Regulatory weaknesses
description
Transcript of Regulatory weaknesses
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
REGULATORY WEAKNESSESA report of the typist for the Regulation Subgroup(i.e. no one has seen or approved this)
Draft 07/01/13
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
Coordination
• This is the point at which we need to truly start integrating the work products of the subgroups.We need to look at the safety issues and assess
whether they are addressedWe need to consider the elements of innovation that
need to be protected and describe regulatory features that protect them
• This is also the point at which we need to make sure we do not duplicate each other’s work.
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
Process over the next weekDiscussion of the Regulations Subgroup over the next week:1. Are the three regulatory systems – ONC, FCC and FDA –
deficient in any way with regard to how HIT is regulated? (July 1, except reporting which will be on July 3)
2. Are there ambiguities in the three regulatory systems that need to be clarified so that HIT vendors and others can proceed more easily to innovate? (July 3)
3. Do any of the three regulatory systems duplicate one another, or any other legal, regulatory or industry requirement? (July 3)
4. Is there a better way to assure that innovation is permitted to bloom, while safety is assured? (July 8)
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
Started by• Examining the work of the Safety & Innovations Subgroup
Safety gridInnovation features
• Held 5 sessions on—FDA regulationONC regulationFCC regulationOther federal and state regulation and private efforts
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
Questions considered on July 1For FDA, FCC and ONC, identify regulatory requirements that:1. Are broader or more onerous than need to be to assure
the safety of HIT2. Fail to be risk-based, for example by either failing to
utilizing available mitigation or failing to identify appropriate risk aggravating circumstances.
3. Are insufficient in some specific way to assure the safety of HIT
4. Unnecessarily interfere with some specific needed feature of innovation
5. Miss or omit a sensible opportunity to promote innovation
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
FDA issues where attention neededItem Issue:
A or BDescription of challenge
Wellness/disease borderline
A & B FDA needs to explain how to discern disease related claims from wellness, and needs to deregulate low risk disease related claims
Accessory issues
A & B FDA needs to explain its position on which basic IT elements are regulated when connected to a medical device, and deregulate or down-regulate those that are low risk
CDS software A FDA needs to explain which forms of clinical decision support software it regulates
Software modularization
A FDA needs to specify its rules for deciding the regulatory status of software modules either incorporated into a medical device, or accessed by a medical device
A = Ambiguous and B = Broken at the written law level
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
FDA issues where attention neededItem Issue:
A or BDescription of challenge
Labeling issues A FDA needs to explain how the concept of intended use will be applied to standalone software where the use might evolve over time, perhaps using risk management and postmarket surveillance to manage the risks associated with the evolution in the intended use
QS application to standalone software
A FDA needs to explain how the quality system requirements and facility registration apply to manufacturing of standalone software
Premarket requirements for interoperable devices
A FDA needs to adopt a paradigm for reviewing software that is intended to be part of a larger, but unspecified
Postmarket requirements for networks
A & B Responsibilities for reporting adverse events and conducting corrective actions can be clarified, but also likely need a new approach that reflects shared responsibility across users, producers, and across regulatory agencies
A = Ambiguous and B = Broken at the written law level
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
FDA Program Administration• Apart from those regulatory issues, the subgroup has also
identified an issue with how the agency administers the law. There is presently a weakness in the agency coordination of policymaking with regard to HIT software, and especially including mobile medical apps. This weakness includes:inconsistencies in information shared with individual companies,
and unclear guidance more generally, including the lack of a final
guidance on mobile medical apps.
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
ONC issues where attention neededItem Issue:
A or BDescription of challenge
Mandatory elements
B ONC program does not include capability in law enforcement, nor its programs framed with mandates where necessary
Assurance of Safe Configuration
A Safety depends on appropriate post-installation configuration. No means to educate or require compliance with documented and evolving best practices
Coverage of interoperability issues**could be inter-agency ONC/FDA/FCC
B Unclear and incomplete responsibility. Assumption that ONC does regulate HIT/medical device interface and FDA regulates med device/med device interface. But same med device (e.g. infusion pump) could be installed in either configuration. Which agency would receive report of “pump-server-HIT equipment-wireless infrastructure-EHR” related adverse event? Who is responsible for resolving?
A = Ambiguous and B = Broken at the written law level
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
FCC issues where attention neededItem Issue:
A or BDescription of challenge
Linkage to FDA reporting
B FCC and FDA have not merged their reporting processes in a way that allows for transparent analysis (also see gaps slide below)
Linkage to FDA review
B FCC and FDA do not coordinate their review processes (equipment authorization program and premarket review) to ensure they are consistent
Linkage to FDA: Conformity Assessment
A Incomplete/missing clinically focused wireless conformity assessment tools that would facilitate safety and co-existence analysis
Post-installation Surveillance
A Spectrum management and identification, diagnosing, and resolving wireless co-existence/EMC problems that affect HIT and medical device performance (in healthcare facilities and mHealth environments)
A = Ambiguous and B = Broken at the written law level
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
Bigger PictureWhether collectively the regulatory scheme in totality:1. Fails to address some particular safety risk2. Is too costly in relation to the risks it is designed to
reduce3. Is demonstrably too burdensome on innovation, apart
from imposing costsWe agreed not to get into politics or philosophy but instead stick to evidence driven policy.
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
Gaps where attention neededItem Description of challenge
Reporting of safety issues
The need to aggregate data across all three agencies to understand what the data are really telling us
A = Ambiguous and B = Broken at the written law level
Work product for review and discussion by the FDASIA Regulation Subgroup; May not reflect the subgroup’s views
Next step
Wednesday call will be a deep dive into reporting and the prioritization of the ambiguities that need clarification