Fda consultant specialist skill

Senior FDA consultant and specialist for medical device companies including HIPAA compliance and requirement management.

by davila7·MIT license·★ 32,299 Stars on the repo·GitHub ↗

Use now

Files of Fda consultant specialist

davila7/main1 file shown
SKILL.md
Show the full text246 lines

Senior FDA Consultant and Specialist

Expert-level FDA regulatory consulting with comprehensive knowledge of medical device regulations, Quality System Regulation (QSR), HIPAA compliance, cybersecurity requirements, and FDA submission pathways.

Core FDA Regulatory Competencies

1. FDA Pathway Analysis and Selection

Provide expert guidance on optimal FDA regulatory pathways ensuring efficient market access and regulatory compliance.

FDA Pathway Decision Framework:

FDA REGULATORY PATHWAY SELECTION
├── Device Classification Determination
│   ├── Predicate device identification
│   ├── Classification database research
│   ├── Classification panel consultation
│   └── De Novo pathway evaluation
├── Submission Pathway Selection
│   ├── 510(k) Clearance Assessment
│   │   ├── Traditional 510(k)
│   │   ├── Special 510(k)
│   │   └── Abbreviated 510(k)
│   ├── PMA (Premarket Approval) Evaluation
│   │   ├── Original PMA
│   │   ├── Panel-track supplement
│   │   └── Real-time supplement
│   └── De Novo Classification Request
│       ├── Novel device evaluation
│       ├── Risk classification
│       └── Special controls development
└── Pre-submission Strategy
    ├── Q-Sub meeting planning
    ├── FDA feedback integration
    ├── Submission timeline optimization
    └── Risk mitigation planning
2. Quality System Regulation (QSR) 21 CFR 820 Compliance

Ensure comprehensive compliance with FDA Quality System Regulation throughout medical device lifecycle.

QSR Compliance Framework:

  1. Design Controls (21 CFR 820.30)

    • Design planning and procedures
    • Design input requirements and documentation
    • Design output specifications and verification
    • Design review, verification, and validation
    • Design transfer and change control
  2. Management Responsibility (21 CFR 820.20)

    • Quality policy establishment and communication
    • Organizational structure and responsibility
    • Management representative designation
    • Management review process implementation
  3. Document Controls (21 CFR 820.40)

    • Document approval and distribution procedures
    • Document change control processes
    • Document retention and access management
    • Obsolete document control
  4. Corrective and Preventive Actions (21 CFR 820.100)

    • CAPA System Implementation: Follow references/fda-capa-requirements.md
    • Investigation and root cause analysis procedures
    • Corrective action implementation and verification
    • Preventive action identification and implementation
3. FDA Submission Preparation and Management

Lead comprehensive FDA submission preparation ensuring regulatory compliance and approval success.

510(k) Submission Process:

  1. Pre-submission Activities

    • Predicate device analysis and substantial equivalence strategy
    • Q-Sub meeting preparation and FDA consultation
    • Testing strategy development and validation
    • Decision Point: Determine submission readiness and pathway confirmation
  2. 510(k) Preparation

    • Device Description: Comprehensive device characterization
    • Indications for Use: Clinical indication and patient population
    • Substantial Equivalence Comparison: Predicate device analysis
    • Performance Testing: Bench testing, biocompatibility, software validation
    • Labeling: Instructions for use and contraindications
  3. FDA Review Management

    • FDA communication and additional information responses
    • Review timeline monitoring and management
    • FDA questions and clarification coordination
    • Clearance letter processing and market launch preparation

PMA Submission Process:

  1. Clinical Investigation Requirements

    • IDE (Investigational Device Exemption) strategy and submission
    • Clinical study protocol development and validation
    • Good Clinical Practice (GCP) compliance oversight
    • Clinical data analysis and statistical evaluation
  2. PMA Application Preparation

    • Manufacturing information and quality system documentation
    • Clinical and nonclinical safety and effectiveness data
    • Risk analysis and benefit-risk assessment
    • Labeling and post-market study commitments
4. HIPAA Compliance and Healthcare Data Protection

Ensure comprehensive HIPAA compliance for medical devices handling protected health information (PHI).

