concerning medical device product quality. In the first blog I quoted former European Commission Vice President Martin Bangemen.

In his preface to The Guide to the Implementation of Community Harmonization Directives Based on the New Approach and the Global Approach, Brussels, 1995, Vice President of the European Commission, Martin Bangeman stated the following:

The novelty of this new approach resides essentially in the use of community technical rules of “quality instruments” such as European Standardization and conformity assessment procedures (testing, product certification, certification of manufacturers’ quality control procedures, accreditation, etc.). These instruments, drawn up on the basis of consensus of all the economic partners involved, enable manufacturers to affix the CE marking--a real “technical passport”--to their industrial products, which must conform to these community directives.

The idea of separating compliance into product quality and process quality seemed like a good and workable idea at the time. However, looking backward from 2012, the growth of the EU to 27 Member States and a population of 500 million people, the separation into product quality and process quality needs to be readdressed. 

EU Medical Device Oversight Structure 

Medical Device Product Quality

In the EU, device regulations are not conducted by member state Competent National Authorities, instead they are conducted by one of the 70 approved for-profit Notified Bodies that must be approved by one of the EU’s 27 Competent National Authorities (called competent bodies) to act as a Notified Body for one of the three Medical Devices Directives. Consequently, member states are removed from direct legal oversight and legal enforcement of medical device regulations and hampered in their ability to oversee medical device failures.

To reason that 70 for-profit Notified Bodies can employ 70, 60 or 50 device experts for hundreds of different medical devices in multiple offices around the world isn’t credible. Consequently, the dearth of available device experts will continue to negatively affect the quality of medical devices being manufactured. While it might be reasoned that large established Notified Bodies could field multiple device experts, even they struggle to provide adequate product safety oversight. The Notified Body chosen by Poly Implants Prothèses (PIP) was TUV Rheinland, a well-established and respected Notified Body. The inspection however, occurred with advanced warning at the PIP plant in China, which raises a whole set of questions.

I have talked with principals at several Notified Bodies who privately admit that it is difficult for them to hire and retain qualified medical device experts. The number of silicon breast medical device manufacturers approved by the EU Notified Body structure has been estimated in various newspaper accounts at 80 to 120. If this is even remotely true, it is outrageous. In the US FDA has approved 6 medical device manufacturers for silicon breast implants.

While 6 silicon breast implant manufacturers approved for 313 million people in the US might seem small, 80 to 120 silicon breast implant manufacturers for 500 million people in the EU is preposterous and beyond oversight. Further, FDA requires that US manufacturers must be able to continually demonstrate the efficacy of their medical devices. No such requirement exists in the EU. 

Medical Device Product Quality Recommendations

• While several approaches to correct the administrative structure should be explored, one approach that might work would be to draw upon CEN and EU Member State Standards Bodies (DIN, AFNOR, BSI, etc.) to identify and/or provide medical device  experts to evaluate medical devices. Their services could be paid for by Notified Bodies, but they must not be employees of for profit Notified Bodies so that their judgments could be compromised.

• Something akin to an FDA 510(k) also should be created with device efficacy built in as major requirement. It isn’t a perfect solution because the 510(k) predicate device requirement doesn’t always avoid device defects in design and materials, but it is overseen by FDA not a private third party.

Medical Device Process Quality

All in all, Notified Bodies do a better job with process quality oversight, not perfect but better than their oversight of medical device product quality. Unfortunately, in their zeal to obtain business, some Notified Bodies could be accused of providing the best oversight money can buy. 

Medical Device Process Quality Recommendations

• Notified Body process quality oversight must be improved, which means that Member State Competent Body oversight of Notified Bodies must improve. Notified Bodies also must have greater awareness of their liability exposure. Thus far they have dodged the proverbial litigation bullet, but this will change in the US as well as in the EU. Presently there are several US lawsuits involving CE marked PIP breast implants in the US and the number of lawsuits will increase.

• FDA’s QSIT (Quality System Inspection Technique) adopted in 1999 as a guidance tool for FDA inspectors and an instructional tool for medical device manufacturers was a clever move that accompanied the adoption of FDA’s Quality System Regulation (QSR) in 1996. It introduced the use of a quality management system as a Good Manufacturing Practices regulatory approach to medical device manufacturing in the US. It also set a serious tone concerning what to expect when FDA conducts a medical device plant inspection. The Internal Quality Management Audit Checklist (ISO 13485:2003/ISO 9001:2000) is the closest approximation I could find to QSIT for the EU. A formal adoption of such a structure for use by EU Notified Bodies and oversight by Member State Competent Bodies could serve the same purpose. Every US medical device manufacturer conducts QSIT audits before being visited by FDA. The same type of rigor should exist for the EU.

• In addition to Member State Competent Bodies acting as Third Party Registrars overseeing their Notified Bodies, some effort should be made to instruct their Notified Bodies to be conversant with and abiding by the legal requirements of ISO/IEC 17021:2006 Conformity Assessment – Requirements for bodies providing audit and certification of management systems. In 2008, I served as legal expert in a national lawsuit in a US Federal Court in Los Angeles. As we proceeded to collect material in legal discovery, I contacted the Registrar for the opposing company to verify that they were the ISO 9001:2000 Registrar for the company. Since the Registrar was a division of a European Third Party that also was a Notified Body with whom I had worked with for some of my EU medical device clients, I anticipated no problem. Instead, I was informed that their attorneys advised them that they could not share such information, which was in clear violation of ISO/IEC 17021:2006. I know that US attorneys are clueless when it comes to such standards, but it quickly became clear that the Registrar also was clueless about the standard. From that point on, the Registrar proceeded to violate the requirements of ISO/IEC 17021:2006 with impunity, including modifying he scope of their ISO 9001:2000 Certification three years after it had been granted, to accommodate their corporate client. We began preparing expanded depositions and inclusion of the Registrar in the lawsuit when the case was settled. Clearly, the Registrar had no moral compass whatsoever. Also, my opinion of the related Notified Body went downhill.

• Notified bodies also must be made aware of their legal obligations in the event of a product liability lawsuit. For example, litigants in US Federal Courts have a legal right to ask for relevant records and documents in discovery such as the Quality Manual and Quality Procedures, Contract Records, Certification Audits, Surveillance Audits, Management Review Minutes, Non Conformity Records, Corrective and Preventive Action Minutes and records, Internal Audit Minutes, design records, process control records, Technical File records, complaints, etc. It makes no difference if these records and documents describe devices manufactured outside of the US. If they are relevant to devices sold in the US, they must be produced or the company can be held in contempt of court and fined. It doesn’t end there. Additional fines and potential criminal prosecution could follow. I mention this because presently I am working as legal expert on a CE Marking lawsuit in US Federal Court where a German manufacturer has been resisting our requests for discovery of their ISO 9001 records and documents and CE Marking Technical Files, etc. under the mistaken impression that a US Federal Court can not compel discovery from a non US manufacturer, not realizing that any manufacturer that sell products in the US is subject to US law.

Conclusion

There is a lot I like about the EU approach to the administration of its new approach Directives. However after seeing first hand the problems with Notified Bodies attempting to find medical device experts and observing mixed success with their administration of quality management system oversight, something must be done to improve the regulatory administrative approach. Also, consideration must be given to the efficacy of their approach as applied in different countries.

When working with a company in Atlanta three years that owned a manufacturing plant in China, I was asked to review their CE Marking materials from China. They had concluded that their Chinese counterparts didn’t understand CE Marking and decided to shift the administration of CE Marking their products to the US. It was about the same time that a US Manufacturer of Heparin was caught up in a controversy where 80 people died and several others were gravely ill from their Heparin sold in the US. The response from the American manufacturer was that they bought their supplies from Consolidation Laboratories in China. At the same time I was looking at pictures in the New York Times of diseased pig intestines draped over concrete sinks in rural China being rinsed with dirty water and shipped to Consolidation Laboratories. The American manufacturer never checked the full depth of their supply chain.

The use of industrial grade silicon instead of medical grade silicon and the resulting problems it has caused thousands of women in the EU and throughout the world is appalling. It is encouraging that the French police have detained the founder of the company. I trust that he might also spend a substantial amount of his remaining time in a French prison.

Clearly it is time to revaluate the effectiveness of the approach for the manufacture of medical devices. I hope that some of my suggestions prove to be useful. As mentioned in my previous blog I would be happy to help. My focus on International Regulatory Compliance has always included both the requirements of regulatory authorities and the legal implications of compliance, non-compliance, documentation and sloppy attention to detail that could result in a lawsuit in a US Federal courtroom. I also focus on product safety and the steps necessary to create a safe product. If you have questions regarding CE Marking lawsuits or medical device regulatory oversight you can contact me for a free preliminary consultation at my e-mail address jameskolka@gmail.com.  

