Search
Keyword
Search in sections (Example, from 802)
OR
Volume
Find
Product Classification
Reg. Number
Title 21: Food and Drugs
Subpart A - General Provisions
§ 803.1 What does this part cover?

(a) This part establishes the requirements for medical device reporting for device user facilities, manufacturers, importers, and distributors. If you are a device user facility, you must report deaths and serious injuries that a device has or may have caused or contributed to, establish and maintain adverse event files, and submit summary annual reports. If you are a manufacturer or importer, you must report deaths and serious injuries that your device has or may have caused or contributed to, you must report certain device malfunctions, and you must establish and maintain adverse event files. If you are a manufacturer, you must also submit specified followup. These reports help us to protect the public health by helping to ensure that devices are not adulterated or misbranded and are safe and effective for their intended use. If you are a medical device distributor, you must maintain records (files) of incidents, but you are not required to report these incidents.

(b) This part supplements and does not supersede other provisions of this chapter, including the provisions of part 820 of this chapter.

(c) References in this part to regulatory sections of the Code of Federal Regulations are to chapter I of title 21, unless otherwise noted.

§ 803.3 How does FDA define the terms used in this part?

Some of the terms we use in this part are specific to medical device reporting and reflect the language used in the statute (law). Other terms are more general and reflect our interpretation of the law. This section defines the following terms as used in this part:

(a) Ambulatory surgical facility (ASF) means a distinct entity that operates for the primary purpose of furnishing same day outpatient surgical services to patients. An ASF may be either an independent entity (i.e., not a part of a provider of services or any other facility) or operated by another medical entity (e.g., under the common ownership, licensure, or control of an entity). An ASF is subject to this regulation regardless of whether it is licensed by a Federal, State, municipal, or local government or regardless of whether it is accredited by a recognized accreditation organization. If an adverse event meets the criteria for reporting, the ASF must report that event regardless of the nature or location of the medical service provided by the ASF.

(b) Become aware means that an employee of the entity required to report has acquired information that reasonably suggests a reportable adverse event has occurred.

(1) If you are a device user facility, you are considered to have “become aware” when medical personnel, as defined in this section, who are employed by or otherwise formally affiliated with your facility, obtain information about a reportable event.

(2) If you are a manufacturer, you are considered to have become aware of an event when any of your employees becomes aware of a reportable event that is required to be reported within 30 calendar days or that is required to be reported within 5 work days because we had requested reports in accordance with § 803.53(b). You are also considered to have become aware of an event when any of your employees with management or supervisory responsibilities over persons with regulatory, scientific, or technical responsibilities, or whose duties relate to the collection and reporting of adverse events, becomes aware, from any information, including any trend analysis, that a reportable MDR event or events necessitates remedial action to prevent an unreasonable risk of substantial harm to the public health.

(3) If you are an importer, you are considered to have become aware of an event when any of your employees becomes aware of a reportable event that is required to be reported by you within 30 days.

(c) Caused or contributed means that a death or serious injury was or may have been attributed to a medical device, or that a medical device was or may have been a factor in a death or serious injury, including events occurring as a result of:

(1) Failure,

(2) Malfunction,

(3) Improper or inadequate design,

(4) Manufacture,

(5) Labeling, or

(6) User error.

(d) Device user facility means a hospital, ambulatory surgical facility, nursing home, outpatient diagnostic facility, or outpatient treatment facility as defined in this section, which is not a physician's office, as defined in this section. School nurse offices and employee health units are not device user facilities.

(e) Distributor means any person (other than the manufacturer or importer) who furthers the marketing of a device from the original place of manufacture to the person who makes final delivery or sale to the ultimate user, but who does not repackage or otherwise change the container, wrapper, or labeling of the device or device package. If you repackage or otherwise change the container, wrapper, or labeling, you are considered a manufacturer as defined in this section.

(f) Expected life of a device means the time that a device is expected to remain functional after it is placed into use. Certain implanted devices have specified “end of life” (EOL) dates. Other devices are not labeled as to their respective EOL, but are expected to remain operational through activities such as maintenance, repairs, or upgrades, for an estimated period of time.

(g) FDA, we, us, or Agency means the Food and Drug Administration.

(h) Five-day report means a medical device report that must be submitted by a manufacturer to us under § 803.53 within 5 work days.