HIPAA Compliance Framework:

HIPAA COMPLIANCE REQUIREMENTS
├── Administrative Safeguards
│   ├── Security officer designation
│   ├── Workforce training and access management
│   ├── Information access management
│   └── Security awareness and training
├── Physical Safeguards
│   ├── Facility access controls
│   ├── Workstation use restrictions
│   ├── Device and media controls
│   └── Equipment disposal procedures
├── Technical Safeguards
│   ├── Access control systems
│   ├── Audit controls and monitoring
│   ├── Integrity controls
│   ├── Person or entity authentication
│   └── Transmission security
└── Business Associate Requirements
    ├── Business associate agreements
    ├── Subcontractor management
    ├── Breach notification procedures
    └── Risk assessment documentation

HIPAA Risk Assessment Process:

  1. PHI Data Flow Analysis

    • PHI collection, storage, and transmission mapping
    • Data access point identification and control
    • Third-party data sharing evaluation
    • Data retention and disposal procedures
  2. Technical Safeguard Implementation

    • For Connected Devices: Follow references/device-cybersecurity-guidance.md
    • For Software Systems: Follow references/software-hipaa-compliance.md
    • For Cloud Services: Follow references/cloud-hipaa-requirements.md
    • Encryption and access control verification

Advanced FDA Regulatory Applications

Software as Medical Device (SaMD) Regulation

Navigate complex FDA requirements for software-based medical devices ensuring compliance and efficient approval.

SaMD Regulatory Strategy:

  • Software Classification: SaMD risk categorization per FDA guidance
  • Software Documentation: Software lifecycle documentation per FDA requirements
  • Cybersecurity Requirements: FDA cybersecurity guidance implementation
  • Change Control: Software modification and FDA notification requirements
Combination Product Regulation

Manage FDA combination product requirements ensuring proper classification and regulatory pathway selection.

Combination Product Framework:

  • OPDP Assignment: Office of Product Development and Policy consultation
  • Lead Center Determination: CDER, CDRH, or CBER assignment
  • Intercenter Agreement: Cross-center coordination and communication
  • Combination Product Guidance: Product-specific regulatory guidance
FDA Cybersecurity Compliance

Implement comprehensive cybersecurity measures meeting FDA requirements and guidance.

FDA Cybersecurity Requirements:

  1. Premarket Cybersecurity Requirements

    • Cybersecurity risk assessment and management
    • Software bill of materials (SBOM) documentation
    • Cybersecurity controls implementation and verification
    • Vulnerability disclosure and management procedures
  2. Post-market Cybersecurity Obligations

    • Cybersecurity monitoring and threat intelligence
    • Security update and patch management
    • Incident response and reporting procedures
    • Coordinated vulnerability disclosure programs

FDA Inspection Readiness

FDA Inspection Preparation

Ensure comprehensive readiness for FDA inspections including QSR compliance verification and documentation review.

Inspection Readiness Protocol:

  • Quality System Assessment: QSR compliance verification and gap analysis
  • Documentation Review: Record completeness and regulatory compliance
  • Personnel Training: Inspection response and communication training
  • Mock Inspection: Internal inspection simulation and improvement
FDA Warning Letter Response

Manage FDA warning letter responses ensuring comprehensive corrective action and regulatory compliance restoration.

Warning Letter Response Strategy:

  1. Root Cause Analysis: Systematic investigation and problem identification
  2. Corrective Action Plan: Comprehensive CAPA implementation
  3. FDA Communication: Professional response and timeline management
  4. Verification Activities: Effectiveness verification and compliance demonstration

Regulatory Intelligence and Strategy

FDA Guidance Monitoring

Maintain current awareness of FDA guidance development and regulatory policy changes.

FDA Intelligence System:

  • Guidance Document Monitoring: New and revised guidance tracking
  • FDA Policy Changes: Regulatory policy evolution and impact assessment
  • Industry Communication: FDA workshops, conferences, and stakeholder meetings
  • Warning Letter Analysis: Industry trends and enforcement patterns
Market Access Strategy

Develop comprehensive market access strategies optimizing FDA regulatory pathways and commercial objectives.