Notified Bodies And CE Marking – Potential Legal Issues In US Lawsuits #3

Continuation

I want to return to the issue of Notified Bodies and the problem with silicon breast implants in the EU. As noted in my two previous blogs, I have observed various problems with Notified Bodies and CE Marking clients over time. Medical devices present a more complex regulatory dimension for CE Marking. In the US, FDA regulates medical devices using its Quality System Regulation (QSR) for medical device design and manufacturing. While FDA employs a quality management system similar to the EU’s ISO 13485, FDA oversight is far more rigorous and intensive with an ability to impose a range of legal sanctions from Warning Letters to Civil and Criminal penalties. Further, FDA can issue a Federal Consent Decree and fines, (e.g. $100 million, $60 million and extended oversight follow up) for the most egregious cases. The key issue is public health and safety.

In the EU, device regulations are not conducted by member state Competent National Authorities, instead they are conducted by one of the 70 approved for-profit Notified Bodies that must be approved by one of the EU’s 27 Competent National Authorities (called competent bodies) to act as a Notified Body for one of the three Medical Devices Directives. Consequently, member states are removed from direct legal enforcement of medical device regulations and hampered in their ability to oversee medical device failures. There is no comparable enforcement structure to FDA.

In the US all medical device manufacturers must have a FDA compliant QSR quality management system. Unless a company wants to manufacture a Class I medical devices not requiring CFR 820.30 design controls it generally must submit a 510(k) to receive FDA approval before manufacturing a medical device or seek Pre Market Approval from FDA and conduct a Clinical Trial to obtain FDA approval before manufacturing a new type of (generally Class III) medical device. FDA has the legal authority to enforce its regulations.

Problems With Notified Body Governmental Oversight

As mentioned in my previous blog, Notified Bodies perform two oversight functions, evaluating and approving medical devices (product safety) and ongoing evaluation of manufacturers’ ISO 13485 Quality Management Systems (process quality). Of the two functions, product quality is the most difficult because of the lack of device experts. To reason that 70 for-profit Notified Bodies can employ 70, 60 or 50 device experts for hundreds of different medical devices in multiple offices around the world isn’t credible. Consequently, the dearth of available device experts will continue to negatively affect the quality of medical devices being manufactured.

As a result, most Notified Bodies focus on the quality management system, ISO 13485 and process quality. The certification audit and surveillance audits operate much like ISO 9001 certification and surveillance audits except that the requirements of the relevant Medical Device Directive are incorporated into the ISO 13485 Quality Management System. Likewise the type of Medical Device(s) will be central to the QMS.

As noted in my previous blog, the quality of Notified Body QMS oversight isn’t always as rigorous as it should be, certainly not as rigorous as an FDA plant inspection. No Notified Body has issued anything comparable to FDA’s QSIT (Quality System Inspection Technique) setting forth the procedure and questions a manufacturer should expect and be able to answer when FDA conducts an on-site inspection of a manufacturing plant. AdvaMed – Advanced Technology Association has developed papers, Different Points to Consider When Preparing For An FDA Inspection for different QSIT Subsystems. There is no comparable preparation for an audit by a Notified Body.

This is not to say that audits by Notified Bodies are treated lightly by medical device manufacturers rather it speaks to the legal authority of an FDA audit when compared to the legal authority of Notified Body audits. In addition to the audit example described in my previous blog where a Notified Body wrote good observations for a Class III medical device manufacturer but failed to issue non-conformities, did not serve their client well. Whether this was done to placate a client to retain their business isn’t clear. What it did accomplish was to prompt their client to ask me if I thought they would survive an FDA site inspection, to which I said no. 

In contrast, FDA at the very least would have issued a Warning Letter and might even have shut down the facility until major changes were implemented. This is not the only case where I have observed a Notified Body conduct an “audit-lite.” A few other examples are listed below:

• A colleague and I spent two days at a medical device manufacturer’s only US CE Marking plant in Arizona while conducting a GAP Analysis for the manufacturer. They wanted to extend CE Marking capability to all of their US manufacturing plants and asked if we could evaluate their Arizona operation. When we arrived at the plant we asked to examine their Technical Files for medical devices being manufactured at the Arizona plant. To which the plant manager responded, “What’s a Technical File?” Following this exchange we proceeded to conduct our audit. We found storage of medical devices in a warehouse lacking heating and cooling was having a serious adverse effect on device quality. We also found boxes containing devices that were marked with the corporate address 1000 miles away, but not the address of the plant in Arizona that was CE Marking the devices. Several more problems were found. We recommended that they identify the unique features of each QMS, but integrate their QSR and ISO 13485 Quality Management Systems for greater control in the future.

• I recently received a call from a Medical Device Manufacturer in Atlanta asking if I could meet them at their corporate office for consultation. They had just been told by their Notified Body that they received two major non-conformances on their most recent surveillance audit and had one month to make the necessary correction or they could no longer CE Mark their medical devices. The quality and regulatory managers flew in from the manufacturing plant in question with the surveillance audit report. The managers were shocked because this was their fifth surveillance audit report and previously they had not received any non-conformances. Nothing had changed in their manufacturing operation. The Notified Body informed them that their Competent National Authority (competent body) had just completed a review of all of their audits and found problems with their findings. The Notified Body was informed that they had to meet with all of their clients and inform of these changes and the reason for the changes or the Notified Body would be stripped of its CE Marking authority. Fortunately, my client was able to make the necessary corrections and continue CE Marking their medical devices.

• In another case I visited another manufacturing client in California at the request of their medical device insurance company to examine their Quality Management System and complaint handling system. The manufacturer had experienced some difficulties and wanted a legal perspective on corrective steps that might be taken. The quality manager mentioned that they had a recent surveillance audit from their Notified Body. (The manufacturer made radioactive plates for Magnetic Resonance Imaging machines.) They were surprised that the Notified Body device expert seemed to be afraid of entering the manufacturing area for fear of exposure to radiation. They weren’t convinced that he was much of an expert. The company has dealt with many experts in radioactive devices throughout their operation.

These are not idiosyncratic observations. While I have worked with several exceptional Notified Bodies administering CE Marking regulatory oversight for the EU Medical Devices Directives, they too have experienced glitches and these have been corrected when discovered. Clearly, strong Competent Body oversight is vital to the process. 

As mentioned previously there also are Notified Bodies more motivated by making money than quality medical device regulatory oversight. A colleague of mine encountered one such Notified Body a few years ago when working with a company that manufactured active implantable medical devices. He helped the manufacturer meet with the FDA regional office and review their quality management system. He was then asked by the manufacturer if he would review their most recent Notified Body surveillance audit, which he did. They asked his opinion and he said it was inadequate, which angered the Notified Body.

He subsequently learned that the company, however, was not fully candid with him, the FDA and the Notified Body. Not only were there manufacturing problems, four people had died from their implants and several others were experiencing serious problems with the device. FDA took action and several product liability lawsuits followed.

Had plaintiffs’ attorneys realized the role of the Notified Body in CE Marking these devices they could have sought Technical Files, ISO 13485 records, documents and notified body Certification Audits and Surveillance Audits in discovery to see what additional useful information could be obtained for use in the lawsuits. Notified Bodies are not exempt from US lawsuits. Further, the Notified Bodies could have been sued directly if their regulatory behavior could be partially attributed to device failures. The irony here is that the notified Body never realized how close they came to becoming a part of the lawsuits.

Observation – Privatized Oversight

The concept of privatized regulatory oversight is not unique. However, fragmented regulatory oversight involving 27 different Competent National Authorities (Competent Bodies) of different size, expertise and financial capability overseeing 70 Notified Bodies operating on their behalf is unique and extremely cumbersome. Until the structure is corrected, problems will continue to arise. The Friday January 27, 2012 issue of the New York Times contains an article about the breast implant manufacturer Poly Implants Prothèses, the founder Jean-Claude Mas and the apparently undetected use of industrial grade silicon in place of medical grade silicon.

The problem now is the immediate solution and the long-term solution. I understand the desire to create a strong EU structure while preserving national sovereignty. My political science and legal training tells me that it is possible, not easy but possible. I would be happy to help. 

My next blog will conclude this series and specifically address the problem with the silicon breast implants and prospective solutions. My focus on International Regulatory Compliance has always included both the requirements of regulatory authorities and the legal implications of compliance, non-compliance, documentation and sloppy attention to detail that could result in a lawsuit in a US Federal courtroom. I also focus on product safety and the steps necessary to create a safe product. If you have questions regarding CE Marking lawsuits you can contact me for a free preliminary consultation at my e-mail address jameskolka@gmail.com. 

Notified Bodies And CE Marking – Potential Legal Issues In US Lawsuits #2

Introduction 

The preceding Blog reviewed the Minimum criteria to be taken into account by Member States for the notification bodies set forth in Annex XI of the 2006/42/EC Machinery Directive. I want to revisit the criteria to consider how they might come into play in a lawsuit. Several issues need to be kept in mind when dealing with notified bodies in lawsuits. To begin, notification varies for each directive. Therefore, it is critical to know what notification means for the Directive or Directives relative to a particular lawsuit and the role of notified bodies vis-à-vis your client.