(i) Hospital means a distinct entity that operates for the primary purpose of providing diagnostic, therapeutic (such as medical, occupational, speech, physical), surgical, and other patient services for specific and general medical conditions. Hospitals include general, chronic disease, rehabilitative, psychiatric, and other special-purpose facilities. A hospital may be either independent (e.g., not a part of a provider of services or any other facility) or may be operated by another medical entity (e.g., under the common ownership, licensure, or control of another entity). A hospital is covered by this regulation regardless of whether it is licensed by a Federal, State, municipal or local government or whether it is accredited by a recognized accreditation organization. If an adverse event meets the criteria for reporting, the hospital must report that event regardless of the nature or location of the medical service provided by the hospital.

(j) Importer means any person who imports a device into the United States and who furthers the marketing of a device from the original place of manufacture to the person who makes final delivery or sale to the ultimate user, but who does not repackage or otherwise change the container, wrapper, or labeling of the device or device package. If you repackage or otherwise change the container, wrapper, or labeling, you are considered a manufacturer as defined in this section.

(k) Malfunction means the failure of a device to meet its performance specifications or otherwise perform as intended. Performance specifications include all claims made in the labeling for the device. The intended performance of a device refers to the intended use for which the device is labeled or marketed, as defined in § 801.4 of this chapter.

(l) Manufacturer means any person who manufactures, prepares, propagates, compounds, assembles, or processes a device by chemical, physical, biological, or other procedure. The term includes any person who either:

(1) Repackages or otherwise changes the container, wrapper, or labeling of a device in furtherance of the distribution of the device from the original place of manufacture;

(2) Initiates specifications for devices that are manufactured by a second party for subsequent distribution by the person initiating the specifications;

(3) Manufactures components or accessories that are devices that are ready to be used and are intended to be commercially distributed and intended to be used as is, or are processed by a licensed practitioner or other qualified person to meet the needs of a particular patient; or

(4) Is the U.S. agent of a foreign manufacturer.

(m) Manufacturer or importer report number. This number uniquely identifies each individual adverse event report submitted by a manufacturer or importer. This number consists of the following three parts:

(1) The FDA registration number for the manufacturing site of the reported device, or the registration number for the importer. If the manufacturing site or the importer does not have an establishment registration number, we will assign a temporary MDR reporting number until the site is registered in accordance with part 807 of this chapter. We will inform the manufacturer or importer of the temporary MDR reporting number;

(2) The four-digit calendar year in which the report is submitted; and

(3) The five-digit sequence number of the reports submitted during the year, starting with 00001. (For example, the complete number will appear as follows: 1234567-2011-00001.)

(n) MDR means medical device report.

(o) MDR reportable event (or reportable event) means:

(1) An event that user facilities become aware of that reasonably suggests that a device has or may have caused or contributed to a death or serious injury or

(2) An event that manufacturers or importers become aware of that reasonably suggests that one of their marketed devices:

(i) May have caused or contributed to a death or serious injury, or

(ii) Has malfunctioned and that the device or a similar device marketed by the manufacturer or importer would be likely to cause or contribute to a death or serious injury if the malfunction were to recur.

(p) Medical personnel means an individual who:

(1) Is licensed, registered, or certified by a State, territory, or other governing body, to administer health care;

(2) Has received a diploma or a degree in a professional or scientific discipline;

(3) Is an employee responsible for receiving medical complaints or adverse event reports; or

(4) Is a supervisor of these persons.

(q) Nursing home means:

(1) An independent entity (i.e., not a part of a provider of services or any other facility) or one operated by another medical entity (e.g., under the common ownership, licensure, or control of an entity) that operates for the primary purpose of providing:

(i) Skilled nursing care and related services for persons who require medical or nursing care;

(ii) Hospice care to the terminally ill; or

(iii) Services for the rehabilitation of the injured, disabled, or sick.

(2) A nursing home is subject to this regulation regardless of whether it is licensed by a Federal, State, municipal, or local government or whether it is accredited by a recognized accreditation organization. If an adverse event meets the criteria for reporting, the nursing home must report that event regardless of the nature or location of the medical service provided by the nursing home.

