Private-Label Dental Chair Distributor: Legal Manufacturer With a Narrow ISO 13485 Scope
You are the quality manager for a 25-person distributor that sells dental chair units under its own brand name. Design and production are performed by a contract manufacturer in another country. The distributor holds the CE certificate and is named as legal manufacturer on the label; the label also states 'Manufactured for [distributor]'. Its ISO 13485 certificate scope currently reads only 'distribution of dental equipment'. The contract manufacturer is ISO 13485 certified but has never been audited by the distributor, and no quality agreement defines change notification. Post-market surveillance consists of a spreadsheet complaint log with no trending. Last month the contract manufacturer initiated a field safety corrective action for a component; the distributor learned about it through a LinkedIn post. Management believes the current certification scope is sufficient because the distributor does not design or manufacture.
1. Does the distributor's narrow certification scope match its legal manufacturer responsibilities? Explain the ISO 13485 principles involved.
Read the worked answer
The scope is too narrow for the actual role. A legal manufacturer that places a device on the market under its own name retains responsibility for the device even when design and production are outsourced. ISO 13485 allows processes to be outsourced, but 4.1 requires control over outsourced processes, and the organization cannot exclude responsibility for meeting customer and regulatory requirements. The certificate scope should reflect the activities the distributor actually controls, such as specification setting, supplier control, labeling, post-market surveillance and regulatory reporting. Claiming only 'distribution' while acting as legal manufacturer creates a mismatch between the scope and the label. The distributor should review its quality manual, scope statement and outsourcing arrangements. If design is truly performed entirely by the contract manufacturer, it may justify exclusion of 7.3, but it must still control design changes that affect the device. Production may be outsourced, but 7.4 and 7.5 controls remain.
2. What supplier controls should the distributor establish over the contract manufacturer?
Read the worked answer
The contract manufacturer is a critical supplier and should be controlled under 7.4.1 through a risk-based evaluation, approval, monitoring and re-evaluation. A written quality agreement should define responsibilities for specifications, change notification, deviations, batch records, complaints, CAPA, sterilization or calibration where relevant, and regulatory communications. The distributor should conduct an audit or documented desk assessment, not rely only on the contract manufacturer's ISO 13485 certificate. Because the distributor is the legal manufacturer, it needs access to records that demonstrate conformity and traceability. Change notification is essential: the field safety corrective action should have been communicated before or at initiation, not discovered on LinkedIn. Require the contract manufacturer to notify the distributor of component changes, process changes, adverse events and field actions. Maintain an approved supplier list, record evaluation results and define escalation when the supplier fails to notify.
3. How should post-market surveillance and field safety corrective actions be handled?
Read the worked answer
Post-market surveillance should be a defined process, not a passive spreadsheet. Under 8.2.1 and 8.2.2, the distributor should collect feedback, handle complaints, trend data and feed information into risk management and CAPA. Under 8.2.3, it needs a procedure for advisory notices and reporting to regulatory authorities. The field safety corrective action shows the current process is inadequate: the distributor learned through a social media post and may not have met its reporting obligations. Establish a direct notification channel with the contract manufacturer, define who evaluates reportability, and keep records of decisions. For this event, obtain the technical investigation, assess affected devices in the field, notify customers if required, and verify completion of the corrective action. Review the complaint log for related signals. Management review should include post-market data and field actions. The distributor should also test the process through an internal audit or dry run.