UDI aims to reduce medical errors involving medical devices by:

• Providing a single, globally-accepted source for positive identification of medical devices
• Ensuring the adequate identification of the device through its distribution and use
• Providing rapid access to key attributes relating to the device
• Simplifying integration of information on device use into medical records
• Providing a means of added depth to patient and physician educational materials without adding greater complexity

UDI also aims to provide for more rapid resolution of device problems by:

• Making it possible to more rapidly identify devices involved in adverse events
• Providing for more rapid resolution of confirmed problems
• Provide a single, globally-accepted “key” that can be used to link and integrate existing government, hospital, and corporate data bases that relate to medial devices
• Meet other Federal agencies’ needs for a single, consistent means of identifying medical devices
• Reduce the costs of moving medical devices in international commerce

Who is it Relevant to?

UDI is relevant to any organisation working in or supplying medical device products to the US. Where can I find out more about UDI? Visit www.fda.gov for more information.

Prisym Medica Labeling Software:

PRISYM Medica labelling software is a purpose designed labelling solution for Life Science organisations that need to meet the FDA’s labelling regulations. Medical device companies can easily implement UDI utilising the PRISYM Medica Solution. PRISYM Medica is supplied as a validated labelling solution including auditable security protocols and lifecycle documentation based on the GAMP V Model.

Available both as a thin or thick client, PRISYM Medica allows you to design, review, approve, print, reprint and reconcile your labels with the peace of mind that it has purpose built user security, group security and secure audit logging. It can also simply link to ERP and MRP systems to ensure that information from production can be delivered to the label at time of print.

Available both as a thin or thick client, PRISYM Medica allows you to design, review, approve, print, reprint and reconcile your labels with the peace of mind that it has purpose built user security, group security and secure audit logging. It can also simply link to ERP and MRP systems to ensure that information from production can be delivered to the label at time of print.

PRISYM Medica enables you to:

• Implement one complete solution to fulfil the labelling process within your organization
• Meet the FDA and MHRA compliance requirements
• Realize GMP compliance by meeting the GMP’s guidelines
• Ensure complete history is maintained though the system by automatic revision and version control
• Build a three stage approval mechanism, reducing the opportunity for error to be present on label used in production
• Reduce duplication and easier to manage label designs with data driven printing
• Design labels for global use due to Unicode compliance
• Produce over 35 types of bar codes including GS1 DataBar, ITF14, EAN, DataMatrix, Code 39, Code 93 and QR codes

In addition, our thin client PRISYM Medica Web offers you:

• An Internet Explorer based solution which is quick to deploy and can be used ‘outside’ the organization for selected partners
• The ability for less validation effort than traditional thick client solutions, enabling faster rollout
• A proactive review and approval work engine which increases the accuracy of layout and data used on labels reducing the likelihood of product recalls

Why is it Important?

The FDA is responsible for protecting public health by:

• Assuring the safety, effectiveness, and security of human and veterinary drugs, vaccines and other biological products, medical devices, the US nation’s food supply, cosmetics, dietary supplements, and products that give off radiation
• Regulating tobacco products
• Advancing the public health by helping to speed product innovations
• Helping the public get the accurate, science-based information they need to use medicines and foods to improve their health

FDA approved Classification of Medical Devices

FDA regulates a broad range of medical devices, including complicated, high-risk medical devices, like artificial hearts, and relatively simple, low-risk devices, like tongue depressors, as well as devices that fall somewhere in between, like sutures. FDA has authority to regulate medical devices before and after they reach the marketplace. Companies that design, manufacture, repackage, relabel, and/ or import medical devices into the United States are regulated by FDA’s Centre for Devices and Radiological Health (CDRH).

FDA approved Classification of Drugs

Over-the-counter and prescription drugs, including generic drugs, are regulated by FDA’s Centre for Drug Evaluation and Research (CDER). This work covers more than just medicines. For example, fluoride toothpaste, antiperspirants, dandruff shampoos and sunscreens are all considered “drugs.”

Drug companies seeking FDA approval to sell a new prescription drug in the United States must test it in various ways. First are laboratory and animal tests. Next are tests in humans to see if the drug is safe and effective when used to treat or diagnose a disease.

After testing the drug, the company then sends FDA an application called a New Drug Application (NDA). Some drugs are made out of biologic materials. Instead of an NDA, new biologic drugs are approved using a Biologics License Application (BLA). Whether an NDA or a BLA, the application includes:

• The drug’s test results
• Manufacturing information to demonstrate the company can properly manufacture the drug
• The company’s proposed label for the drug. The label provides necessary information about the drug, including uses for which it has been shown to be effective, possible risks, and how to use it.

If a review by FDA physicians and scientists shows the drug’s benefits outweigh its known risks and the drug can be manufactured in a way that ensures a quality product, the drug is approved and can be marketed in the United States.

