Medical device design and development

In short

Medical device design and development is the controlled engineering process that turns a clinical need into a safe, effective, manufacturable and legally marketable product — covering user needs, design inputs and outputs, verification and validation, risk management, regulatory approval and post-market surveillance. It matters because a device failure injures a patient directly, so the process itself is regulated: in India by the Medical Devices Rules, 2017 administered by CDSCO, and globally by ISO 13485, ISO 14971 and the IEC 60601 family. Exams (AICTE/CBCS biomedical curricula, GATE BM, university papers on "medical instrumentation and device development") ask classification, design-control stages, risk analysis and safety standards. Employers testing this include Siemens Healthineers, GE HealthCare, Philips, Medtronic, Becton Dickinson, Trivitron, Transasia, Skanray, Poly Medicure, SS Innovations, Wipro GE and the device startups around IIT Madras, Bengaluru and the four national medical device parks.

Explained

Why a regulated design process exists, and what "device" means

• A medical device is an instrument, apparatus, implant, in-vitro diagnostic, software or material intended by the manufacturer for diagnosis, prevention, monitoring, treatment or alleviation of disease, injury or disability — acting principally by physical means, not pharmacological.
• In India, notified medical devices are regulated as drugs under the Drugs and Cosmetics Act, 1940, through the Medical Devices Rules, 2017 (MDR 2017, in force from 1 January 2018). Since a 2020 notification brought *all* devices under the definition, every device requires registration/licensing, phased by risk class. A consolidated Drugs, Medical Devices and Cosmetics Bill has been drafted but, to the best of current knowledge, has not been enacted — the 1940 Act plus MDR 2017 remain the operative law.
• Regulators and bodies: CDSCO under DCGI (central licensing authority for Class C and D, and all imports); State Licensing Authority for Class A and B manufacture; Notified Bodies audit Class A/B manufacturers; MDTAG/DTAB advise; IPC Ghaziabad runs the Materiovigilance Programme of India (MvPI) for adverse-event reporting; BIS publishes Indian Standards; NPPA caps prices of scheduled devices; NABL/NABH accredit test labs and hospitals.
• Risk classification (MDR 2017, Class A → D) by invasiveness, duration of contact, energy delivery and criticality:
  • A — low: surgical dressings, tongue depressors, oxygen masks, reusable surgical instruments.
  • B — low-moderate: hypodermic needles, syringes, BP monitors, suction equipment, thermometers.
  • C — moderate-high: ventilators, dialysis machines, bone plates and screws, infusion pumps, X-ray equipment.
  • D — high: heart valves, coronary stents, implantable pacemakers and defibrillators, intraocular lenses.
• Licence forms: MD-3/MD-5 (application/licence, Class A-B manufacture, State), MD-7/MD-9 (Class C-D manufacture, Central), MD-14/MD-15 (import), MD-13 (test licence), MD-22/MD-23 (permission for clinical investigation of an investigational device). Form numbers and fees are amended periodically — verify against the current Rules.
• Essential Principles of Safety and Performance in the Rules are the Indian equivalent of the EU MDR general safety and performance requirements: conformity is usually demonstrated by compliance with harmonised IS/ISO/IEC standards.

The design and development lifecycle (design controls)

A stage-gate / V-model process; each gate needs a documented design review with an independent reviewer.

