Inspections, Compliance, Enforcement, and Criminal Investigations

Transcription

1 Page 1 of 8 Home Inspections, Compliance, Enforcement, and Criminal Investigations Compliance Actions and Activities Warning Letters 2014 Inspections, Compliance, Enforcement, and Criminal Investigations Steris Isomedix Services 5/22/14 Department of Health and Human Services Public Health Service Food and Drug Administration Chicago District 550 West Jackson Blvd., 15th Floor Chicago, Illinois Telephone: May 22, 2014 WARNING LETTER CHI-7-14 VIA UPS NEXT DAY Walter M. Rosebrough President and Chief Executive Officer STERIS Corporation 5960 Heisley Road Mentor, Ohio Dear Mr. Rosebrough: United States Food and Drug Administration (FDA) investigators conducted an inspection of your firm, STERIS Isomedix Services, located at 1880 Industrial Drive in Libertyville, Illinois from October 29, 2013 through January 8, The investigators determined that this facility sterilizes medical devices, including implantable joints and medical tubing. Under Section 201(h) of the Federal Food, Drug and Cosmetic Act (the Act) [21 U.S.C. 321(h)], these products are defined as devices because they are intended for use in the diagnosis of disease or other conditions or in the cure, mitigation, treatment, or prevention of disease, or are intended to affect the structure or function of the body. The inspection revealed that these devices are adulterated within the meaning of Section 501(h) of the Act [21 U.S.C. 351(h)], in that the methods used in, or the facilities or controls used for, their manufacturer, processing, packing, or holding are not in conformity with the current Good Manufacturing Practice (CGMP) requirements of the Quality System (QS) Regulation found at Title 21, Code of Federal Regulations (CFR), Part 820. We received written responses, dated January 29, 2014, March 7, 2014, April 15, 2014, and May 14, 2014, detailing your firm s corrective actions to the observations noted on the Form FDA-483, Inspectional Observations, issued to Mr. Bruce M. Dewart, STERIS Isomedix Services Vice

2 Page 2 of 8 President of Operations, on January 8, We address the written responses below, in relation to each of the noted violations. The violations include, but are not limited to, the following: Corrective and Preventive Action: 1. Failure to establish and maintain adequate procedures for implementing corrective and preventive action, as required by 21 CFR Specifically, your firm s CAPA Process Procedure, PROC-00007, Revision 19, is not adequately established to meet the STERIS Corporation Quality Manual requirements, which state in Sections and that corrective and preventive actions are to be taken to the degree appropriate for the magnitude of the problems and commensurate with the risks and effects of the nonconformities encountered. For example, a. Your CAPA procedure, PROC-00007, Revision 19, is deficient in that it does not describe a process or mechanism for escalating local non-conformances which have a global impact on the firm s quality system and all of the facilities that are governed by the same quality system. For example, your firm initiated local non-conformances (NC-01685, NC-05378, and NC-05731) for three instances of employee data manipulation/falsification at three different STERIS Isomedix facilities since 2008; however, your firm failed to escalate the issue of dosimetric data manipulation/falsification to a corporate CAPA prior to the start of the current inspection so that the issue could be addressed across all (b)(4) STERIS Isomedix gamma irradiation facilities. We have reviewed your responses regarding sub-point (a) and have determined that the adequacy of the response cannot be determined at this time. For example, the responses indicated that the CAPA Process Procedure, PROC-00007, was revised; however, a follow-up inspection by FDA is needed to verify the effective implementation of the revised procedure and CAPA process. In addition, the responses indicated that the corporate CAPA, NC-05870, that was initiated during the current inspection would document all systemic actions taken to prevent recurrence of the issues documented under the individual non-conformances and the verification of the effectiveness of these actions; however, this CAPA was not included with the response, and no information was provided as to the progress of the CAPA investigation or an estimated timeframe for its completion. b. Your CAPA procedure, PROC-00007, Revision 19, is deficient in that it does not adequately describe how to identify, correct and prevent the recurrence of nonconforming product and other quality problems, including any actions necessary to mitigate such risk. For example, the investigation, NC-05731, opened on July 29, 2013 to investigate data manipulation/falsification at the inspected facility where product was overdosed but was subsequently made to appear within specification, did not include a review of all potentially affected products. Specifically, NC excluded: i. all runs in which the initial dosimeter readings showed the run to be under-dosed and subsequent dosimeter re-reads were within specification for dose. The differences in the initial dose readings and the re-reads were as high as 67% (see table below). Run Dosimeter ID Original Dose (kgy) Re-Read Average Dose (kgy) Specification Specification Min. Dose Max. Dose (kgy) (kgy) % Difference between original dose and average re-read dose (b)(4) (b)(4) (b)(4) 67.77% (b)(4) (b)(4) (b)(4) 62.33% (b)(4) (b)(4) (b)(4) 59.01% (b)(4) (b)(4) (b)(4) 58.57% (b)(4) (b)(4) (b)(4) 56.03% * This table represents 5 examples of 690 dosimeters that were excluded from NC where