FDA approved Classification of Vaccines, Blood, and Biologics

Vaccines, blood, and biologics are regulated by FDA’s Centre for Biologics Evaluation and Research (CBER). CBER protects and advances the public health by ensuring that these products are safe and effective and available to those who need them. CBER also provides the public with information to promote the safe and appropriate use of these products.

Vaccines undergo rigorous and extensive testing to determine their safety and effectiveness. Highly trained scientists and medical personnel at FDA carefully review all of the information in a marketing application before a vaccine can be approved for use by the public. Following approval, FDA also carefully monitors the quality of vaccines.

FDA approved Classification of Animal & Veterinary

The manufacture and distribution of food additives and drugs that will be given to animals are regulated by the Center for Veterinary Medicine (CVM). These include animals used for human food, as well as food additives and drugs for pet (or companion) animals.

Who is it Relevant to?

The FDA is relevant to any organisation working in or supplying products to the US for health and human services. Where can I find out more about the FDA? Visit http://www.fda.gov for more information.

How can PRISYM ID help?

PRISYM Medica labeling software is purpose design labelling solution for Life Science organizations specifically developed to meet the FDA’s current 21 CFR Part 11 compliance requirements. PRISYM Medica is supplied as a validated labeling solution including auditable security protocols and lifecycle documentation based on the GAMP V Model.

Available both as a thin or thick client, PRISYM Medica allows you to design, review, approve, print, reprint and reconcile your labels with the peace of mind that it has purpose built user security, group security and secure audit logging. It can also simply link to ERP and MRP systems to ensure that information from production can be delivered to the label at time of print.

This article shares the experiences of the delivery team at PrisymID and gives readers an update on the findings of the team over the last few years. It also gives details of the key features of a modern labeling system and a guide to the questions they should ask any potential labeling system supplier.

A Do It Yourself Audit - Is Your Labeling System Really 21 CFR Part 11 Compliant?

The main topic for discussion is the top five areas where we have found installed labeling systems fall short when audited for compliance in general but for 21 CFR Part 11 in particular. Common problems on systems we have replaced are discussed, the key features required for a validated system are listed and of course what to look out for when reviewing your own system? This article poses some questions that you should ask yourself if you are responsible for a labeling system and concerned about possible compliance issues. At the end of this article you should have a better idea as to which common pitfalls to look out for.

What is 21 CFR Part 11 ?

We all know that 21 CFR Part 11 is well established and that the risk based approach introduced several years ago is now fully accepted by the FDA providing of course your justifications are sound and logical. Practically speaking 21 CFR Part 11 requires the implementation of controls, including audits, validation and documentation for the software and systems involved in printing the labels. After all the label is a controlled document and is part of the bill of materials for the device or drug.

The top five areas where you labeling system may fall short in an audit, based upon our experience at PrisymID, are detailed below:-

1. The labeling system is not deemed to be 21 CRF Part 11 compliant as it’s not properly supported by validation documentation. The documentation is either inadequate, the system has not been the subject of a risk assessment or the documentation is missing completely.
2. The labeling system is non compliant to the requirements detailed in quality systems regulation 21 CFR Part 820. This usually relates to the process of label design revisions not being controlled properly with little or no control over the old version being recalled when a new version is released. The process to do this is not forced upon the users and the SOP’s are often weak in this area.
3. The labeling system SOP’s are not documented. Often we found our potential customers to have good GMP practices around the labeling system but when we asked for a copy of the SOP’s they were not always found or indeed proven to be reflecting what actually happened in the labeling process.
4. There is no label batch traceability or direct employee accountability in the event of a product recall due to a labeling error. Often it was not possible to trace the actions to one single individual due to shared passwords or just plain open systems.
5. The labeling system does not meet the FDA’s requirements in terms of version control and history for each individual label design. Often there is no single electronic file containing the various version of a label design and its change history or the links to sister files are missing or broken.

To help highlight how serious the situation can become without the users sometimes realising it then please consider this recent case study concerning medical device company’.

Company ‘X’ are based at two locations, one in New Jersey and one in Pennsylvania, they share a central database (MFG/PRO) across the two sites and are exporting products on a worldwide basis. A paper based system is used for the approval of label designs which are generated by generic labeling software with no vendor provided lifecycle documentation. The label approval process takes weeks as the sites are split and the process relies on people passing a folder around to get the label approvals done. ‘Validation’ on the labeling system was done by the customers own IT department but no formal documentation could be produced. In essence the IT department tested the system but could not validate it as the systems requirements were not documented. The system must print foreign characters and phrases on the labels for export to Europe but no one could be found to be responsible or accountable for the translations. Finally they inspect each and every label after it has been printed due to their concerns about characters being missing, label misprints and the data not being available in the manufacturing database. This was a huge burden on them and dramatically slowed down the production process.