(r) Outpatient diagnostic facility means:

(1) A distinct entity that:

(i) Operates for the primary purpose of conducting medical diagnostic tests on patients,

(ii) Does not assume ongoing responsibility for patient care, and

(iii) Provides its services for use by other medical personnel.

(2) Outpatient diagnostic facilities include outpatient facilities providing radiography, mammography, ultrasonography, electrocardiography, magnetic resonance imaging, computerized axial tomography, and in vitro testing. An outpatient diagnostic facility may be either independent (i.e., not a part of a provider of services or any other facility) or operated by another medical entity (e.g., under the common ownership, licensure, or control of an entity). An outpatient diagnostic facility is covered by this regulation regardless of whether it is licensed by a Federal, State, municipal, or local government or whether it is accredited by a recognized accreditation organization. If an adverse event meets the criteria for reporting, the outpatient diagnostic facility must report that event regardless of the nature or location of the medical service provided by the outpatient diagnostic facility.

(s) Outpatient treatment facility means a distinct entity that operates for the primary purpose of providing nonsurgical therapeutic (medical, occupational, or physical) care on an outpatient basis or in a home health care setting. Outpatient treatment facilities include ambulance providers, rescue services, and home health care groups. Examples of services provided by outpatient treatment facilities include the following: Cardiac defibrillation, chemotherapy, radiotherapy, pain control, dialysis, speech or physical therapy, and treatment for substance abuse. An outpatient treatment facility may be either independent (i.e., not a part of a provider of services or any other facility) or operated by another medical entity (e.g., under the common ownership, licensure, or control of an entity). An outpatient treatment facility is covered by this regulation regardless of whether it is licensed by a Federal, State, municipal, or local government or whether it is accredited by a recognized accreditation organization. If an adverse event meets the criteria for reporting, the outpatient treatment facility must report that event regardless of the nature or location of the medical service provided by the outpatient treatment facility.

(t) Patient of the facility means any individual who is being diagnosed or treated and/or receiving medical care at or under the control or authority of the facility. This includes employees of the facility or individuals affiliated with the facility who, in the course of their duties, suffer a device-related death or serious injury that has or may have been caused or contributed to by a device used at the facility.

(u) Physician's office means a facility that operates as the office of a physician or other health care professional for the primary purpose of examination, evaluation, and treatment or referral of patients. Examples of physician offices include: Dentist offices, chiropractor offices, optometrist offices, nurse practitioner offices, school nurse offices, school clinics, employee health clinics, or freestanding care units. A physician's office may be independent, a group practice, or part of a Health Maintenance Organization.

(v) Remedial action means any action other than routine maintenance or servicing of a device where such action is necessary to prevent recurrence of a reportable event.

(w) Serious injury means an injury or illness that:

(1) Is life-threatening,

(2) Results in permanent impairment of a body function or permanent damage to a body structure, or

(3) Necessitates medical or surgical intervention to preclude permanent impairment of a body function or permanent damage to a body structure. Permanent means irreversible impairment or damage to a body structure or function, excluding trivial impairment or damage.

(x) User facility report number means the number that uniquely identifies each report submitted by a user facility to manufacturers and to us. This number consists of the following three parts:

(1) The user facility's 10-digit Centers for Medicare and Medicaid Services (CMS) number (if the CMS number has fewer than 10 digits, fill the remaining spaces with zeros);

(2) The four-digit calendar year in which the report is submitted; and

(3) The four-digit sequence number of the reports submitted for the year, starting with 0001. (For example, a complete user facility report number will appear as follows: 1234560000-2011-0001. If a user facility has more than one CMS number, it must select one that will be used for all of its MDR reports. If a user facility has no CMS number, it should use all zeros in the appropriate space in its initial report (e.g., 0000000000-2011-0001). We will assign a number for future use and send that number to the user facility. This number is used in our record of the initial report, in subsequent reports, and in any correspondence with the user facility. If a facility has multiple sites, the primary site may submit reports for all sites and use one reporting number for all sites if the primary site provides the name, address, and CMS number for each respective site.)

(y) Work day means Monday through Friday, except Federal holidays.

(z) [Reserved]

(aa) Human cell, tissue, or cellular or tissue-based product (HCT/P) regulated as a device means an HCT/P as defined in § 1271.3(d) of this chapter that does not meet the criteria in § 1271.10(a) and that is also regulated as a device.