3 Page 3 of 8 the initial dosimeter reading produced a result indicating an under-dose and the re-read dosimeter produced a dose that met specification. The 690 dosimeters are related to (b)(4) irradiation runs. ii. all runs in which the initial dose reading was higher than the maximum dose specification (overdosed runs), but where the re-reads were no more than 4.1% greater than the initial dosimeter readings. iii. all runs for multi-pass runs (i.e., run and adjust, two-pass runs, verification runs, etc.) iv. all runs that were not suspected overdosed runs. This would include all dosimeters that are read following the possible manipulation of the spectrophotometer to improperly zero the instrument which is not stored in the instrument s audit trail. If the spectrophotometer is not properly zeroed, all absorbance readings and dose calculations for dosimeters subsequently read will not be accurate. v. all runs prior to November 4, This decision was based on software formatting, not risk-based, and not based on the length of time that the implicated employees worked at the firm. We have reviewed your responses regarding sub-point (b) and have determined that they are inadequate. Your responses indicated that your firm will conduct a retrospective data review for the Libertyville North inspected facility for all runs processed from January 2009 through December 2013; however, the following issues were noted with this study: (1) the attached protocol, # BU, appears to have a discrepancy in the review period (the protocol lists the review period as July 2007 through December 2013); (2) protocol, # BU, does not provide enough information for us to determine the scientific justification that the situations listed in evaluation codes 1-8 do not correspond to suspect re-reads; (3) it is unclear from the information provided how the study will cover all areas that could result in the creation of inaccurate data resulting from improper use of the spectrophotometer; and (4) the updated responses indicated that the data review was complete; however, a copy of the study s final report was not included for FDA review, including evidence of communication to affected customers. We are concerned about the sterility assurance for the above-referenced (b)(4) runs that had initial dosimeter readings indicating that they were under-dosed with gamma radiation. 2. Failure to analyze all data from quality data sources to identify existing and potential causes of nonconforming product and other quality problems, as required by 21 CFR (a)(1). For example, a. From September 2011 to September 2013, your firm s (b)(4) report indicated that there were approximately 250 documentation omissions within this timeframe. Approximately 140 of these documentation errors were identified to be omissions on the load/unload sheets for missing verification initials which are used to verify the loading and configuration of product in carriers, the placement of the dosimeters and the retrieval of dosimeters from specified locations. There was no investigation into the missing initials for these acceptance activities, and no corrective and/or preventive actions were identified to prevent the recurrence of the document errors. b. From November 4, 2011 through November 18, 2013, 7,018 dosimeters out of (b)(4) total dosimeters were re-read. According to your firm s procedure, PROC-00036, Revision 11, Routine Use (b)(4) Dosimetry System, employees are allowed to re-read dosimeters provided they include the reason for the re-read, such as dirty/damaged dosimeter, verify thickness readings, dose verification, measurement out of range, wrong equipment ID, instrument not reset/zeroed, and not placed in spectrophotometer/mm (micrometer) ; however, your firm does not track the reasons for the re-reading of dosimeters to identify potential quality problems. c. From November 4, 2011 through November 18, 2013, 20 production runs had dosimeter re-reads with a coefficient of variability (CV) greater than (b)(4). According to your firm s Dosimetry Measurement Application (DMA) User s Guide, which is Attachment E of PROC-