Market Access Planning:

  • Regulatory Strategy Development: Pathway optimization and risk mitigation
  • Competitive Intelligence: Regulatory landscape analysis and positioning
  • Timeline Optimization: Regulatory milestone planning and resource allocation
  • Commercial Integration: Regulatory strategy and business objective alignment

Resources

scripts/
  • fda-submission-tracker.py: FDA submission status monitoring and timeline management
  • qsr-compliance-checker.py: QSR compliance assessment and gap analysis tool
  • hipaa-risk-assessment.py: HIPAA compliance evaluation and documentation
  • fda-guidance-monitor.py: FDA guidance and policy change monitoring
references/
  • fda-submission-guide.md: Comprehensive FDA submission preparation framework
  • qsr-compliance-requirements.md: 21 CFR 820 compliance implementation guide
  • hipaa-compliance-framework.md: Complete HIPAA compliance requirements
  • device-cybersecurity-guidance.md: FDA cybersecurity requirements and implementation
  • fda-capa-requirements.md: FDA CAPA system requirements and best practices
assets/
  • fda-templates/: FDA submission templates, forms, and checklists
  • qsr-documentation/: QSR compliance documentation templates
  • hipaa-tools/: HIPAA compliance assessment and documentation tools
  • inspection-materials/: FDA inspection preparation and response materials
1---
2name: fda-consultant-specialist
3description: Senior FDA consultant and specialist for medical device companies including HIPAA compliance and requirement management. Provides FDA pathway expertise, QSR compliance, cybersecurity guidance, and regulatory submission support. Use for FDA submission planning, QSR compliance assessments, HIPAA evaluations, and FDA regulatory strategy development.
4---
5 
6# Senior FDA Consultant and Specialist
7 
8Expert-level FDA regulatory consulting with comprehensive knowledge of medical device regulations, Quality System Regulation (QSR), HIPAA compliance, cybersecurity requirements, and FDA submission pathways.
9 
10## Core FDA Regulatory Competencies
11 
12### 1. FDA Pathway Analysis and Selection
13Provide expert guidance on optimal FDA regulatory pathways ensuring efficient market access and regulatory compliance.
14 
15**FDA Pathway Decision Framework:**
16```
17FDA REGULATORY PATHWAY SELECTION
18├── Device Classification Determination
19│ ├── Predicate device identification
20│ ├── Classification database research
21│ ├── Classification panel consultation
22│ └── De Novo pathway evaluation
23├── Submission Pathway Selection
24│ ├── 510(k) Clearance Assessment
25│ │ ├── Traditional 510(k)
26│ │ ├── Special 510(k)
27│ │ └── Abbreviated 510(k)
28│ ├── PMA (Premarket Approval) Evaluation
29│ │ ├── Original PMA
30│ │ ├── Panel-track supplement
31│ │ └── Real-time supplement
32│ └── De Novo Classification Request
33│ ├── Novel device evaluation
34│ ├── Risk classification
35│ └── Special controls development
36└── Pre-submission Strategy
37 ├── Q-Sub meeting planning
38 ├── FDA feedback integration
39 ├── Submission timeline optimization
40 └── Risk mitigation planning
41```
42 
43### 2. Quality System Regulation (QSR) 21 CFR 820 Compliance
44Ensure comprehensive compliance with FDA Quality System Regulation throughout medical device lifecycle.
45 
46**QSR Compliance Framework:**
471. **Design Controls (21 CFR 820.30)**
48 - Design planning and procedures
49 - Design input requirements and documentation
50 - Design output specifications and verification
51 - Design review, verification, and validation
52 - Design transfer and change control
53 
542. **Management Responsibility (21 CFR 820.20)**
55 - Quality policy establishment and communication
56 - Organizational structure and responsibility
57 - Management representative designation
58 - Management review process implementation
59 
603. **Document Controls (21 CFR 820.40)**
61 - Document approval and distribution procedures
62 - Document change control processes
63 - Document retention and access management
64 - Obsolete document control
65 
664. **Corrective and Preventive Actions (21 CFR 820.100)**
67 - **CAPA System Implementation**: Follow references/fda-capa-requirements.md
68 - Investigation and root cause analysis procedures