(bb) Unique device identifier (UDI) means an identifier that adequately identifies a device through its distribution and use by meeting the requirements of § 830.20 of this chapter. A unique device identifier is composed of:

(1) A device identifier - a mandatory, fixed portion of a UDI that identifies the specific version or model of a device and the labeler of that device; and

(2) A production identifier - a conditional, variable portion of a UDI that identifies one or more of the following when included on the label of the device:

(i) The lot or batch within which a device was manufactured;

(ii) The serial number of a specific device;

(iii) The expiration date of a specific device;

(iv) The date a specific device was manufactured.

(v) For an HCT/P regulated as a device, the distinct identification code required by § 1271.290(c) of this chapter.

[79 FR 8846, Feb. 14, 2014, as amended at 80 FR 10587, Feb. 27, 2015]
§ 803.9 What information from the reports do we disclose to the public?

(a) We may disclose to the public any report, including any FDA record of a telephone report, submitted under this part. Our disclosures are governed by part 20 of this chapter.

(b) Before we disclose a report to the public, we will delete the following:

(1) Any information that constitutes trade secret or confidential commercial or financial information under § 20.61 of this chapter;

(2) Any personal, medical, and similar information, including the serial number of implanted devices, which would constitute an invasion of personal privacy under § 20.63 of this chapter. However, if a patient requests a report, we will disclose to that patient all the information in the report concerning that patient, as provided in § 20.61 of this chapter; and

(3) Any names and other identifying information of a third party that voluntarily submitted an adverse event report.

(c) We may not disclose the identity of a device user facility that makes a report under this part except in connection with:

(1) An action brought to enforce section 301(q) of the Federal Food, Drug, and Cosmetic Act (21 U.S.C. 331(q)), including the failure or refusal to furnish material or information required by section 519 of the Federal Food, Drug, and Cosmetic Act (21 U.S.C. 360i));

(2) A communication to a manufacturer of a device that is the subject of a report required to be submitted by a user facility under § 803.30; or

(3) A disclosure to employees of the Department of Health and Human Services, to the Department of Justice, or to the duly authorized committees and subcommittees of the Congress.

§ 803.10 Generally, what are the reporting requirements that apply to me?

(a) If you are a device user facility, you must submit reports (described in subpart C of this part), as follows:

(1) Submit reports of individual adverse events no later than 10 work days after the day that you become aware of a reportable event:

(i) Submit reports of device-related deaths to us and to the manufacturer, if known, or

(ii) Submit reports of device-related serious injuries to the manufacturers or, if the manufacturer is unknown, submit reports to us.

(2) Submit annual reports (described in § 803.33) to us.

(b) If you are an importer, you must submit reports (described in subpart D of this part), as follows:

(1) Submit reports of individual adverse events no later than 30 calendar days after the day that you become aware of a reportable event:

(i) Submit reports of device-related deaths or serious injuries to us and to the manufacturer or

(ii) Submit reports of device-related malfunctions to the manufacturer.

(2) [Reserved]

(c) If you are a manufacturer, you must submit reports (described in subpart E of this part) to us, as follows:

(1) Submit reports of individual adverse events no later than 30 calendar days after the day that you become aware of a reportable death, serious injury, or malfunction.

(2) Submit reports of individual adverse events no later than 5 work days after the day that you become aware of:

(i) A reportable event that requires remedial action to prevent an unreasonable risk of substantial harm to the public health or

(ii) A reportable event for which we made a written request.

(3) Submit supplemental reports if you obtain information that you did not submit in an initial report.

§ 803.11 What form should I use to submit reports of individual adverse events and where do I obtain these forms?

(a) If you are a manufacturer or importer, you must submit reports of individual adverse events to FDA in an electronic format in accordance with § 803.12(a) and § 803.20, unless granted an exemption under § 803.19.

(b) Importer reports submitted to device manufacturers may be in paper format or an electronic format that includes all required data fields to ensure that the manufacturer has all required information.

(c) If you are a user facility, you must submit reports of individual adverse events in accordance with § 803.12(b) and § 803.20.

(d) Form FDA 3500A is available on the Internet at http://www.fda.gov/medwatch/getforms.htm or from Division of International and Consumer Education, Center for Devices and Radiological Health, Food and Drug Administration, 10903 New Hampshire Ave., Bldg. 66, Rm. 4621, Silver Spring, MD 20993-0002, by email: DICE@fda.hhs.gov, FAX: 301-847-8149, or telephone: 800-638-2041.