4 Page 4 of , Revision 11, Routine Use (b)(4) Dosimetry System, when a re-measurement is performed, three readings are taken and the CV for the three readings is calculated and must be within (b)(4) to be acceptable. If the CV is greater than (b)(4), the operator has the ability to discard the data and perform an additional re-read. Your firm does not track or trend re-read situations in which the (b)(4) limit for CV is exceeded. We have reviewed your responses to sub-points (a) through (c) and have determined that they are inadequate in that documentation was not provided with the responses to allow for FDA review. Specifically, your responses did not include documentation, such as a protocol, to describe the details of the retrospective review of batch records affected by the document omissions; a final report to show the conclusions that were drawn and the corrective actions taken from the completed study; documentation to show that the re-training on the proper use of the document error tracking tool (PROC-00174) to ensure that the comments section is completed appropriately was performed; and the revised version of PROC-00002, Management Review and Responsibility to show that revisions that were made to add the requirement to review and trend various quality data sources, including documentation errors, dosimeter re-reads, and cases in which the % CV of the re-read is greater than (b)(4). 3. Failure to ensure that information related to quality problems or nonconforming product is disseminated to those directly responsible for assuring the quality of such product or the prevention of such problems, as required by 21 CFR (a)(6). For example, on July 29, 2013 your firm s Libertyville North facility initiated an investigation, NC , into product runs that were overdosed and were subsequently made to appear within customer specification by employee data falsification and manipulation of dosimetric equipment. This investigation identified approximately 89 runs as potentially affected. Your firm did not inform all of the identified customers that the dosimetric testing of their products may have been subject to falsification of dosimetric data. In addition, your firm s failure to notify customers extends to all customers of runs that were not properly identified by your firm as being potentially affected during your initial investigation of NC (see Warning Letter point 1b). We have reviewed your responses and have determined that they are inadequate. Specifically, your responses did not include evidence to support your statement that customers were notified after the inspection concluded and to show what information was reported to customers. In addition, your responses indicated that PROC-00034, (b)(4) Processing Review and Approval, was updated to state that communication to the customers is required if re-read data is accepted as the final read to release product; however, this revised document was not included with the response to allow for FDA review. It is unclear what the timeframe for customer communication is in the revised PROC Failure to establish and maintain procedures for investigating the cause of nonconformities relating to product, processes, and the quality system, as required by 21 CFR (a)(2), and to adequately document all activities required under Corrective and Preventive Action, and their results, as required by 21 CFR (b). Specifically, your firm s procedures, including PROC-00036, Routine Use (b)(4) Dosimetry System, allow for previously measured results and calculated dose values to be changed without a documented investigation. We have reviewed your responses and have determined that they are inadequate because the responses indicated that PROC-00034, (b)(4) Processing Review and Approval, will be updated to ensure that there is a thorough review of any discrepancy that arises between initial and re-read dosimeter calculations; however, this document was not included with the response to allow for FDA review. In addition, the responses do not indicate what revisions, if any, are going to be made to PROC-00036, Routine Use (b)(4) Dosimetry System, which currently allows re-reads to be taken without a documented investigation. Quality System Requirements:

