Medical Device CAPA & 8D — FDA QSR Compliance Guide

Medical Device CAPA and 8D

Medical device manufacturers operate under FDA 21 CFR Part 820 (Quality System Regulation) and ISO 13485. Both require a documented CAPA (Corrective and Preventive Action) process. The 8D methodology maps directly to CAPA requirements and is accepted by FDA auditors as a structured problem-solving framework.

FDA QSR Clause Mapping to 8D

ISO 13485 Additional Requirements

ISO 13485 Clause 8.5.2 Corrective Action and 8.5.3 Preventive Action require:

• Review of nonconformities including customer complaints
• Determination of causes using structured root cause analysis
• Evaluation of need for action to prevent recurrence
• Implementation of actions with effectiveness verification
• Review of corrective action taken and its effectiveness

All of these align with 8D D0-D8.

Medical Device-Specific 8D Considerations

1. Risk Management Integration (ISO 14971): D7 must update the device Risk Management File, not just the FMEA. Every corrective action must be evaluated for new risk introduction
2. Health Hazard Evaluation (HHE): Before D3 containment, conduct an HHE to determine if a field safety corrective action (recall) is required
3. Complaint Handling (820.198): D2 problem description must reference the complaint record number and include patient/operator impact assessment
4. Design History File (820.30): D6 corrective actions that change device design must update the DHF
5. CAPA Timeline: FDA expects 30-day acknowledgment, 60-day root cause, 90-day corrective action completion

5-Why Example: Medical Device CAPA

Problem: Infusion pump displays Error Code E-07 (flow rate deviation) on 3 units from Lot #M2026-04.

1. Why E-07? → Flow sensor reading deviates >5% from setpoint after 200h of continuous operation
2. Why deviation? → Peristaltic pump tubing compression set exceeds 15%, reducing volumetric accuracy
3. Why compression set? → Tubing material (silicone) cured at 150°C instead of specified 165°C during supplier process
4. Why wrong temperature? → Supplier changed oven without notifying manufacturer — this is a supplier process change without customer notification
5. Why undetected? → Incoming inspection tested tubing dimensions but not cross-link density or compression set properties

TRC: Tubing compression set due to incorrect curing temperature MRC: Supplier process change management failure; incoming inspection did not test functional properties at risk Risk Impact: Flow rate deviation could cause over-infusion or under-infusion — potential patient harm

D3 Containment

• Quarantine all units from Lot #M2026-04 in warehouse, distribution, and at customer sites
• Health Hazard Evaluation: risk of over/under infusion — no field safety corrective action required at this stage, but inform notified body
• Incoming inspection: add compression set testing to tubing lot acceptance criteria

D5 Permanent Corrective Action

• Supplier: re-qualify oven to 165°C, establish process change notification agreement
• Incoming inspection: add Shore A hardness and compression set (ASTM D395) to tubing receiving inspection
• Design: evaluate alternative tubing material (thermoplastic elastomer) for reduced compression set

D7 Prevention

• Update supplier quality agreement: mandatory notification of any process, material, or equipment change
• Update DHF: document tubing specification revision in design history file
• Update Risk Management File per ISO 14971: increase occurrence rating for tubing compression set failure mode
• Horizontal deployment: audit all polymer component suppliers for undocumented process changes