[79 FR 8846, Feb. 14, 2014, as amended at 80 FR 10587, Feb. 27, 2015]
§ 803.12 How do I submit initial and supplemental or followup reports?

(a) Manufacturers and importers must submit initial and supplemental or followup reports to FDA in an electronic format that FDA can process, review, and archive.

(b) User facilities that submit their reports and additional information to FDA electronically must use an electronic format that FDA can process, review, and archive. User facilities that submit their reports to FDA on paper must submit any written report or additional information required under this part to FDA, CDRH, Medical Device Reporting, P.O. Box 3002, Rockville, MD 20847-3002, using Form FDA 3500A. Each report must be identified (e.g., “User Facility Report” or “Annual Report”).

(c) If you are confronted with a public health emergency, this can be brought to FDA's attention by contacting FDA's Office of Crisis Management, Emergency Operations Center by telephone, 24-hours a day, at 301-796-8240 or toll free at 866-300-4374, followed by the submission of an email to: emergency.operations@fda.hhs.gov.

Note:

This action does not satisfy your obligation to report under part 803.

(d) You may submit a voluntary telephone report to the MedWatch office at 800-FDA-1088. You may also obtain information regarding voluntary reporting from the MedWatch office at 800-FDA-1088. You may also find the voluntary Form FDA 3500 and instructions to complete it at: http://www.fda.gov/Safety/MedWatch/HowToReport/DownloadForms/default.htm.

§ 803.13 Do I need to submit reports in English?

Yes. You must submit all reports required by this part in English.

§ 803.15 How will I know if you require more information about my medical device report?

(a) We will notify you in writing if we require additional information and will tell you what information we need. We will require additional information if we determine that protection of the public health requires additional or clarifying information for medical device reports submitted to us and in cases when the additional information is beyond the scope of FDA reporting forms or is not readily accessible to us.

(b) In any request under this section, we will state the reason or purpose for the information request, specify the due date for submitting the information, and clearly identify the reported event(s) related to our request. If we verbally request additional information, we will confirm the request in writing.

§ 803.16 When I submit a report, does the information in my report constitute an admission that the device caused or contributed to the reportable event?

No. A report or other information submitted by you, and our release of that report or information, is not necessarily an admission that the device, or you or your employees, caused or contributed to the reportable event. You do not have to admit and may deny that the report or information submitted under this part constitutes an admission that the device, you, or your employees, caused or contributed to a reportable event.

§ 803.17 What are the requirements for developing, maintaining, and implementing written MDR procedures that apply to me?

If you are a user facility, importer, or manufacturer, you must develop, maintain, and implement written MDR procedures for the following:

(a) Internal systems that provide for:

(1) Timely and effective identification, communication, and evaluation of events that may be subject to MDR requirements;

(2) A standardized review process or procedure for determining when an event meets the criteria for reporting under this part; and

(3) Timely transmission of complete medical device reports to manufacturers or to us, or to both if required.

(b) Documentation and recordkeeping requirements for:

(1) Information that was evaluated to determine if an event was reportable;

(2) All medical device reports and information submitted to manufacturers and/or us;

(3) Any information that was evaluated for the purpose of preparing the submission of annual reports; and

(4) Systems that ensure access to information that facilitates timely followup and inspection by us.

§ 803.18 What are the requirements for establishing and maintaining MDR files or records that apply to me?

(a) If you are a user facility, importer, or manufacturer, you must establish and maintain MDR event files. You must clearly identify all MDR event files and maintain them to facilitate timely access.

(b)(1) For purposes of this part, “MDR event files” are written or electronic files maintained by user facilities, importers, and manufacturers. MDR event files may incorporate references to other information (e.g., medical records, patient files, engineering reports), in lieu of copying and maintaining duplicates in this file. Your MDR event files must contain:

(i) Information in your possession or references to information related to the adverse event, including all documentation of your deliberations and decision making processes used to determine if a device-related death, serious injury, or malfunction was or was not reportable under this part;

(ii) Copies of all reports submitted under this part (whether paper or electronic), and of all other information related to the event that you submitted to us or other entities such as an importer, distributor, or manufacturer; and

(iii) Copies of all electronic acknowledgments FDA sends you in response to electronic MDR submissions.