1. Need identification and concept: clinical need from users/clinicians, market and competitor study, predicate devices, patent landscape, intended use and intended user defined in writing.
2. Feasibility and planning: proof of concept, technology selection, risk class determination, regulatory pathway, design and development plan (deliverables, responsibilities, reviews).
3. Design inputs: user needs converted into complete, unambiguous, verifiable requirements — function, performance, accuracy, environment, electrical and biological safety, usability, sterility, shelf life, labelling, applicable standards. Incomplete design inputs are the single largest root cause of device recalls.
4. Design outputs: drawings, 3D models, BOM, material and component specifications, software source and build, assembly and inspection procedures, labelling and IFU — expressed so they can be verified against inputs.
5. Design verification: "did we build the device right?" — bench tests, electrical safety, EMC, biocompatibility, mechanical fatigue, software unit/integration tests, each traced to a design input.
6. Design validation: "did we build the right device?" — initial production units used in the actual or simulated use environment by the intended user; includes usability/human-factors validation and, where needed, a clinical investigation or clinical evaluation of equivalence.
7. Design transfer: translating the design into production — process validation (IQ/OQ/PQ), tooling, work instructions, inspection and test plan, operator training, supplier qualification.
8. Design changes: controlled, assessed for impact on risk, verification and regulatory filing; re-verification where required.
9. Design history file (DHF): the complete record of the design effort. Distinguish: DHF = history of the design; DMR (device master record) = the recipe for building it; DHR (device history record) = record of what was actually built for one batch/unit.
10. Post-production: installation, servicing, complaint handling, CAPA, post-market surveillance, adverse-event reporting to MvPI/CDSCO, field safety corrective action and recall.

Risk management (ISO 14971:2019) and safety analysis

• Risk = combination of probability of occurrence of harm and severity of that harm. Process: risk management plan → hazard identification → risk estimation → risk evaluation → risk control → residual risk evaluation → benefit-risk analysis → overall residual risk → production and post-production information, all recorded in a risk management file.
• Hierarchy of risk control, in this order: (1) inherently safe design; (2) protective measures in the device or manufacture (alarms, guards, interlocks, fuses); (3) information for safety (labels, IFU, training). Warnings are the weakest control and must never substitute for design.
• Tools: PHA (preliminary hazard analysis), FMEA/FMECA (bottom-up, component failure → effect), FTA (top-down from a hazard), HAZOP, hazard-traceability matrix. ISO 14971 does not endorse RPN thresholds, but industry and exams still use RPN = S × O × D.
• ALARP / "as low as reasonably practicable": risk is reduced until further reduction is disproportionate to the benefit; the 2019 edition requires an explicit benefit-risk justification for each unacceptable-but-retained risk.
• Safety concepts: single-fault safety, fail-safe versus fail-operational, redundancy, MOPP/MOOP (means of patient/operator protection — two independent means required in IEC 60601-1), essential performance.

Standards a device must satisfy

• Applied-part types: Type B (not for direct cardiac use), Type BF (floating/isolated applied part), Type CF (cardiac-floating, highest protection — ECG leads, catheter transducers). Defibrillation-proof variants add the heart symbol.
• Software as a Medical Device (SaMD): IEC 62304 class A (no injury possible), B (non-serious injury), C (death or serious injury) determines required rigour; AI/ML-based devices additionally need data-set documentation, performance monitoring and change-control plans. India has no separate statutory SaMD rule yet — such software is regulated as a device under MDR 2017; CDSCO/ICMR have issued guidance documents.
• Certification in India: CDSCO licensing is mandatory; the ICMED 13485 / ICMED Plus scheme run by QCI with AiMeD is a voluntary certification used in public procurement. BIS certification is mandatory only for devices specifically notified under a Quality Control Order — check the current order before claiming it.

Verification, validation and testing in practice

• Traceability matrix: user need → design input → design output → verification test → validation evidence. Examiners ask for this chain; auditors look for its gaps.
• Test and sample-size logic: attribute tests use confidence/reliability sampling; variable data use process capability Cp/Cpk and tolerance intervals; destructive tests (burst, tensile, fatigue) need statistically justified n.
• Process validation: IQ (installation qualification — equipment installed correctly), OQ (operating ranges, worst case), PQ (sustained performance in routine production). Needed where output cannot be fully verified by inspection — welding, moulding, sterilization, sealing.
• Sterilization and shelf life: choose EtO (heat-sensitive polymers, residual limits per ISO 10993-7), gamma/E-beam (typically 25 kGy, dose set by bioburden per ISO 11137-2), or steam (reusable instruments). Shelf life established by real-time ageing, supported by accelerated ageing (Arrhenius/Q10) plus package integrity (dye penetration, seal peel, bubble leak).
• Reliability engineering: bathtub curve (infant mortality → constant rate → wear-out), burn-in to remove early failures, MTBF/MTTF for repairable and non-repairable items, fatigue life for implants (e.g. heart valves tested to the equivalent of 200-600 million cycles, stents to 400 million, per the relevant ISO 5840 / ISO 25539 series).
• Human factors: use-error is a hazard, not a user fault. Formative studies during design, then summative/validation testing with 15 or more representative users per distinct user group, analysing critical tasks and use-related risks.

