Handling Nonconformities in Medical Device Production

by

Nonconformities in medical device production are any deviations in process or product from specified requirements. Managing nonconforming products is essential for medical device quality, patient safety, and regulatory compliance.

Handling Nonconformities in Medical Device Production
Handling Nonconformities in Medical Device Production

Standards like ISO 13485, ISO 14971, and FDA 21 CFR 820 require structured processes to detect, control, investigate, and correct nonconformities throughout the device lifecycle.

Overview of Nonconforming Product (NCP) Management

Nonconforming product control (NCP) ensures defects are detected, documented, and prevented from unintended use or distribution. Standards require organizations to establish processes for handling such products and integrate them with a quality management system and post-product monitoring to support continuous improvement and reduce recall.

The key elements of NCP management in device manufacturing are: Detection and recording, Control and segregation, Investigation and CAPA, Feedback to risk management, and Regulatory or vigilance link. 

  • Detection and recording: capture deviations, failures, and complaints
  • Control and segregation: prevent unintended use or distribution
  • Investigation and CAPA: removes root cause and prevents recurrence
  • Feedback to risk management: update hazards, risks, controls
  • Regulatory/ vigilance link: support Medical Device Regulation (MDR)/ MDR-like reporting 

Identification and Documentation of Nonconformities

Detection of nonconformities is a critical first line of defense in medical device production, ensuring deviations are found early and handled systematically. Nonconformities are detected through inspections, testing, or process monitoring. Quality control personnel use visual checks, dimensional measurements, functional tests, or statistical process control to identify issues. Standards require the systematic detection and recording of nonconforming materials using Non-Conforming Material Reports (NCMR) and deviation records. Documentation typically includes details like description, lot/ batch, detection point, immediate actions, risk to patients, and links to complaints or post-market data. Comprehensive records are important for supporting audits and traceability as mandated by ISO 13485.

Segregation and Containment Strategies

ISO 13485 and FDA 21 CFR 820 require segregation, proper labeling, and controlled storage of nonconforming product to avoid mix-ups and unintended release. The products should be physically separated using quarantine labels and stored in quarantine areas. Containment strategies include stopping production lines, holding stocks, and notifying relevant teams promptly. These measures protect product integrity and minimize wider contamination risks. Segregation supports safety, quality control, regulatory compliance, productivity, and waste management. 

The Role of the Material Review Board (MRB)

The Material Review Board (MRB) comprises cross-functional experts like quality engineers and production staff to evaluate nonconformities and decide further procedure. The MRB:

  • Assesses technical and clinical impact
  • Decide disposition (like rework, scrap, use as-is)
  • Trigger CAPA or risk review where needed

MRB decisions are key evidence during regulatory audits and inspections.

Root Cause Analysis and Investigation

Systematic Root Cause Analysis (RCA) is a requirement for an effective CAPA to understand why nonconformities occurred and how to prevent recurrence. RCA utilizes tools such as 5-Whys or Fishbone diagrams to identify issues beyond the observable symptoms. The methods for RCA must be science- or data-based, proportionate to risk, and supported by adequate documentation and verification of effectiveness. Human-factors RCA is required for medical device use errors, focusing on how design, tasks, and context lead to user mistakes. RCA, using both classic quality tools and modern data-driven methods, aims to remove underlying causes rather than repeatedly correcting symptoms. 

Disposition Options: Rework, Scrap, or Use As-Is

The MRB determines the disposition of nonconforming products through risk assessment to ensure safety. Disposition options recognized by standards are:

  • Rework or repair: Allowed if the product still meets specifications and safety requirements.
  • Scrap: When safety or performance cannot be assured.
  • Use as-is or concession: Allowed only when justified by risk assessment and regulatory requirements. This often requires a documented rationale. 

Linkage to Corrective and Preventive Action (CAPA)

Nonconformities trigger CAPA processes to correct issues and prevent recurrence. CAPA is a structured framework to:

  • Collect and analyze nonconformance and complaint data
  • Identify negative trends and recurring issues
  • Investigate causes and implement corrective and preventive actions
  • Verify and validate effectiveness

An effective CAPA lowers operational cost, recall risk, and enhances public trust. 

