Inhaber der Johner Institut GmbH
The Health Insurance Portability and Accountability Act (HIPAA) is a US law that establishes requirements for processing protected health data. Institutions that collect or process these data in the USA and their subcontractors must comply with HIPAA if they want to avoid sanctions. For European companies in particular, HIPAA is a regulation that is difficult to understand…
DetailsThe MDR requires medical device manufacturers to conduct Post-Market Surveillance (PMS) and thus collect PMS data. This article is intended to help clarify the regulatory requirements manufacturers must consider when collecting these PMS data. Notably, it is intended to highlight whether manufacturers need to consult an ethics committee in Europe if the data arise from…
DetailsThe digital transformation of notified bodies will transform the medical device ecosystem over the next few years. This article describes
Practical guidance based on the experience of the Johner Institute, Oliver Hilgers, and Stefan Bolleininger The discussion about class I software continues to rage. This article provides guidance regarding the MDR rules for the classification of medical software.
DetailsRegulators still publish laws and regulations as texts. Just as it has been for thousands of years. Regulation as Code represents a radical paradigm shift away from this practice. Is it possible to transform laws into algorithms? Why should anyone want to do this? How should you get ready for this as a regulator, manufacturer, authority, or…
DetailsFrom 2017-2022 the FDA offered a “Precertification (Pre-Cert) Pilot Program” to specific companies for standalone software to simplify and accelerate the approval process for digital health devices. This article summarizes the most important aspects and provides a quick overview.
DetailsThreat modeling is a “mandatory” topic for all manufacturers of medical devices that contain or are software. This is because threat modeling is a structured process for the systematic analysis of IT security risks that auditors consider to be the “state of the art.”
The process FMEA (pFMEA) is a method for the systematic analysis of risks resulting from failure modes in processes, such as device production and cleaning. Laws, such as the MDR, and standards, such as ISO 13485, require medical device manufacturers to identify and control such process risks.
DetailsMore and more manufacturers are using machine learning libraries, such as scikit-learn, Tensorflow, and Keras, in their devices as a way to accelerate their research and development projects. However, not all manufacturers are fully aware of the regulatory requirements that they have to demonstrate compliance with when using machine learning libraries or how best to…
DetailsWith its Safer Technologies Program (STeP), the FDA hopes to open up a new approval pathway for manufacturers of innovative medical devices. The FDA wants patients to benefit more quickly from these innovations. In this article, you can read about the simplifications and help the FDA intends to provide for you as a manufacturer and…
Details