Indian ecosystem, economics and pricing

• Market and dependence: India imports a large majority of its medical device demand by value (commonly cited around 70%), with imports concentrated in imaging, implants and oncology equipment; domestic strength lies in consumables, disposables and syringes.
• Policy support: National Medical Devices Policy, 2023; PLI scheme for medical devices; Promotion of Medical Device Parks scheme supporting common facilities in four states — Himachal Pradesh, Madhya Pradesh, Tamil Nadu and Uttar Pradesh; preference to Make-in-India in government procurement.
• Price control: coronary stents and knee implants are under NPPA ceiling prices (first capped in 2017) and several devices sit in the NLEM/DPCO schedule; ceiling values are revised with WPI, so quote the current NPPA notification rather than a remembered figure. GST on most medical devices falls in the lower slabs under the 5/18/40% structure effective 22 September 2025 — confirm the HSN-specific rate.
• Costs that students underestimate: a Class C/D device needs verification testing at NABL labs, biocompatibility (often ₹10-40 lakh for a full ISO 10993 battery), clinical investigation, QMS build-up and audit — typically tens of lakhs to several crore and 3-7 years from concept to Indian approval; EU MDR or US submissions add substantially.
• Intellectual property and data: patents (Indian Patents Act, 1970 — note s.3(i) excludes methods of treatment), design registration, trademarks; clinical and patient data handling currently follows IT Act s.43A and the SPDI Rules, since the DPDP Rules, 2025 Data Fiduciary duties (notice, consent, breach intimation, erasure) apply only from 13 May 2027.
• Unique Device Identification (UDI): required by the Rules with implementation notified in phases; mandatory in the US and EU. It links a device to its production record for traceability and recall.

Key points

• Intended use - the written statement of what the device does, for whom and in what setting; it fixes the risk class, the standards and the claims that may be made.
• Design controls - the regulated sequence: planning, inputs, outputs, review, verification, validation, transfer, changes, DHF.
• Verification vs validation - verification checks outputs against inputs (built right); validation checks the device against user needs in use (right device).
• Design inputs - must be complete and verifiable; weak inputs are the dominant root cause of redesign and recall.
• DHF / DMR / DHR - history of the design / recipe to build it / record of what was built.
• Risk - severity × probability of harm; controlled in the order inherent safety → protective measures → information for safety.
• ISO 14971 - risk management process and file; requires benefit-risk justification for residual risk.
• FMEA vs FTA - bottom-up from component failures vs top-down from a chosen hazard.
• MDR 2017 classes - A, B (State licence, MD-5) and C, D (Central licence, MD-9), by invasiveness, duration and criticality.
• CDSCO, DCGI, MvPI - licensing authority, its head, and the materiovigilance programme at IPC Ghaziabad.
• ISO 13485 - device QMS standard, risk-based, more documentation-driven than ISO 9001.
• IEC 60601-1 - electrical safety; two means of protection (MOPP/MOOP), applied parts Type B, BF, CF.
• IEC 62304 - software safety classes A, B, C set the required lifecycle rigour.
• ISO 10993 - biocompatibility evaluation chosen by contact type and duration, not a fixed test list.
• Sterilization validation - SAL of 10⁻⁶ for terminally sterilized devices; D-value and bioburden set the dose or time.
• Accelerated ageing - Q10/Arrhenius gives provisional shelf life; real-time data must follow.
• Usability engineering (IEC 62366) - use-error is a design hazard; summative testing uses 15+ users per user group.
• Post-market surveillance and CAPA - complaints, adverse events, field actions feed back into design and risk files.

Formulas and examples

Example 1 — accelerated ageing for a claimed 3-year shelf life. Target real-time life = 3 years = 1,095 days. Ageing oven at T_a = 55 °C, ambient reference T_r = 25 °C, Q10 = 2.