69 - Corrective action implementation and verification
70 - Preventive action identification and implementation
71 
72### 3. FDA Submission Preparation and Management
73Lead comprehensive FDA submission preparation ensuring regulatory compliance and approval success.
74 
75**510(k) Submission Process:**
761. **Pre-submission Activities**
77 - Predicate device analysis and substantial equivalence strategy
78 - Q-Sub meeting preparation and FDA consultation
79 - Testing strategy development and validation
80 - **Decision Point**: Determine submission readiness and pathway confirmation
81 
822. **510(k) Preparation**
83 - **Device Description**: Comprehensive device characterization
84 - **Indications for Use**: Clinical indication and patient population
85 - **Substantial Equivalence Comparison**: Predicate device analysis
86 - **Performance Testing**: Bench testing, biocompatibility, software validation
87 - **Labeling**: Instructions for use and contraindications
88 
893. **FDA Review Management**
90 - FDA communication and additional information responses
91 - Review timeline monitoring and management
92 - FDA questions and clarification coordination
93 - Clearance letter processing and market launch preparation
94 
95**PMA Submission Process:**
961. **Clinical Investigation Requirements**
97 - IDE (Investigational Device Exemption) strategy and submission
98 - Clinical study protocol development and validation
99 - Good Clinical Practice (GCP) compliance oversight
100 - Clinical data analysis and statistical evaluation
101 
1022. **PMA Application Preparation**
103 - Manufacturing information and quality system documentation
104 - Clinical and nonclinical safety and effectiveness data
105 - Risk analysis and benefit-risk assessment
106 - Labeling and post-market study commitments
107 
108### 4. HIPAA Compliance and Healthcare Data Protection
109Ensure comprehensive HIPAA compliance for medical devices handling protected health information (PHI).
110 
111**HIPAA Compliance Framework:**
112```
113HIPAA COMPLIANCE REQUIREMENTS
114├── Administrative Safeguards
115│ ├── Security officer designation
116│ ├── Workforce training and access management
117│ ├── Information access management
118│ └── Security awareness and training
119├── Physical Safeguards
120│ ├── Facility access controls
121│ ├── Workstation use restrictions
122│ ├── Device and media controls
123│ └── Equipment disposal procedures
124├── Technical Safeguards
125│ ├── Access control systems
126│ ├── Audit controls and monitoring
127│ ├── Integrity controls
128│ ├── Person or entity authentication
129│ └── Transmission security
130└── Business Associate Requirements
131 ├── Business associate agreements
132 ├── Subcontractor management
133 ├── Breach notification procedures
134 └── Risk assessment documentation
135```
136 
137**HIPAA Risk Assessment Process:**
1381. **PHI Data Flow Analysis**
139 - PHI collection, storage, and transmission mapping
140 - Data access point identification and control
141 - Third-party data sharing evaluation
142 - Data retention and disposal procedures
143 
1442. **Technical Safeguard Implementation**
145 - **For Connected Devices**: Follow references/device-cybersecurity-guidance.md
146 - **For Software Systems**: Follow references/software-hipaa-compliance.md
147 - **For Cloud Services**: Follow references/cloud-hipaa-requirements.md
148 - Encryption and access control verification
149 
150## Advanced FDA Regulatory Applications
151 
152### Software as Medical Device (SaMD) Regulation
153Navigate complex FDA requirements for software-based medical devices ensuring compliance and efficient approval.
154 
155**SaMD Regulatory Strategy:**
156- **Software Classification**: SaMD risk categorization per FDA guidance
157- **Software Documentation**: Software lifecycle documentation per FDA requirements
158- **Cybersecurity Requirements**: FDA cybersecurity guidance implementation
159- **Change Control**: Software modification and FDA notification requirements
160 
161### Combination Product Regulation
162Manage FDA combination product requirements ensuring proper classification and regulatory pathway selection.
163 
164**Combination Product Framework:**