Not All Notified Bodies Play According To The Rules

You must be aware that not all notified bodies behave ethically concerning their notified status. I have encountered notified bodies implying that their services are officially sanctioned (i.e., notified) by a Member State Competent National Authority to the European Commission for a Directive, such as the Machinery Directive, when in fact they are acting as consultants. This has been especially true for the Machinery Directive, where notification is confined to Annex IV of the Directive. Everything outside of Annex IV, is consulting with no official sanction by a Member State Competent National Authority. 

I mentioned previously an instance in 2003 where a Dutch Notified Body issued two EC Type Examination Certificates for machines a manufacturer wanted to CE Mark for the EU. They also issued a paper stating that other machines couldn’t be CE marked until certain steps were taken. Since none of these machines were listed in Annex IV, the issuance of the CE Type Examination Certificates was outside the legal authority of the notified body. The statements on the other machines were not identified as comments by a consulting body. Instead they were presented as the authoritative judgments of a governmentally recognized notified body. To accomplish these tasks the Dutch notified body sent a team to the US to conduct their work at great expense to my client.

Clearly, the notified body was aware that their American Clients didn’t understand CE Marking or the legal requirements of the Machinery Directive. I informed my client that their two EC Type Examination Certificates were worthless and had no standing in EU law or US law, however, if something happened where the certificates would be important in a lawsuit, the notified body could be sued for fraud. 

Since I had been working with representatives in the UK’s Department of Trade and Industry DTI (now the Department for Business, Enterprise and Skills BIS) on other projects, I asked them for help in contacting the Dutch Competent National Authority to complain about the behavior of the Dutch notified body. DTI tried for several months to contact the Dutch Competent National Authority and received no response.

They suggested that I should try to make contact directly and see if I fared any better. I wrote e-mails for several months to the Dutch Competent National Authority and even wrote directly to the head of the Dutch Competent National Authority and received no response. Finally, I transmitted my long train of e-mails to DTI & the Dutch to EU Commissioner Liikanen chief administrator of the EU Directorate General responsible for Machinery explaining what had transpired. Three weeks later I received a letter on March 23, 2004 from Mr. Fabrizio Sachetti of the Committee on Machinery affirming that our position was correct. They copied the Dutch Competent National Authority and the Dutch notified body of their statement. 

What Is The Operating Structure For Notified Bodies?

• Given the fact that notification varies with each Directive, it is essential that the precise legal authorization for notified bodies be known. It varies widely from Directive to Directive. The most stringent oversight was created for the Medical Devices Directives, however, recently the quality of notified body oversight of the Medical Devices Directive has been called into question concerning failed silicon breast implants in the EU and the French medical device manufacturer PIP (Poly Implant Prothèse). I will return to this case in my next blog.

• Every third party that wants to become a notified body for a new approach Directive must submit their credentials to the Competent National Authority of the country in which they are located. Presumably, each Competent National Authority has the technical expertise to evaluate the ability of the notified body to approve a CE Mark for a medical device and conduct effective continuous oversight of their notified bodies. Clearly, however, not all EU Member State Competent Authorities are equal. France, Germany, the UK, Italy, the Netherlands, Denmark, Ireland, Sweden and Finland have well developed oversight Competent National Authorities and are capable of being effective oversight bodies. Some of the smaller countries will not take on this task. A critical follow-up question is how effective is the oversight of the Member State Competent Authorities by the European Commission?

• Recall the discussion in my previous blog of January 9, 2012 regarding the dual function of many notified bodies concerning product safety and process quality. The dual function is particularly important to the oversight of medical device manufacturers. I have found, however, that some notified bodies address their dual function very well and others have been sloppy. This can be a problem when it comes to medical devices.

• Process Quality: Depending on the device classification, process quality refers to the type of Quality Management System, e.g. ISO 13485 used to assure that the medical devices are manufactured at a consistent quality level. The notified body conducts the certification audit and the surveillance audits to assure that process quality is being maintained. Basically, a medical device manufacturer contracts with a notified body as its "private FDA" for manufacturing medical devices for the EU, whereas in the US medical device manufacturers must follow FDA’s Quality System Regulation (QSR) and are subject to FDA oversight.

• Product safety: Medical device safety in the EU is governed by the classification of a device set forth in the Active Implantable, Medical Devices or In Vitro Diagnostic Directives. Once the classification has been determined, it is necessary to identify which Essential Requirements apply to a device, which EN Standards will allow a manufacturer to demonstrate conformity to the Essential Requirements and finally determine which Conformity Assessment Procedure applies to the manufacturing of a particular medical device.

• A medical device manufacturer in the EU, US, Canada, China, etc. can choose to contract with the notified body of their choice for a particular product, which means that manufacturers can shop around for price, service and convenience. While notified bodies are headquartered in the country where they have been approved, they have offices throughout the world. A fair question is the competence of the notified bodies in a country like China to carry on day-to-day functions as opposed to their US counterparts. I have worked with manufacturers who were not happy with the CE Marking abilities Chinese notified bodies and moved it to the US or EU.

What Are Some Of The Concerns Regarding Notified Bodies?

• Notified bodies must operate in accordance with the rules set forth in the particular Directive for which they have been approved by their Competent National Authority. While it might be obvious, it should be noted that each notification is different for each Directive. Notification for one Directive has nothing to do with another Directive.

• In spite of sincere pledges to create a firewall to prevent a conflict of interest between their official status as a notified body for a Directive and consulting for the same Directive, notified bodies are aware that Americans do not understand these subtleties and believe that consulting by a notified body is officially sanctioned by an EU Member State. A few years ago when I was working on a project with the California Manufacturing Technology Center in Fresno, we submitted a bid to a California packaging machine manufacturer. When we lost the bid, I asked my colleague in Fresno, if we were too high and he said no, the notified body quote was four times higher than ours. The manufacturer was under the impression the notified body was officially sanctioned by the German Government.

• Notified bodies are private for profit organizations. While most conduct themselves in a respectful manner, I am aware from a few former colleagues who have worked on a contract basis that a few notified bodies are rather mercenary with their employees violating criteria number two on the list, The body and its staff shall carry out the verification tests with the highest degree of professional integrity and technical competence and shall be free from all pressures and inducements, particularly financial… Some notified bodies essentially drive their employees to produce quotas or be dismissed, especially when conducting Quality Management System Certification and Surveillance Audits.

• Medical devices pose a special problem when it comes to device expertise. Often it is difficult for them to find and hold onto experts who can evaluate devices because medical device manufacturers will offer better pay to these persons. It speaks well to the quality of their expertise, but it creates a serious device quality and potential safety problem nonetheless.

• Medical Device Quality System oversight is another area where potential problems can arise. A few years ago I worked with a medical device manufacturer of a Class 3 Medical in California who had just completed a surveillance audit from their notified body. They asked if I would review the audit and write an Executive Summary. Their biggest concern was how I thought they would fare when FDA conducted an on site inspection. While it was a good audit, it had no teeth. It made some excellent observations, but it issued no non-conformities. I told my client that I thought they would not survive an FDA and could be shut down. They asked if I would highlight the areas for improvement in my executive summary. I did so and they called six months later to say they passed their FDA inspection with no write up in a FDA 483 Warning Letter.

Conclusion

The preceding are just a few experiences I have encountered working with notified bodies. It isn’t all negative, I have had excellent experience with several notified bodies and enthusiastically recommend their services to my clients. The recent experience with the French silicon breast manufacturer, however, points to areas where improvements are critically necessary. I also want to spend some time discussing notified bodies and potential US Federal Lawsuits since this area is beginning to heat up. Information provided in Technical Files could become fair game for CE Marked medical devices in legal discovery. Finally, I want to compare the European approach to medical device regulation with FDA’s medical device regulatory approach.

My focus on International Regulatory Compliance has always included both the requirements of regulatory authorities and the legal implications of compliance, non-compliance, documentation and sloppy attention to detail that could result in a lawsuit in a US Federal courtroom. I also focus on product safety and the steps necessary to create a safe product. If you have questions regarding CE Marking lawsuits you can contact me for a free preliminary consultation at my e-mail address jameskolka@gmail.com. 

Notified Bodies And CE Marking – Potential Legal Issues In US CE Marking Lawsuits #1

Introduction

I received an e-mail this week asking this question, “Are you aware whether or not the notified bodies in Europe are expected to possess professional indemnity insurance, to cover them in cases of a poor opinion of compliance or failure of post Market surveillance, with thanks for your advice.”

I answered, “Yes, in every new approach Directive there is an Annex that spells out the criteria for notified bodies. For Example, in the 2006/42/EC Machinery Directive, Annex XI sets forth, "Minimum criteria to be taken into account by Member States for the notification of bodies" Paragraph 6 states, "The body shall take out liability insurance unless its liability is assumed by the State in accordance with national law or the Member State itself is directly responsible for the tests."