5 Page 5 of 8 5. Management with executive responsibility has not reviewed the suitability and effectiveness of the quality system, as required by 21 CFR (c). Specifically, your firm failed to adequately perform a review of the suitability and effectiveness of your quality system in light of three separate incidents involving data manipulation/falsification by five STERIS Isomedix Services employees at three STERIS Isomedix facilities since We have reviewed your responses and have determined that they are inadequate because the responses failed to identify actions to address the reasons why it took three discrete incidents of data manipulation/falsification and an FDA inspection to initiate a change in the quality system, including a shift in responsibilities to the Quality Unit to approve or reject processed medical devices. The responses also indicated a number of other corrective actions, including revisions to PROC-00034, (b)(4) Processing Review and Approval, and the creation of a new policy regarding the re-reading of dosimeters; however, no documentation was included with the responses to support these statements. 6. Failure to adequately establish and maintain the organizational structure to ensure that devices are produced in accordance with 21 CFR 820, as required by 21 CFR (b). Specifically, your firm has not established the appropriate organizational structure with respect to responsibility, authority, and interrelation for all personnel who manage, perform and assess work for quality. For example, your firm s operators and material handlers are directly responsible for reading dosimeters that they have placed on the product processing runs. The analysis of the dosimeters is the primary quality control activity that determines the calculated dose for dosimeters in a gamma irradiation run and is the basis for product release. Operators and material handlers report through Operations personnel; this reporting structure was shown in Run (b)(4) to be a conflict of interest in that Run (b)(4) was found to be overdosed by an employee who reported the information to an Operations Team Lead who provided guidance on how to falsify the absorbance readings so that they would appear to be within specification. This reporting structure removes the Quality Unit from the ability to approve/reject irradiation runs based on dosimetry analysis and hinders the identification and correction of potential quality problems by the Quality Unit. We have reviewed your responses and acknowledge your firm s revisions to PROC-00183, Procedure for Processing Product at the Libertyville North Facility which indicate that all review and evaluation of dosimeter readings and dosimetric data will be performed and documented by trained Quality personnel. A follow-up inspection will be conducted to verify the implementation of the revised procedure. Your responses indicated that a new policy was created requiring that a second independent operator must perform a re-read and management must be notified of the reread; however, documentation to support this new policy, including reconfiguration of the (b)(4) system to align with the policy, was not provided in the responses. Production and Process Controls: 7. Failure to adequately establish process control procedures that describe any process controls necessary to ensure conformance to specifications, as required by 21 CFR (a). Specifically, your firm s procedures for analyzing dosimeter and dosimetry data are deficient in that: a. Your firm does not distinguish between dirty or damaged dosimeters when citing the reason for re-reading dosimeters. b. Procedures do not specify to document imperfections in the (b)(4) piece ((b)(4) dosimeter) when imperfections or scratches are present after initial inspection. c. Dosimeters are not routinely cleaned before analysis.

6 Page 6 of 8 d. On November 5, 2013, an operator was observed performing readings on 16 dosimeters and was observed placing his un-gloved thumb on the face of the dosimeter to position it in the laser thickness gauge introducing a fingerprint on the dosimeter. e. The (b)(4) Series laser micrometer thickness gauge is not checked for reproducibility and drift before, during, or after a set of dosimeters are read. f. Laboratory records do not include documentation to show when the spectrophotometers are blanked/zeroed during or prior to analysis of dosimeters to calculate dose for an irradiation run. Since November 4, 2011, your firm has had approximately 2,328 re-reads where the reason for the re-read is listed as instrument not zeroed. We have reviewed your responses for sub-points (a) through (f) and have determined that the adequacy of your responses cannot be determined at this time because although your responses indicate that PROC-00036, Routine Use (b)(4) Dosimetry System was revised on February 28, 2014, the revised procedure was not included with the updated responses to allow for FDA review. We also acknowledge your firm s decision to change to (b)(4) dosimeters as your new dose measuring technology as part of a continuous improvement initiative. A follow-up FDA inspection will evaluate the implementation of the (b)(4) dosimeters. 8. Failure to adequately validate software used as part of production and the quality system for its intended use according to an established protocol, as required by 21 CFR (i). Specifically, actions were not taken to ensure that computer errors would not result in the loss of dosimetry and run dose data from the Dosimetry Measurement Application (DMA) module of (b)(4). For example, a. The inspection found that 2,900 records were missing from the main table of the DMA module of (b)(4) between the time that it was installed at the Libertyville North facility on November 4, 2011 and November 6, Each missing record represents an attempt at creating a dosimeter record. b. Of the 2,900 missing records, 1,623 records/dosimeters (representing (b)(4) irradiation runs) contained dosimetry data and were intentionally deleted from the DMA module. These records contained a calculated dose when they were deleted, and 192 of the dosimeters (representing (b)(4) unique runs) were out-of-specification low (under-dosed). c. The (b)(4) and DMA systems are set up to automatically discard any dosimeter absorbance readings outside the set operating range of (b)(4) to (b)(4) absorbance units. We have reviewed your responses to sub-points (a) through (c) and have determined that the adequacy of the responses cannot be determined at this time because your firm s corrective actions are either on-going or documentation was not provided to allow for FDA review. For example, your responses indicated that the (b)(4) software and system documentation will be remediated, and a full revalidation of the (b)(4) system will be performed; however, this is not complete. In addition, your responses indicated a number of corrective actions to address the specific issues listed above; however, no documentation was included with the responses to verify these actions. Records: 9. Failure to adequately establish procedures for receiving, reviewing, and evaluating complaints by a formally designated unit, as required by 21 CFR (a). Specifically, your firm s procedure, PROC-00007, CAPA Process Procedure, which is used for complaint handling purposes, has not identified a formally designated unit that will handle complaints so that they are investigated in a uniform and timely manner. In addition, your firm has not established a mechanism by which all oral/written complaints will be documented.