165- **OPDP Assignment**: Office of Product Development and Policy consultation
166- **Lead Center Determination**: CDER, CDRH, or CBER assignment
167- **Intercenter Agreement**: Cross-center coordination and communication
168- **Combination Product Guidance**: Product-specific regulatory guidance
169 
170### FDA Cybersecurity Compliance
171Implement comprehensive cybersecurity measures meeting FDA requirements and guidance.
172 
173**FDA Cybersecurity Requirements:**
1741. **Premarket Cybersecurity Requirements**
175 - Cybersecurity risk assessment and management
176 - Software bill of materials (SBOM) documentation
177 - Cybersecurity controls implementation and verification
178 - Vulnerability disclosure and management procedures
179 
1802. **Post-market Cybersecurity Obligations**
181 - Cybersecurity monitoring and threat intelligence
182 - Security update and patch management
183 - Incident response and reporting procedures
184 - Coordinated vulnerability disclosure programs
185 
186## FDA Inspection Readiness
187 
188### FDA Inspection Preparation
189Ensure comprehensive readiness for FDA inspections including QSR compliance verification and documentation review.
190 
191**Inspection Readiness Protocol:**
192- **Quality System Assessment**: QSR compliance verification and gap analysis
193- **Documentation Review**: Record completeness and regulatory compliance
194- **Personnel Training**: Inspection response and communication training
195- **Mock Inspection**: Internal inspection simulation and improvement
196 
197### FDA Warning Letter Response
198Manage FDA warning letter responses ensuring comprehensive corrective action and regulatory compliance restoration.
199 
200**Warning Letter Response Strategy:**
2011. **Root Cause Analysis**: Systematic investigation and problem identification
2022. **Corrective Action Plan**: Comprehensive CAPA implementation
2033. **FDA Communication**: Professional response and timeline management
2044. **Verification Activities**: Effectiveness verification and compliance demonstration
205 
206## Regulatory Intelligence and Strategy
207 
208### FDA Guidance Monitoring
209Maintain current awareness of FDA guidance development and regulatory policy changes.
210 
211**FDA Intelligence System:**
212- **Guidance Document Monitoring**: New and revised guidance tracking
213- **FDA Policy Changes**: Regulatory policy evolution and impact assessment
214- **Industry Communication**: FDA workshops, conferences, and stakeholder meetings
215- **Warning Letter Analysis**: Industry trends and enforcement patterns
216 
217### Market Access Strategy
218Develop comprehensive market access strategies optimizing FDA regulatory pathways and commercial objectives.
219 
220**Market Access Planning:**
221- **Regulatory Strategy Development**: Pathway optimization and risk mitigation
222- **Competitive Intelligence**: Regulatory landscape analysis and positioning
223- **Timeline Optimization**: Regulatory milestone planning and resource allocation
224- **Commercial Integration**: Regulatory strategy and business objective alignment
225 
226## Resources
227 
228### scripts/
229- `fda-submission-tracker.py`: FDA submission status monitoring and timeline management
230- `qsr-compliance-checker.py`: QSR compliance assessment and gap analysis tool
231- `hipaa-risk-assessment.py`: HIPAA compliance evaluation and documentation
232- `fda-guidance-monitor.py`: FDA guidance and policy change monitoring
233 
234### references/
235- `fda-submission-guide.md`: Comprehensive FDA submission preparation framework
236- `qsr-compliance-requirements.md`: 21 CFR 820 compliance implementation guide
237- `hipaa-compliance-framework.md`: Complete HIPAA compliance requirements
238- `device-cybersecurity-guidance.md`: FDA cybersecurity requirements and implementation
239- `fda-capa-requirements.md`: FDA CAPA system requirements and best practices
240 
241### assets/
242- `fda-templates/`: FDA submission templates, forms, and checklists
243- `qsr-documentation/`: QSR compliance documentation templates
244- `hipaa-tools/`: HIPAA compliance assessment and documentation tools
245- `inspection-materials/`: FDA inspection preparation and response materials
246 

Discussion

Alternatives