CAPA Plan
Summary
A CAPA Plan documents your systematic approach to corrective and preventive actions when quality issues, nonconformities, or safety concerns require structured resolution. You use this plan to investigate root causes, implement corrective actions to fix immediate problems, and establish preventive actions to prevent recurrence.
Why is the CAPA Plan important?
CAPA Plans provide the foundation for continuous improvement in your quality management system by ensuring systematic investigation and resolution of problems. They demonstrate regulatory compliance, prevent recurring issues, and protect patient safety through structured problem-solving. Without effective CAPA processes, quality issues can escalate into serious incidents, regulatory violations, and market access problems. CAPA Plans also provide auditable evidence that you take quality seriously and continuously improve your processes.
Regulatory Context
Under 21 CFR Part 820.100 (Corrective and Preventive Action):
- Manufacturers must establish and maintain procedures for implementing corrective and preventive action
- Investigation of nonconforming product and quality problems must be documented
- Root cause analysis is required to identify and eliminate causes of nonconformities
- Verification of effectiveness must be documented for all CAPA activities
Special attention required for:
- Design control CAPAs affecting device safety or effectiveness
- Software-related CAPAs requiring validation of fixes
- CAPAs resulting from complaint investigations
- Integration with risk management and post-market surveillance
Under 21 CFR Part 820.100 (Corrective and Preventive Action):
- Manufacturers must establish and maintain procedures for implementing corrective and preventive action
- Investigation of nonconforming product and quality problems must be documented
- Root cause analysis is required to identify and eliminate causes of nonconformities
- Verification of effectiveness must be documented for all CAPA activities
Special attention required for:
- Design control CAPAs affecting device safety or effectiveness
- Software-related CAPAs requiring validation of fixes
- CAPAs resulting from complaint investigations
- Integration with risk management and post-market surveillance
Under EU MDR 2017/745 and ISO 13485:2016:
- Corrective action must address nonconformity causes (ISO 13485 Section 8.5.2)
- Preventive action must eliminate potential nonconformity causes (ISO 13485 Section 8.5.3)
- Management review must evaluate CAPA effectiveness (Article 10(9))
- Documentation requirements for all CAPA activities and outcomes
Special attention required for:
- CAPAs affecting CE marking or notified body oversight
- Post-market surveillance CAPAs requiring regulatory notification
- Clinical evaluation updates based on CAPA findings
- Integration with vigilance and Field Safety Corrective Actions
Guide
CAPA Initiation Criteria
Use the scoring system to determine if formal CAPA is required. Score based on input type (audit findings, customer complaints, post-market surveillance), whether the issue is systemic, involves trend analysis, has significant safety impact, or caused patient harm.
Initiate CAPA if your total score exceeds 3 points and the issue cannot be easily fixed through simple corrective measures. Don’t initiate CAPA for minor issues that can be resolved through routine change management or if existing CAPAs already address the problem.
Root Cause Analysis
Conduct thorough investigation using structured methods like Five Whys, fishbone diagrams, or fault tree analysis. Document your investigation process and findings systematically to ensure you identify true root causes rather than symptoms.
Focus on system causes rather than individual blame. Look for process failures, inadequate procedures, insufficient training, or design deficiencies that enabled the problem to occur.
Planning Corrective Actions
Address immediate problems through corrective actions that fix the specific nonconformity or issue. These actions should be implemented quickly to prevent continued problems while you develop preventive measures.
Ensure actions are proportionate to the risk and impact of the problem. Simple issues may require only procedural updates, while safety-critical problems may need comprehensive system redesign.
Planning Preventive Actions
Prevent recurrence through preventive actions that address root causes and strengthen your quality system. This may include procedure updates, training programs, design changes, or enhanced monitoring systems.
Consider broader implications by evaluating whether similar problems could occur in other areas of your organization or with other products. Implement preventive measures that address systemic vulnerabilities.
Effectiveness Verification
Plan verification activities to confirm your CAPA actions successfully resolve the problem and prevent recurrence. This may include follow-up audits, data analysis, customer feedback monitoring, or performance testing.
Set measurable criteria for success and establish timelines for verification activities. Document your verification plan as part of the CAPA to ensure accountability and completeness.
Example
Scenario: Your post-market surveillance reveals a pattern of user complaints about your diabetes monitoring app providing inconsistent glucose readings. Investigation shows the issue affects 5% of users and correlates with specific smartphone models. You need to develop a CAPA plan to address this systematic software compatibility problem.
Example CAPA Plan
Document ID: CAPA-2024-002
CAPA Title and Number
Criteria | Information |
---|---|
CAPA Title | Software Compatibility Issue - Inconsistent Glucose Readings on Specific Smartphone Models |
CAPA Number | CAPA-2024-002 |
CAPA Qualification Score
Category | Scoring | Score |
---|---|---|
Input Type | Customer complaints (+2) | 2 |
Systemic | Systemic issue (+2) | 2 |
Trend Analysis | Result of trend analysis (+2) | 2 |
Significant Impact | Significant impact on performance (+2) | 2 |
Patient/User Harm | No direct harm (+0) | 0 |
Not Easily Fixed | Cannot be easily fixed (Disagree) | - |
Existing CAPA | No existing CAPAs cover this (Disagree) | - |
CAPA Total Score | 8 |
CAPA Initiation Decision: Initiate CAPA - Score >3 and all agree/disagree questions answered “Disagree”
CAPA Information
CAPA Information | Description |
---|---|
Source of CAPA | Post-market surveillance analysis of customer complaints received through support system over 3-month period |
Product and Version Affected | GlucoTrack Mobile App versions 2.1.0-2.1.3, affecting Samsung Galaxy S22 and Google Pixel 6 devices |
Description of Problem | Users report glucose readings varying by ±15% compared to reference meter, occurring intermittently during peak usage hours |
Description of Investigation | Analysis of 47 complaints, device logs, and compatibility testing revealed memory management issues during high CPU load conditions on affected smartphone models |
Root Cause | Inadequate memory allocation handling in glucose calculation algorithm when running on devices with specific Android memory management configurations |
Planned Actions
Corrective Actions (Immediate):
- Release hotfix version 2.1.4 with improved memory management for affected device models
- Implement additional input validation and error handling in glucose calculation module
- Add device-specific calibration parameters for Samsung Galaxy S22 and Google Pixel 6
- Issue Field Safety Notice to affected users recommending immediate app update
Preventive Actions (Long-term):
- Expand compatibility testing matrix to include top 20 smartphone models by market share
- Implement automated memory stress testing in continuous integration pipeline
- Develop device compatibility database with model-specific optimization parameters
- Enhance post-market surveillance monitoring to detect compatibility issues earlier
- Update software development procedures to require compatibility testing for all releases
Verification Activities:
- Conduct user acceptance testing with 10 affected users before hotfix release
- Monitor complaint rates for 90 days post-release to confirm issue resolution
- Perform quarterly compatibility testing with new smartphone models
- Review post-market surveillance data monthly for emerging compatibility patterns
Impact Assessment
Performance and Safety Impact: This CAPA addresses a significant performance issue affecting measurement accuracy, which is critical for diabetes management decisions. While no direct patient harm has been reported, inaccurate readings could lead to inappropriate insulin dosing. The corrective actions will restore measurement accuracy to specification levels.
Regulatory Impact: No changes to device classification or regulatory requirements. However, the Field Safety Notice must be reported to competent authorities as a Field Safety Corrective Action. Updated compatibility testing procedures will strengthen our quality management system and demonstrate enhanced post-market surveillance capabilities.