Some system components on the part lists were not depicted on the [redacted] drawings of the water purification systems installed at the [redacted] dialysis sites. Your computer software used to perform the [redacted] calculations has not been validated.
View the original warning letter.
Purchase software specific to contact lens firms, which has quality system modules. You stated that you had purchased the software and planned to have it installed by January 2009, with implementation and validation within 5 to 6 months. However, you did not provide any documentation regarding the software system, the validation plan, or your firm’s plan to train personnel on the use of the system.
View the original warning letter.
Failure to establish written procedures for production and process control designed to assure that the drug products have the identity, strength, quality, and purity they purport or are represented to possess [21 CFR § 211.100(a)]. For example, your firm’s automated packaging line processes and their respective software systems have not been validated .
View the original warning letter.
“Specifically, your firm has not conducted quality audits and established adequate procedures for … acceptance activities and computer software validation … your firm has not established written procedures describing how it evaluates, verifies or validates, documents, and approves design changes. Failure to validate software used as part of production and quality system for its intended use according to an established protocol, and failure to document the results of the software validation, as required by 21 C.F.R. § 820.70(i). FDA 483 Item 8. Specifically, your firm has not maintained documentation of the validation of the computer software used to (a) receive encrypted patient treatment data and decrypt/encrypt it; (b) convert decrypted patient treatment data into […] codes that are converted into […] codes that are then sent to your contract manufacturer’s […] milling machine to produce the compensators.”
View the original warning letter.
Failure to have a validated and secure computerized system. Additionally, there were no written protocols to assign levels of responsibilities for the system. It was noted that the [redacted] instrument model [redacted] used for the analysis of [redacted] failed to have password control for the analysts and the supervisor. It was observed that the data stored on the computer can be deleted, removed, transferred, renamed or altered. While your firm’s management stated that they would like to implement certain improvements in order to establish a security system, no documentation or commitment has been provided. Please note that computerized systems should have sufficient controls to prevent unauthorized access or changes to data. There should be controls to prevent data omissions and assure back-up. There should be a record of any data change made, the previous entry, who made the change, and when the change was made.
View the original warning letter.
View the original warning letter.
Appropriate controls are not exercised over computers or related systems to assure that changes in analytical methods or other control records are instituted only by authorized personnel [21 CFR 211.68(b)]. Specifically,
View the original warning letter.
View the original warning letter.
Failure to establish and maintain adequate procedures for implementing corrective and preventive action, as required by 21 CFR 820.100(a) and (b). For-example:
a. The procedure titled corrective Action Handling [redacted] was not approved and implemented to address corrective and preventive action and no established procedure was found to have been in place.
b. Microsoft 2000 Excel spreadsheet software used manufacturing has not been validated for the purpose of generating a worksheet for formulation of reagents. No documentation was found to establish or verify corrections made to the program.
A report dated November 11, 2002 on non-conforming material on [redacted] was filed and a possible cause for the [redacted] was given; however no documentation was provided to verify or validate the adequacy of the corrective and preventive actions.
Problems were recorded relating to the use of the new dosing/dispensing machine [redacted]; however no documentation/evidence was provided
to verify or validate the adequacy of the corrective and preventive actions.”
View the original warning letter.
Failure to validate computer software for its intended use according to an established protocol, as required by 21 CFR 820-70(i). For example:
View the original warning letter.