Notified Body Requirements

The question about notified body “indemnity insurance” raises a number of questions that should be explored concerning the EU legal requirements for notified bodies and their potential legal implications in US courts. The full list is stated below:

Minimum criteria to be taken into account by Member States for the notification bodies 

1. The body, its director and staff responsible for carrying out the verification tests shall not be the designer, manufacturer, supplier, or installer of machines which they inspect, nor the authorized representative of any of these parties. They shall not become involved, either directly or as authorized representatives, in the design, construction, marketing or maintenance of the machines. This does not preclude the possibility of exchanges of technical information between the manufacturer and the body.

2. The body and its staff shall carry out the verification tests with the highest degree of professional integrity and technical competence and shall be free from all pressures and inducements, particularly financial, which might influence their judgments on the results of their inspection, especially from persons or groups with an interest in the result in result of verifications.

3. For each category of machinery for which it is notified, the body must possess personnel with technical knowledge and sufficient and appropriate experience to perform a conformity assessment. It must have the means necessary to complete the technical and administrative tasks connected with the implementation of the checks in an appropriate manner, it must also have access to the equipment necessary for the exceptional checks.

4. The staff responsible for inspection shall have:

-- sound technical knowledge and vocational training,

-- satisfactory knowledge of the requirements of the tests they carry out and adequate experience of such tests,

-- the ability to draw up the certificates, records and reports required to authenticate the performance of the tests.

5. The impartiality of inspection staff shall be guaranteed. The remuneration shall not depend on the number of tests carry out or on the results of such tests.

6. The Body shall take liability insurance unless its liability is assumed by the State in accordance with national law, or the Member State itself is directly responsible for the tests.

7. The staff of the body shall be bound to observe professional secrecy with regard to all information obtained in carrying out its tasks (except vis-à-vis the competent administrative authorities of the State  in which its activities are carried out) under this Directive or any provision of national law giving effect to it.

8. Notified bodies shall participate in coordination activities. They shall also take part directly or be represented in European standardization, or ensure that they know the situation in respect of relevant standards.

9. Member states may take all necessary measures they regard as necessary in order to ensure that, in the event of cessation of the activities of a notified body, the files of its customers are sent to another body or are made available to the Member State which has notified it.

Notified Bodies 

Notified bodies are created by each New Approach Directive.  The criteria are established by each Directive.  Notification may be to a specific clause, such as Annex IV of the Machinery Directive dealing with dangerous machines, which is the only clause to which a body may be notified for that Directive. Notification also may be confined to those clauses for which it has technical competence or it may extend to all of the clauses of a directive.  The decision belongs to Competent National Authorities who use the EN 45000 series to evaluate notified bodies. When a Competent National Authority approves one of their third parties for a Directive, they “notify” the European Commission. The Commission periodically publishes the list of notified bodies in The Official Journal of the European Communities.

Product Safety and Process Quality--Two Elements of CE Marking A Product 

In his preface to The Guide to the Implementation of Community Harmonization Directives Based on the New Approach and the Global Approach, Brussels, 1995, Vice President of the European Commission, Martin Bangeman stated the following:

The novelty of this new approach resides essentially in the use of community technical rules of “quality instruments” such as European Standardization and conformity assessment procedures (testing, product certification, certification of manufacturers’ quality control procedures, accreditation, etc.).  These instruments, drawn up on the basis of consensus of all the economic partners involved, enable manufacturers to affix the CE marking--a real “technical passport”--to their industrial products, which must conform to these community directives.

Considered one of the architects of the new approach, vice president Bangeman’s quote deserves some attention.  To begin, when he talks about a “consensus of all the economic partners involved” he is referring to the fact that the CEN, CENELEC and ETSI working groups that draft EN safety standards are comprised of manufacturer representatives, representatives of Member State standards organizations (e.g., BSI, DIN, AFNOR, etc.), testing laboratories, academic faculty and in some cases consumer representatives.  While Member State standards organizations direct working group schedules, there is a conviction that the affected parties are participating in writing the standards.

The reference to “quality instruments” such as European standardization and conformity assessment procedures points to two aspects of virtually all new approach directives.  One aspect is the element of product safety. The technical file referred to in most directives contains a checklist of the directive’s essential safety requirements and the EN harmonized safety standards and/or the tests performed and approvals granted which a manufacturer has used to demonstrate conformity to the Directive’s essential safety requirements.  Generally, among those tests will be an application of the principles of safety integration applied to the product in question and a risk assessment. The technical file should demonstrate and record the companies’ efforts to achieve an acceptable level of product safety.

The second aspect is the element of process quality. Once an acceptable level of product safety has been built into a product, the manufacturing process must be able to assure consistent quality so that products number 5, 905, and 20,005 are of consistent and dependable quality. This dual objective of achieving acceptable product safety and consistent process quality will be familiar to manufacturers of regulated products such as medical devices using ISO 13485, and ISO 9001 for manufacturers of products covered by other Directives.

Conclusion

Notified bodies play an integral role in New Approach Directives such as the Medical Devices Directives and variable role in other New Approach Directives, e.g. except for Annex IV of the Machinery Directive where notified body involvement is required, manufacturers self-certify to the requirements of the Directive.

The areas where third parties are “notified” varies for each Directive. Since Notified Bodies (along with ISO 9001 Registrars) will increasingly become involved in CE Marking lawsuits in US Federal Courts, I want to examine notified body involvement and behavior since the beginning of CE Marking products and identify areas where notified body involvement in US lawsuits should be anticipated.

My focus on International Regulatory Compliance has always included both the requirements of regulatory authorities and the legal implications of compliance, non-compliance, documentation and sloppy attention to detail that could result in a lawsuit in a US Federal courtroom. I also focus on product safety and the steps necessary to create a safe product. If you have questions regarding CE Marking lawsuits you can contact me for a free preliminary consultation at my e-mail address jameskolka@gmail.com.  

CE Marking Lawsuits – Applying Forensic Law To Evidence & Discovery

Introduction

As I mentioned in my previous Blog, US Federal Courts – The New Venue For CE Marking Lawsuits, posted on November 30, 2011, we can expect to see an increasing number of CE Marking lawsuits in US Federal Courts. The rationale for the increased number of lawsuits is spelled out in the Blog. I have previously mentioned that I am serving as legal expert in three such lawsuits in US Federal Courts. The earliest lawsuit is nearing completion and appears to have met with success in translating European EN Safety Standards and EU Directive Essential Safety Requirements in a US courtroom. The other two lawsuits are still underway. I also mentioned having served as legal expert in lawsuits involving ISO 9001. These have been settled out of court, however, based on some recent inquiries I anticipate more such lawsuits in the future.

The purpose of today’s Blog is to revisit a few of the previous observations and amplify the points being made. I noted previously that US litigation attorneys often proceed in a somewhat routine fashion not fully understanding the different product safety requirements of EU New Approach Safety Directives and EN safety standards. Also as noted, I have seen botched discovery requests and frustrated Judges regarding ISO 9001 records and document requests in discovery. 

New Territory

This area, CE Marking New Approach Safety Directives, often intermingled with a quality management system, such as ISO 9001 is new territory that requires competent legal understanding if litigation attorneys and defense counsel hope to succeed on behalf of their respective clients.

To begin there are 27 New Approach Safety Directives, drafted at different times. Several are in various states of revision and new Directive combinations. These Directives affect approximately 65% of products entering the EU. They range from Directives addressing Machinery Safety, Medical Devices (General, Active Implantable, In Vitro Diagnostic), Toy Safety, Low Voltage, Electromagnetic Compatibility, Pressure Equipment, Equipment and Protective Systems in Potentially Explosive Atmospheres (ATEX), Construction Products, Personal Protective Equipment, Radio and Telecommunications Terminal Equipment to mention some of the more prominent Directives. 

Each Directive also has Essential Safety Requirements and EN standards that allow for demonstration of conformity to the Directive’s essential safety requirements. There are thousands of standards that are reviewed every 5 to 7 years to consider whether they should be maintained in their present state, revised or eliminated. As noted in the prior Blog, the revision of these standards is now coordinated between the EU Standards Bodies, CEN, CENELEC and ETSI and ISO and IEC to improve the revision process and invite EU standards expertise into these considerations. Also participating in ISO and IEC deliberations on behalf of United States is the American National Standards Institute (ANSI). Consequently, these revised standards will become both American and EU standards. Therefore, the time when a product is manufactured could determine if a standard in question was also an American Standard, if that issue is relevant to a lawsuit.

Also, depending on the Directive or Directives in question and the nature and safety of a product, a company might have chosen what the Europeans call a Conformity Assessment Procedure to assure that the product is manufactured at a consistent quality level. In these cases, third parties which the Europeans call “Notified Bodies” will be involved in the product compliance process. Therefore, notified body records, often including ISO 9001 Quality Management System documents and records could be involved.