• AAF = 2^{(55 − 25)/10} = 2³ = 8.
• Accelerated duration = 1,095 / 8 = 136.9 ≈ 137 days at 55 °C.
• So about 4.5 months of oven ageing supports a provisional 3-year claim; real-time samples must be pulled at 1, 2 and 3 years to confirm.

Example 2 — EtO/radiation-equivalent log reduction (D-value method). Average bioburden N₀ = 1 × 10³ CFU per device; required SAL = 10⁻⁶; D-value of the resistant bioindicator = 1.5 min.

• Log reduction needed = log(10³) − log(10⁻⁶) = 3 − (−6) = 9 log.
• Exposure time t = D × 9 = 1.5 × 9 = 13.5 min at the validated temperature/concentration.
• With a half-cycle overkill approach the routine cycle is twice the half-cycle, i.e. 27 min, giving margin.

Example 3 — reliability of an infusion pump over one year of use. λ = 2 × 10⁻⁵ failures/hour; continuous use t = 8,760 h.

• λt = 2 × 10⁻⁵ × 8,760 = 0.1752.
• R(1 year) = e^−0.1752 = 0.8392 → 83.9%; MTBF = 1/λ = 50,000 h (≈ 5.7 years).
• Add a redundant independent occlusion detector of the same reliability: R_parallel = 1 − (1 − 0.8392)² = 1 − 0.1608² = 1 − 0.02586 = 0.9741 → 97.4%.
• If MTTR = 24 h, availability A = 50,000 / (50,000 + 24) = 0.99952.

Example 4 — FMEA before and after a design change. Hazard: air embolism from air in an IV line. Severity S = 8, Occurrence O = 3, Detection D = 5 (10 = undetectable).

• RPN = 8 × 3 × 5 = 120, above the project action threshold of 100 → control required.
• Add an ultrasonic air-in-line sensor with alarm → D improves to 2: RPN = 8 × 3 × 2 = 48.
• Note that S stays 8: severity is a property of the harm and is reduced only by inherently safer design, not by detection. Residual risk must still be justified against benefit under ISO 14971.

Example 5 — sample size for a sterile-barrier seal-strength test. Requirement: demonstrate 99% reliability at 95% confidence with zero failures.

• n = ln(1 − 0.95)/ln(0.99) = (−2.9957)/(−0.010050) = 298.1 → n = 299 units.
• Relaxing to 95% reliability: n = (−2.9957)/ln(0.95) = (−2.9957)/(−0.051293) = 58.4 → n = 59 units — showing how steeply sample size rises with the reliability claim, which is why high-reliability claims are made on variables data (Cpk, tolerance intervals) rather than pass/fail counts.

Where it is used

• Device OEMs and R&D centres: Siemens Healthineers and Wipro GE (Bengaluru), Philips Innovation Campus, Medtronic Engineering & Innovation Centre (Hyderabad), BD, Becton, Trivitron, Skanray, Transasia, Poly Medicure, Meril (Vapi — stents, heart valves, orthopaedics) — roles in design assurance, V&V, regulatory affairs, risk management.
• Consumables and implants manufacturing: syringes, catheters, IV sets, orthopaedic implants and dental products, concentrated in Gujarat, Haryana, Tamil Nadu and Himachal Pradesh; work centred on ISO 13485 QMS, process validation and sterilization.
• Regulatory and testing services: CDSCO/State drug-control offices, Notified Bodies, NABL-accredited electrical-safety and EMC labs (ERTL, CSIR labs, SAMEER), biocompatibility and sterilization validation service providers.
• Hospitals and biomedical engineering departments: incoming inspection, electrical-safety testing, calibration, preventive maintenance, incident investigation and MvPI adverse-event reporting in AIIMS, PGIMER, Apollo, Fortis and large government hospitals.
• Startups and translational research: IIT Madras (mobility devices, prosthetic knees and standing wheelchairs), SCTIMST Thiruvananthapuram (TTK Chitra heart valve lineage, technology transfer and device testing), BIRAC/DBT-funded ventures, SS Innovations' surgical robot — where a student most directly runs the full design-control cycle.
• IVD and SaMD: RT-PCR and immunoassay platforms, point-of-care analysers, AI radiology triage (Qure.ai, Niramai) — IEC 62304 lifecycle, data-set documentation, performance monitoring.

