digital health products is to understand the regulatory landscape. In the US, the FDA regulates SaMD under the Federal Food, Drug, and Cosmetic Act, requiring compliance with Good Manufacturing Practices (GMP) and relevant ISO standards. In the EU, the Medical Device Regulation (MDR) outlines the requirements for SaMD, while the UK has adopted similar regulations post-Brexit.

Objectives: Familiarize yourself with the specific regulations that apply to your product category. This includes understanding the classification of your SaMD, the necessary premarket submissions, and post-market surveillance obligations.

Documentation: Maintain a regulatory requirements matrix that outlines applicable regulations, standards, and guidance documents. Key documents may include:

• FDA Guidance on Software as a Medical Device
• ISO 13485:2016 – Quality Management Systems
• EU MDR and UK Medical Device Regulations

Roles: Quality managers should lead this effort, collaborating with regulatory affairs professionals to ensure a comprehensive understanding of the requirements.

Inspection Expectations: During inspections, regulatory bodies will expect to see evidence of compliance with these regulations, including documentation of risk management processes and product validation activities.

Step 2: Establishing a Quality Policy and Objectives

Once you have a firm grasp of the regulatory requirements, the next step is to establish a quality policy and specific quality objectives. The quality policy should reflect the organization’s commitment to quality and compliance, while the objectives should be measurable and aligned with the overall business goals.

Objectives: Develop a quality policy that emphasizes patient safety, regulatory compliance, and continuous improvement. Set specific, measurable quality objectives that align with this policy.

Documentation: The quality policy should be documented and communicated across the organization. Quality objectives should be tracked through a quality management dashboard.

Roles: The quality manager is responsible for drafting the quality policy and objectives, with input from senior management to ensure alignment with organizational goals.

Inspection Expectations: Inspectors will look for evidence that the quality policy is communicated to all employees and that quality objectives are actively monitored and reviewed for effectiveness.

Step 3: Risk Management in SaMD

Risk management is a critical component of a QMS, particularly for SaMD and digital health products. The ISO 14971 standard provides a framework for identifying, assessing, and mitigating risks associated with medical devices.

Objectives: Implement a risk management process that identifies potential hazards, assesses risks, and establishes controls to mitigate those risks.

Documentation: Maintain a risk management file that includes:

• Risk analysis reports
• Risk evaluation criteria
• Risk control measures

Roles: A cross-functional team, including quality, regulatory, and engineering personnel, should collaborate on risk management activities.

Inspection Expectations: Inspectors will review the risk management file to ensure that risks are adequately identified and controlled. They will also assess the effectiveness of risk control measures during product development and post-market surveillance.

Step 4: Document Control and Record Keeping

Effective document control and record-keeping practices are essential for maintaining compliance and ensuring that all quality-related activities are properly documented. This includes controlling documents such as standard operating procedures (SOPs), work instructions, and records of training.

Objectives: Establish a document control system that ensures all documents are current, reviewed, and approved before use. Implement a record-keeping system that maintains all quality-related records for the required retention period.

Documentation: Key documents to control include:

• Quality manual
• SOPs
• Training records

Roles: The quality manager should oversee the document control process, ensuring that all employees are trained on document management procedures.

Inspection Expectations: Inspectors will review document control processes to ensure that outdated documents are removed from circulation and that records are complete and accessible.

Step 5: Training and Competence

Ensuring that all employees are adequately trained and competent in their roles is vital for maintaining a high-quality standard. Training should cover regulatory requirements, quality management principles, and specific job functions.

Objectives: Develop a training program that addresses the needs of all employees involved in the QMS, ensuring they understand their roles and responsibilities.

Documentation: Maintain training records that include:

• Training plans
• Attendance records
• Competency assessments

Roles: The quality manager should coordinate training efforts, working with department heads to identify training needs and track employee progress.

Inspection Expectations: Inspectors will expect to see documented evidence of training programs and competency assessments, as well as records demonstrating that employees are adequately trained for their roles.

Step 6: Monitoring and Measurement of Processes

Monitoring and measuring the effectiveness of processes is essential for continuous improvement in a QMS. This includes tracking KPIs and metrics relevant to SaMD and digital health products.

Objectives: Establish a set of KPIs that reflect the performance of the QMS and product quality. These may include metrics related to defect rates, customer complaints, and audit findings.

Documentation: Create a quality management dashboard that displays KPIs and metrics, allowing for easy tracking and reporting.

Roles: The quality manager should lead the development of KPIs, collaborating with cross-functional teams to ensure that metrics are relevant and actionable.

Inspection Expectations: Inspectors will review KPI data to assess the effectiveness of the QMS and may request evidence of corrective actions taken in response to identified issues.

Step 7: Internal Audits and Management Review

Conducting regular internal audits and management reviews is essential for assessing the effectiveness of the QMS and ensuring ongoing compliance with regulatory requirements.

Objectives: Implement a schedule for internal audits and management reviews to evaluate the QMS’s performance and identify areas for improvement.

Documentation: Maintain records of audit findings, corrective actions, and management review minutes.

Roles: The quality manager should oversee the internal audit process, while senior management should participate in management reviews to ensure alignment with organizational goals.

Inspection Expectations: Inspectors will review internal audit reports and management review minutes to assess the effectiveness of the QMS and the organization’s commitment to continuous improvement.

Step 8: Corrective and Preventive Actions (CAPA)

The CAPA process is critical for addressing non-conformities and preventing their recurrence. A robust CAPA system helps organizations respond effectively to quality issues and improve overall product quality.

Objectives: Establish a CAPA process that identifies, investigates, and resolves non-conformities while implementing preventive measures to mitigate future risks.

Documentation: Maintain a CAPA log that includes:

• Non-conformity reports
• Investigation findings
• Corrective and preventive action plans

Roles: The quality manager should lead the CAPA process, working with cross-functional teams to investigate non-conformities and implement corrective actions.

Inspection Expectations: Inspectors will review CAPA documentation to ensure that non-conformities are adequately addressed and that preventive measures are effective.

Conclusion: Continuous Improvement in QMS for SaMD and Digital Health

Implementing a QMS for SaMD and digital health products is a complex but essential process that requires a thorough understanding of regulatory requirements, risk management, and quality principles. By following the steps outlined in this article, quality leaders can establish a robust QMS that not only ensures compliance but also drives continuous improvement in product quality and patient safety.

As the landscape of digital health and AI-driven medical products continues to evolve, staying informed about regulatory changes and best practices will be crucial for maintaining an effective QMS. Quality managers, regulatory affairs professionals, and compliance teams must work collaboratively to adapt to these changes and uphold the highest standards of quality and safety in their products.