It is critical for litigation attorneys and defense counsel to understand how these safety standards are applied and how this information could critically impact a lawsuit affecting their clients. Sophomoric American assumptions could adversely affect the outcome of a lawsuit. 

Timing

As noted in my previous Blog, timing is critical to understanding the relevant facts concerning a lawsuit. It is important to know when a product is manufactured in order to determine the legal status of a Directive, e.g. whether or not it had been revised at the time of design and manufacture, and it is important to know which standards apply to a product. If a Conformity Assessment Procedure was involved and a Notified Body also was involved, certification audits and surveillance audits could become important to the disposition of a lawsuit. Likewise, it is important to know how many Directives might be involved in the manufacture of a product.

For example, I have worked with machinery manufacturers whose machines had to comply with the Machinery Directive, Low Voltage Directive, Electromagnetic Compatibility Directive, Pressure Equipment Directive and the Explosive Atmospheres Directive. Therefore the requirements of each directive and the standards necessary to comply with the requirements of each directive need to be examined. Likewise, it is critical to know what requirements were in place when the product was manufactured. Of course, attorneys will want to know how this all might be litigated in a US Federal Court. 

Observation

In previous Blogs where the topic was a malfunctioning product such as machine, specific compliance with the requirements of these New Approach Safety Directives can be examined to see if the company actually attempted to satisfy the requirements of the Directives and the relevant standards. In one case presently being litigated in a US Federal Court, it was clear that the company, a US machinery manufacturer, did not create a Technical File containing all of the steps required by the manufacturer to comply with the Directive. The file also contained no risk assessment standard and risk assessment judgments.  Further, after two accidents that killed one worker in the EU and maimed another worker in the US who will require 24 medical care for the rest of his life, it was clear that the company did not comply with the safety requirements of the directive and this failure caused both accidents. 

Forensic Law   

In order to address these cases and effectively use this information in a US Federal Court, it is necessary how these Directives and their Standards interplay and the status of each at the time the machine in question was designed and manufactured. Simple assumptions will not work. Knowing when critical components were manufactured also is important as well as the date that the product itself is manufactured. Knowing how the EU directives and standards work is different, but it can be successfully tackled and lawsuits can be won.

I first encountered the term “forensic” when I received a call several years ago from young man was working with a law firm applying the requirements of ISO 9001 and ISO 9004 to some product failure cases in Atlanta. I asked what his background was and he said he was a forensic engineer. 

Since then, and in a totally different application in California involving a product that was causing a medical device manufacturer to experience manufacturing difficulties with diabetic test trips, I was asked to determine if a supplier had failed to follow requirements of its ISO 9001 Quality Management System and if that failure caused the test strip difficulties. It did. I also was working with a forensic accounting firm who were determining if the financial loss calculated by the manufacturer was accurate. It was. 

The term forensic applies equally to the law and litigation. Attorneys continually attempt to dissect products and events to understand what happened and apply this knowledge on behalf of their clients. In the case of the 27 EU New Approach Safety Directives and thousands of EN harmonized safety standards the forensic analysis is complex, but doable. The biggest problem I have observed are US attorneys who transmogrify an EU legal issue into a more familiar American setting thereby mutilating the critical issues and facts affecting their clients.  

Conclusion

To successfully tackle a CE Marking lawsuit, it is necessary to apply forensic analysis to the Directives and Standards that apply to a case. As noted in my prior Blog, while it can be hard breaking litigation and defense attorneys of some bad habits and reining in their egos, it is to their advantage to approach a lawsuit having all of their facts in order and achieving the best possible result for their client. Fortunately, I’ve worked with several attorneys who have achieved this objective and prevailed on behalf of their clients.

My focus on International Regulatory Compliance has always included both the requirements of regulatory authorities and the legal implications of compliance, non-compliance, documentation and sloppy attention to detail that could result in a lawsuit in a Federal or State courtroom. I also focus on product safety and the steps necessary to create a safe product. If you have questions concerning EU Directives and Standards and product liability litigation, you can contact me for a free preliminary consultation at my new e-mail address jameskolka@gmail.com.

US Federal Courts – The New Venue For CE Marking Lawsuits

 

Introduction

I have discussed the CE Marking implications of product liability lawsuits in US Federal Courts several times. I want to expand on this topic. As mentioned in previous blogs, presently, I am serving as legal expert in three lawsuits involving the EU Machinery Directive in US Federal Courts. ISO 9001 also is involved in two of these cases. 

As long as one of the litigants is a US resident (individual or corporation), the dollar amount meets federal monetary requirements and a legitimate cause of action exists, the suit can proceed. This means the following types of lawsuits can be filed:

• Non US citizens, corporations or companies that suffer injury and/or damage from a CE Marked product manufactured by a US corporation or company can file a lawsuit, e.g. product liability claim, breach of warranty, breach of contract, etc. in a US Federal Court.

• US citizens, corporations or companies that suffer injury and/or damage from a CE Marked product manufactured by a US, EU or other foreign corporation or company can file a lawsuit, e.g. product liability claim, breach of warranty, breach of contract, etc. in a US Federal Court.

What Does This Mean?

To begin, it means that citizens of other countries who are injured by a CE Marked product manufactured by a US company can bring a product liability lawsuit against a company, a legal remedy not available in their own country. It also means that a foreign manufacturer of a CE Marked product that injures a US resident or company can be sued for damages in a US product liability lawsuit. It is a reason that manufacturers can anticipate product liability lawsuits for their CE Marked product failures in US Federal Courts. It is one of the reasons that I am presently serving as legal expert in three CE Marking lawsuits in three different Federal Courts. I have also served as a legal expert in ISO 9001 lawsuits between US corporations and EU corporations. 

For foreign companies selling their CE Marked products in the US it likely will be their first exposure to legal discovery. From what I have experienced thus far, it means that many of these companies will experience requests for information and documentation for the first time and try to resist turning over anything that might be injurious to their legal position. That certainly has been the behavior of some German corporations involved in a few product liability lawsuits. Thus far, it has not been the behavior of ISO 9001 lawsuits between UK corporations and US corporations. The sample, however, is quite small.

Another surprise is the request for CE Marking Technical Files. As mentioned in previous blogs, one of the cases I am working on involves a US corporation manufacturing a CE Marked machine. They turned over a Technical File that has to be described as a junk file or gibberish. Clearly, the company had not paid attention to or chose to ignore the specific requirements of the Machinery Directive. The manufacturer also was found to be duplicitous in their dealings with UK authorities and opposing counsel. Fortunately, as this case moves along, the failure to comply with the requirements of the Directive have become apparent to the Court and likely will result in an adverse judgment which most likely will be settled out of court to the monetary detriment of the US machinery manufacturer. 

Of course, the request for information contained in Technical Files will be an even bigger surprise for EU manufacturers of CE Marked products and the intense scrutiny concerning the quality of compliance of these manufacturers with EU Directives. One attorney asked me why EU EN harmonized standards would be relevant in a US court. After all they are not  American standards.

I told him that EN standards like all ISO and IEC standards are revised on a periodic basis, approximately every 5 to 7 years. By agreement between the European Committee for Standardization (CEN) and ISO and the European Committee for Electotechnical Standardization (CENELEC) with IEC the new standards that emerge from this collaboration will be both International and European standards. In addition and even more important in the US, ANSI (American National Standards Institute) participates in all of the ISO and IEC standards deliberations and revisions. Consequently, at the end of the revision process the new standards also will be both European and American standards.

Litigation Attorneys

The role of litigation attorneys dealing with CE Marking Directives, CE Marked products, European standards and occasionally ISO 9001 or ISO 13485 is another issue. Often I have found that the attorneys proceed in a somewhat routine fashion not fully understanding the product requirements and the issues they are dealing with. On occasion, I have seen botched discovery requests and frustrated Judges regarding ISO 9001 records and documents requests.

Also, I have seen some, not all, attorneys become rather arrogant and possessive about "their" lawsuit and not helpful in providing information so that I can be of greater value to their case. They tend to think they can puzzle their way through the CE Marking process. However, with 27 New Approach Directives in various stages of revision and new combinations and thousands of EN harmonized standards in various stages of revision, it isn’t remotely as simple as it might appar. When I do work with attorneys who are open and share the issues at hand, the collaboration can work extremely well. My role is to serve as a legal expert not a litigation attorney.

Timing

Timing is critical to understanding the relevant facts concerning a lawsuit. For example, in some of the Machinery Directive lawsuits it is important to know when the machine was manufactured, the status of the Directive, e.g. revisions of the relevant EN standards that should have been followed to satisfy the Annex I Essential Health and Safety and Requirements.  It is also important to know what other Directives may be involved. I have worked on CE Marking several machines that involved the Machinery Directive, Low Voltage Directive, EMC Directive, Pressure Equipment Directive and Explosive Atmospheres (ATEX) Directive. Other Directives could be added today, e.g. RoHS2. This information may seem arcane, but it could be quite critical to the manufacturer’s actions regarding the machine. The same is true for ISO 9001, e.g. are we talking about ISO 9001:1994, ISO 9001: 2000 or ISO 9001: 2008? I’ve seen several instances where the attorneys did not understand the revision of the standards and didn’t realize that there was continuity in compliance with one standard to the next.

