Singapore HSA ‘Regulatory Guidelines for Software Medical Devices – A lifecycle approach’ Draft for Software Developer and Software in Singapore.
.
The Health Sciences Authority (HSA)'s Medical Devices Branch (MDB) has released a draft document for consultation by 31 January 2020:
'Regulatory Guidelines for Software Medical Devices – A lifecycle approach’
This document intends to provide clarity on the regulatory requirements for software medical devices during its entire lifecycle. The document is intended for stakeholders who are involved in software medical device development and /or supplying such devices in Singapore. It is important to note that these guidelines reflect HSA’s current thinking and practice, and should not be misconstrued as a new regulatory control on software medical devices.
This document applies to software with intended use that falls under the definition of a medical device as stipulated in the Health Products Act (HPA). This includes software supplied in the following forms:
Overall, the following topics will be covered in this document:
Quality Management System (QMS) for software medical devices
Pre-market product registration requirements
Dealer’s licensing requirements
Change notification
Post-market management of software medical devices
Cybersecurity
Artificial Intelligence
1. Quality Management System (QMS) for software medical devices
All manufacturers of medical devices, including software medical devices should have a QMS in place to ensure manufacturing quality and consistency such as the ISO 13485.
2. Pre-market product registration requirements
a. Essential Principles for Safety and Performance of Medical device
The developer of a medical device can refer to HSA’s guidance document GN-16: Guidance on Essential Principles for Safety and Performance of Medical Devices.
b. Labelling requirements
c. Software versioning and Traceability
The software version information that represents all software changes/iteration (e.g. graphic interface, functionality, bug fixes) has to be submitted. This does not include Software version numbering that is solely for testing or internal use only (e.g. checking in of source code).
d. Design Verification & Validation
Reference to International Standards such as IEC 62304: Medical device software – Software life cycle processes is encouraged to demonstrate conformity to the essential requirements. The need for specific validation to address significant differences between the two software versions has to be considered, if the software version in validation report is different from the software version for product registration.
e. Clinical Evidence
The clinical evaluation process establishes that there is a valid clinical association between the software output and the specified clinical condition according to the product owner’s intended use.
The level of clinical evidence required depends on the significance of the information generated by the software medical device (to treat or diagnose, drive clinical management or inform clinical management) and the state of healthcare situation or condition. Literature review, Post-market experience are a basic requirements for all software type and clinical studies requirement is only required for software to treat or diagnose purpose. Where the software is assigned a novel intended purpose or is intended for use in new target populations, clinical studies should be carried out to support such use. After the software medical device has been deployed in the market, clinical data should be collected for continuous monitoring of the real-world clinical performance and post-market risk management.
3. Dealer’s licensing requirements
4. CHANGES TO A REGISTERED SOFTWARE: CHANGE NOTIFICATION
The software changes are typically meant to (i) correct faults, (ii) improve the software functionality and performance to meet customer demands and (iii) ensure safety and effectiveness of the device is not compromised (e.g. security patch). Change notification submission based on risk approach including Technical change and Notification change. Notification changes may be bundled together in one application (within a maximum of 6 months from the initiation of the change) or submitted together with other upcoming Review/Technical changes for the registered software. Do note that such bundled Notification changes are not allowed for AE/FSCA related changes and for changes to AI medical devices. CHANGES TO A REGISTERED AI-MD also described in the document.
5. POST-MARKET MANAGEMENT OF SOFTWARE MEDICAL DEVICES
Companies involved in distributing software medical devices in Singapore (manufacturers, importers, wholesalers and registrants) are required to comply with their post-market duties and obligations which includes reporting of device defects or malfunctions, recalls, Field Safety Corrective Actions and serious injuries or death associated with use of the device.
6. Cybersecurity
7. ARTIFICIAL INTELLIGENCE MEDICAL DEVICES (AI-MD)
Other relevant legislation and guidelines applicable to the development and deployment of AI-MD in healthcare should be complied with:
· Personal Data Protection Act
· Human Biomedical Research Act
· Private Hospitals and Medical Clinics Act
There are specific AI-MD additional considerations such as continuous learning capabilities, level of human intervention, training of models, retraining etc
Launch of OSCAR System for FSCA Reporting
From HSA
Dear Industry Stakeholders,
As part of HSA’s on-going effort to improve efficiency in our processes, we are pleased to announce the upcoming soft launch of the Online Safety Compliance Application and reporting (OSCAR) system for Field Safety Corrective Action (FSCA) Reporting.
With effect from 6th January 2020, medical device dealers are able to report their FSCA to HSA via the new online platform. The FSCA OSCAR platform weblink will be available on our website at https://www.hsa.gov.sg/medical-devices/field-safety-corrective-action/how-to-report from 6 January 2020. There will be a transitional period of 3 months (6th January 2020 to 5th April 2020) during which dealers may continue to submit their FSCA reports (MDRR1, MDRR2 & MDRR3 forms) to HSA via email (hsa_medical_device@hsa.gov.sg). However, stakeholders are encouraged to use the new OSCAR platform to familiarise with the submission system before full implementation on 6th April 2020 as from this date, the online system will replace the email reporting option.
Please refer to the attached Quick Guide for Admin and User Account Creation. This guide provides a step-by-step instruction for the company’s CorpPass Administrator to create new OSCAR user accounts before company users are able to access OSCAR. Please also refer to the OSCAR User Manual and Quick Guides attached above for instructions on navigating the platform. These guides can also be accessed on our website https://www.hsa.gov.sg/medical-devices/field-safety-corrective-action/how-to-report from 6 January 2020.
Credits to Health Sciences Authorities (HSA).
China Regulatory Update
On 13th December, the CMDE published the Public Consultation (Deadline: 13 Jan 2020) on “Technical Guidance on Using Real-World Data for Clinical Evaluation of Medical Devices (Draft for Comments)”. This newly issued draft is intended to explore the feasibility and method of using real-world data for regulatory decision-making as well as provide new solutions for accelerating market launch of medical devices.
ARQon deduce the draft for comments of using real-world data for clinical evaluation may have some impact for the foreign manufacturers.
As foreign manufacturers can potentially collect the real-world data from other country to form the real-world evidence and this evidence will be beneficial for the registration in China.
Australia Regulatory Update
The Therapeutic Goods Administration (TGA) made acknowledgement to those who gave a response for its public consultation on “Proposed regulatory scheme for personalized medical devices, including 3D-printed devices”. on 2nd December 2019. Following earlier public consultations and forums in 2017 and 2018, the intention of this consultation was to understand the potential effect that the proposed amendments may exert on the medical devices industry, health care professionals, patients and healthcare system. The consultation feedback paper consists of six questions; any perceived advantages, disadvantages, unintended consequences, comments, suggestions, anticipated financial implications and estimated time periods that might be required to effectively implement the proposed new arrangements, if agreed by the Government.
Taiwan Regulatory Update
On 21st November, the Taiwan Food and Drug Administration (TFDA) published the "Medical Device Cybersecurity Framework for Manufacturer". The TFDA issued the document to inform and encourage manufacturers to adopt a framework for the management of cybersecurity vulnerabilities throughout a product's lifecycle. The Framework is available in the annex. ARQon speculate that TFDA may require more documents for medical software submitted in the future.