Software design for_medical_devices_europe_conferent_19012011[1]


Published on

Presentation at the Software Development for Medical Devices Eru

Published in: Health & Medicine
  • Be the first to comment

No Downloads
Total Views
On Slideshare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

Software design for_medical_devices_europe_conferent_19012011[1]

  1. 1. Legal aspects of medical devices software and software as medical device 19 January 2011 ©2007, Greenberg Traurig, LLP. Attorneys at Law. All rights reserved. GREENBERG TRAURIG, LLP ▪ ATTORNEYS AT LAW ▪ WWW.GTLAW.COM Software Design for Medical Devices EUROPE
  2. 2. Overview <ul><li>Software in and as a medical device </li></ul><ul><li>What has the revision changed? </li></ul><ul><li>Classification </li></ul><ul><li>Software standards and guidance </li></ul><ul><li>Tips for compliance </li></ul><ul><li>What is next in software and standards? </li></ul>
  3. 3. Developments <ul><li>Devices will become more networked or network-based as a result of developments in eHealth </li></ul><ul><ul><li>Software as service (SAAS) model; device manufacturers become IT service providers </li></ul></ul><ul><ul><li>Remote disease management / patient monitoring </li></ul></ul><ul><li>Paradigm shift to disease prevention: predict probability of disease (occurrence and recurrence) to support lifestyle management / prophylaxis </li></ul>
  4. 4. Developments <ul><li>Software becomes even more of an ‘active’ medical device </li></ul><ul><ul><li>Running e.g. on surgical or care robots </li></ul></ul>
  5. 5. Developments <ul><li>Decision supporting knowledge systems </li></ul><ul><ul><li>E.g. interpretation of diagnostic results </li></ul></ul><ul><li>Off-the-shelf medical devices software </li></ul><ul><ul><li>E.g. to be incorporated into other medical devices software </li></ul></ul><ul><li>eHealth - new paradigms, new problems </li></ul><ul><ul><li>EU initiatives to harmonise EU Member States’ laws and standards </li></ul></ul>
  6. 6. Software in and as medical device <ul><li>Used alone or in combination with a medical device </li></ul><ul><ul><li>Including the software intended by its manufacturer to be used specifically for diagnostic and/or therapeutic purposes and necessary for its proper application </li></ul></ul><ul><li>Software for general purposes used in a healthcare setting is not a medical device (recital 6) </li></ul><ul><li>Supporting tools for device fall within the scope of ‘medical device’ (definition of ‘accessory’) </li></ul>
  7. 7. When is software a medical device? <ul><li>If one or more of the following four apply: </li></ul><ul><ul><li>Purpose of the software is explicitly mentioned in a Medical Device Directive </li></ul></ul><ul><ul><ul><li>e.g. diagnosis, monitoring, treatment, alleviation ( e.g. automated anesthetizer </li></ul></ul></ul><ul><ul><li>Software is intended for use by patients to diagnose or treat a physical or mental condition or disease </li></ul></ul>
  8. 8. When is software a medical device? <ul><li>If one or more of the following four apply (continued): </li></ul><ul><ul><li>Purpose of software is to control or influence functioning of a medical device </li></ul></ul><ul><ul><li>Software is intended for analysis of patient data generated by a medical device with a view towards diagnosis and monitoring </li></ul></ul><ul><ul><ul><li>e.g. a software for diagnosis of brain scans for Alzheimer </li></ul></ul></ul>
  9. 9. When must software be CE-marked? <ul><li>Medical device software is one out of the following three: </li></ul><ul><ul><li>A medical device or an accessory to a medical device </li></ul></ul><ul><ul><ul><li>must be CE-marked as such </li></ul></ul></ul><ul><ul><ul><li>Example of accessory : software used for programming and control of pacemakers </li></ul></ul></ul><ul><ul><li>A component and integral part of a medical device </li></ul></ul><ul><ul><ul><li>cannot be CE-marked in its own right, but is covered by the conformity assessment of the medical device of which it forms a part </li></ul></ul></ul><ul><ul><ul><li>example : firmware of a ventilator or infusion pump </li></ul></ul></ul>
  10. 10. When must software be CE-marked? <ul><li>Medical device software is one out of the following three (continued): </li></ul><ul><ul><li>None of the above </li></ul></ul><ul><ul><ul><li>not covered by the Medical Devices Directives </li></ul></ul></ul><ul><ul><ul><li>example : overall software design tools, administrative software for patient handling </li></ul></ul></ul><ul><ul><ul><ul><li>RFID reader linked to patient record </li></ul></ul></ul></ul>
  11. 11. Changes with respect to software <ul><li>Validation of software as device or devices incorporating software according to the state of the art, taking into account (Annex I.12.1a): </li></ul><ul><ul><li>Development life cycle </li></ul></ul><ul><ul><li>Risk management </li></ul></ul><ul><ul><li>Validation </li></ul></ul><ul><ul><li>Verification </li></ul></ul>
