ISO 13485 is a general quality management system standard, forming the foundation for variations such as ISO 13485, which specifically addresses the medical device industry.
Corrective Action and Preventive Action are addressed in two clauses:
8.5.2 Corrective Action The root cause of any nonconformance must be removed to prevent recurring issues. All necessary corrective actions must be taken at the earliest and should be proportionate to the impact of the nonconformance. All procedures followed must be documented. The corrective action must be monitored and tracked to ensure no adverse impact and that the objectives are achieved. The records must be maintained and easily accessible.
8.5.3 Preventive ActionIdentifying potential nonconformities will help organizations prevent their occurrence. This requires identifying risks and implementing controls proportionate to the effects of the possible issues. This also needs to be documented, the process verified, and the effectiveness of control measures evaluated to ensure the issue is resolved. The record of the measures taken must also be maintained and easily accessible.
FDA 21 CFR Part 820: This provides guidelines to medical device companies on manufacturing and selling products in the United States. Often, medical device companies align their practices to ISO 13485 and FDA 21 CFR Part 820.
Food and Drug Administration requires the CAPA process to be captured, reviewed, approved, controlled, and retrieved. This also requires reviewing and verifying the actions to ensure their effectiveness in meeting the objectives, and the process must be documented.
Trend analysis is an important requirement of the FDA. This requires businesses to have access to accurate, complete, and holistic data to capture trends and identify recurring issues.
Failure investigation is another important requirement for determining the root cause before a corrective action is recommended. Design controls play a crucial role in CAPA to detect nonconformities early and reduce the effort needed to correct product or process issues.
All relevant information regarding the issues and the actions taken must be shared for management review and all stakeholders on a need-to-know basis.