FDA Regulation of Medical Devices
Released: 2016-09-14T00:00:00

Introduction

Medical device regulation is complex, in part because of the wide variety of items that are categorized as medical devices. They may be simple tools used during medical examinations, such as tongue depressors and thermometers, or high-tech life-saving devices that are implanted in the patient, like pacemakers and coronary stents. The medical device market has been described as consi sting of eight industry sectors: surgical and medical instrument manufacturing, surgical appliance and supplies, electromedical and electrotherapeutic apparatus, irradiation apparatus, ophthalmic goods, dental equipment and supplies, dental laboratories, and in vitro diagnostic products (IVDs, or laboratory developed tests).

The federal agency responsible for regulating medical devices is the Food and Drug Administration (FDA)—an agency within the Department of Health and Human Services (HHS). A manufacturer must obtain FDA's prior approval or clearance before marketing many medical devices in the United States. FDA's Center for Devices and Radiological Health (CDRH) is primarily responsible for medical device premarket review. Another center, the Center for Biologics Evaluation and Research (CBER), regulates devices associated with blood collection and processing procedures, cellular products and tissues.

CDRH activities are funded by congressional appropriations and user fees collected from device manufacturers, which together comprise the program level budget. In general, CDRH user fees may be used only for medical device premarket review activities, not other CDRH activities. User fees account for 43% of FDA's total FY2016 program level and 28% of CDRH's FY2016 program level. The CDRH program level budget in FY2016 is $450 million, including $127 million in user fees. FDA's authority to collect medical device related user fees, originally authorized in 2002 ( P.L. 107-250 ), has been reauthorized in five-year increments and was reauthorized through FY2017 by the 112 th Congress via Title II of the FDA Safety and Innovation Act (FDASIA, P.L. 112-144 ).

Congress has historically been interested in balancing the goals of allowing consumers to have access, as quickly as possible, to new and improved medical devices with preventing devices that are not safe and effective from entering or remaining on the market. The goals of device availability and device safety may exert opposite pulls, with implications for consumers, the health care system, and the economy.

Private investment in medical device development reportedly reached a high of $3.7 billion in 2007. Investment has slowed somewhat to $2.5 billion in 2012, $2.3 billion in 2013, $2.7 billion in 2014, and $2.8 billion in 2015. According to one report, the U.S. medical technology industry generated $336 billion in revenue in 2013 and employed almost 671,000 workers. The "medical technology industry" includes "medical device, diagnostic, drug delivery and analytic/life science tool companies" but does not include "distributors and service providers" such as contract research or contract manufacturing organizations. A 2011 analysis found that "32 of the 46 medical technology companies with more than $1 billion in annual revenue are based in the United States." Although the largest companies dominate the market for devices in terms of sales, some believe it is often the small device companies that make a significant contribution to early innovation. Small companies may partner with larger companies to bring products to market if they lack access to the capital and resources to conduct clinical trials and navigate regulatory and reimbursement hurdles.

Manufacturers make decisions about pursuing new devices based in part on the cost of their development. Additional regulatory requirements may escalate these costs, while other incentives, such as tax breaks or market exclusivity extensions, may diminish them. If the device development cost is too high, the eventual result may be that consumers are denied access to new devices because new products are not developed or brought to market. Access problems have led to proposals for, and the enactment of, incentives to develop medical devices for rare diseases and pediatric populations. However, if the regulation and oversight of device development are not adequate, unsafe or ineffective products may reach the market and cause harm to consumers.

Problems related to medical devices can have serious consequences for consumers. Relatively recent examples in the media that have caused severe patient injuries and deaths include metal-on-metal hip implants; pacemakers, defibrillators, and associated leads (wires); stents; endoscopes; surgical mesh; and, power morcellators. The metal-on-metal hip has "been implanted in millions of patients [worldwide], many of whom suffered serious harm and, as a result, needed additional procedures to replace the device." An estimated 500,000 patients in the United States have received this type of hip replacement.

These device problems have raised questions as to whether adequate enforcement tools, resources, and processes are in place at FDA to ensure that marketed devices are safe and effective. Reports by the Government Accountability Office (GAO), the Department of Health and Human Services Office of the Inspector General, and the Institute of Medicine (IOM) have voiced concerns about FDA's device review process. In 2009, 2011, 2013, and 2015 GAO included FDA's oversight of medical products on the GAO list of high-risk areas.

This report provides a description of FDA's medical device review process and related policy issues. The report is divided into two parts: premarket requirements and postmarket requirements. Appendix A provides a comparison of elements comprising the FDA premarket review of drugs and medical devices. Appendix B provides a brief history of laws governing medical device regulation, and Appendix C provides a table of acronyms used in the report.

The Medical Device Review Process: Premarket Requirements

FDA requires all medical product manufacturers to register their facilities, list their devices with the agency, and follow general controls requirements. FDA classifies devices according to the risk they pose to consumers. Many medical devices, such as plastic bandages and ice bags, present only minimal risk and can be legally marketed upon registration alone. These low-risk devices are deemed exempt from premarket review and manufacturers need not submit an application to FDA prior to marketing. In contrast, most moderate- and high-risk devices must obtain the agency's permission prior to marketing. FDA grants this permission when a manufacturer meets regulatory premarket requirements and agrees to any necessary postmarket requirements which vary according to the risk that a device presents.

There are two main paths that manufacturers can use to bring moderate- and high-risk devices to market with FDA's permission. One path consists of conducting clinical studies, submitting a premarket approval (PMA) application, and requires evidence providing reasonable assurance that the device is safe and effective. The PMA process is generally used for novel and high-risk devices and results in a type of FDA permission called approval.

The other path is shorter and less costly. It involves submitting a 510(k) notification demonstrating that the device is substantially equivalent to a device already on the market (a predicate device ) that does not require a PMA. The 510(k) process is unique to medical devices and results in FDA clearance . Substantial equivalence is determined by comparing the performance characteristics of a new device with those of a predicate device. To be considered substantially equivalent, the new device must have the same intended use and technological characteristics as the predicate; clinical data demonstrating safety and effectiveness are usually not required. The manufacturer selects the predicate device to compare with its new device. However, FDA has the ultimate discretion in determining whether a comparison is appropriate.

Of the unique devices that are listed by manufacturers with FDA in FY2016, as shown in Figure 1 , about 63% were exempt from premarket review; the remainder entered the market via the 510(k) process (35%), the PMA process (1%), or other means (such as the " Humanitarian Device Exemption (HDE) ]").

Device Classification

Under the terms of the Medical Device Amendments of 1976 (MDA, P.L. 94-295 ), FDA classified all medical devices that were on the market at the time of enactment—the preamendment devices—into one of three classes. Congress provided definitions for the three classes—Class I, Class II, and Class III—based on the risk (low-, moderate-, and high-risk respectively) to patients posed by the devices. Examples of each class are listed in Table 1 .

Device classification determines the type of regulatory requirements that a manufacturer must follow. Regulatory requirements for each class are described below in more detail. General controls apply to all three classes of FDA-regulated medical devices, unless exempted by regulation, and are the only level of controls that apply to Class I devices. Examples of general controls include establishment registration, device listing, premarket notification, and good manufacturing practice requirements.

Class I devices are those under current law for which general controls "are sufficient to provide reasonable assurance of the safety and effectiveness of the device." Many Class I devices are exempt from the premarket notification and/or the Quality System (QS) regulation requirements, though they still have to comply with the other general controls. A device is exempt if FDA determines that it presents a low risk of illness or injury to patients.

Class II devices are those under current law "which cannot be classified as class I because the general controls by themselves are insufficient to provide reasonable assurance of safety and effectiveness of the device." Class II includes devices that pose a moderate risk to patients, and may include new devices for which information or special controls are available to reduce or mitigate risk. Special controls are usually device specific and may include special labeling requirements, mandatory performance standards, and postmarket surveillance. Currently "15% of all device types classified in Class II are subject to special controls." Although most Class II devices require premarket notification via the 510(k) process, a few are exempt by regulation.

Class III devices are those under current law which "cannot be classified as a class I device because insufficient information exists to determine that the application of general controls are sufficient to provide reasonable assurance of the safety and effectiveness of the device," and "cannot be classified as a class II device because insufficient information exists to determine that the special controls ... would provide reasonable assurance of [their] safety and effectiveness," and are "purported or represented to be for a use in supporting or sustaining human life or for a use which is of substantial importance in preventing impairment of human health," or present "a potential unreasonable risk of illness or injury, [are] to be subject ... to premarket approval to provide reasonable assurance of [their] safety and effectiveness."

In other words, general and/or special controls are not sufficient to assure safe and effective use of a Class III device. Class III includes devices which are life-supporting or life-sustaining, and devices which present a high or potentially unreasonable risk of illness or injury to a patient. New devices that are not Class I or II are automatically designated as Class III unless the manufacturer files a request or petition for reclassification.

Although most Class III devices require premarket approval (PMA), some Class III devices may have been cleared via the 510(k) process. In fact, during the first 10 years following enactment of MDA, over 80% of postamendment Class III devices entered the market on the basis of 510(k) submissions showing substantial equivalence to preamendment devices. These are Class III devices that entered the market prior to regulation calling for a PMA application. FDA explains the situation as follows:

When FDA's medical device regulation program began in the late 1970s, FDA regulated over 170 Class III device types through the 510(k) program, and those devices were never required to submit PMAs, like a typical Class III device. The intent was that FDA's regulation would be temporary and that, over time, the FDA would reclassify those device types into Class I or II, or sustain the classification in Class III and call for PMA applications. This reclassification process is described in Section 515 of the Federal Food, Drug and Cosmetic Act (FD&C Act). Over the years, the FDA made significant progress on the original list of 170 devices; however, as of 2009, 26 medical device regulations still required final action.

At the time that the MDA of 1976 was drafted, "relatively few medical devices were permanently implanted or intended to sustain life. The 510(k) process was specifically intended for devices with less need for scientific scrutiny, such as surgical gloves and hearing aids." Over time, FDA's 510(k) review process was "challenged as new devices changed more dramatically and became more complex."

In late 2009, FDA implemented the 515 Program Initiative "to facilitate action on these remaining Class III device types." Examples of Class III devices that were still regulated via the 510(k) program include the metal-on-metal hip implant, certain dental implants, automated external defibrillator, electroconvulsive therapy device, pedicle screw spinal system, intra-aortic balloon and control system, and several device types related to pacemakers. In 2012, FDASIA changed the process for the reclassification of a device from rulemaking to an administrative order. As a result, since 2013 FDA has published a number of final orders in the Federal Register to reclassify many of these remaining Class III device types.

Medical Device Marketing Applications

As stated above, in general, before a nonexempt medical device may be legally marketed, a manufacturer must submit to FDA either: a PMA application, and the agency may approve the device; or, a 510(k) notification, and the agency may clear the device. FDA makes its determination—either approval or clearance—based on information the manufacturer submits to the agency. The information that is required—in other words, the type of submission the manufacturer must make (if any)—is determined based on the risk that the device poses, if used according to the manufacturer's instructions. FDA typically evaluates more than 4,000 510(k) notifications and about 40 original PMA applications each year.

The Food and Drug Administration Modernization Act of 1997 (FDAMA; P.L. 105-115 ) gave FDA the authority to establish procedures for meeting with manufacturers prior to preparing a submission. The procedures aim to speed the review process by giving FDA and a manufacturer the opportunity to address questions and concerns about the device and/or the planned studies that will be used to support the marketing application before the studies are initiated and the application is submitted.

Generally speaking, under the Federal Food, Drug and Cosmetic Act (FFDCA), manufacturers

are prohibited from selling an adulterated product; are prohibited from misbranding a product; must register their facility with FDA and list all of the medical devices that they produce or process; must file the appropriate premarket submission with the agency at least 90 days before introducing a non exempt device onto the market; and must report to FDA any incident that they are aware of that suggests that their device may have caused or contributed to a death or serious injury.

Under the terms of the Medical Device User Fee Act (MDUFA), manufacturers must pay a fee for most types of submissions. In FY2016, the user fee for FDA review of a PMA submission is $261,388 or $65,347 for a small business; the user fee for FDA review of a 510(k) submission is $5,228 or $2,614 for a small business. GAO found that in 2005, the average cost for FDA to review a PMA was $870,000 and the average cost to review a 510(k) submission was $18,200. User fees account for 43% of FDA's total FY2016 program level and 28% of CDRH's program level. The CDRH program level budget in FY2016 is $450 million, including $127 million in user fees.

The following sections describe the PMA and 510(k) submissions in more detail, and provide information about making changes to a PMA device using a supplement, the Humanitarian Device Exemption, special types of 510(k) submissions, and parallel review of a device by FDA and the Centers for Medicare & Medicaid Services (CMS).

Premarket Approval (PMA)

A PMA is "the most stringent type of device marketing application required by FDA" for new and/or high-risk devices. PMA approval is based on a determination by FDA that the application contains sufficient valid scientific evidence to provide reasonable assurance that the device is safe and effective for its intended use(s). In contrast to a 510(k), PMAs generally require some clinical data prior to FDA making an approval decision.

All clinical evaluations of investigational devices (unless exempt) must have an investigational device exemption (IDE) before the clinical study is initiated. An IDE allows an unapproved device (most commonly an invasive or life-sustaining device) to be used in a clinical study to collect the data required to support a PMA submission. The IDE permits a device to be shipped lawfully for investigation of the device without requiring that the manufacturer comply with other requirements of the FFDCA, such as registration and listing. In August and in November 2011, FDA released draft guidance intended to ensure the quality of clinical trials and streamline the IDE process by clarifying the criteria for approving clinical trials. Final guidance on these topics was issued in 2013 and 2014. All clinical studies must also receive prior approval by an institutional review board (IRB).

A PMA must contain (among other things) the following information:

summaries of nonclinical and clinical data supporting the application and conclusions drawn from the studies; a device description including significant physical and performance characteristics; indications for use, description of the patient population and disease or condition that the device will diagnose, treat, prevent, cure, or mitigate; a description of the foreign and U.S. marketing history, including if the device has been withdrawn from marketing for any reason related to the safety or effectiveness of the device; proposed labeling; and a description of the manufacturing process.

Approval is based not only on the strength of the scientific data, but also on inspection of the manufacturing facility to ensure that the facility and the manufacturing process are in compliance with the quality system (QS) regulation. FDAMA made it easier for manufacturers to submit the required sections of a PMA in a serial fashion as data are available ("modular PMA").

When a PMA is first received by FDA, it has 45 days to make sure the application is administratively complete. If not, the application is returned. If the application is complete, it is formally filed by FDA. The agency then has 75 days to complete the initial review and determine whether an advisory committee meeting will be necessary.

Advisory committees may be convened to make recommendations on any scientific or policy matter before FDA. They are composed of scientific, medical, and statistical experts, and industry and consumer representatives. An advisory committee meeting allows interested persons to present information and views at a public hearing. FDA typically accepts advisory committee recommendations for an application (approvable, approvable with conditions, or nonapprovable). However, there have been cases where FDA's decision has not been consistent with the committee's recommendation. CDRH will hold joint advisory committee meetings with other FDA centers when necessary. Though FDA regulations allow 180 days to review the PMA and make a determination, total review time can be much longer. MDUFA performance goals have been established to reduce the review time for PMAs.

As a condition of approval for a PMA device, FDA may order a post-approval study to obtain information on device safety, effectiveness, and/or reliability over long-term use of the device in real world populations (as opposed to clinical studies). A report published in November 2014 by JAMA Internal Medicine analyzed 223 post-approval studies of 158 medical devices ordered to be conducted by FDA between 2005 and 2011. The report found that delays in launching and completing such studies were common. The report found limited information on the causes of study delays and variable detail provided on the reason a post-approval study (PAS) was ordered. According to the authors, "the FDA has never issued a warning letter to a manufacturer for failing to start or complete a mandated PAS, which may undermine its authority in ordering these studies. The most common effect of a PAS was a change to device labeling. The influence of such label changes is unknown."

In 2015, 98% of PMAs accepted for filing were approved by FDA. After FDA notifies the applicant that the PMA has been approved, a notice is posted on the Internet for the approved PMA, making available a summary of the safety and effectiveness data upon which the approval is based and providing interested persons an opportunity to petition FDA within 30 days for reconsideration of the decision.

PMA Supplements

If a manufacturer wants to make a change to an approved PMA device, it must submit to FDA one of several different types of PMA supplements to request agency approval of the device change. The various types of PMA supplements and associated fees are briefly described in Table 2 . The manufacturer is also required to pay a user fee, except in the case of the Special PMA Supplement. FDA provides information about approved PMA supplements on the FDA website.

Devices approved via a PMA supplement have smaller fees, shorter review times, and often do not require the collection of premarket clinical data. Clinical data refers to data obtain during a clinical trial involving human subjects and preclinical data refers to mechanical engineering tests as well as animal studies. The features of the PMA supplement "encourage manufacturers to implement evolving technologies to create new models of devices that are incrementally different from previously approved additions. This helps facilitate rapid improvement in device technology, but also means that high-risk medical devices can gain PMA approval as supplements without any direct clinical study of the specific change made to the device."

Evaluations of the PMA and PMA Supplement Process

As mentioned above, FDA considers a PMA to be the most stringent type of device marketing application required for new and/or high-risk devices. However, studies in the academic medical literature have questioned the quality of the data submitted to the agency in support of PMA applications.

A December 2009 report in JAMA (Journal of the American Medical Association) reviewed data submitted to support PMAs for high-risk cardiovascular devices that received FDA approval between 2000 and 2007. The authors found that 65% of the PMA applications were based on a single study that often was not a high-quality randomized controlled clinical trial. This is in contrast to drug applications, which require two randomized well-controlled trials. For a comparison of FDA premarket review processes for drugs and devices, see Table A-1 . The JAMA report found that only 27% of all cardiovascular PMAs were based on a randomized trial and only 14% of the trials of cardiovascular devices used a blinded design.

In addition, the 2009 JAMA report also found that a majority (88%) of the cardiovascular studies used surrogate end points, "which may not be reliable predictors of actual patient benefit." A surrogate end point of a clinical trial "is a laboratory measurement or a physical sign used as a substitute for a clinically meaningful end point that measures directly how a patient feels, functions, or survives." An example of a surrogate is measurement of cholesterol level that is used as a surrogate marker for the clinical end point, death from heart disease. A drug that lowers cholesterol, however, may not lengthen life.

The authors of the 2009 JAMA study chose to examine cardiovascular devices "because it was expected they would undergo the most stringent approval process given their far-reaching impact on morbidity and mortality and their increasing use." The authors stated that their findings "raise questions about the quality of data on which some cardiovascular device approvals are based." They argue that in comparison with drug approval, "the bar for evidence of benefit should be higher for devices because they are implanted and cannot simply be discontinued, as drugs can." The importance of FDA device approval versus clearance is significant, as it may preempt consumer lawsuits on device safety leaving injured patients no avenue of legal recourse or redress.

Decisions by physicians and patients could be more informed regarding the use of high-risk devices, such as cardiovascular devices, if the clinical trial data that FDA reviews to support approval were more accessible. A June 2015 BMJ (British Medical Journal) report found selective reporting problems in the medical literature regarding the published trials of high-risk cardiovascular medical devices. Reporting bias is a well-documented problem in the drug-related medical literature. Those who have analyzed clinical trial information in FDA new drug applications and compared it with the corresponding publications in the medical literature have found the selective reporting of favorable results in the literature. "Results favoring the new drug over the comparator were significantly more likely to be reported in the literature than unfavorable results. The selective publication of favorable results for drugs includes several types of reporting bias," including failure to publish entire studies and failure to publish unfavorable outcomes.

The June 2015 BMJ report, the first of its kind, found that "half (51%) of clinical studies of novel high risk cardiovascular devices remain unpublished over two years after FDA approval.... When these studies are published, there are often clinically relevant discrepancies between FDA documents and corresponding publications." According to the authors, these findings "point to the importance of mandatory registration on a public clinical trials platform. Clinicaltrials.gov is an important step in this direction, but recent data show that published trials often have discrepant findings between clinicaltrial.gov and publications." The authors state that "the accessibility and user friendliness of FDA reports needs to be considerably improved. As clinicians can use devices immediately after FDA approval, it is in the public interest that all of the data be available to clinicians at that time."

A January 2014 JAMA report examined FDA approval of cardiac implantable electronic devices (CIEDs)—such as pacemakers, implantable cardioverter-defibrillators (ICDs), and other cardiac devices—via the PMA process and the PMA supplement process. CIEDs were chosen as "a useful case study because they have been the subject of substantial evolution over the past 30 years," and the authors sought to "characterize the nature of the changes in each supplement and understand the data supporting these changes." The first CIED was approved by FDA via the PMA process in 1979. The report found that from 1979 to 2012, FDA approved 77 CIED PMAs and 5829 PMA supplements based on those 77 original CIED PMAs. That represents a median of 50 supplements per original PMA. The authors warn clinicians and patients that "clinical data are rarely collected as part of PMA supplement applications prior to marketing." Of the 5829 PMA supplements, almost half (2,754, 47%) were allowed onto the market via the 30-day notice supplement, about a quarter were 180-day supplements (1,538, 26%), and another quarter were real-time supplements (1,312, 23%) and special supplements (108, 2%); only a small fraction used the more rigorous panel-track supplement (15, 0.3%).

Two medical device recalls that were widely reported in the media—the Medtronic Sprint Fidelis and St Jude Medical Riata ICD leads—both entered the market via the PMA supplement process. The Medtronic Sprint Fidelis was a 180-day supplement, and the St Jude Medical Riata was a real-time supplement; neither was studied in human trials prior to FDA approval. According to the authors of the January 2014 JAMA report, the "FDA's approval of many supplements without new human trials, as in the case of these recent ICD changes, highlights the importance of collecting rigorous postapproval performance data." Yet the January 2014 JAMA report states that postapproval studies for devices on the market via a PMA supplement are uncommon. PMA supplements "allow patients to benefit from incremental innovation in device technology by providing efficient and inexpensive FDA review pathways for smaller device changes." However, many such minor design changes may add up to a substantial difference from the device approved in the original PMA application. Therefore, the authors of the January 2014 JAMA study recommend "more widespread implementation of rigorous postmarket studies to evaluate device performance once approved for clinical use."

As stated previously in this section, others might also argue that because such devices are implanted within the patient, and cannot be easily removed without the risk of causing major complications, the evidence of benefit should be higher for devices during the FDA premarket review process in comparison with the evidence for drugs. Allowing innovative but potentially defective devices to quickly enter the market may leave large numbers of patients and their physicians with very difficult decisions.

For example, the failure rate for the Sprint Fidelis lead was 2.8% per year. When the lead fails, it can deliver a painful and unnecessary shock (750 volts) to the patient's heart. According to one cardiologist, "[m]ost patients can tolerate one shock, as the pain is over almost before the brain has time to process the magnitude of the insult. But almost no one can tolerate multiple shocks. The first shock starts the fear cycle. First is extreme anxiety, but after a second or third shock, anxiety from the possibility of more shocks progresses quickly to near terror."

The risk of major complications in replacing the lead is 15.3%. The leads "run a long course through the veins into the heart. The body's natural healing process forms scar tissue at multiple sites along the lead that can create strong attachments to the wall of a blood vessel or a heart chamber. Freeing a lead from these attachments requires considerable skill and experience and is more difficult and risky than implanting the leads in the first place." Therefore, if a lead does not show signs of malfunction, most patients would be closely watched rather than receive prophylactic surgery to remove the lead.

In two announcements, dated October 2015 and February 2016, the Department of Justice (DOJ) stated that over 500 hospitals in 43 states had been fined more than $280 million for implanting ICDs in "Medicare patients in violation of Medicare coverage requirements.... In terms of the number of defendants, this is one of the largest whistleblower lawsuits in the United States." The DOJ announcement provides further details about the settlement:

Medicare coverage for the device, which costs approximately $25,000, is governed by a National Coverage Determination (NCD). [CMS] implemented the NCD based on clinical trials and the guidance and testimony of cardiologists and other health care providers, professional cardiology societies, cardiac device manufacturers and patient advocates. The NCD provides that ICDs generally should not be implanted in patients who have recently suffered a heart attack or recently had heart bypass surgery or angioplasty. The medical purpose of a waiting period—40 days for a heart attack and 90 days for bypass/angioplasty—is to give the heart an opportunity to improve function on its own to the point that an ICD may not be necessary. The NCD expressly prohibits implantation of ICDs during these waiting periods, with certain exceptions. The Department of Justice alleged that from 2003 to 2010, each of the settling hospitals implanted ICDs during the periods prohibited by the NCD.

According to Dr. Rita Redberg, a cardiologist at the University of California, San Francisco, and editor of JAMA Internal Medicine , "Hospitals put ICDs in people outside the coverage guidelines who would not get a benefit and likely suffer. It's a big invasive procedure, and the guidelines are there to make sure that for people who are getting the procedure the benefits outweigh the harm." Dr. Redberg reviewed cases for the DOJ and indicated that "many, if not most of the cases we looked at not only violated the CMS guidelines, but were also unjustified by any clinical data other than the MD's opinion, and were clearly outside any boundaries of good or appropriate care."

Bryan Vroon, the attorney who represented the whistleblowers in the Medicare ICD false claims suit, states that "since the beginning of the DoJ investigation in 2008, the number of surgeries to implant the device has dropped by about 28%, reaping a savings for Medicare of some $2 billion over the five years that followed." Unnecessary and potentially harmful ICD implantation surgery is less of a problem in Europe. "The implantation rates for all types of devices are lower in Europe than in the United States; thus, the need for [lead] extraction can be expected to be higher in the United States than in Europe."

Humanitarian Device Exemption (HDE)

The Safe Medical Devices Act of 1990 (SMDA, P.L. 101-629 ) authorized the Humanitarian Device Exemption (HDE) to encourage the development of devices that aid in the treatment and diagnosis of diseases or conditions that affect fewer than 4,000 individuals in the United States per year. An HDE application is similar to a PMA, but it is exempt from the effectiveness requirements to encourage manufacturers to develop devices for these small markets.

However, there are some important restrictions: there is a 4,000-unit limit per year on the number of devices shipped, and use of an HDE device requires approval by an institutional review board (IRB) at the institution where the device is to be used. The IRB process may involve "substantial costs for meticulous record keeping, application production, and IRB fees (which could involve hundreds of sites)." Also, there is "the potential for insurers not to cover the device (for lack of evidence of efficacy)."

In the past, the device sponsor was also not allowed to make a profit on the sale of the HDE device if its price was more than $250. FDAAA ( P.L. 110-85 ) removed the restriction on profit for HDEs developed for pediatric use and required GAO to report by 2012 on the impact of removing this restriction. FDASIA allows an HDE device to qualify for an exemption to the general ban on selling such devices for a profit if the HDE device is intended for the treatment or diagnosis of (1) a disease or condition that does not occur in pediatric patients, or (2) that occurs in pediatric patients in such numbers that device development is impossible, highly impracticable, or unsafe. Also, a sponsor of a device granted an HDE prior to FDASIA's enactment may seek a determination as to whether it would qualify for an exemption to the profit ban.

In order for a device to receive HDE marketing approval, there cannot be another legally marketed device, either via the 510(k) process or the PMA process, available to treat or diagnose the disease or condition. Once a device with the same intended use as the humanitarian use device is approved or cleared, an HDE cannot be granted for the humanitarian use device. However, the agency will "consider an HDE application if a comparable device has been approved under another HDE or if a comparable device is being studied under an IDE."

Parallel Review: FDA Approval or Clearance and Medicare National Coverage Determinations (NCDs)111

CMS requires as a condition of coverage under the Medicare program, with certain exceptions, that devices (including IVDs) be FDA-approved or cleared where such approval or clearance is required. This approval does not guarantee coverage, as there are a number of other factors that CMS considers in its coverage decisions. CMS has stated that manufacturers will often focus their efforts on gaining FDA approval, without realizing that upon receiving such approval, Medicare coverage of the device is not automatic. Most private payer coverage decisions also require FDA approval where such approval is required by law. For example, BlueCross BlueShield's Technology Evaluation Center (TEC) requires that final FDA approval be received where required by law.

There are a few specific circumstances where a device may be covered under Medicare without FDA approval or clearance. These include cases where the FDA has (1) granted an investigational device exemption (IDE); (2) provided a classification of nonexperimental investigational device, for which underlying questions of safety and effectiveness have been resolved for that device type; and (3) required that clinical trials be conducted, with Medicare beneficiaries participating in the FDA-approved clinical trial.

Importantly, Medicare coverage determinations are often closely monitored by private health insurance plans, and many private plans will follow Medicare's decisions. Therefore, a decision by CMS to cover a device through a positive national coverage determination (NCD) will often result in more rapid diffusion and adoption of that device in the health care system. For this reason, from the perspective of the device manufacturer, CMS's coverage decision carries significant weight.

The statutory basis of and processes used for determining FDA approval (or clearance) of a device are distinct from the statutory basis of and processes used by CMS to make its NCDs. In each case, the purpose of the review differs, as do the contextual factors of the decision. FDA review and Medicare NCDs are usually carried out in a serial manner (i.e., one after the other). However, in order to try to shorten the timeframe for getting a device into clinical use, in October 2011 CMS and FDA launched a two-year pilot program for the parallel review of medical products. The pilot program was extended for an additional two years, effective December 2013.

Although the agency has not formally extended the pilot program beyond December of 2015, the original Memorandum of Understanding (MOU) between FDA and CMS from 2010 that was created to facilitate the parallel review pilot was amended in 2015 to have a termination date of "indefinite." The original MOU termination date was no later than five years after it was signed, in June 2010. Congress has expressed interest in the ongoing status of the parallel review pilot. Both the House and Senate Appropriations Committee reports, accompanying the respective Agriculture appropriations bills, included language directing FDA to report on whether it plans to extend the pilot and how it anticipates encouraging more manufacturers to participate. In addition, based partially on the experience with the parallel review pilot, FDA published a request for expressions of interest from coverage organizations who would like to share input on coverage decisions with medical device sponsors. The agency states that it has realized the value of earlier discussions between the agencies, payers and manufacturers with respect to which information and evidence may be needed to support a positive coverage decision.

On August 11, 2014, FDA announced that it had approved a product for the first time through the CMS Parallel Review Program, resulting in the simultaneous FDA approval of the product (Exact Sciences' Cologuard) and CMS issuance of a proposed NCD for the product. The agencies plan to evaluate the pilot once a representative group of products have gone through the process and to extend the program to both drugs and biologics.

510(k) Notification

In general, a 510(k) submission is required for a moderate-risk medical device that is not exempt from premarket review. A 510(k) could also be used for currently marketed devices for which the manufacturer seeks a new indication (e.g., a new population, such as pediatric use, or a new disease or condition), or for which the manufacturer has changed the design or technical characteristics such that the change may affect the performance characteristics of the device.

Between 1996 and 2009, more than 80% of the devices cleared by FDA using 510(k) notification were Class II devices, about 10% were Class I and less than 5% were Class III. A 2009 GAO report found that 25% of the 10,670 Class II devices cleared by FDA in FY2003 through FY2007 were either implantable, life sustaining or presented significant risk to the health, safety, or welfare of the patient. The agency cleared about 90% of 510(k) submissions reviewed during FY2003 through FY2007.

According to FDA data, 85% of 510(k)s accepted for review in 2015 were determined to be substantially equivalent. As noted previously, the standard for clearance of a traditional 510(k) is substantial equivalence with a predicate device. A predicate device can be one of two things. It can be a previously cleared Class I or II device that does not require a PMA. It can also be preamendment Class III for which the agency has not issued regulations requiring a PMA. (PMAs, which are more rigorous submissions than 510(k)s, are discussed in the " Premarket Approval (PMA) " section.)

A manufacturer may choose one of three types of 510(k) submissions for premarket clearance: traditional, special, or abbreviated. A study of 510(k) submissions between 1996 and 2009 found that about 80% were traditional, 16% were special, and 3% were abbreviated. For novel devices without a predicate, there is another alternative called the de novo 510(k) process.

Traditional 510(k)

A traditional 510(k) must include the name of the device, a description of the device, a comparison with a predicate device, the intended use of the device, and the proposed label, labeling, and advertisements for the device and directions for use. Studies supporting a 510(k) submission are usually preclinical studies (laboratory testing), not clinical studies (in human beings). Substantial equivalence, in many cases, means only that the device performs in a similar fashion to the predicate under a similar set of circumstances. As a result, many devices never have to demonstrate safety and effectiveness through studies using human subjects.

In addition to not requiring clinical studies, three other characteristics of the 510(k) process make it much less rigorous than the PMA process: (1) premarket inspections of how devices were manufactured are generally not required by FDA; (2) postmarket studies are not required by FDA as a condition of clearance; and (3) FDA has limited authority to rescind or withdraw clearance if a 510(k) device is found to be unsafe or ineffective.

FDA may take any of the following actions on a 510(k) after conducting its review:

find the device substantially equivalent to the predicate and issue a clearance letter; find the device not substantially equivalent (NSE) and issue an NSE letter prohibiting marketing; determine that the device is exempt from a 510(k) submission; request additional information (with the final clearance decision pending review of that information).

A manufacturer generally has 30 days to provide any additional information, or FDA may issue a notice of withdrawal of the application. The manufacturer may, at any time, withdraw its 510(k). FDA has 90 days to review a traditional 510(k).

Abbreviated and Special 510(k)s

Abbreviated and special 510(k)s were new approaches to premarket notification that came from FDAMA. These approaches were intended to streamline and expedite FDA's review for routine submissions meeting certain qualifications, thus leaving reviewer time for more complicated submissions.

An abbreviated 510(k) uses guidance documents developed by FDA to communicate regulatory and scientific expectations to industry. Guidance documents have been prepared for many different kinds of devices, and are available on FDA's website. All guidance documents are developed in accordance with Good Guidance Practices (GGP), and many with public participation or opportunities for public comment. In addition to issuing guidance documents, FDA can either develop performance or consensus standards or 'recognize' those developed by outside parties. In an abbreviated 510(k), the manufacturer describes what guidance document, special control, or performance standard was used, and how it was used to assess performance of their device. Other minimum required elements are the product description, representative labeling, and a summary of the performance characteristics. FDA typically reviews an abbreviated 510(k) in 60 days.

A special 510(k) may be used for a modification to a device that has already been cleared under the 510(k) process. It typically uses the design control requirement of the Quality System (QS) regulation. The QS regulation describes the good manufacturing practice (GMP) requirements for medical devices. The special 510(k) allows the manufacturer to declare conformance to design controls without providing the data. This type of submission references the original 510(k) number, and contains information about the design control requirements. FDA aims to review most special 510(k)s in 30 days.

De Novo 510(k)

Under the FFDCA, novel devices lacking a legally marketed predicate are automatically designated Class III. FDAMA amended FFDCA Section 513(f) to allow FDA to establish a new, expedited mechanism for reclassifying these devices based on risk, thus reducing the regulatory burden on manufacturers. The de novo 510(k), though requiring more data than a traditional 510(k), often requires less information than a premarket approval (PMA) application.

Under the original de novo 510(k) process created in 1997 by FDAMA, the manufacturer submitted a traditional 510(k) for its device. Because there was no predicate device or classification, FDA would return a decision of not substantially equivalent. Within 30 days, the manufacturer would submit a petition requesting reclassification of its device into Class II or I, as appropriate. Within 60 days, FDA would render a decision classifying the device.

Section 607 of FDASIA modified FFDCA Section 513(f)(2), creating an alternative de novo pathway that does not require that a device be reviewed first under a 510(k) and found NSE prior to submission of a de novo. FDA has released draft guidance on the alternative de novo review process. "Under the new de novo pathway, if a person believes their device is appropriate for classification into Class I or Class II and determines there is no legally marketed predicate device, they may submit a de novo without a preceding 510(k) and NSE." This classification request may be declined by FDA if there exists a legally marketed device on which to base a substantial equivalence review, or if the new device is not a low-moderate risk device or general controls would be inadequate to control risks and special controls cannot be developed.

Assessments of the 510(k) Process

As mentioned earlier, several reports have examined aspects of the FDA device review process. FDAAA (2007) required GAO to study and report on the appropriate use of the 510(k) process "to determine whether a new device is as safe and effective as a classified device." The report, released in January 2009, found that a number of Class III devices—including device types that are implantable, life sustaining, or posing a significant risk to the health, safety, or welfare of a patient—were cleared for the U.S. market through FDA's less stringent 510(k) review process. GAO recommended that "FDA expeditiously take steps to issue regulations for Class III device types currently allowed to enter the market via the 510(k) process by requiring PMAs or reclassifying them to a lower class."

In December 2008 an orthopedic device made by ReGen, a New Jersey company, was cleared for marketing via the 510(k) process. In April 2009, Acting FDA Commissioner Joshua Sharfstein initiated an internal review of the decision to clear the ReGen Menaflex device. In September 2009, FDA released a preliminary report on the review of ReGen Menaflex device. The report provided a list of 22 instances in which the agency did not follow established processes, procedures, or practices. The report provides a possible reason for this, noting "the presence of widespread internal disagreement and confusion about the legal standard for 510(k) review." Acting Commissioner Sharfstein said that the report made "a series of recommendations, all of which will be adopted."

In September 2009, FDA announced that it had requested an independent evaluation of the 510(k) process by IOM. The agency also stated it would convene its own internal comprehensive assessment of the 510(k) process by forming two FDA staff working groups. One group would review the 510(k) program and make recommendations to enhance the decisionmaking process. The second group would review how the agency incorporates new science into its decisionmaking and make recommendations on incorporating new science while maintaining predictability in the process for industry. During the development of the two internal reports, FDA sought public input via two public meetings, three town hall meetings, three public dockets, and many smaller meetings with various stakeholder groups.

FDA released the two final reports of the agency's internal review in August 2010. The reports contained a total of 55 recommendations; the agency again sought public comment on the reports and their recommendations. In January 2011, FDA released its "Plan of Action," based on some of the recommendations in the August 2010 internal review reports. Further information about FDA's "Plan of Action" and list of accomplishments for its implementation is provided on the agency's website.

In July 2011, IOM released a report on the 510(k) process. The IOM Committee recommended that the current 510(k) process be "replaced with an integrated premarket and postmarket regulatory framework that effectively provides a reasonable assurance of safety and effectiveness throughout the device life cycle." In response to the 2011 IOM 510(k) report, CDRH Director Jeffrey Shuren stated in July 2011 that "FDA believes that the 510(k) process should not be eliminated but we are open to additional proposals and approaches for continued improvement of our device review programs.... Many of the IOM findings parallel changes already underway at the FDA to improve how we regulate devices. These actions, plus a sufficiently funded device review program, will contribute to a stronger program. Any major modifications made to the agency's premarket review programs should be based on sound science and through thoughtful and transparent discussion"

It is interesting to note that the 510(k) clearance process has not been adopted elsewhere, in contrast to the FDA approach to drug regulation, which has been adopted by many other countries. Although the U.S. system of medical device regulation has been in place much longer than systems elsewhere, such as the European Union, and FDA has greater experience than most countries in regulating medical devices, the IOM report found that "other countries that tightly regulate medical devices do not rely solely on substantial equivalence to a predicate for premarket review of medium-risk devices." In addition, the IOM report notes that the "Global Harmonization Task Force also does not offer as part of its guidance a predicate-based system for premarket review of medical devices."

The Medical Device Review Process:Post-Market Requirements

Once approved or cleared for marketing, manufacturers of medical devices must comply with various regulations on labeling and advertising, manufacturing, and postmarketing surveillance. This section describes such requirements as well as efforts under development—the Sentinel Initiative and the Unique Device Identification (UDI) system—and CDRH compliance and enforcement actions.

Postmarketing Surveillance and the National Evaluation System for Health Technology (NEST)

Because the premarket review process cannot be designed to completely ensure the safety of all devices before they enter the market, it is essential to have a strong surveillance system that monitors the safety of medical devices. When a problem is identified with a particular medical device, various corrective actions can then be implemented. Corrective actions might include changing the device labeling and instructions for use, improving user training, continued study of the device problem via postmarket surveillance, or removal of the device from the market if appropriate.

However, the iterative nature of medical device development adds a layer of complication to devising postmarket requirements for a product that may be replaced by the next-generation product before the start of, for example, a postmarket surveillance study. As noted earlier in this report, for high-risk cardiac implantable electronic devices that entered the market between 1979 and 2012, there was a median of 50 supplements per original PMA approved by FDA; clinical data are rarely collected as part of PMA supplement applications prior to marketing. The 2011 IOM report recommended that FDA "develop and implement a comprehensive strategy to collect, analyze, and act on medical-device postmarket performance information."

In response to the 2011 IOM report and its recommendation to replace the 510(k) process, CDRH released its own report in September 2012. The 2012 CDRH report stated that "several high-profile medical device performance concerns have led some to question whether the current United States postmarket surveillance system is optimally structured to meet the challenges of rapidly evolving medical devices and the changing nature of health care delivery and information technology."

In some cases, foreign surveillance systems have identified serious device safety concerns sooner than in the United States. For example, a Swedish registry found that drug-eluting stents were associated with an increased risk of death compared with bare-metal stents. An Australian registry was the first to identify the increased failure rates of metal-on-metal hip joints and found that many other new hip replacement products did not improve health outcomes compared with older devices. Patients and taxpayer-financed health care programs were receiving limited or no benefit from expensive new devices with a higher risk of adverse events. Postmarket data can be used to not only monitor device safety, but also to better understand and measure device innovation and cost-effectiveness.

According to the CDRH report, the "current United States medical device postmarket surveillance system depends primarily upon" the following sources for detecting potential problems with medical devices:

Medical Device Reporting (MDR). FDA annually receives several hundred thousand reports of confirmed or possible medical device related malfunctions, serious injuries, and deaths. Limitations of this passive surveillance system include incomplete, inaccurate, and/or delayed data reporting; underreporting of events; and lack of information on the total number of devices on the market in clinical use. Medical Product Safety Network (MedSun). FDA receives about 5,000 higher quality reports each year on device use and adverse outcomes from a network of 280 U.S. hospitals. The network "can be used for targeted surveys and clinical research" and has specialty subnetworks that focus on particular device types (HeartNet), laboratories (LabNet), or patients (KidNet). Post-Approval Studies. Such studies may be ordered by FDA as a condition of approval for a PMA device. These studies are typically "used to assess device safety, effectiveness, and/or reliability including longer-term, real-world device performance." Postmarket Surveillance Studies. FDA may order a manufacturer of a Class II or Class III device to conduct a 522 study (FFDCA Section 522) if failure of the device is reasonably likely to have serious adverse health consequences, if it is expected to have significant use in pediatric populations, or if it (1) is intended to be implanted for longer than one year or (2) has life-supporting or life-sustaining use outside a device user facility. Approaches used in 522 studies "vary widely and may include nonclinical device testing, analysis of existing clinical databases, observational studies, and, rarely, randomized controlled trials." FDA Discretionary Studies. In addition to those mentioned above, FDA "conducts its own research to monitor device performance, investigate adverse event signals and characterize device-associated benefits and risks to patient sub-populations." Sources of privacy-protected data for these studies include "national registries, Medicare and Medicaid administrative and claims data, data from integrated health systems, electronic health records, and published scientific literature." Other Tools. Identified in the appendix of the September 2012 FDA report.

There are limitations associated with the above sources of information on postmarket problems caused by medical devices. "Currently, medical device data arise from disparate data sources with variable data elements, data definitions, data quality, and frequently from only limited subsets of patient exposures." Because of these limitations, FDA is attempting to create a new resource for all stakeholders—patients, physicians, hospitals, payers, manufacturers, regulators, and other federal entities—involved in the use of medical devices.

The September 2012 CDRH report described "FDA's vision" for the creation of a national system focused on medical devices that "would augment, not replace, other mechanisms of surveillance such as FDA's MDR and MedSun." The new national system would conduct "active surveillance in near real-time using routinely collected electronic health information containing unique device identifiers [UDIs], quickly [identify] poorly performing devices, accurately [characterize] the real-world clinical benefits and risks of marketed devices, and [facilitate] the development of new devices and new uses of existing devices through evidence generation, synthesis and appraisal."

The September 2012 CDRH report proposed four specific actions to strengthen the U.S. medical device postmarket surveillance system:

1. establish a UDI system and promote its incorporation into electronic health information; 2. promote the development of national and international device registries for selected products; 3. modernize adverse event reporting and analysis; and 4. develop and use new methods for evidence generation, synthesis, and appraisal.

The agency held a series of meetings in September 2012 in order to solicit public comments regarding the U.S. medical device postmarket surveillance system.

In a series of subsequent reports, FDA and its partners have further refined this vision and provided updates on efforts to move toward the creation of a new National Evaluation System for health Technology (NEST). Two reports focus on providing medical devices with a UDI that corresponds to the product's manufacturer and model. Incorporation of UDI into patient electronic health records, health insurance claims, and registries would eventually allow for assessment of medical device performance in large patient populations. The remaining reports discuss recommendations for implementing the system as a whole, including a coordinating center, a seven-year implementation plan and several pilot programs. The cost to implement and maintain the system over the first five years is estimated to be $200 million to $250 million, or about $50 million annually, $25 million from appropriations, and $25 million from user fees. The reports by FDA and its partners on the medical device postmarket surveillance system are listed in the text box below.

A January 2016 Senate Health, Education, Labor and Pensions Committee minority staff report on antibiotic-resistant infections associated with the use of duodenoscope devices recommends that Congress fully fund the National Medical Device Evaluation System. A public workshop, sponsored by the FDA and the University of Maryland/Center of Excellence in Regulatory Science and Innovation, on the National Evaluation System for Medical Devices was held on March 24, 2016.

On July 27, 2016, FDA released draft guidance on how the agency plans to use real-world data (RWD) in making premarket and post market regulatory decisions regarding medical devices. RWD is defined as "data collected from sources outside of traditional clinical trials." Such sources may include, for example, "administrative and healthcare claims, electronic health records, data obtained as part of a public health investigation or routine public health surveillance, and registries."

Postmarket Surveillance Studies ("522 Studies")

While the term postmarketing surveillance refers to a wide range of programs, the term postmarket surveillance refers to a specific activity defined in law. For certain class II and class III devices, FDA may order a manufacturer to conduct a postmarket surveillance study—also called a 522 study—once the device is approved or cleared for marketing in order to gather safety and efficacy data. A postmarket surveillance study may be ordered if

device failure would be reasonably likely to have serious adverse health consequences; the device is expected to have significant use in pediatric populations; the device is intended to be implanted in the body for more than one year; or the device is intended to be a life-sustaining or life-supporting device used outside a device user facility.

The primary objective of postmarket surveillance is to study the performance of the device after clearance or approval as it is used in the population for which it is intended—and to discover cases of device failure and its attendant impact on the patient. Manufacturers may receive notification that their device is subject to postmarket surveillance when FDA files (i.e., accepts) the submission, and again when a final decision is made. If notified, manufacturers must submit a plan for postmarket surveillance to FDA for approval within 30 days of introducing their device into interstate commerce.

FDASIA specifies that the Secretary's authority to order the conduct of postmarket surveillance is at the time of approval or clearance of a device or at any time thereafter. It also requires the manufacturer to commence any required postmarket surveillance not later than 15 months after being so ordered.

Researchers have found that 522 studies "have often been difficult to implement and complete reliably." For example, a "key challenge in conducting these studies is a lack of incentives for clinicians and patients to participate, because they represent already marketed devices and an additional reporting burden and other requirements on top of their usual practice." In addition, "522 studies have been criticized for inconsistencies in design, the lack of oversight, timeliness of reporting findings, and how the information is eventually used." On May 16, 2016, FDA issued final guidance on postmarket surveillance under FFDCA Section 522.

A September 2015 GAO study described "(1) the types of devices for which FDA has ordered a postapproval study and the status of these studies, and (2) the types of devices for which FDA has ordered a postmarket surveillance study and the status of these studies."

GAO analyzed FDA data on 313 post approval studies that FDA ordered between January 1, 2007, and February 23, 2015. GAO found that 56% of the postapproval studies were for cardiovascular devices, 11% were for orthopedic devices, 9% were for general and plastic surgery devices, and 24% were for devices used by other medical specialties, such as anesthesiology, neurology, obstetrics and gynecology, and gastroenterology-urology. Nearly all (94%) of the postapproval studies were for devices approved through the PMA process, the remainder (6%) were for devices approved through the HDE process. Of the 313 postapproval studies, GAO found that 225 (72%) were ongoing, 62 (20%) were completed, and 26 (8%) were inactive. Of the 225 ongoing studies, 81% were making adequate progress and 19% were delayed due to, for example, limited patient enrollment.

GAO analyzed FDA data on 392 postmarket surveillance studies that FDA ordered between May 1, 2008, and February 24, 2015. GAO found that 196 (50%) of the postmarket surveillance studies were for orthopedic medical devices. "In 2011 alone, FDA ordered 176 studies for orthopedic devices following safety concerns about metal-on-metal hip implants, including potential bone or tissue damage from metal particles." Another 121 postmarket surveillance studies were ordered by FDA in 2012 "following safety concerns about the use of implanted surgical mesh used for urogynecological procedures." Of the 392 studies, most (94%) were for devices cleared through the 510(k) process (primarily metal-on-metal hips and surgical mesh), 2% were approved through the PMA process, and 4% were approved through the HDE process. GAO found that 88% of the 392 postmarket surveillance studies were inactive, 10% were ongoing, and 2% were completed.

Adverse Event Reporting

The Safe Medical Devices Act of 1990 (SMDA, P.L. 101-629 ) required FDA to establish a system for monitoring and tracking serious adverse events that resulted from the use or misuse of medical devices. Medical Device Reporting (MDR) is one mechanism that FDA uses to identify and monitor significant adverse events involving medical devices.

Device manufacturers are required to report to FDA (1) within 30 calendar days of acquiring information that reasonably suggests one of their devices may have caused or contributed to a death, serious injury, or malfunction and (2) within 5 working days if an event requires action other than routine maintenance or service to prevent a public health issue. User facilities, such as hospitals and nursing homes, are also required to report deaths to both the manufacturer, if known, and FDA within 10 working days. User facilities must report serious injuries to the manufacturers (or FDA if the manufacturer is unknown) within 10 working days. User facilities must also submit annual reports to FDA of all adverse event reports sent to manufacturers or FDA in the past year.

In August 2009, FDA published notice of a proposed rule, and a related draft guidance document, that would require manufacturers to submit MDRs to the agency in an electronic format. According to FDA, the proposed regulatory changes would provide the agency with a more efficient data entry process that would allow for timely access to medical device adverse event information and identification of emerging public health issues. The device industry requested a longer timeframe to implement the changes. A report by the HHS Office of Inspector General released in October 2009 raised a number of questions about adverse event reporting for medical devices. The report found that CDRH does not consistently use adverse event reporting and made several recommendations about how it could better do so.

On February 13, 2014, FDA published a final rule on Electronic Medical Device Reporting (eMDR) requiring manufacturers to submit MDRs to the agency in an electronic format. User facilities may also submit eMDR reports, but the final rule allows user facilities to continue to submit paper MDR reports.

Medical Device Tracking

"Manufacturers are required to track certain devices from their manufacture through the distribution chain when they receive an order from [FDA] to implement a tracking system for a certain type of device." Device tracking ensures that manufacturers of these devices can locate them quickly, if needed once in commercial distribution, to facilitate notifications and recalls if serious risks to health are associated with a particular device. FDA may issue a tracking order for any Class II or Class III device:

the failure of which would be reasonably likely to have serious adverse health consequences; which is intended to be implanted in the human body for more than one year; or which is intended to be a life-sustaining or life-supporting device used outside a device user facility.

FDA has issued orders to track a number of implantable devices (including silicone-gel filled breast implants, certain joint prostheses, implantable pacemakers, implantable defibrillator, mechanical heart valves, and implantable infusion pumps) and various other devices that are used outside a device user facility.

The Sentinel Initiative

Section 905 of FDAAA mandated that FDA create an active postmarket risk identification system. Although the FDAAA language is focused on monitoring drugs, FDA is using its general authority to monitor all FDA-regulated products, including medical devices, after they have reached the market. FDASIA required the Secretary to modify the postmarket risk identification and analysis system, now called Sentinel, to include medical devices and to engage stakeholders during this expansion.

FDA launched the Sentinel Initiative in May 2008; once completed, it will be called the Sentinel System. FDAAA set goals that the new system must be able to access data on 25 million people by July 2010, a goal which FDA has met, and 100 million people by July 2012. FDA met the 100 million people goal in December 2011, and as of June 2012 "has secure access to data concerning approximately 126 million patients nationwide derived from 17 different data partners." According to FDA, Sentinel aims to develop and implement a proactive system that will complement existing systems that the agency has in place to track reports of adverse events linked to the use of its regulated products.

FDA is collaborating with institutions throughout the United States, including academic medical centers, health care systems and health insurance companies, who act as data partners in the system. Additional collaborators will include patient and health care professional advocacy groups, academic institutions and the medical products industry. As an example of data applicable to medical devices, "one Sentinel-related project identified, described, and evaluated potential US orthopedic-implant registries that could participate in the creation of a national network of such registries as part of the Sentinel Initiative. Data related to medical devices include rates of selected outcomes (for example, myocardial infarction and stroke), rates of infection, and rates of implant revision and reintervention." According to FDA and other stakeholders, including a Unique Device Identification (UDI) on CMS claims forms is "the best way to expand the agency's Sentinel system to include medical devices."

Unique Device Identification (UDI) System

FDAAA required the HHS Secretary to promulgate regulations establishing a UDI system. FDASIA required the Secretary to issue proposed regulations for the UDI system not later than December 31, 2012. The proposed rule was published in July 2012, and the final rule was published in September 2013. When fully implemented, the label of most devices will include a UDI in human- and machine-readable (bar code) form. A UDI is an alphanumeric code composed of two parts: the device identifier (DI) indicating the device's manufacturer and model number, and the production identifier (PI) identifying the device serial number, lot number, manufacture date, and in some cases expiration date. According to FDA, the UDI system offers "a range of benefits to industry, FDA, consumers, health care providers and health care systems," such as

• Allowing more accurate reporting, reviewing and analyzing of adverse event reports so that problem devices can be identified and corrected more quickly.

• Reducing medical errors by enabling health care professionals and others to more rapidly and precisely identify a device and obtain important information concerning the characteristics of the device.

• Enhancing analysis of devices on the market by providing a standard and clear way to document device use in electronic health records, clinical information systems, claim data sources and registries. A more robust postmarket surveillance system can also be leveraged to support premarket approval or clearance of new devices and new uses of currently marketed devices.

• Providing a standardized identifier that will allow manufacturers, distributors and healthcare facilities to more effectively manage medical device recalls.

• Providing a foundation for a global, secure distribution chain, helping to address counterfeiting and diversion and prepare for medical emergencies.

• Leading to the development of a medical device identification system that is recognized around the world.

UDI is being implemented in phases. In general, the Class III device compliance date was September 2014 (one year after the final rule was published), Class II is September 2016 (three years after the final rule), and Class I is September 2018 (five years after the final rule). FDA has held a number of public meetings and workshops with stakeholders to discuss the adoption, implementation, and use of a UDI system and has posted further information about the use of UDI for medical devices on its website.

Members of Congress, FDA, and other organizations, such as the Brookings Institute and the Pew Charitable Trusts, have called for the inclusion of the UDIs in Medicare claims forms. For example, in a January 2016 Senate Health, Education, Labor and Pensions Committee minority staff report on outbreaks of antibiotic-resistant infections associated with the use of duodenoscope devices, the first recommendation is that Congress should require and promote that UDIs be included in insurance claims.

In a September 2015 letter to Senators Elizabeth Warren and Charles E. Grassley, the HHS Inspector General, Daniel Levinson, indicates the benefits of incorporating UDI into "claims data, both to protect beneficiaries from adverse events and the Medicare trust funds from significant losses." Research performed by two independent groups estimates that following the recall of the Medtronic Sprint Fidelis defibrillator lead (wire) in October 2007, "Medicare incurred costs exceeding $1 billion due to this recall alone." According to the HHS Inspector General, at the present time,

Medicare claims forms insufficiently identify Medicare beneficiaries who received a recalled or defective device. Therefore, we cannot readily determine the number of Medicare beneficiaries affected by medical device recalls and failures or assess the financial impact on Medicare. However, we have identified over 200 FDA recalls for cardiac devices alone since early 2010 that we believe have significantly increased Medicare costs. There have also been numerous orthopedic-related recalls within the last 5 years that we believe have significantly increased Medicare costs.

In the past, CMS has been opposed to the inclusion of UDIs in claims. Former Medicare Administrator Marilyn Tavenner stated in a February 2015 letter that "including UDIs on claims would entail significant technological challenges, costs and risks" for the agency. The February 2015 letter estimated the costs at $700 million. However, in a July 13, 2016, letter, CMS Acting Administrator Andrew Slavitt and FDA Commissioner Robert Califf stated support for including UDI on claims and urged the Accredited Standards Committee X12 to permit the device identifier portion of UDI for implantable devices to be included in the next version of the claims form.

Labeling

Like drugs and biological products, all FDA approved or cleared medical devices are required to be labeled in a way that informs a user of how to use the device. The FFDCA defines a "label" as a "display of written, printed, or graphic matter upon the immediate container of any article." "Labeling" is defined as "all labels and other written, printed, or graphic matter upon any article or any of its containers or wrappers, or accompanying such article" at any time while a device is held for sale after shipment or delivery for shipment in interstate commerce.

The term "accompanying" is interpreted to mean more than physical association with the product; it extends to posters, tags, pamphlets, circulars, booklets, brochures, instruction books, direction sheets, fillers, web pages, etc. Accompanying can also include labeling that is connected with the device after shipment or delivery for shipment in interstate commerce. According to an appellate court decision, "most, if not all advertising, is labeling. The term 'labeling' is defined in the FFDCA as including all printed matter accompanying any article. Congress did not, and we cannot, exclude from the definition printed matter which constitutes advertising."

All devices must conform to the general labeling requirements. Certain devices require specific labeling, which may include not only package labeling, but informational literature, patient release forms, performance testing, and/or specific tolerances or prohibitions on certain ingredients.

A section of the Quality System (QS) regulation also has an impact on various aspects of labeling. The QS regulation applies to the application of labeling to ensure legibility under normal conditions of use over the expected life of the device and also applies to inspection, handling, storage, and distribution of labeling. FDA considers a device to be adulterated if these requirements are not met. These requirements do not apply to the adequacy of labeling content, except to make sure the content meets labeling specifications contained in the device master record. However, failure to comply with GMP requirements, such as proofreading and change control, could result in labeling content errors. In such cases, the device could be misbranded and/or adulterated.

Manufacturing

Like drug manufacturers, medical device manufacturers must produce their devices in accordance with Good Manufacturing Practice (GMP). The GMP requirements for devices are described in the QS regulation. The QS regulation requires that domestic or foreign manufacturers have a quality system for the design, manufacture, packaging, labeling, storage, installation, and servicing of nonexempt finished medical devices intended for commercial distribution in the United States. The regulation requires that various specifications and controls be established for devices; that devices be designed and manufactured under a quality system to meet these specifications; that finished devices meet these specifications; that devices be correctly installed, checked, and serviced; that quality data are analyzed to identify and correct quality problems; and that complaints are processed. FDA monitors device problem data and inspects the operations and records of device developers and manufacturers to determine compliance with the GMP requirements. Though FDA has identified in QS regulation the essential elements that a quality system should have, manufacturers have a great deal of leeway to design quality systems that best cover nuances of their devices and the means of producing them.

Compliance and Enforcement

Compliance requirements apply to both the premarket approval process and postmarket surveillance. When a problem arises with a product regulated by FDA, the agency can take a number of actions to protect the public health. Initially, the agency tries to work with the manufacturer to correct the problem on a voluntary basis. If that fails, legal remedies may be taken, such as asking the manufacturer to recall a product, having federal marshals seize products, or refusing imported products that are in violation of the FFDCA. If warranted, FDA can ask the courts to issue injunctions or prosecute individual company officers that deliberately violate the law. When warranted, criminal penalties, including prison sentences, may be sought.

Section 516 of the FFDCA gives FDA the authority to ban devices that present substantial deception or unreasonable and substantial risk of illness or injury. Section 518 enables FDA to require manufacturers or other appropriate individuals to notify all health professionals who prescribe or use the device and any other person (including manufacturers, importers, distributors, retailers, and device users) of any health risks resulting from the use of a violative device, so that these risks may be reduced or eliminated. This section also gives consumers a procedure for economic redress when they have been sold defective medical devices that present unreasonable risks. Section 519 of the act authorized FDA to promulgate regulations requiring manufacturers, importers, and distributors of devices to maintain records and reports to assure that devices are not adulterated or misbranded. Section 520(e) authorizes FDA to restrict the sale, distribution, or use of a device if there cannot otherwise be reasonable assurance of its safety and effectiveness. A restricted device can only be sold on oral or written authorization by a licensed practitioner or under conditions specified by regulation.

Inspection

Each FDA center has an Office of Compliance (OC) that ensures compliance with regulations while pre- or postmarket studies are being undertaken, with manufacturing requirements, and with labeling requirements. The objectives of CDRH's OC's Bioresearch Monitoring (BIMO) program are to ensure the quality and integrity of data and information submitted in support of IDE, PMA, and 510(k) submissions and to ensure that human subjects taking part in investigations are protected from undue hazard or risk. This is achieved through audits of clinical data contained in PMAs prior to approval, data audits of IDE and 510(k) submissions, inspections of IRBs and nonclinical laboratories, and enforcement of the prohibitions against promotion, marketing, or commercialization of investigational devices. Any establishment where devices are manufactured, processed, packed, installed, used, or implanted or where records of results from use of devices are kept, can be subject to inspection. (See Table 3 .)

The OC also reviews the quality system design and manufacturing information in the PMA submission to determine whether the manufacturer has described the processes in sufficient detail and to make a preliminary determination of whether the manufacturer meets the QS regulation. If the manufacturer has provided an adequate description of the design and manufacturing process, a preapproval inspection can be initiated. Inspection is to include an assessment of the manufacturer's capability to design and manufacture the device as claimed in the PMA and confirm that the quality system is in compliance with the QS regulation. Postapproval inspections can be conducted within 8 to 12 months of approval of the PMA submission. The inspection is to primarily focus on any changes that may have been made in the device design, manufacturing process, or quality systems.

The compliance offices work closely with the Office of Regulatory Affairs (ORA), which operates in the field to regulate almost 124,000 business establishments that annually produce, warehouse, import and transport $1 trillion worth of medical products. ORA field inspectors typically have conducted about 22,000 domestic and foreign inspections a year to ensure that regulated products meet the agency's standards. CSOs also monitor clinical trials. Scientists in ORA's 13 laboratories typically have analyzed more than 41,000 product samples each year to determine their adherence to FDA's standards.

Warning Letter

A Warning Letter is a written communication from FDA notifying a responsible individual, manufacturer, or facility that the agency considers one or more products, practices, processes, or other activities to be in violation of the laws that FDA enforces. The Warning Letter informs the recipient that failure to take appropriate and prompt action to correct and prevent any future repeat of the violations could result in an administrative or judicial action. Although serious noncompliance is often a catalyst for issuance of a Warning Letter, the Warning Letter is informal and advisory (see Table 4 ).

Product Recall

A recall is a method of removing or correcting products that FDA considers are in violation of the law. Medical device recalls are usually conducted voluntarily by the manufacturer after negotiation with FDA. Manufacturers (including refurbishers and reconditioners) and importers are required to report to FDA any correction or removal of a medical device that is undertaken to reduce a health risk posed by the device. A recall may involve the removal of all or a portion of the product on the market (such as a single lot). In rare instances, where the manufacturer or importer fails to voluntarily recall a device that is a risk to health, FDA may issue a recall order to the manufacturer.

When a recall is initiated, FDA performs an evaluation of the health hazard presented taking into account the following factors, among others:

Whether any disease or injuries have occurred from the use of the product; Whether any existing conditions could contribute to a clinical situation that could expose humans or animals to a health hazard; Assessment of hazard to various populations (e.g., children, surgical patients, pets, livestock) who would be exposed to the product; Assessment of the degree of seriousness of the health hazard to which the populations at risk would be exposed; Assessment of the likelihood of occurrence of the hazard; Assessment of the consequences (immediate or long-range) of the hazard.

Following the health hazard assessment, FDA assigns the recall a classification according to the relative degree of health hazard. Class I recalls are the most serious, reserved for situations where there is a reasonable probability that the use of, or exposure to, a product will cause serious adverse health consequences or death. Class II recalls are for situations where the use of, or exposure to, a product may cause temporary or medically reversible adverse health consequences or where the probability of serious adverse health consequences is remote. In a Class III recall situation, the use of, or exposure to, a product is not likely to cause adverse health consequences (see Table 5 ). In addition to a warning letter or recall, FDA may issue a public notification or safety alert (e.g., "Dear Doctor" letter), to warn health care providers and consumers of the risk of the device.

FDASIA requires the Secretary to establish a program to improve the device recall system. Among other things, it requires an assessment of information on device recalls, an assessment of the effectiveness of corrections or action plans for recalls, and documentation of the basis for terminations of recalls.

Appendix A. A Comparison of FDA Premarket Review of Prescription Drugs and Medical Devices

Appendix B. History of Laws Governing Medical Device Regulation

The Federal Food, Drug and Cosmetics Act of 1938

The first general federal food and drug law, the Food and Drugs Act of 1906 , did not contain any provisions to regulate medical device safety or claims made regarding such devices. Strong support for reform developed during the 1930s due to "false therapeutic claims for medical devices [that] were being presented to the public through radio and newspaper advertising." Medical devices came under federal scrutiny when Congress passed the Federal Food, Drug and Cosmetic Act (FFDCA) of 1938 (P.L. 75-717). The regulatory authority provided to FDA by the 1938 law was "limited to action after a medical device has been offered for introduction into interstate commerce" and only when the device was deemed to be "adulterated or misbranded."

Most of the legitimate devices on the market at the time the 1938 act became law "were relatively simple items which applied basic science concepts such that experts using them could readily recognize whether the device was functioning properly; the major concern with respect to these devices was assuring truthful labeling." During the first 20 years following enactment of the 1938 law, FDA's activity with respect to medical devices involved protecting the American public from fraudulent devices; FDA began to turn its attention to the hazards from legitimate devices around 1960.

The post-war revolution in biomedical technology had resulted in the introduction of a wide variety of sophisticated devices. New developments in the electronic, plastic, metallurgy, and ceramics industries, coupled with progress in design engineering, led to invention of the heart pacemaker, the kidney dialysis machine, defibrillators, cardiac and renal catheters, surgical implants, artificial vessels and heart valves, intensive care monitoring units, and a wide spectrum of other diagnostic and therapeutic devices. Although many lives have been saved or improved by the new discoveries, the potential for harm to consumers has been heightened by the critical medical conditions in which sophisticated modern devices are used and by the complicated technology involved in their manufacture and use. In the search to expand medical knowledge, new experimental approaches have sometimes been tried without adequate premarket clinical testing, quality control in materials selected, or patient consent.

The Dalkon Shield, a contraceptive device introduced in November 1970, is "an example of a legitimate device which was marketed without adequate premarket testing." Other examples include defective cardiac pacemakers and intraocular lenses which, following implantation, caused unusual eye infections resulting in serious vision impairment or the need for removal of the eye.

Congress amended the FFDCA in 1962 to require FDA approval of a new drug application prior to marketing and to require that a new drug be shown to be effective as well as safe. Following these changes, FDA began "to impose rigorous premarket approval of some products that today would be deemed devices." Court decisions in the late 1960s upheld FDA's authority to regulate some medical devices as drugs due in part to the overlapping definitions of drug and device in the 1938 law. FDA classified a number of devices as drugs (contact lenses, injectable silicone, pregnancy-test kits, bone cement), and only such devices were subject to premarket review (prior to 1976). However the approach of classifying devices as a drug was unsuccessful in other court decisions and the need for more comprehensive authority to regulate devices was recognized by the Kennedy, Johnson, and Nixon Administrations.

The Medical Device Amendments of 1976

The Medical Device Amendments of 1976 (MDA; P.L. 94-295 ) was the first major legislation passed to address the review of medical devices. The MDA provided a definition for the term device. It established a number of requirements referred to as general controls that applied to all devices. Examples include provisions on adulteration and misbranding, prohibitions on false or misleading advertising, and a requirement to register all medical device manufacturers with FDA. One such provision required manufacturers to notify FDA 90 days prior to the marketing of any new device; if the agency failed to act, marketing could begin. Because this provision is outlined in section 510(k) of the FFDCA, it is often referred to as a "510(k) notification."

The MDA directed FDA to classify, into one of three classes, all medical devices that were on the market at the time of enactment; these are the preamendment devices. Congress provided definitions for the three classes—Class I, Class II, Class III—based on the risks to patients posed by the devices. In contrast to the approach taken with pharmaceuticals (all, except generic agents, undergo rigorous premarket review and approval), Congress limited premarket approval to only a small number of devices. "Only the highest-risk category [Class III] would require agency review and approval as a precondition for commercial sale and routine medical use. The other two categories would be subject not to a rigorous review but merely a requirement [510(k)] that the manufacturer of a device notify FDA, at least 90 days before commencing marketing, of its intent to distribute the product commercially." For Class I devices, no additional review was needed once the status of Class I was confirmed; general controls were considered to be sufficient to protect public health. For Class II devices, limited supplemental review would be needed to verify conformity with performance standards if such standards had been established by the agency.

Under MDA, all devices coming to market after enactment were automatically placed in Class III until reclassified; these are the postamendment devices. As stated above, Class III medical devices receive more intense scrutiny and require an application for premarket approval (PMA) before the device can be marketed. However, the MDA allowed for the reclassification of a device from one class to another. According to a 2011 IOM report on medical devices:

The classification and reclassification process did not include any evaluation of the safety or effectiveness of the device types being categorized. Once a device type was assigned to Class III, the FDA was directed to promulgate a regulation calling for manufacturers of devices of that type to submit a [PMA] application. The agency would then (and only then) undertake a review of the safety and effectiveness of the devices. For device types placed into Class I or Class II, there was no mechanism for the systematic review of safety and effectiveness. Congress envisioned instead that the agency would use its postmarketing tools to identify and address issues of lack of safety or lack of effectiveness case by case. Thus, preamendment devices in Class I and II were never subjected to a comprehensive FDA evaluation for safety or effectiveness. The classification process was not completed until 1988.

For postamendment devices, which were automatically placed into Class III, there were two important exceptions:

The primary exception involved a postamendment device that was substantially equivalent to another device of the same type that either as a preamendment device that had not been classified into any class or was not a preamendment device but had already been classified into Class I or Class II. The FDA permitted manufacturers of postamendment devices to demonstrate substantial equivalence to a preamendment device in Class I or II as part of the 510(k) submission. An alternative exception provided that the postamendment device would not be in Class III if the FDA, in response to a petition, classified it into Class I or Class II.

The MDA did not provide a definition for the term substantially equivalent. The MDA also did not itemize the required contents of a 510(k). Such a notification "need only set forth its proposed intended use or indications for use, the device to which substantial equivalence is claimed, and evidence demonstrating that equivalence."

The Safe Medical Devices Act of 1990

The Safe Medical Devices Act of 1990 (SMDA; P.L. 101-629 ) made a number of changes to the law such as providing a definition for the term substantial equivalence and revising the definition for Class II. FDA had not promulgated performance standards for most Class II devices. The new law authorized the use of alternative restrictions, called special controls, at the agency's discretion and simplified the process of establishing performance standards for Class II devices. Examples of special controls include special labeling requirements, mandatory performance standards, patient registries and postmarket surveillance.

FDA also had experienced difficulty in promulgating regulations needed to require submission of PMA applications for Class III devices. SMDA authorized FDA to reconsider all the preamendment devices that had been placed in Class III and reclassify some of these devices into Class I or Class II. The purpose was "to reduce the number of device types that needed PMA review." For those devices remaining in Class III, the agency was directed to establish a schedule for promulgation of regulations calling for PMAs of devices that still used the 510(k) notification as an entry to the marketplace.

Under SMDA, FDA must issue a response to a 510(k) submission before marketing of a new device can begin. SMDA allowed for the evaluation of safety and effectiveness data in 510(k) notifications, but only in certain situations. These were limited to cases in which a new device offered different technologic characteristics from the already marketed pre a mendment or postamendment (predicate) device. "Because the assessment of substantial equivalence generally did not require evidence of safety or effectiveness of a device and because a preamendment device to which equivalence was established was not itself reviewed for safety or effectiveness, the FDA made clear from the outset that clearance of a 510(k) notification was not a determination that the cleared device was safe or effective. That position was reiterated by the agency numerous times. The US Supreme Court accepted this interpretation in a 1996 opinion."

SMDA established postmarket requirements for medical devices. SMDA required facilities that use medical devices to report to FDA any incident that suggested that a medical device could have caused or contributed to the death, serious illness, or injury of a patient. Manufacturers of certain permanently implanted devices were required to establish methods for tracking the patients who received them and to conduct postmarket surveillance to identify adverse events. The act authorized FDA to carry out certain enforcement actions, such as device product recalls, for products that did not comply with the law.

The Food and Drug Administration Modernization Act of 1997

The Food and Drug Administration Modernization Act of 1997 (FDAMA; P.L. 105-115 ) mandated wide-ranging reforms in the regulation of foods, drugs, and medical devices by FDA. In general, provisions involving medical devices "were designed to reduce FDA's workload and permit concentration of resources on devices that presented greater potential for harm" and "to limit the FDA's discretion and authority in regulating the device industry" in order to "accelerate the pace of technology transfer."

FDAMA eliminated the 510(k) notification requirement for most Class I devices and some Class II devices. It authorized the creation of a third-party review system of 510(k) submissions for Class I and most Class II devices that still required 510(k) review. It allowed certain new devices (those not substantially equivalent to another device and automatically placed in Class III) to be evaluated for immediate placement in Class I or Class II. This process, called the de novo 510(k), avoids PMA review, must be completed in 60 days, and may be requested by the sponsor.

For substantial equivalence determinations in which the new device has a different technological characteristic, FDAMA requires that FDA "consider the least burdensome means of demonstrating substantial equivalence and request information accordingly." For a medical device using an important breakthrough technology, or which does not have an approved alternative device, priority review of the PMA must be provided by FDA.

FDAMA limited the use of some postmarket controls (device tracking and postmarket surveillance) to Class II and Class III devices, eased reporting requirements of adverse events for device user facilities, eliminated mandatory reporting of adverse events by medical device distributors, and directed FDA to establish a sentinel reporting system to collect information on deaths and serious injuries or illnesses associated with the use of a medical device.

Medical Device User Fee Acts

The Medical Device User Fee and Modernization Act of 2002 (MDUFMA; P.L. 107-250 ) established a user fee program for premarket reviews of 510(k) submissions and PMA applications; user fees may not be used for other FDA or CDRH activities. MDUFMA also made targeted changes that would reduce regulatory burdens and agency workload, such as allowing establishment inspections to be conducted by accredited persons (third parties). MDUFMA was amended and clarified by two laws: the Medical Device Technical Corrections Act of 2004 (MDTCA, P.L. 108-214 ), and the Medical Device User Fee Stabilization Act of 2005 (MDUFSA, P.L. 109-43 ), and had its user fee provisions reauthorized by the Medical Device User Fee Act of 2007 (MDUFA; Title II of FDAAA, see below).

FDA Amendments Act of 2007

The Food and Drug Administration Amendments Act of 2007 (FDAAA; P.L. 110-85 ) amended the FFDCA and the Public Health Service Act (PHSA) to reauthorize several expiring programs (including the medical device user fee act) and to make agency-wide changes, several of which have implications for the regulation of medical devices. FDAAA created incentives as well as reporting and safety requirements for manufacturers of medical devices for children; required that certain clinical trials for medical devices and some other products be publicly registered and have their results posted; created requirements to reduce conflicts of interest in advisory committees for medical devices and other products; and made certain other amendments to the regulation of devices.

FDA Safety and Innovation Act

The Food and Drug Administration Safety and Innovation Act of 2012 (FDASIA, P.L. 112-144 ) amended the FFDCA and the PHSA to reauthorize the prescription drug and medical device user fee programs, created new user fee programs for generic and biosimilar drug approvals, and modified FDA authority to regulate medical products. Several provisions in FDASIA made modifications to various aspects of premarket and postmarket device regulation. Examples of premarket changes include those which affect the efficiency, transparency, and data requirements of the 510(k) and PMA processes; and alter or make clarifications to certain types of exempt devices, for example, custom devices and humanitarian use devices. Provisions affecting postmarket regulation include those which focus on expanding active postmarket surveillance; altering requirements related to postmarket studies for devices; and strengthening both device recall and tracking capabilities through a recall program and the unique device identifier system. Miscellaneous reforms include those aimed at increasing transparency of FDA's approval and clearance decisions and processes for issuing industry guidance documents; improving health information technology for the agency; and harmonizing device regulation with FDA's international counterparts.

Appendix C. Acronyms Used in this Report