Extract From http://www.fda.gov/cder/guidance/5667fnl.htm (no longer active link)
We are now re-examining part-11-update, and we anticipate initiating rule making to revise provisions of that regulation. To avoid unnecessary resource expenditures to comply with part 11 requirements, we are issuing this guidance to describe how we intend to exercise enforcement discretion with regard to certain part 11 requirements during the re-examination of part 11. As mentioned previously, part 11 remains in effect during this re-examination period.
As described in more detail below, the approach outlined in this guidance is based on three main elements:
· Part 11 will be interpreted narrowly; we are now clarifying that fewer records will be considered subject to part 11.
· For those records that remain subject to part 11, we intend to exercise enforcement discretion with regard to part 11 requirements for validation, audit trails, record retention, and record copying in the manner described in this guidance and with regard to all part 11 requirements for systems that were operational before the effective date of part 11 (also known as legacy systems).
· We will enforce all predicate rule requirements, including predicate rule record and record keeping requirements.
It is important to note that FDA's exercise of enforcement discretion as described in this guidance is limited to specified part 11 requirements (setting aside legacy systems, as to which the extent of enforcement discretion, under certain circumstances, will be more broad). We intend to enforce all other provisions of part 11 including, but not limited to, certain controls for closed systems in § 11.10. For example, we intend to enforce provisions related to the following controls and requirements:
· limiting system access to authorized individuals
· use of operational system checks
· use of authority checks
· use of device checks
· determination that persons who develop, maintain, or use electronic systems have the education, training, and experience to perform their assigned tasks
· establishment of and adherence to written policies that hold individuals accountable for actions initiated under their electronic signatures
· appropriate controls over systems documentation
· controls for open systems corresponding to controls for closed systems bulleted above (§ 11.30)
· requirements related to electronic signatures (e.g., §§ 11.50, 11.70, 11.100, 11.200, and 11.300)
We expect continued compliance with these provisions, and we will continue to enforce them. Furthermore, persons must comply with applicable predicate rules, and records that are required to be maintained or submitted must remain secure and reliable in accordance with the predicate rules.
B. Details of Approach - Scope of Part 11
1. Narrow Interpretation of Scope
We understand that there is some confusion about the scope of part 11. Some have understood the scope of part 11 to be very broad. We believe that some of those broad interpretations could lead to unnecessary controls and costs and could discourage innovation and technological advances without providing added benefit to the public health. As a result, we want to clarify that the Agency intends to interpret the scope of part 11 narrowly.
Under the narrow interpretation of the scope of part 11, with respect to records required to be maintained under predicate rules or submitted to FDA, when persons choose to use records in electronic format in place of paper format, part 11 would apply. On the other hand, when persons use computers to generate paper printouts of electronic records, and those paper records meet all the requirements of the applicable predicate rules and persons rely on the paper records to perform their regulated activities, FDA would generally not consider persons to be "using electronic records in lieu of paper records" under §§ 11.2(a) and 11.2(b). In these instances, the use of computer systems in the generation of paper records would not trigger part 11.
2. Definition of Part 11 Records
Under this narrow interpretation, FDA considers part 11 to be applicable to the following records or signatures in electronic format (part 11 records or signatures):
· Records that are required to be maintained under predicate rule requirements and that are maintained in electronic format in place of paper format. On the other hand, records (and any associated signatures) that are not required to be retained under predicate rules, but that are nonetheless maintained in electronic format, are not part 11 records.
We recommend that you determine, based on the predicate rules, whether specific records are part 11 records. We recommend that you document such decisions.
· Records that are required to be maintained under predicate rules, that are maintained in electronic format in addition to paper format, and that are relied on to perform regulated activities.
In some cases, actual business practices may dictate whether you are using electronic records instead of paper records under § 11.2(a). For example, if a record is required to be maintained under a predicate rule and you use a computer to generate a paper printout of the electronic records, but you nonetheless rely on the electronic record to perform regulated activities, the Agency may consider you to be using the electronic record instead of the paper record. That is, the Agency may take your business practices into account in determining whether part 11 applies.
