What the Pharmaceutical Industry Can Learn from Toyota's Recalls: 12 Lessons of What to Do and What Not to Do
The pharmaceutical and medical device industries can learn from Toyota's recalls to avoid their own "runaway" quality problems. The same quality problems that surfaced during the recall of nearly 8 million1 vehicles from the world's largest automaker have a corresponding counterpart in the pharmaceutical, biotech, and medical device industry.
The quality systems currently used in FDA-regulated industries have their origins in the military standards used in the aerospace industry and the quality management systems of the International Organization for Standardization (ISO). At the heart of any good quality program is the universal goal of making a product that is fit for its intended use, safe, and reliable, and that consistently meets product specifications and customer expectations. Consequently, there is considerable overlap in the systems used to ensure an automobile and pharmaceutical product quality.
Topics as they relate to the Toyota recalls and the corresponding pharmaceutical lessons to be learned follow:
1. Management Must Take Responsibility
Lesson for Pharma: The top executive is ultimately responsible. That is why the FDA addresses warning letters to the top executive.
2. Keep Your Quality Priorities Right and Make Them Clear
These statements suggest that the understanding of priorities and how to implement them was uneven within the organization.
Lesson for Pharma: The goals of the company—in the form of its mission statement, quality policy, and priorities—must be communicated to and understood by all employees. Proof of effective communication is the ability of each employee to paraphrase the goals of the company in his or her own words if asked.
3. The Corporate Culture of Quality Must Extend Worldwide
Lesson for Pharma: The quality management systems described in the FDA's Quality System Regulation (21 CFR 820), ISO 9001 (Quality Management System), and ISO 13485 (Quality Management System for Medical Devices) are broadly overlapping in their requirements and are applicable across international borders. Regulatory authorities do not recognize rapid growth as an excuse for non-compliance. The take-home lesson is: do not grow faster than the establishment of quality systems permit.
Furthermore, the corporation's quality responsibilities are not limited to work performed within the corporation; they extend to vendors and contact manufacturers. Therefore, vendor audits and the use of approved vendor lists are critical for success.
4. Pay Proper Attention to Complaints
Lesson for Pharma: Every complaint must be recorded and analyzed, and any complaint that involves a product specification must be investigated. Accumulating data must be analyzed for trends and preventive action must be taken to prevent a problem from getting worse.
There is a misconception in the pharmaceutical industry that some threshold number of complaints must be received before there is need for a recall. Not so. Even one valid complaint can trigger a recall. If the complaint is credible, serious, and unexpected (i.e., it does not appear in the product label), it would behoove the firm to immediately investigate, sending a technical person to the site of the complaint if necessary.
In a real life example, my quality control laboratory received a high assay on an antimicrobic raw material and a complaint was called in to the pharmaceutical company client. The next day, there were two technical representatives from the pharma company at my door—even though my laboratory was 1,200 miles away! They took the complaint seriously because a valid high assay would have a serious adverse effect on patients. As it turned out, the discrepancy in assays was attributed to a difference in testing methodologies, demonstrating the important QC lesson that you cannot separate laboratory results from the methodology used.
5. Serious Adverse Event Reporting Must Be Handled with Diligence
Lesson for Pharma: The FDA has specific regulations to handle serious adverse drug experiences on marketed products. In the case of pharmaceuticals or biological products, the recipient of a serious and unexpected adverse drug experience has 15 calendar days to report it to the FDA.6 The industry faces its greatest challenge to meet the reporting deadline because international adverse event reporting sometimes is delayed by time and holiday differences. Strict adherence to allotted review times and adequate global adverse event handling systems are essential.
6. Conduct a Thorough Situation Analysis Before Making Public Statements
Lesson for Pharma: When a major problem begins to surface, a situation analysis should be prepared to pull together all of the information and analyses for management review and action. The company's conclusions must be supported with a well-thought-out rationale that will avoid inconsistent statements. Don't get caught like a deer in the headlights, unable to respond effectively and demonstrate as clear an understanding of the problem as available data permits.
7. Persist Until You Identify the Root Cause of the Problem
Lesson for Pharma: Promptly define the problem, investigate, and get to root cause by performing a root cause analysis (RCA). If you do not get to the root cause, there cannot be an effective corrective or preventive action.
8. When Addressing a Problem, Include All Affected Products
Lesson for Pharma: Effective corrective action/preventive action (CAPA) includes addressing all other products that may be affected. For example, if one drug or one model of medical device is judged to have a deficiency, all of the drugs in that class or all medical devices in the same family must be examined as part of the investigation.
9. Don't Hesitate to Recall, but Be Prepared Before You Do It
Lesson for Pharma: The FDA has specific recall regulations regarding a firm-initiated recall.9 A recall will generate a lot of publicity, so a firm should be prepared with a solid policy and procedure to handle the details of the recall event. If not handled property, a recall can easily spin out of control. A high profile recall will have some unpleasant consequences, such as opportunists trying to cash-in. Be prepared.
The best preparation, of course, is to avoid recalls altogether by following appropriate manufacturing quality regulations.
To avoid manufacturing-related defects in drugs, FDA regulations require that companies follow current good manufacturing practices (cGMPs). The FDA's recent emphasis on bringing greater control to manufacturing through the use of process analytical technology (PAT)—in-line and on-line analytical instrumentation with software to analyze data and effect control—and improving process understanding through Quality by Design—raises the bar even further for improving manufacturing quality.10
To avoid design flaws in medical devices, the applicable regulations are the "design control" sections in FDA's Quality System Regulation (21 CFR 820), and the international quality management standards ISO 9001 and ISO 13485. Design validation is required.
New medical devices that are part of drug–device combination products are increasingly dependent on software. The FDA is sensitive to the importance of software and is increasing its scrutiny of medical device software, requiring a system-level hazard analysis and software validation before granting clearance to market.
The allegations that Toyota's problem related to software problems highlight the importance of software validation and suggest that designing in manual overrides is recommended.
10. The Company, Not the Federal Agency, is Responsible
Lesson for Pharma: We should recognize that primary responsibility for the identification and prompt handling of field problems resides with the firm. It is easy to try to blame the regulatory agency, but the regulatory body is just a check on the system, not the responsible party. That is why the FDA allows a firm to make an expeditious change in warnings or precautions in product labeling by using the "Supplement—Changes Being Effected in 30 Days" provision.11
The challenge for the FDA is to keep up with rapidly changing technology. Frankly, the greater expertise resides in private industry.
11. Know and Obey the Recordkeeping Rules
Lesson for Pharma: There are regulatory and legal requirements to maintain records for specified times and to make them available to regulatory authorities and for some court proceedings. Pharmaceutical companies must maintain records for 10 years of all adverse drug experiences known to the company, including raw data and any correspondence relating to adverse drug experiences.13 These raw data and correspondence include emails and even notes written on desk blotters. When you are putting something in writing, think through your statements carefully and avoid emotional language.
12. Conduct a Good Risk Analysis
Lesson for Pharma: FDA and ISO standards and guidelines call for risk analyses. In the lifecycle of a pharmaceutical device, the best opportunity to perform a risk analysis is at the design stage, before scale-up. One very useful tool is failure mode and effect analysis (FMEA). The FMEA technique incorporates a brainstorming session to uncover potential failures, which are then scored for severity, likelihood of occurrence, and whether there are any controls in place to detect a failure. The end result is a punch list of potential failures that require preventive actions to avoid later problems.
"We learn wisdom from failure much more than from success. We often discover what will do, by finding out what will not do; and probably he who never made a mistake never made a discovery." Samuel Smiles (1812–1904).