7 Page 7 of 8 We have reviewed your responses and acknowledge the creation of a separate procedure of handling customer complaints, PROC-01336, Complaint Administration. It was noted that your procedure lacks detail with respect to the timely handling of complaint investigations; however, the adequacy of this procedure will be determined during a follow-up inspection. You should take prompt action to correct the violations addressed in this letter. Failure to promptly correct these violations may result in regulatory action being initiated by the Food and Drug Administration without further notice. These actions include, but are not limited to, seizure, injunction, and/or civil money penalties. Also, federal agencies may be advised of the issuance of Warning Letters about devices so that they may take this information into account when considering the award of contracts. Please notify this office in writing within fifteen (15) working days from the date you receive this letter of the specific steps you have taken to correct the noted violations, including an explanation of how you plan to prevent these violations, or similar violations, from occurring again. Include documentation of the corrective action you have taken. If your planned corrections will occur over time, please include a timetable for implementation of those corrections. If corrective action cannot be completed within 15 working days, state the reason for the delay and the time within which the corrections will be completed. Your response should be sent to: Carrie Ann Plucinski, Compliance Officer, Food and Drug Administration, 550 W. Jackson Blvd., 15 th floor, Chicago, IL Refer to the Unique Identification Number (CMS Case # ) when replying. If you have any questions about the content of this letter, please contact Ms. Plucinski at Finally, you should know that this letter is not intended to be an all-inclusive list of the violations at your facility. It is your responsibility to ensure compliance with applicable laws and regulations administered by FDA. The specific violations noted in this letter and in the Inspectional Observations, Form FDA-483 (FDA-483), issued at the close-out of the inspection may be symptomatic of serious problems in your firm s manufacturing and quality assurance systems. FDA expects your corporate management to undertake a comprehensive and global assessment of your operations immediately to ensure that medical devices conform to FDA requirements. Sincerely, /S/ Scott J. MacIntire District Director cc: Timothy J. Zimmerman Plant Manager STERIS Isomedix Services 1880 Industrial Drive Libertyville, Illinois Page Last Updated: 06/02/2014 Note: If you need help accessing information in different file formats, see Instructions for Downloading Viewers and Players. Accessibility Contact FDA Careers FDA Basics FOIA No Fear Act Site Map Transparency Website Policies U.S. Food and Drug Administration New Hampshire Avenue

8 Page 8 of 8 Silver Spring, MD Ph INFO-FDA ( ) FDA For Government For Press Combination Products Advisory Committees Science & Research Regulatory Information Safety Emergency Preparedness International Programs News & Events Training and Continuing Education Inspections/Compliance State & Local Officials Consumers Industry Health Professionals FDA Archive Links on this page: