FDA & IMDRF on Software as a Medical Device (SaMD)
25 Aug 2024
In the early era of computers, software products and programs were primarily designed to make computers functional. However, with time and technological advancements, these products have developed significantly. One notable shift has been the emergence of the Software as a Service (SaaS) model. SaaS has transformed how software is delivered, accessed, and used by users. Instead of purchasing software licenses and installing them locally, users now subscribe to SaaS applications hosted in the cloud.
SaaS is extensively used in different areas, such as customer relationship management, enterprise resource management, project management, and sales. If you give a closer look at its applications, you will see that SaaS is mostly applied to commerce. But now, SaaS applications are also being used in healthcare for both medical and non-medical purposes.
There are three types of software concerned with medical devices i.e.
- Software as a Medical Device (SaMD)
- Software integral to a medical device, and
- Software used to manufacture or maintain a medical device.
Understanding SaMD
According to the International Medical Device Regulators Forum (IMDRF), a SaMD can be defined as:
“Software intended to be used for one or more medical purposes that perform these purposes without being part of a hardware medical device.”
Benefits of SaMD
SaMD comes with numerous benefits, such as:
- Iterative development: Software products are easier to change than hardware ones and it’s possible to rapidly upgrade to meet the dynamic needs of the healthcare sector and ensuring continuous improvement.
- Artificial Intelligence (AI) and Machine Learning (ML) Integration: SaMD solutions can integrate AI and ML solutions. By incorporating these technologies, the diagnostic accuracy, predictive analytics, and personalized treatment recommendations can be easily enhanced.
- Cost effectiveness: Without the need of physical hardware, costs associated with its maintenance and upgrades get reduced.
- Remote monitoring: SaMD can be used for remote monitoring of patients. For example, SaMD can be used to collect and process data from sensors applied to a patient. Thus, any minor deviations can be identified easily.
Challenges Associated with SaMD
Although SaMD can be beneficial in a lot of ways, their manufacturers can come across various regulatory challenges. The IMDRF has devised some frameworks and principles that not only ensure technological innovation with SaMD, but also ensure patient safety.
Back in 2013, IMDRF formed a group, known as SaMD Working Group (WG), responsible to guide manufacturers in supporting innovation and allowing safe and effective access to SaMD.
This WG is chaired by FDA and agrees upon framework for risk categorization, Quality Management System for SaMD, clinical evaluation of software as a medical device, and key definitions.
What Common Challenges are Associated with SaMD?
With SaMDs, some of the common challenges which manufacturers and regulators must deal with include:
Definition and Classification
SaMD works as a software catering to medical purposes, and it’s not a hardware medical device. This leads to the challenge of harmonizing definitions and classifications of SaMD across different bodies, such as WHO, IEC, and EU.
Cybersecurity
Since SaMD relies on software, it remains vulnerable to cyber-attacks. Manufacturers must take all the important measures to ensure security of their devices from data breaches, unauthorized access, or manipulation.
Regulation of Software Updates
Like any software, SaMD receive frequent updates which can alter their effectiveness and safety. Thus, there is a constant need of adapting regulatory approaches such that they suit to software upgrades.
End-User Needs
It is essential for regulators to prioritize needs of end-users while devising policies and regulations for SaMDs.
Risk Categorization in SaMDs
One of the top challenges manufacturers and regulators must face with SaMD is the risk categorization.
Four categories exist for SaMD, that are in relative significance to each other, with Category I being the lowest and Category IV being the highest.
As per IMDRF, the following principles must be kept in mind while categorizing SaMD:
- The categorization is reliant on the accurate and complete SaMD definition statement.
- To determine the categories, one must consider the healthcare situation, and the significance of the information provided by the SaMD to the healthcare decision.
- The four categories of SaMD (I, II, III, IV) are made according to their impact level on the public and patient health. Here, the information provided by the SaMD is important to avoid long-term disability, health deterioration, and death.
- A SaMD, which according to its manufacturer’s definition statement can be used in multiple healthcare situations, is considered as the highest category.
- If a manufacturer changes a SaMD during its lifecycle such that it changes the definition statement, then the SaMD’s categorization must be properly re-evaluated. In that case, such SaMD would be categorized according to the information included into the new SaMD definition statement.
- According to the SaMD definition, the SaMD will have its own category even when it is interfaced with another SaMD, other hardware medical devices, or as a module within a larger system.
SaMD: Categorization Criteria
Here we describe in detailed the different categories and the categorization criteria.
Category I
A SaMD belongs to Category I and it is of low impact if it provides information to:
- Drive clinical management of a disease or a condition in a non-serious situation (i.e. situation or condition where an accurate diagnosis and treatment is important but not critical for intervention to mitigate long term irreversible consequences on an individual patient’s health or public health);
- Inform clinical management for a non-serious disease or condition;
- Inform clinical management for a serious disease or condition.
Category II
SaMD belonging to Category II is of medium impact. A Category II SaMD
- Provides information on treating or diagnosing a disease in a non-serious situation or condition;
- Provides information for clinical management of a disease or conditions in a serious situation/condition (i.e. situation or condition where accurate diagnosis or treatment is of vital importance to avoid unnecessary interventions or timely interventions are important to mitigate long term irreversible consequences on an individual patient’s health or public health);
- Provides information for clinical management of a disease or condition in a critical situation (i.e. situation or condition where accurate and/or timely diagnosis or treatment is of vital importance to avoid death, long-term disabilities or other serious deterioration of health of an individual patient’s health or public health)
Category III
SaMDs in Category III are of high impact. They are used to:
- Provide information for treating or diagnosing a serious condition;
- Drive clinical management of a critical disease.
Category IV
This SaMD provides information on treating or diagnosing a critical disease. Category IV SaMD is of very high impact.
To ensure regulatory compliance, proper categorization of SaMD remains vital. There is a need to remain extremely vigilant of other activities, such as post-market surveillance, specific considerations regarding SaMD, and analysis of SaMD framework. To deal with such intricacies, it is essential that medical device manufacturers opt for services of someone with expertise in these regulatory matters, such as TS Quality and Engineering.
At TS Q&E, our regulatory experts strive to provide consultation to medical device and SaMD manufacturers on regulatory matters, especially regarding their categorization. Our services are state-of-the-art, reliable, and affordable. If you are a SaMD manufacturer looking forward to expert advice on SaMD regulations, then contact us today!