  12. 12. Classification <ul><li>Annex IX - Classification </li></ul><ul><ul><li>Software is class I unless special rule applies (Annex IX, rule 1) </li></ul></ul><ul><ul><li>Stand-alone software is active medical device (Annex IX, I.1.4) </li></ul></ul><ul><ul><li>Active medical device may be active therapeutic device (Annex IX I.1.5) or active device for diagnosis (Annex IX I.1.6): influences classification (Annex IX III.3: additional rules for classification) </li></ul></ul><ul><ul><li>Software falls in the same class as the device it drives or the use that influences (Annex IX 2.3) unless it is an accessory </li></ul></ul>
  13. 13. Manufacturer obligations <ul><li>Manufacturer of software in and as medical device must comply with all the relevant rules in MDD, e.g.: </li></ul><ul><ul><li>Clinical evaluation as part of technical file (Annex X) </li></ul></ul><ul><ul><li>Vigilance and post marketing surveillance </li></ul></ul><ul><ul><li>Clinical trial requirements </li></ul></ul><ul><li>Even though compliance with standards assumes compliance with essential requirements (i.e. Annex I), there is no automatic compliance with all provisions of the Medical Device Directives </li></ul>
  14. 14. Manufacturer obligations : comply with CE <ul><li>If changes to software: </li></ul><ul><ul><li>E.g. new version, new intended use, change of platform on which software runs or solving of compatibility issues </li></ul></ul><ul><li>then manufacturer must ensure that: </li></ul><ul><ul><li>Software still complies with essential requirements in MDD </li></ul></ul><ul><ul><li>Changes are documented (see IEC 60601-1-4) </li></ul></ul><ul><ul><li>Changes are validated and approved </li></ul></ul><ul><ul><li>Significant changes are reported to notified body and to authorities (if applicable, e.g. changes after incident) </li></ul></ul><ul><ul><li>Changes made do not alter the risk class of device – if so, do new conformity assessment </li></ul></ul><ul><ul><li>The manufacturer contacts the notified body if CE certificate refers to versions of software </li></ul></ul>
  15. 15. Subcontractors for software <ul><li>If the software is developed by someone other than the device manufacturer </li></ul><ul><ul><li>the software developer is not directly responsible for compliance with manufacturer’s intended use </li></ul></ul>
  16. 16. Subcontractors for software <ul><li>Manage subcontracted or outsourced software development </li></ul><ul><ul><li>Demonstrate control over process within software life cycle </li></ul></ul><ul><ul><li>Require subcontractor/outsourcee to comply with relevant standards (explicitly mention standards in agreement) </li></ul></ul><ul><ul><li>Require subcontractor/outsourcee to report design changes (may be relevant for CE certificate!) </li></ul></ul><ul><ul><li>Embed subcontractors in PMS and vigilance procedures </li></ul></ul><ul><ul><li>Always audit for SOUP (Software Of Unknown Provenance) as part of IEC 62304 and ensure they meet requirements </li></ul></ul>
  17. 17. Standards and guidance <ul><li>Standards adhered to must be state of the art </li></ul><ul><li>Notified bodies and authorities </li></ul><ul><ul><li>Use standards as yardstick </li></ul></ul><ul><ul><li>Must presume compliance with essential requirements of MDDs if compliance with EU published standards (e.g. publication of IEC 62304:2006 in Official Journal of 27 November 2008) </li></ul></ul>
  18. 18. Standards and guidance <ul><li>Medical device software standards </li></ul><ul><ul><li>IEC 60601-01:2005 - general requirements for basic safety and essential performance </li></ul></ul><ul><ul><li>IEC 60601-1-4 - programmable electrical medical systems </li></ul></ul><ul><ul><li>IEC 60601-1-6 - usability </li></ul></ul><ul><ul><li>IEC 62304:2006 - medical device software - software life cycle processes (OJ 2008 C304/8) </li></ul></ul><ul><ul><li>IEC 61508-3 - functional safety of electrical/electronic/programmable safety related systems </li></ul></ul>
  19. 19. Standards and guidance <ul><li>Medical device software standards </li></ul><ul><ul><li>Medical devices on networks </li></ul></ul><ul><ul><ul><li>IEC 80001 - Application of risk management to IT networks incorporating medical devices </li></ul></ul></ul><ul><ul><li>Software risk management </li></ul></ul><ul><ul><ul><li>IEC 80002 - Guidance on the application of EN 14971 to medical device software with reference to EN 62304 </li></ul></ul></ul>
  20. 20. IEC 62304 - Relationship to other standards
  21. 21. Clinical Evaluation of Software <ul><li>Clinical evaluation ≠ clinical investigation </li></ul><ul><li>Clinical evaluation: </li></ul><ul><ul><li>Verification of clinical capabilities claimed by manufacturer </li></ul></ul><ul><ul><li>Preceded by one or more questions to be answered </li></ul></ul><ul><ul><li>Questions can be derived from the risk and usability analysis </li></ul></ul>
