Medical Device CAPA & 8D — FDA QSR Compliance Guide

Medical Device CAPA and 8D

Medical device manufacturers operate under FDA 21 CFR Part 820 (Quality System Regulation) and ISO 13485. Both require a documented CAPA (Corrective and Preventive Action) process. The 8D methodology maps directly to CAPA requirements and is accepted by FDA auditors as a structured problem-solving framework.

FDA QSR Clause Mapping to 8D

ISO 13485 Additional Requirements

ISO 13485 Clause 8.5.2 Corrective Action and 8.5.3 Preventive Action require:

Review of nonconformities including customer complaints

Determination of causes using structured root cause analysis

Evaluation of need for action to prevent recurrence

Implementation of actions with effectiveness verification

Review of corrective action taken and its effectiveness

All of these align with 8D D0-D8.

Medical Device-Specific 8D Considerations

1. **Risk Management Integration (ISO 14971)**: D7 must update the device Risk Management File, not just the FMEA. Every corrective action must be evaluated for new risk introduction

2. **Health Hazard Evaluation (HHE)**: Before D3 containment, conduct an HHE to determine if a field safety corrective action (recall) is required

3. **Complaint Handling (820.198)**: D2 problem description must reference the complaint record number and include patient/operator impact assessment

4. **Design History File (820.30)**: D6 corrective actions that change device design must update the DHF

5. **CAPA Timeline**: FDA expects 30-day acknowledgment, 60-day root cause, 90-day corrective action completion

5-Why Example: Medical Device CAPA

**Problem**: Infusion pump displays Error Code E-07 (flow rate deviation) on 3 units from Lot #M2026-04.

1. Why E-07? → Flow sensor reading deviates >5% from setpoint after 200h of continuous operation

2. Why deviation? → Peristaltic pump tubing compression set exceeds 15%, reducing volumetric accuracy

3. Why compression set? → Tubing material (silicone) cured at 150°C instead of specified 165°C during supplier process

4. Why wrong temperature? → Supplier changed oven without notifying manufacturer — this is a supplier process change without customer notification

5. Why undetected? → Incoming inspection tested tubing dimensions but not cross-link density or compression set properties

**TRC**: Tubing compression set due to incorrect curing temperature

**MRC**: Supplier process change management failure; incoming inspection did not test functional properties at risk

**Risk Impact**: Flow rate deviation could cause over-infusion or under-infusion — potential patient harm

D3 Containment

Quarantine all units from Lot #M2026-04 in warehouse, distribution, and at customer sites

Health Hazard Evaluation: risk of over/under infusion — no field safety corrective action required at this stage, but inform notified body

Incoming inspection: add compression set testing to tubing lot acceptance criteria

D5 Permanent Corrective Action

Supplier: re-qualify oven to 165°C, establish process change notification agreement

Incoming inspection: add Shore A hardness and compression set (ASTM D395) to tubing receiving inspection

Design: evaluate alternative tubing material (thermoplastic elastomer) for reduced compression set

D7 Prevention

Update supplier quality agreement: mandatory notification of any process, material, or equipment change

Update DHF: document tubing specification revision in design history file

Update Risk Management File per ISO 14971: increase occurrence rating for tubing compression set failure mode

Horizontal deployment: audit all polymer component suppliers for undocumented process changes