Introduction
For newbies, the medical device world can seem overwhelming. Over 6,000 regulations apply to medical devices, which seem to change every other day. Evidence requirements for regulatory approvals are different from those required for reimbursement, and they also seem to change with alarming frequency. Every country has different rules, procurement processes, and health systems. Crafting strategies and tactics that address all the aspects of regulation, health technology assessment and management in every market can seem daunting.
Yet, amongst all the differences, three common threads run through the entire medical device lifecycle, from ideation to management.
These are the Golden Rules of medical device innovation.
If you consistently apply these rules to every challenge, you will be on the path to building a sustainable company.
Rule 1: Document everything
If it isn’t documented, then it wasn’t done.
This should be the mantra of every medical device organisation. Documentation serves as proof that tasks were performed, processes were followed, and the evidence supporting the benefits and risks of a medical device is accurately recorded. Of course, documentation is a process (known as document controls) and is required as part of a Quality Management System (QMS). Document controls are systematic procedures and policies to manage document creation, review, approval, distribution, storage, and archiving.
As “everything” must be documented, it makes sense to implement document controls very early in development (say, on Day 1). This ensures that all the work being done is recorded in documents that are accurate, consistent, and accessible and that they comply with regulatory, legal, and operational requirements.
Rule 2: Everything has a process
Regular MedDev Central readers will probably recognise a pattern familiar to the topics we cover.
Everything has a process.
Meeting regulatory requirements alone is insufficient; the regulations also focus on how they are met.
Medical device manufacturers must implement a Quality Management System (QMS). A QMS is a collection of processes (with the odd policy included, where necessary). It is essentially the rule book of a medical device organisation. Every activity the organisation performs, from design and development to post-market activities, must be represented by a process in the QMS. Every employee must be trained on the processes necessary for their job.
Each process follows a familiar pattern: Plan, Do, Check, Act (PDCA). Dr. W. Edwards Deming, a prominent figure in quality management, popularised the PDCA cycle (also called the Deming cycle), which forms the basis of processes included in the QMS. In a nutshell, every activity must be accompanied by a process, including:
- Planning: Outlining the objectives, methods, activities, roles and responsibilities and documentation of a process.
- Doing: Carrying out the process according to the plan (i.e. putting the plan into action).
- Checking: The outputs of the process to ensure that the plan was carried out.
- Acting: to address any discrepancies between the process outputs and the original plan.
For example, risk management is a process. It must conform to the International Standard ISO 14971, which includes a series of activities: planning risk management, conducting risk management (by identifying, evaluating and mitigating risk), checking that the output from risk management matches the plan, and then acting to address any discrepancies.
Rule 3: Traceability
Traceability is a foundational principle in medical device development. It is the ability to systematically track and link every aspect of the development process, from initial requirements through design, testing, production, and post-market activities.
Traceability ensures every aspect of the product lifecycle is well-documented, interconnected, and compliant with regulatory requirements. Traceability is a way of double-checking that everything has been done. It ensures that all regulatory and quality requirements are met and facilitates compliance with standards and regulatory authorities.
A traceability matrix is a document establishing clear, traceable links between design controls, often in the form of a table or spreadsheet. Once all the design control information is gathered, it is entered into the matrix, ensuring each user requirement is linked to its corresponding design inputs, outputs, verification, and validation activities.
The traceability matrix is the Bible of a medical device development project. It should contain all the information about the device design components and how they relate. The matrix serves as a central document that different teams can reference to understand the status and coverage of requirements, enhancing cross-functional collaboration. Build a traceability matrix early in the project and update it regularly through the development process. This helps to create documentation as the project progresses and identify issues earlier in development.
Conclusion
At first glance, regulation can feel overwhelming, but sticking to these three golden rules��“document everything, give everything a process, and keep it traceable��“makes it manageable.
These simple principles keep you on track without getting lost in the weeds of compliance. They give your team clarity, help you move faster with confidence, and ensure that when the time comes, you’re ready to show regulators and investors that your foundation is solid.