The same issue comes into play regarding EN standards. For example, I recently discovered that CE Marked components that were incorporated in a machine by a client were in fact “out of date.” We called the component manufacturer and brought this matter to their attention saying that we have to have components that comply with current EN standards. After some grumbling, the component suppliers produced components compliant with the most recent standards. This may seem like a small matter, but it could be quite costly for the manufacturer in case of a product liability lawsuit.

Conclusion

While it can be hard breaking litigation attorneys of some bad habits and reining in their egos, it is to their advantage to approach a lawsuit having all of their facts in order to achieve the best possible result for their client. Fortunately, I’ve worked with several attorneys who have achieved this objective and prevailed on behalf of their clients. My focus on International Regulatory Compliance has always included both the requirements of regulatory authorities and the legal implications of compliance, non-compliance, documentation and sloppy attention to detail that could result in a lawsuit in a Federal or State courtroom. I also focus on product safety and the steps necessary to create a safe product. If you have questions concerning medical device litigation, you can contact me for a free preliminary consultation at my new e-mail address jameskolka@gmail.com.

FDA’s Quality System Regulation – Management With Executive Responsibility #2

Continuation

In the first part of this Blog I reviewed what FDA expects of Management with Executive Responsibility as spelled out in its Quality System Regulation and what FDA inspectors will be looking for in on-site inspections as spelled out in FDA’s Quality System Inspection Technique (QSIT). The regulatory emphasis is quite clear. 

Insurance Company Litigation Study

Next I want to review the observations about Management With Executive Responsibility from the unpublished findings of the litigation history of a Medical Device Insurance Company. A sample list of observations about management is quite interesting:

• Management failures frequently occurred due to noncompliance with FDA, EU Medical Devices Directives and other regulations and unawareness of the requirement for notification to the appropriate regulatory bodies and the attention that regulators would place on clinical studies

• Management staff of new emerging medical device companys selected to conduct clinical trials/studies often do not possess the appropriate expertise/experience with clinical investigations. They are very familiar with the research and development of the device under study, but often do not have the professional clinical competencies needed to manage a clinical study.

• Management often has shown a failure to use proper or adequate legal assistance to review, launch or be involved in clinical studies.

•  Management often shows a lack of indemnities/disclosure in the informed consent agreements between IRBs, sponsors and patients of clinical studies.

• There often are ethics issues regarding “conflicts of interest.”

• The study found that medical device manufacturers and their contract manufacturers often relied on the mistaken belief that they are immune from product liability because of their manufacturing relationships with each other. These are situations where no risk management techniques have been applied before beginning the manufacturing – actions that could have helped avoid potential exposure to product liability litigation.

• Contract manufacturers supplying a component part to device manufacturers often did not carry any product liability insurance coverage and this was not questioned by the device manufacturer.

• The study found management failure to comply with FDA Quality Management System regulations for contract manufacturing agreements.

• In this era of outsourcing, the study found that contract manufacturing agreements often were deemed unenforceable in foreign legal jurisdictions.

• Management often failed to create a product safety policy statement or reference patient or product safety in the company’s quality statements under the mistaken belief by top management that the quality statement alone is adequate on the subject.

• Management had philosophical conflicts in which members of management teams wanted to fight FDA and their “observations” or “warning letters”, rather than mutually cooperate in resolving implementation plan for integrating the observations into their manufacturing processes.

• Several product liability claims that were taken to jury trials mentioned the use of the company’s quality management system and quality manuals against the manufacturer – the company’s own quality processes were not being followed or audited.

• The study noted a lack of company management staff training on product safety and quality management systems and the documentation of this training.

• The study found that in most cases management teams were very lean in young medical device firms in early commercialization; untrained and unfamiliar with the basic principles of product liability avoidance.

• Management ego issues were noted as confused in regards to product liability risks when management teams decided to fight FDA citations/observations versus demonstrating a spirit of committed cooperation to correct or arbitrate observations.

• In many medical device companies that experienced product liability claims, executive management underestimated the amount of time and corporate resources that would be needed to defend the company against product liability litigation.

• The silence of senior management in regard to product liability litigation was seen as their acceptance of the behaviors that caused or led to the product liability litigation.

• A lack of general and specific training for managers concerning their product safety responsibilities was noted as a recurring problem in the management of product liability avoidance.

As noted earlier, this is sample drawn from a much larger list of observations. Each observation came as a cost to each of these companies resulting in increased litigation expenses to the companies above the amounts paid by their insurance companies, possible FDA fines and punitive damage losses. And of course, increased  premiums and an increased deductible. 

Warning Letters

Finally, I wanted to look at some FDA 483 Warning letters regarding Management With Executive Responsibility: 

August 5, 2011 – Failure of management with executive responsibility to review the suitability and effectiveness of the quality system at defined intervals and with sufficient frequency to established principles to ensure the quality system satisfies the requirements of 21 CFR 820, as required by 21 CFR 820.40.

For example, according to your firm’s Executive Vice President your firm has not established management review procedures.

For example, according to your firm’s Executive Vice President there are no quality audit procedures and no quality audits have been performed. [The letter goes on t detail other failings of top management.] 

March 16, 2011 – Failure of management with executive responsibility to review the suitability and effectiveness of the quality system at defined intervals and with sufficient frequency according to established procedures to ensure that the quality system satisfies the requirements of 21 CFR 820 and the manufacturer established quality policy and objectives as required by 21 CFR 820.20(c). For example, your firm has not conducted any management reviews of your quality system.

October 1, 2010 – Failure of management with executive responsibility to review the suitability of the quality system at defined intervals and with sufficient frequency according to established procedures to ensure that the quality system satisfies the requirements of this part, as required by 21 CFR 820.20(c). For example, your firm failed to establish and implement written management review procedures. 

 November 24, 2010 – Failure of management with executive responsibility to review the suitability of the quality system at defined intervals and with sufficient frequency according to established procedures to ensure the quality system satisfies the requirements of 21 CFR 820, as required by 21 CFR 820.20(c). For example, according to your firm’s management, the firm does not conduct management reviews and has not established management review procedures.

*Failure to establish quality system procedures and instructions, as required by 21 CFR 820.20(e). For example, according to you, your firm does not have quality system procedures.

* Failure of management with executive responsibility to establish its policy objectives for, and commitment to, qualities required by 21 CFR 820.20(a). For example, according to you, your firm has not established a quality policy. 

Conclusion 

The preceding are just a few statements concerning Management With Executive Responsibility contained in FDA Warning Letters sent to medical device manufacturers. The full letters are much more extensive detailing other concerns specific to these companies. My point is that FDA’s Quality System Regulation (QSR) places significant emphasis on the responsibilities of top management. The issue concerns the health and safety of the American public. 

I want to repeat what was written in the first Blog. I have worked with numerous medical device companies where Management’s understanding of FDA’s Quality System Regulation ranged from intelligent to clueless. I find the latter condition to be scary because it usually is accompanied by that wonderful combination, “arrogance and ignorance.” This is especially true when the company is owned by a single individual and driven by his ego and self-perceived brilliance. Not a healthy combination or work environment. Consultants need to consider carefully which companies and management they choose to work with.

As noted at the conclusion of the first Blog, my focus on International Regulatory Compliance has always included both the requirements of regulatory authorities and the legal implications of compliance, non-compliance, documentation and sloppy attention to detail that could result in a lawsuit in a Federal or State courtroom. I also focus on product safety and the steps necessary to create a safe product. If you have questions concerning medical device litigation, you can contact me for a free preliminary consultation at my new e-mail address jameskolka@gmail.com.

FDA’s Quality System Regulation – Management With Executive Responsibility #1

Introduction 

Not too long after FDA’s Quality Management System became the new Current Good Manufacturing Practice (CGMP), a colleague and I were asked by a client of our consulting firm to conduct a GAP Analysis to determine what needed to be done for them to comply with the Regulation and also to determine what needed to be done for all of their manufacturing plants and products to comply with CE Marking Requirements for the EU’s Medical Devices Directives. Since the company was (and is today) a major medical device manufacturer, our GAP Analysis audit took us to plants and operations throughout the US and Mexico. 

When we reported back our findings and recommendations to the CEO, he smiled and asked if they needed to comply with FDA’s new QSR. My colleague also smiled when she replied, "yes unless you think you look good in stripes!"

Of course this exchange occurred in good humor because FDA made it clear that they intended to hold Management With Executive Responsibility fully accountable for the implementation of the new QSR. “Good stripes” for bad management was and is a real possibility.