Impact on Risk Management (ISO 14971)

ISO 14971 requires a continuous risk management process from design to post-production delivery. Nonconformities must be evaluated within the ISO 14971 risk management framework, updating hazard analysis and mitigation plans. Nonconformities provide real-world input to updated hazard identification and risk estimates, reassess residual risk acceptability, and define risk controls and justifications. Unresolved issues may elevate device risks, requiring reassessment of safety and performance.

Regulatory Reporting Requirements (MDR and Vigilance)

Nonconformities that lead to or could lead to serious adverse events may trigger vigilance or MDR reporting. The EU MDR requires vigilance reports for serious incidents and also Field Safety Corrective Actions to be submitted within defined timelines, such as 15 days for serious incidents. This is supported by EUDAMED. FDA’s Medical Device Reporting system and MAUDE database collect both mandatory and voluntary reports on device failures and patient outcomes. Globally, vigilance frameworks in the US, EU, UK, Australia, India, and others stress standardized reporting and post-market surveillance to manage device risks. 

Trending and Analysis of Nonconformity Data

Regular trending analyzes NCP data to spot patterns, informing process improvements and resource allocation. Trend analysis of deviations, out-of-specification (OOS) results/ nonconformities, and MDR data helps to detect emerging issues early, prioritize CAPA, design improvement, support audits, and manage reviews. Guidelines expect written procedures specifying which parameters are trended, acceptance criteria, documentation, and investigation of significant trends, and not just individual failures. Statistical process control and other quantitative methods are used to identify negative trends, verify CAPA effectiveness, and link manufacturing variability to field performance. Statistical Process Control and trending look for shifts, drifts, or unusual patterns over time, mostly beyond simple pass/fail. 

Conclusion

Handling nonconformities in medical device production is not just about rejecting bad products; it is a system that connects defects, risk management, CAPA, and global vigilance. Clear identification and control of non-conforming product, robust MRB decision-making, rigorous root cause analysis, and data-driven trending are all funneled into ISO 14971 risk control and regulatory reporting. When these elements are well integrated into a quality management system, manufacturers can reduce recalls, improve device reliability, and better protect patients. 

References

  1. Patel, B. (2025). A Comparative Analysis of Nonconforming Product Control and CAPA Requirements in ISO 13485 and FDA 21 CFR Part 820. Global Business & Economics Journal. https://doi.org/10.70924/f83n6wqz/xa92jvkt.
  2. Khan, A., Singh, A., Malviya, S., & Kharia, A. (2024). A Detailed Case Study on Deviation, Out-of-Specification(OOS) and CAPA Generation in Pharmaceutical Industry. International Journal of Innovative Science and Research Technology (IJISRT). https://doi.org/10.38124/ijisrt/ijisrt24jul1165.
  3. Badnjević, A., Pokvic, L., Deumić, A., & Becirovic, L. (2022). Post-market surveillance of medical devices: A review. Technology and Health Care, 30, 1315 – 1329. https://doi.org/10.3233/thc-220284.

About Author

Photo of author

Liza Bhusal

Liza Bhusal is a microbiology graduate with a strong foundation in laboratory science, quality control, and applied microbiological analysis. She is currently doing her M.Sc. in Microbiology at GoldenGate International College and completed her Bachelor of Science degree in Microbiology from GoldenGate International College, Tribhuvan University, where her coursework covered medical microbiology, molecular biology, immunology, genetics, biostatistics, and microbial physiology. Her academic project focused on the microbiological analysis of the external auditory canal in healthy individuals with varying hygiene and earphone use habits. Liza previously worked as a Quality Control Technician at the Fred Hollows Intraocular Lens Laboratory, Tilganga Eye Center. In this role, she performed routine quality inspections of intraocular lenses, ensuring compliance with ISO 13485 standards and internal quality systems. Her responsibilities included defect identification, documentation of test results, calibration support, and collaboration with production and quality assurance teams to address nonconformities and support continuous improvement. Her technical skills include aseptic technique, microbial culturing, staining, microscopy, biochemical testing, GMP-aligned workflows, and audit-ready documentation. She also holds certification in Good Clinical Laboratory Practice and has basic training in digital marketing and data handling tools.

Leave a Comment