2 min reading time
Earlier today I received the following question via LinkedIn: For verification and validation test records, are signatures needed? The person that asked the question thought the answer should be “Yes,” but is it required? This person read through the FDA regulations (21CFR Part 820), but should could not find where it is required. The FDA regulations only require the name and date of the tester but the regulations do not state a signature is required for verification and validation testing. There is a specific requirement for signature for process validation [i.e., 21 CFR 820.75(a)]: “The validation activities and results, including the date and signature of the individual(s) approving the validation and where appropriate the major equipment validated, shall be documented.” The above requirement is specific to the person approving the process validation report–not the person performing the validation activities. In 21 CFR 820.30(f) (i.e., design verification), and 21 CFR 820.30(g) (i.e., design validation), there is also a requirement to identify the person performing design verification and validation activities, but the verification and validation reports should be approved with a signature–although this is not specifically stated in the regulation. You could make an argument that the person performing the work should sign any data collection forms to verify authenticity of the results, but this is the responsibility of the person reviewing and approving the verification and validation reports. Therefore, an employee number, initials or just the printed name of the person performing the work is sufficient. Inspectors and auditors may verify that the person performing the activities was qualified and request documentation of how the person was selected or trained, but the person’s signature is not required. Signatures are also required for the person performing final product release under 21 CFR 820.80(d)(3) and 21 CFR 820.80(e)(4) (i.e., acceptance activities). The FDA regulations state only the name of who reviewed the testing results and released the product. This is often performed by an administrative person that will review multiple tests from raw material inspection, in-process inspections, final inspections and even sterility testing results just to make sure that all the paperwork for a Device History Record (DHR) is complete and that all tests were passed. If your records are 100% digital, and your company has a lab information management system (LIMS), inspectors and people performing verification or validation testing may be required to login to the LIMS system with a unique user ID and password. Then the calibration ID of the device used for measurement may need to be entered before any measurements can be taken. Finally, after each measurement the person may press a button to upload the results to a database so that 100% of inspection results are recorded in the DHR and the identity of the person performing the measurements is documented. I have observed forms that have a place for a signature or a procedure that states a signature is required. If your company has a form or procedure that requires signatures, then you will also need to comply with internal policies–even if the FDA doesn’t require a signature. Often FDA Form 483 inspection observations and auditor findings are specific to internal policies rather than actual nonconformities with regulations. source: https://www.linkedin.com/groups/2070960/2070960-6186275451233660932 Marked as spam
|
Meet your next client here. Join our medical devices group community.
Private answer
Michael Zagorski
Rob, I would like to expand the topic a little and add the concept of independence. Does the person creating and executing V&V test protocols (there are many methods for V&V, but for simplicity let's focus on testing) have to be independent from the design and development work, if the person reviewing the results is independent?
Or, if the person performing the V&V is independent from the design, can the person reviewing the results be the designer or engineer who developed the product (engineer would be independent from the V&V)? Typically, companies will have the V&V team that is a separate team or department, but there is no such requirement in the regulation, at least I'm not aware of one for medical devices. What are your thoughts? Marked as spam
|
|
Private answer
Alex Kennedy
There is a lot of text to sift through - so let me just answer the question.
One of The most important aspects of cGMP is traceability. The element of traceability that we are discussing here is in place to apportion blame if something goes wrong. Every production process must be split into stages to enable the individual operators to sign for the part they have completed. Every production procedure, SOP, calibration and maintenance task must be written to enable this mandated procedure to be followed. Every stage must be signed and dated (ticks are specifically banned). Sample of the statement and signature record test script (required for all protocols) is being added to the Validation Online Group pages. Marked as spam
|
|
Private answer
Robert Forrest Rudnick, CQA
Always great commentary supported by fact. Oh, and happy birthday. I know is coming up next week
Marked as spam
|
|
Private answer
Ivan Liljegren
21 CFR 820.40 says that "Each manufacturer shall designate an individual(s) to review for adequacy and approve prior to issuance all documents established to meet the requirements of this part." 21 CFR 820.30 explicitly states that design and development plans, design inputs, design outputs and design changes shall be approved, while the results of design reviews, verification and validation shall be documented. The validation plan is a key element of the design and development plan, whether it is a separate document or one comprehensive plan does not matter. This plan certainly requires an approval signature. The final records generated as a result of the activities, which are prescribed in the validation plan, also need to be approved. When you use a test management software to document the test execution, you would generate a report in the end and include in a verification report document where the test outcome (expected 100% PASS) is evaluated and concluded. That final report needs a signature.
Marked as spam
|
|
Private answer
I agree with your analysis. Many times the protocols for validation documents have where and when the signature or just initials are required on validation documents. A very similar situation occurs with training records. It does not state in the regulations that training records need signatures but 95% if not more of companies require them on the document. It is the current business practice of the industry and outlined in many company procedures. The FDA looks to see if you are following the procedures as found in most 483s where companies do not follow their procedures.
Marked as spam
|
|
Private answer
Jeremy Moore CBA, CMQ-OE
Interesting insights. There are many examples in the QA/RA field where "requirements" are not founded in regulation but are misconceptions of what the regulation actually says. How much of this can be blamed on RA professionals who instead of backing up their ideas just default to "cause the FDA says so"?
Challenge your auditors and quality leadership to make your quality and compliance system lean and compliant without strangling your business. Audit findings should be based on regulations or procedures. Best practices are a great guideline but are not one-size-fits-all! Marked as spam
|
|
Private answer
Jonathan Wacks
As a default, any document going into the DHF should be signed by someone...
Marked as spam
|
|
Private answer
Chuck H. Mograbi
Of course, everything need to signed, dated and initial. Including lab notebook entries.
But not just by someone! Please note, not everyone can sign everything. This means, the person who signs the document must be trained for that particular document and must be registered in the training records database . You cannot sign a validation documents if you never been trained on such documents. All the training has to be traced. I hope this will help. If a document is not signed, this means the document does not exist during FDA Audits. Marked as spam
|