Today 

Since that friendly but intelligent exchange, I have worked with numerous medical device companies where Management’s understanding of FDA’s Quality System Regulation has ranged from intelligent to clueless. I find the latter condition to be scary because it usually is accompanied by that dangerous combination, “arrogance and ignorance.” This is especially true when the company is owned by a single individual and driven by his ego and self-perceived brilliance. Not a healthy combination and work environment. I think it is timely to review FDA’s definition of Management With Executive Responsibility in the QSR.

21 CFR Part 820 – Medical Device Quality System Regulation

§ 820.20 Management responsibility

(a) Quality Policy. Management with executive responsibility shall establish its policy and objectives for, and commitment to, quality. Management with executive responsibility shall ensure that the quality policy is understood, implemented, and maintained at all levels of the organization.

(b) Organization. Each manufacturer shall establish and maintain an adequate organizational structure to ensure that devices are designed and produced in accordance with the responsibilities of this part.

(1) Responsibility and authority. Each manufacturer shall establish the appropriate responsibility, authority, and interlation of all personnel who manage, perform, and assess work affecting quality, and provide the independence and authority necessary to perform these tasks.

(2) Resources. Each manufacturer shall provide adequate resources, including the assignment of trained personnel, for management, performance of work, and assessment activities, including internal quality audits, to meet the requirements of this part.

(3) Management representative. Management with executive responsibility shall appoint, document such appointment of, a member of management who, irrespective of other responsibilities, shall have established authority over and responsibility for:

(i) Ensuring the quality system requirements are effectively established and effectively maintain in accordance with this part; and

(ii) Reporting on the performance of the quality system to management with executive responsibility for review.

(c) Management Review. Management with executive responsibility shall review the suitability and effectiveness of the quality system at defined intervals and with sufficient frequency according to established procedures to ensure the quality system satisfies the requirements of this part in the manufacturer’s established quality policy and objectives. The dates and results of quality system review shall be documented. 

Enforcement

Another way to see how FDA views Management With Executive Responsibility is to examine the Guide To Inspections of Quality Systems that is used by FDA field staff to assess a manufacturers compliance with the Quality System Regulation and related regulations. It is also known as (QSIT) Quality System inspection Technique. Management with Executive Responsibility will be questioned about the Quality System at the beginning and at the end of an on site inspection. Page 18 of QSIT states:

Management Controls

Inspectional Objectives 

1.Verify that a quality policy, management review and quality audit procedures, quality plan, and quality system procedures and instructions have been defined and documented.

2.Verify that a quality policy and objectives have been implemented. 

3.Review the firm’s established organizational structure to confirm that it includes provisions for responsibilities, authorities and necessary resources.

4.Confirm that a management representative has been appointed. Evaluate the purview of the management representative.

5.Verify that management reviews, including a review of the suitability and effectiveness of the quality system, are being conducted.

6.Verify that quality audits, including re-audits of deficient matters, of the quality system are being conducted.

 At the conclusion of the inspection….

7.Evaluate whether management with executive responsibility ensures that adequate and effective quality system has been established and maintained. 

FDA field staff are guided through these inspectional objectives by a series of questions that are asked concerning each objective. Examples of the questions are,

• “ To determine what the firm’s organizational structure is, start by asking the authority and responsibility questions that are the start of every FDA inspection.”

• “ Determine whether personnel involved in managing, performing or assessing work affecting quality have the necessary independence and authority to perform those tasks.”

• “ Determine whether the appointed management representative actually has the purported responsibility and authority granted to him/her by the firm’s procedures or organizational structure.”

• “ Verify that the management representative is reporting back to the management with executive responsibility on the performance of the quality system. These reports should either be the subject of management reviews or at least provide a framework for those reviews.”

• “ Determine whether corrective action by upper management is being taken. Auditors may be asked if they observed any of the ongoing Quality System Regulation deficiencies during their prior audits (ongoing Quality System Regulation deficiencies may also be identified by reviewing prior FDA 483’s).”

• “ At this point in QSIT, you stop your review of the management system. You continue your inspection by evaluating the other subsystems. While you evaluate the other subsystems, keep thinking about what you are finding and whether it indicates that management is appropriately carrying out its responsibilities for providing adequate resources and overseeing the quality system to detect problems and address them.” 

Conclusion 

This, as they say, is only the tip of the iceberg. The on-site inspections are rigorous and a significant objective is to determine if Management With Executive Responsibility is actively engaged in overseeing the operation of the company’s quality management system. Egocentric executives who feel themselves above the day-to-day operations will be discovered and written up in a FDA 483 Warning Letter. If the behavior is too egregious, penalties can be levied and in the most extreme case criminal sanctions can be imposed. Therefore, the management of medical device company affecting the health and safety of the public is not treated lightly, nor should it be.

In the second Blog on this topic, I will examine some of the management observations by a medical device insurance company following an in-depth review of their insureds' litigation history. We will also look at a few published FDA warning letters on this topic. Holding executive management responsible for the operation of medical device and manufacturers is a significant step forward in addressing issues of safety. It requires continual vigilance.

My focus on International Regulatory Compliance has always included both the requirements of regulatory authorities and the legal implications of compliance, non-compliance, documentation and sloppy attention to detail that could result in a lawsuit in a Federal or State courtroom. I also focus on product safety and the steps necessary to create a safe product. If you have questions concerning medical device litigation, you can contact me for a free preliminary consultation at my new e-mail address jameskolka@gmail.com.  

Don’t Listen To Anyone Who Says You Don’t Have to CE Mark Your Product For The EU!

 

Introduction

I don’t know how many times I have heard words from distributors, buyers, politicians, clinics, etc. in the EU anxious to sell or buy new products saying, not to worry you don’t have to CE Mark your products for the EU. The first time was several years ago when the Mayor of a small town in Portugal wanted to assure a Michigan machinery manufacturer that he would take care of the CE Marking issue. Of course, he could not. The Mayor was so excited that a large US manufacturer was going to locate a new plant near his town he didn’t want anything to interfere with the process. The Michigan manufacturer had an order to deliver a machinery assembly line to manufacture fuel injection systems for an automobile plant. They were aware that CE Marking was required for machines.

Not too long before another Michigan manufacturer had shipped a non CE Marked machine to a plant they owned in Northern Ireland. A workman spotted the machine and reported it to his foreman as required by the EU Workplace Safety Act who then reported it to the British Government.

When the company was informed of their transgression, they said that it was their machine built in their Michigan plant and it was to be installed in their Northern Ireland plant so they asserted it didn’t have to be CE Marked. British authorities reminded the company that their plant was on sovereign British soil subject to UK & EU law. They gave the plant manager a six month suspended sentence under the Criminal Code, fined the company, told them to remove the machine until it complied with the Machinery Directive and said never do it again.

Placing A Product On The EU Market

The operative words in all EU New Approach Directives are very clear. For Example, the new Toy Safety Directive 2009/48/EC of 18 June 2009 states:

Chapter I

General Provisions

Article 1

Subject Matter

This Directive lays down rues on the safety of toys and on their free movement in the Community.

Article 2

Scope

1. This Directive shall apply to products designed or intended, whether or not exclusively, for use in play by children 14 years of age (hereinafter referred to as toys).

Article 3

Definitions

For the purposes of the Directive, the following definitions shall apply:

1. ’making available on the market’ means any supply of a toy for distribution, consumption, or use on the Community market in the course of commercial activities, whether in return for payment or free of charge. (emphasis added in bold print)

2. ’placing on the market’ means the first making available of a toy on the Community market. (emphasis added in bold print)

The same language can be found in all of the CE Marking new approach Directives. Any product that requires CE Marking, whether for payment or free, must be CE Marked. The liability for failing to CE Mark a product falls on the manufacturer, not the buyer. 

In the new Toy Safety Directive 2009/48/EC, the EU has set forth:

• Article 7, Obligations of distributors

• Article 8, Cases in which obligations of manufacturers apply to importers and distributors

• Article 9, Identification of economic operators

While its nice to see the EU set forth legal expectations for Distributors, Importers and Economic Operators, this does not take the “monkey off the back” of manufacturers. If a manufacturer places a non-marked product on the EU market that should have a CE Mark, that manufacturer is legally liable. 

What is the Legal Liability for Failing to CE Mark a Product? 

The new Toy Safety Directive spells out several steps that can be taken for placing a toy on the market that should be CE Marked;

• Chapter VI sets forth the “Obligations And Powers Of Member States” 

• Article 39 establishes the “Precautionary Principle”

• Article 40 establishes the “General Obligation To Organize Market Surveillance” in accordance with Articles 15 to 29 of Regulation (EC) No 765/2008 of 9 July 2008 setting out the requirements for accreditation and market surveillance relating to the marketing of products and Repealing Regulation (EEC) No 339/93

• Article 41 sets forth “Instructions to the notified body”

• Article 42, Procedure for dealing with toys presenting a risk at national level

• Article 43, Community safeguard procedures

• Article 44, Exchange of information – Community Rapid Information Exchange System

Finally, Article 45 defines what is meant by Formal non-compliance:

1.Without prejudice to Article 42, where a Member State makes one of the following findings, it shall require the relevant economic operator to put an end to the non-compliance concerned:

(a) that the CE marking has been affixed in violation of Article 16 [General principles of the CE marking] or 17 [Rules and conditions for affixing the CE marking];

(b) that the CE marking has not been affixed;

(c) that the EC declaration of conformity has not been drawn up;

(d) that the EC declaration of conformity has not been drawn up correctly;

(e) that the technical documentation is either not available or complete.

