background image for GxP Lifeline
GxP Lifeline

Complaint Analysis: Don’t Forget the Work You’ve Already Done


2018-bl-compliant-analysis-page-image

Obstacle:

It takes significant effort to gather and analyze complaint data, and to use it effectively in monitoring the performance of the Quality Management System (QMS). 

Tip:

There are many areas of the quality system where significant analysis work has already been done during the pre-market phase. The answers to many post-market questions are often already written in the pre-market data. 

One area of the quality system that often involves a great amount of resources is the compliant system. A good portion of the complaints received will end up having a long-term relationship with the quality personnel assigned to it. Time is needed to give it your full attention and resolution. An effective quality manager will be able to identify the time that has already been spent during pre-market analyzing product functionality and failures, and use the data for each and every compliant report, complaint investigation and within the complaint trending analysis. 

The following is a general walk-through of complaint and customer feedback systems, and where opportunity lies to use applicable pre-market data to save time resources within your quality department.

  • Complaint Intake: Accurate documentation of complaint information as stated from the complaint reporter
  • Complaint Intake: Analyze the complaint as it relates to the product

Opportunity: The key here is to complete this step during complaint intake, or the opportunity is missed. The product risk analysis documentation uses precise technical language to describe potential failure modes. When this information is not referenced and used in complaint documentation, the quality assurance individual is forced to try and explain what happened in relation to the product functionality. Since this work has already been done, it is an unnecessary compromise in both data integrity (it was written by the subject matter experts in the risk analysis documentation) and time resource (for the quality assurance individual).

  • Complaint Intake: Identify any relevant circumstances and information surrounding the event in relation to the environment, user and/or patient

Opportunity: In addition to the potential failure modes, the risk analysis documentation also describes the potential resulting risk to the user/patient, impact on the system and impact on the environment. Referencing this information while receiving each complaint will give the person documenting the complaint a better chance at including important applicable details. Significant time can be wasted in trying to "investigate" the complaint after it is received to determine things that may already be known by the person reporting the complaint.

  • Complaint Investigation: Analyze the complaint for risk assessment

Opportunity: This is the biggest time saver — the risk assessment of all known failures and risks has already been made. Don’t miss this! Each potential failure mode or issue of the risk analysis includes a risk assessment. It is described using terms such as severity and potential patient risk. When that failure or issue actually happens during use of the product, there is no need to re-analyze its risk. Simply transfer the applicable information from the risk analysis to each complaint report when it occurs. You will only need to add information if there is a newly identified risk or impact (e.g., it is currently missing on the risk analysis).

  • Complaint Investigation: Analyze the complaint for regulatory reporting requirements

Opportunity: The reporting assessment is also already identified on the risk analysis. The severity rating of the failure or issue has a corresponding definition that describes how serious the risk to the patient is (i.e., death or serious injury, minor injury, etc.). The regulatory reporting decision can be made by just identifying the applicable severity ranking, instead of it turning into an exhaustive review of all the complaint details. Also, medical professionals are typically co-authors or reviewers of the risk analysis, and their time is often hard to secure. If they have already made a risk assessment of the particular failure mode, why have them repeat the assessment each time it occurs?

  1. Complaint Analysis and Quality Monitoring: Analyze all complaints for certain time period (complaint trending)
  2. Complaint Analysis and Quality Monitoring: Analyze all complaints for a certain product (complaint trending)
  3. Complaint Analysis and Quality Monitoring: Communicate your analysis to the rest of the company through clearly written reports, visual graphs and nicely designed presentations (often during a Management Review)

Jake Walton Headshot

Jake Walton is the Vice President of Quality, Compliance, and Privacy at a leading software company with nearly 20 years of experience across global regulatory, security, and privacy frameworks. His expertise includes FDA regulations (21 CFR Parts 11, 58, 210, 211 and 820) and ISO standards such as 9001, 27001, and 42001.

He leads enterprise-wide programs in quality, AI governance, and information security, aligning AI systems with frameworks like the EU AI Act, ISO/IEC 42001, and the OECD AI Principles. Concurrently, he oversees quality, security, privacy controls based on ISO 9001, ISO 27001, ISO 27701, FedRAMP, NIST 800-53, GDPR, and CCPA to ensure innovation is compliant, secure, and trustworthy.

Jake has led over 350 external audits from customers and authorities including the FDA, MHRA, TGA, Taiwan FDA, and the German Health Authority. A regular speaker at industry conferences, he champions ethical and compliant innovation in technology. He is passionate about helping organizations build ethical, secure, and scalable systems that align innovation with compliance.


[ { "key": "fid#1", "value": ["GxP Lifeline Blog"] } ]