Accordingly, we recommend that, for each record required to be maintained under predicate rules, you determine in advance whether you plan to rely on the electronic record or paper record to perform regulated activities. We recommend that you document this decision (e.g., in a Standard Operating Procedure (SOP), or specification document).
· Records submitted to FDA, under predicate rules (even if such records are not specifically identified in Agency regulations) in electronic format (assuming the records have been identified in docket number 92S-0251 as the types of submissions the Agency accepts in electronic format). However, a record that is not itself submitted, but is used in generating a submission, is not a part 11 record unless it is otherwise required to be maintained under a predicate rule and it is maintained in electronic format.
· Electronic signatures that are intended to be the equivalent of handwritten signatures, initials, and other general signings required by predicate rules. Part 11 signatures include electronic signatures that are used, for example, to document the fact that certain events or actions occurred in accordance with the predicate rule (e.g. approved, reviewed, and verified).
Risk Mitigation in Validation template (Issue 11) $125.00 The Risk and Part 11 Validation Risk Assessment(VRA) protocol is becoming the most important document in the validation online train. The VRA reassures the regulators that you have looked at specific equipment functionality and considered the appropriate level of validation that is required. You have also considered various aspects of its use and the implications of any malfunctions. From the results of this exercise the scope of all validation activity can and must be justified. This is a robust and simple to execute document, one that will lead you through the process and deliver a result that can be used as the foundation for your Risk Mitigation in Validation template.
This VRA now includes the assessment table for categorizing and documenting the new 21 CFR Part 11 guidance ruling on what predicate data must be stored in a Part compliant system, along with the new broadsheet to establish your new database of part 11 records. (now mandatory).
This Pharmaceutical Validation combination protocol has been produced in response to several hundred reader suggestions we received in our ‘Suggestions Section’. It has been carefully designed to make it the preferred choice for Process and Laboratory stand alone equipment and associated standard operating procedure TEMPLATE. The associated medical device validation Master Plan template is interactive, easy to use and suitable for all mixes of equipment with and without software. Where temperature mapping is required it will included in this section. This of course may well be a Risk Mitigation in Validation risk Assessment template. As per 21 CFR Part 11.
The Installation Qualification Template or IQ section establishes documented verification that all medical device validation template online executables are catered for and that key aspects of the equipment Qualification adhere to approved design Qualification template and the recommendations of the manufacturer have been suitably considered. The Operational Qualification Template section establishes that there is documented verification that the installed system functions as specified and that there is sufficient documented process validation A executables to demonstrate this. The PQ section develops documented evidence that all the requirements specified in your corporate validation 4U manual have been verified as operating consistently and exactly as specified in the medical device validation template; The User Requirements Specification template
The Standard Operating Procedure template (SOP) used to generate this installation Qualification template (IQ), takes you through the process line by line, chapter by chapter. It really is unique to find a SOP document so easy to use, all the work is done for you. All the documents are detailed, all the drawings listed and all the checks and tests detailed. The final product is a professional and comprehensive Installation Qualification template. One that you can produce in less than 60 minutes. Yes, think about it, we all know how long producing IQ documents has taken in the past, whether for current Good Manufacturing Practice use medical device use or a simple installation qualification template.
You will find this validation online intuitive Operational Qualification template (OQ) delightfully simple and straightforward to use, as it takes you through the process of customization of your Operational Qualification Protocol template. Following the attached SOP will quickly and smoothly convert your template into an equipment specific 21 CFR Part 11 compliant Installation Qualification Template. The OQ template comes complete with all the standard test scripts, more specialist test scripts can be found listed below. These can easily be pasted into the standard OQ, allowing you to quickly build your own fully detailed and referenced company bespoke Operational Qualification Protocol, along with the installation qualification template.