2. Where the non-compliance referred in paragraph 1 persists, the Member State concerned shall take appropriate measures to restrict or prohibit the toy being made available on the market, or shall ensure that it is recalled or withdrawn from the market. (emphasis added in bold print)

Summary

The reason I chose the Toy Safety Directive was a question this week from a client with whom I am working to CE Mark their products who was told by two distributors that their toy didn’t have to be CE Marked for sale in the EU. Whether the two distributors were incredibly ignorant, previously lucky in evading the law or duplicitous is beside the point they still try to persuade manufacturers to sell them non CE Marked toys. Fortunately, my clients were suspicious and suspected that the distributors were not telling the truth.

Finally, take a close look at Article 45 above, Formal non-compliance. Those of you who have been reading my recent Blogs, especially the last three posted on July 30, August 15 and August 17 respectively should recognize that the manufacturer who manufactured the machine that killed a worker in the UK and maimed another worker for life in the US did not satisfy any of these requirements! The Machinery Directive has the very same requirements as the Toy Safety Directive. 

The EU has adopted excellent legislation on Market Surveillance, however, I am still concerned with the quality of implementation. I think these types of steps are essential for effective Market Surveillance for the EU new approach Directives As noted previously, I would like to work with the EU to enforce market surveillance so that consumers aren’t injured or killed. I also would like to work with European manufacturers concerning steps  for them to take to reduce their liability exposure in the US market. It seems to fit the European philosophical approach to product safety and would help EU firms concerned about the litigious nature of the US marketplace. If anyone is interested in exploring these topics further, please contact me at jameskolka@gmail.com or  jim@jameskolka.com. 

Market Surveillance #3 – To Be Or Not To Be – When, Is The Question

 

Continuation

I decided to add a third installment to my blog on Market Surveillance and the revised Machinery Directive 2006/42/EC. As noted several times the impetus for these comments has been driven by serving as legal expert in a lawsuit involving a CE Marked machine that has killed one worker and injured another worker who will need 24 hour care for the rest of his life. These accidents involved the same machine model in two separate incidents in two different countries.

While the Technical File was a junk file that did not comply with the requirements of the Machinery Directive, the contents of the file and the pathetic state of compliance was unknown until the first accident occurred and the file was turned over to the Health and Safety Executive (HSE) in the UK. In reality, the pathetic state of compliance is still unknown because, as noted in the previous blog, HSE investigates workplace accidents and BIS (Department for Business Innovation and Skills) the Competent UK Authority that oversees CE Marking for the Machinery Directive has not received the HSE investigation report. Meanwhile, the non-compliant machines are still on the market.

CE Marking Litigation And Its Future

I only reiterate these facts because in the past two weeks, I have received calls from two new clients involved in lawsuits in the US concerning CE Marking for the Machinery Directive. I anticipate more in the future. There are several reasons for this increased litigation activity, among them:

• CE Marking safety requirements and standards for machines have grown in number and sophistication since the Machinery Directive was first published on 14 June 1989.

• Following the Vienna and Dresden agreements between the EU Standards Bodies (CEN and CENELEC) with ISO and IEC respectively (to avoid duplicating standards writing efforts) these new international standards writing activities automatically include the participation of ANSI (American National Standards Institute) in drafting ISO & IEC standards resulting in EN ISO and EN IEC standards that are also American National Standards, recognized by US Courts of Law. In sum, EN standards are rapidly becoming American standards.

• US Federal Courts offer a litigation venue for product liability, Breach of Warranty and Breach of Contract lawsuits concerning CE Marking between US Citizens and US machinery manufacturers, US Citizens and EU machinery manufacturers and EU Citizens and US machinery manufacturers.

• The oft cited 2002 Minnesota case where a California Packaging Machinery Manufacturer sold a less safe machine in the US injuring a worker who will require 24 hour care for the rest of his life (it didn’t have a laser light curtain to turn off the machine when a worker entered the area of machinery activity), but sold safer CE Marked machines with laser light curtains in the EU for 6 years because of the Machinery Directive safety requirements, resulted in a $35 million punitive damages award (the manufacturer knew how to make a safer machine and chose not to do so). This means that US manufacturers who follow the same path of selling less safe machines in the US and safer machines in the EU and EU manufacturers who sell non CE Marked less safe machines in the US can expect a similar result in US Courts. It is a whole new area of litigation for American trial attorneys.

• Just as trial attorneys can ask for ISO 9001 records and documents that are relevant to a product liability lawsuit in the US and EU, they can now ask for Machinery Directive Technical File records and documents in discovery in Product Liability, Breach of Warranty and Breach of Contract lawsuits. The fact that these records and documents may belong to a European manufacturer is irrelevant. Whether the EU manufacturer is suing or being sued the cause of action arises from doing business in the US, making the litigants subject to US Courts and US rules of civil procedure.

These are a few of the legal nuances for US Courts of Law brought about by the evolution of the Machinery Directive and its supporting standards writing activities.

The Response of EU Competent Authorities 

In future blogs I will spend more time examining the substance of Decision No 768/2008/EC of the European Parliament and the Council of 9 July 2008 On a Common Framework For the Marketing Of Products and Repealing Council Decision 93/465/EEC. In the preceding two blogs (July 30 & August 15) and this blog, however, I have concentrated on administrative issues not touched on in Decision No 768/2008/EC that I believe are critical to the success of effective Market Surveillance as it relates to the Machinery Directive.

In the section titled “A View Thoughts” in the preceding August 15 blog, my Fifth recommendation was, “once a complaint or accident involving a CE Marked machine is recorded by a Competent Authority, a checklist protocol should be developed utilizing Annex VII of Machinery Directive 2006/42/EC to determine if all the elements of a Technical File contained in A. Points 1,2 & 3 are compliant. Listed below are those points

1. The technical files shall comprise the following:

  (a) a  construction file including:

-- a general description of the machinery,

-- the overall drawing of the machinery and drawings of the control circuits, as well as the pertinent descriptions and explanations necessary for understanding the operation of the machinery,

-- full detailed drawings, accompanied by any calculation notes, test results, certificates, etc., required to check the conformity of the machinery with the essential health and safety requirements,

-- the documentation on risk assessment demonstrating the procedure followed, including:

  (i) a list of the essential health and safety requirements which apply to the machinery,

  (ii) the description of the protective measures implemented to eliminate identified hazards or to reduce risks, when appropriate, the indication of the residual risks associated with machinery,

-- the standards and other technical specifications used, including the essential health and safety requirements covered by these standards,

-- any technical report giving the results of the tests carried out either by the manufacturer or by a body chosen by the manufacturer or his authorized representative,

-- a copy of the instructions for the machinery,

-- where appropriate, the declaration of incorporation for included partly completed machinery and the relevant assembly instructions for such machinery,

-- a copy of the EC declaration of conformity.

 (b) for series manufacture, the internal measures that will be implemented to ensure that the machinery remains in conformity with the provisions of the Directive.

The manufacturer must carry out necessary research and tests on components, fittings or the completed machinery to determine whether by its design or construction it is capable of being assembled and put into service safely. The relevant reports and results shall be included in the technical file.

2. The Technical file referred to in point 1 must be made available to the competent authorities of the Member States for at least 10 years following the date of manufacture of machinery or, in the case of series manufacture, for the last unit produced. (Emphasis added)

The technical file does not have to be located in the territory of the Community, nor does it have to be permanently available in material form. However, it must be capable of being assembled and made available within a period of time commensurate with its complexity by the person designated in the EC declaration of conformity. (I suggested 48 hours, similar to the Medical Devices Directives)

The Technical file does not have to include detailed plans or any other specific information as regards the subassemblies used for the manufacture of the machinery unless a knowledge of them is a central for verification of conformity with the essential health and safety requirements.

3. Failure to present the technical file in response to a duly reasoned request by the competent national authorities may constitute sufficient grounds for doubting the conformity of the machinery in question with the essential health and safety requirements. (Emphasis added)

Conclusion

As noted in the two previous blogs, I think these types of steps are essential for effective Market Surveillance for the revised Machinery Directive 2004/42/EC. I also noted previously that I would like to work with European manufacturers and companies on steps to reduce their liability exposure in the US market. It seems to fit the European philosophical approach to product safety and would help EU firms concerned about the litigious nature about the US marketplace. If anyone is interested in exploring these topics further, please contact me at jameskolka@gmail.com or jim@jameskolka.com.