  22. 22. Clinical Evaluation of Software <ul><li>All medical devices must undergo clinical evaluation (new under Annex X) </li></ul><ul><li>Evaluation must be based on existing clinical data </li></ul><ul><ul><li>Records of own previous experience </li></ul></ul><ul><ul><li>Scientific or other trustworthy documents </li></ul></ul><ul><li>Aim is to answer and fulfil the regulatory statements of the Essential Requirements </li></ul><ul><li>Own clinical investigation must be initiated if no sufficient pre-existing clinical data available </li></ul>
  23. 23. Clinical Investigation of Software <ul><li>High risk that assessments of new or amended software are considered to be a clinical trial </li></ul><ul><li>Scenarios: </li></ul><ul><ul><li>Software is not yet CE-marked </li></ul></ul><ul><ul><li>New software version that is not covered by existing CE-marking </li></ul></ul><ul><li>Human tests of new or amended software may only be run within an approved clinical trial </li></ul>
  24. 24. Installation and Maintenance in Networks <ul><li>Infrastructure and support functions </li></ul><ul><ul><li>Allow to run IT-systems </li></ul></ul><ul><ul><li>Electricity, networks, heating, cooling, etc. </li></ul></ul><ul><ul><li>Extremely important for safe operation of medical devices, including software </li></ul></ul><ul><ul><li>Line between medical devices and supporting systems more and more unclear </li></ul></ul><ul><ul><li>Trend towards convergence </li></ul></ul>
  25. 25. Installation and Maintenance in Networks <ul><li>Communication with other systems </li></ul><ul><ul><li>Medical devices software is often dependent on a certain technical environment </li></ul></ul><ul><ul><li>Risks result from unclear interfaces with other medical devices, software, etc. </li></ul></ul><ul><ul><li>Manufacturers need to coordinate certain aspects, e.g. interfaces to ensure that medical devices in network operate without any risk </li></ul></ul>
  26. 26. Installation and Maintenance in Networks <ul><li>Managing risks in networks </li></ul><ul><ul><li>Validation of medical devices software in a controlled environment </li></ul></ul><ul><ul><li>Environment should be as similar to the final environment at the user’s site </li></ul></ul><ul><ul><li>Uncontrollable risks should be communicated to the user </li></ul></ul>
  27. 27. Installation and Maintenance in Networks <ul><li>Handling changes in installation environment </li></ul><ul><ul><li>Prerequisites of original installation and verification change constantly </li></ul></ul><ul><ul><li>Changes may cause negative effects which jeopardize patient safety </li></ul></ul><ul><ul><li>Often, lack of awareness of change at user’s and manufacturer’s site </li></ul></ul><ul><ul><li>IEC 80001 ( Application of risk management for IT-networks incorporating medical devices) provides appropriate guidelines </li></ul></ul>
  28. 28. What is next in regulatory re software? <ul><li>Software MEDDEV is in the pipeline </li></ul><ul><ul><li>Likely to enter into force this year </li></ul></ul><ul><ul><li>Based on Swedish competent authority paper </li></ul></ul><ul><li>Medical devices recast likely to put more emphasis on software </li></ul><ul><ul><li>Commission is now aiming for proposal until in 2012 </li></ul></ul><ul><li>eHealth developments will influence discussion of scope of medical device and lead to new standards </li></ul><ul><ul><li>New eHealth services and applications will cause borderline problems with medical devices </li></ul></ul><ul><ul><li>New EU rules on patient mobility will put pressure on standardisation efforts </li></ul></ul>
  29. 29. Erik Vollebregt <ul><li>Greenberg Traurig LLP </li></ul><ul><li>Strawinskylaan 3127 </li></ul><ul><li>1077 ZX Amsterdam </li></ul><ul><li>Tel. +31 (0)20 30 17 436 Mobile: +31 (0)6 47 180 683 </li></ul><ul><li>Blog: </li></ul><ul><li>Twitter: @meddevlegal </li></ul><ul><li>E: </li></ul><ul><li>Erik has 12 years experience as IP and regulatory lawyer. After his stage at the European Commission he spent two years in the EU department at Liederkerke Siméon Wessing Houthoff. He subsequently worked as core member of the industry group &quot;Healthcare, Life Sciences and Chemicals&quot; at the Amsterdam and Brussels offices of Clifford Chance from 1999 until 2007. He is responsible for Greenberg Traurig’s European life sciences practice since 2007. </li></ul><ul><li>His practice comprises advice to and litigation for clients from the pharmaceutical, medical device and biotechnology industry in legal, regulatory, intellectual property and anti-trust matters. </li></ul><ul><li>Erik is author of a number of publications on legal and regulatory subjects relating to pharmaceuticals and medical devices as well as editor of two Dutch legal journals in the field of pharmaceutical law and medical technology law, as well as author of the medical device law part of the Dutch language loose leaf commentary on pharmaceutical and medical technology law. </li></ul><ul><li>Languages: Dutch, German, English, Swedish and French </li></ul>
  1. A particular slide catching your eye?

    Clipping is a handy way to collect important slides you want to go back to later.