FDA 21 CFR 806 Corrections and Removals

FDA CDRH’s 21 CFR Part 806 Medical Device Corrections and Removals defines requirements for reporting and record keeping related to device corrections and removals (which include software corrections and removals). The preamble specifically mentions software in one case. The excerpt follows and the full rule is attached:

“17. One comment states that a “bug list” distributed by device
manufacturers to customers advising them of problems associated with
software equipment used to run work stations could be considered a
correction to software.

A manufacturer, importer, or distributor that undertakes a
corrective or removal action for computer software that is considered a
medical device must submit a report of such action to FDA. If the
action is taken to reduce a risk to health or to remedy a violation of
the act that could present a risk to health caused by computerized
software that comes within the definition of a device, a report must be
submitted; however, it is not likely that a “bug list” would be
considered a removal. A “bug list” could be considered a correction
if it constitutes relabeling, but again, would only be reportable if it
was undertaken to reduce a risk to health or to remedy a violation of
the act that could present a risk to health.”

SoftwareCPR keywords: recall, fix.

Cybersecurity Review

Our cybersecurity experts are NESSUS Pro Licensed and can quickly remediate cybersecurity deficiencies with your medical device or digital health software.  Planning, requirements, validation, and submissions – we can assist with all.

Interested in having a conversation?  Email us to arrange a Zoom meeting or call us at +1 781-721-2921.


Corporate Office

15148 Springview St
Tampa, FL 33624
Partners located in the US (CA, FL, MA, MN), Canada, and Italy.