It should be no big surprise to anyone that the FDA were not pleased when they conducted their audit. A 483 Warning Letter was issued, a summary of the notice is detailed below:-

1. No Company ‘X’ Functional Specification in the validation materials.
2. Using software with inadequate version controls.
3. General inconsistencies in the validation materials.
4. Vendor software coding not subject to a QA review, no vendor audit undertaken.

In this particular instance the FDA were very helpful with their suggestions as to what Company ‘X’ should do. It was suggested Company ‘X’ should move to an electronic record keeping system as part of a move to a new properly validated labeling system which would ensure a better chance of general FDA compliance in the future. An electronic system would give quicker responses to audit requests or product recalls. This would result in the labels being designed and printed in accordance with 21 CFR 820 quality assurance guidelines while also meeting the requirements of 21 CFR Part 11.

The FDA suggested their chosen software supplier should be one that has completed general product lifecycle testing of the software with the relevant supporting documentation being passed on to the users. The supplier should be asked to assist the users with the execution of an onsite validation plan following the GAMP guidelines for computer software systems. A separate language database should be created with a table for each language required thus allowing the phrases to be translated and validated individually and outside of the main labeling system. Finally it was suggested that the vendor supplying the label printers should perform a printer driver test on each one to prove the printed output and remove the need to inspect each and every label. This in its self would lead to greater efficiencies and allow time for the proper compliance monitoring of the system.

The key features of a validated and FDA compliant labeling system are still those based around the GAMP guidelines for validation. A piece of software itself cannot be considered as compliant yet we still get asked this question about our software. Any critical software must be supported by a properly conceived and performed validation project. Software should be written and tested using a documented and recognised lifecycle process to help reduce the amount of validation needed to be done onsite by the user. The software should automatically generate complete and accurate records of all critical changes to the system and not just be limited to changes in the label designs. Records need to be quickly retrievable and stored in a way to ensure they are secure, accountable to the person making or adding to the record as well as being protected against unauthorised input and deletion. Finally the labeling software should be installed via a pre-approved validation plan comprising of IQ/OQ/PQ scripts and supported by reports detailing the result of the running such scripts. This way you are in control of your system and of course rebuilding it or reproducing it should be much simpler.

When at the planning stage and considering a new labeling system there are several important questions you need to ask yourself to ensure you are looking at the right solution. For example is there an automatic and accurate time/date stamp for all entries that create or modify a record and does the audit log show the name of the signer and the meaning of the signature all in a single record? Does the system enforce the correct sequencing of steps and events such as in the label design and approval process? Are there checks to ensure that only authorised persons can use the system and are electronic signatures provided only for user actions that are at their appropriate level of authority? Users need to be forced to change their own passwords frequently and not be allowed to reuse a password as this helps prevent the use of unauthorised group passwords that can be common around the use of label printing systems.

Check the systems audit trail is independent of the users, for example we have found some audit trails have been switched off or they can be edited by unscrupulous users. Ensure you will receive a comprehensive set of lifecycle documentation from your system supplier and make sure the documentation is for the version of software you are purchasing or have installed. It’s amazing how many discrepancies we have found in this area. The vendor should provide you with a risk based list of activities you should concentrate your onsite validation efforts on. If it’s not offered then ask for it before making your purchasing decision. Be careful when upgrades are installed, ensure you have the documentation to support the upgrade and make sure you are using the upgraded software in all the relevant locations and not just some of them. This is a very common error and is easily spotted by even the most casual audit of an inspector. Finally make sure you know about your chosen vendor’s quality certification as you will be relying on it to help support your risk based validation approach when questioned by the FDA.

There are five important things to remember when looking at general computer based software and in our experience labeling software in particular:-

1. s the labeling software you are going to use ‘fit for purpose’ for Life Sciences labeling requirements in general and specifically 21 CFR Part 11? Are you going to make do with generic software or choose the right tool for the job?
2. In the event of a product recall or FDA audit are you able to supply an audit log of the label history going back five years and can you provide this in a timely manor as you may very well need to do so sometime?
3. Is your labeling software supported by full lifecycle documentation to prove your exact needs were considered before it was purchased, i.e. was it a planned and documented purchase?
4. Did your software get installed as part of a validation project covering all the labeling focused PC’s, terminals and printers? The whole system needs to be validated and not just parts of it.
5. Can you be sure the compliance of the labeling system has been proven over its network or web connections? This is an important area which is being focused on by the FDA but it’s often missed by the system owners.

If you don’t get each of the above points right then the consequences can be very serious indeed. An FDA 483 warning letter can lead to company difficulties, the share price falling and even potential job losses. Hopefully this article and the guidance contained within it will prevent such an occurrence happening to you.

This article is based upon a presentation researched and written by Bob Tilling that was presented at the IVT Validation Week held in Philadelphia PA in November 2008.