(2) If you are a user facility, importer, or manufacturer, you must permit any authorized FDA employee, at all reasonable times, to access, to copy, and to verify the records required by this part.

(c) If you are a user facility, you must retain an MDR event file relating to an adverse event for a period of 2 years from the date of the event. If you are a manufacturer or importer, you must retain an MDR event file relating to an adverse event for a period of 2 years from the date of the event or a period of time equivalent to the expected life of the device, whichever is greater. If the device is no longer distributed, you still must maintain MDR event files for the time periods described in this paragraph (c).

(d)(1) If you are a device distributor, you must establish and maintain device complaint records (files). Your records must contain any incident information, including any written, electronic, or oral communication, either received or generated by you, that alleges deficiencies related to the identity (e.g., labeling), quality, durability, reliability, safety, effectiveness, or performance of a device. You must also maintain information about your evaluation of the allegations, if any, in the incident record. You must clearly identify the records as device incident records and file these records by device name. You may maintain these records in written or electronic format. You must back up any file maintained in electronic format.

(2) You must retain copies of the required device incident records for a period of 2 years from the date of inclusion of the record in the file or for a period of time equivalent to the expected life of the device, whichever is greater. You must maintain copies of these records for this period even if you no longer distribute the device.

(3) You must maintain the device complaint files established under this section at your principal business establishment. If you are also a manufacturer, you may maintain the file at the same location as you maintain your complaint file under part 820 of this chapter. You must permit any authorized FDA employee, at all reasonable times, to access, to copy, and to verify the records required by this part.

(e) If you are a manufacturer, you may maintain MDR event files as part of your complaint file, under part 820 of this chapter, if you prominently identify these records as MDR reportable events. We will not consider your submitted MDR report to comply with this part unless you evaluate an event in accordance with the quality system requirements described in part 820 of this chapter. You must document and maintain in your MDR event files an explanation of why you did not submit or could not obtain any information required by this part, as well as the results of your evaluation of each event.

§ 803.19 Are there exemptions, variances, or alternative forms of adverse event reporting requirements?

(a) We exempt the following persons from the adverse event reporting requirements in this part:

(1) A licensed practitioner who prescribes or administers devices intended for use in humans and manufactures or imports devices solely for use in diagnosing and treating persons with whom the practitioner has a “physician-patient” relationship;

(2) An individual who manufactures devices intended for use in humans solely for this person's use in research or teaching and not for sale. This includes any person who is subject to alternative reporting requirements under the investigational device exemption regulations (described in part 812 of this chapter), which require reporting of all adverse device effects; and

(3) Dental laboratories or optical laboratories.

(b) If you are a manufacturer, importer, or user facility, you may request an exemption or variance from any or all of the reporting requirements in this part, including the requirements of § 803.12. You must submit the request to us in writing at the following address: MDR Exemption Requests, Office of Surveillance and Biometrics, 10903 New Hampshire Ave., Bldg. 66, Rm. 3217, Silver Spring, MD 20993-0002. Your request must include information necessary to identify you and the device; a complete statement of the request for exemption, variance, or alternative reporting; and an explanation why your request is justified. If you are requesting an exemption from the requirement to submit reports to FDA in electronic format under § 803.12(a), your request should indicate for how long you will require this exemption.

(c) If you are a manufacturer, importer, or user facility, we may grant in writing an exemption or variance from, or alternative to, any or all of the reporting requirements in this part, and may change the frequency of reporting to quarterly, semiannually, annually or other appropriate time period. We may grant these modifications in response to your request, as described in paragraph (b) of this section, or at our discretion. When we grant modifications to the reporting requirements, we may impose other reporting requirements to ensure the protection of public health.

(d) We may revoke or modify in writing an exemption, variance, or alternative reporting requirement if we determine that revocation or modification is necessary to protect the public health.

(e) If we grant your request for a reporting modification, you must submit any reports or information required in our approval of the modification. The conditions of the approval will replace and supersede the regular reporting requirement specified in this part until such time that we revoke or modify the alternative reporting requirements in accordance with paragraph (d) of this section or until the date specified in our response granting your variance, at which time the provisions of this part will again apply.

Skip to content