Interview questions

• Q: What is the difference between design verification and design validation? A: Verification tests whether the design outputs meet the design inputs (bench, electrical, software tests); validation tests whether the finished device meets user needs and intended use in the real or simulated environment, with production-equivalent units.
• Q: Which document set would an auditor ask for first, and what is in each? A: The DHF (complete design record and reviews), the DMR (specifications and procedures to build it) and the DHR (what was actually built for a given lot) — plus the risk management file linked to all three.
• Q: How is a device classified under the Medical Devices Rules, 2017, and who licenses it? A: Into Class A, B, C or D by invasiveness, duration of contact, whether it is active or implantable and its criticality; Class A and B are licensed by the State Licensing Authority (Form MD-5), Class C and D by CDSCO centrally (Form MD-9).
• Q: State the hierarchy of risk control and why warnings come last. A: Inherently safe design, then protective measures in the device or manufacturing, then information for safety; warnings depend on the user reading and obeying them, so they are the least reliable control.
• Q: Can detection controls reduce severity in an FMEA? A: No — severity is a property of the harm; detection and occurrence can be reduced, severity only by changing the design so the harm itself is less serious.
• Q: What do Type B, BF and CF applied parts mean? A: Levels of protection against electric shock under IEC 60601-1: B is a non-isolated applied part not for cardiac use, BF is isolated (floating), CF is isolated with the tightest leakage limits and is required for direct cardiac contact.
• Q: What is SAL and why 10⁻⁶? A: Sterility assurance level — the probability of a viable microorganism surviving on a device; 10⁻⁶ (one in a million) is the accepted requirement for terminally sterilized devices contacting sterile tissue.
• Q: Why is accelerated ageing not sufficient to claim shelf life? A: It is a conservative model (Q10 or Arrhenius) that may not reproduce the real degradation mechanism, so it supports only a provisional claim until real-time ageing data confirm it.
• Q: When must a design change trigger re-validation and a regulatory filing? A: When it affects intended use, safety, essential performance, materials, sterilization, software safety class or the manufacturing process in a way the existing verification and validation do not cover — the risk assessment drives the decision.
• Q: What is IEC 62304 software safety classification based on? A: The severity of harm possible from a software failure after considering external risk controls — Class A (no injury), B (non-serious injury), C (death or serious injury) — which sets the required lifecycle activities.
• Q: How does post-market data feed back into design? A: Complaints, service data and adverse events reported to MvPI/CDSCO update the probability estimates in the risk file, trigger CAPA, and may require design change, labelling change or a field safety corrective action.
• Q: A competitor device already exists; does that remove the need for clinical evidence in India? A: Not automatically — clinical evidence may be met by a clinical evaluation showing equivalence to a predicate/pre-defined device with adequate data; otherwise a clinical investigation permission under the Rules is required, especially for Class C and D novel devices.

Common mistakes

• Treating design controls as paperwork added at the end instead of the process that produced the design — an auditor checks whether the DHF reflects the real sequence of reviews.
• Confusing verification with validation, or validating with prototypes rather than production-equivalent units.
• Writing design inputs as vague user wishes ("accurate", "easy to use") instead of verifiable specifications with limits and test methods.
• Using RPN as an acceptance criterion and reducing severity by adding an alarm; ISO 14971 requires a benefit-risk justification, not a number below a threshold.
• Assuming ISO 13485 certification equals approval to sell in India — CDSCO licensing is separate, and ICMED is voluntary.
• Ignoring sterilization, packaging and shelf life until design transfer, when they constrain material choice, geometry and tolerances from day one.
• Mixing units and conventions in calculations — kGy with min, Q10 with Arrhenius, hours with years in reliability — and quoting remembered NPPA ceiling prices or form numbers that have since been revised.

Related topics

Biomaterials and biocompatibility · Artificial organs and implants · Biomechanics and kinesiology · Rehabilitation engineering and assistive devices · Medical instrumentation and electrical safety · Quality management and validation in regulated manufacturing