The question you must be able to answer three years later
A manufacturer issues a field safety notice for a specific production lot of a hip stem. The regulator asks how many of those lots reached your hospital, which patients received them, and how those patients were contacted. If you can answer within a working day, your implant traceability works. If the answer requires someone to pull theatre registers, match against pharmacy issue slips, and phone the distributor for lot numbers, it does not, regardless of what your policy document says.
That single test is more useful than any checklist. It forces the record to be complete at three levels: which device, which production lot of that device, and which patient. Most hospitals hold the first reliably, the third reliably, and the second not at all. The batch or lot number is the link that makes a recall actionable, and it is the field most often left blank because the person entering the charge is billing a catalogue item, not recording a device.
Traceability is also increasingly a clinical expectation rather than only a regulatory one. Revision surgeons want to know what is already in the patient. Implant registries in orthopaedics and cardiology depend on device-level identification. And a patient who moves cities and presents elsewhere carries nothing but whatever card or discharge entry you gave them.
UDI-DI and UDI-PI, without the jargon
Unique device identification splits into two halves that do different jobs. The device identifier is the static part: it identifies the manufacturer, the model, and the specific packaging configuration. It does not change between units of the same product. Think of it as the answer to what this device is, and treat it as the key you would join to a catalogue.
The production identifier is the variable part, and it is the half that matters for recall. Depending on the device it carries some combination of lot or batch number, serial number, manufacturing date and expiry date. Two boxes of the identical model bought six months apart share a device identifier and differ in production identifier. When a manufacturer recalls, it almost never recalls a model. It recalls specific lots or serial ranges.
Practically, this means your capture requirement is not one field but two, and the second is mandatory for any implantable. A record that says the patient received a named model from a named manufacturer is a clinical record. A record that additionally carries the lot or serial and the expiry is a traceable record. The distinction sounds pedantic until the day a field safety notice names three lot numbers.
The minimum identifier set to capture per implanted device
- Manufacturer name and the device model or catalogue reference as printed on the pack
- Lot or batch number, and serial number where the device carries one
- Manufacturing date and expiry or use-before date where applicable
- Size, laterality and quantity, since a single procedure may use several components
- The import or supply licence reference of the entity that supplied it to you
What the Medical Device Rules 2017 put on the hospital
The Medical Device Rules 2017, framed under the Drugs and Cosmetics Act, classify devices by risk from Class A through Class D and govern manufacture, import, sale and distribution through CDSCO and the state licensing authorities. Most implantables sit in the higher risk classes. The rules also govern labelling, and it is from labelling that the identifiers you need actually arrive on the pack.
A hospital sits in this chain in two capacities. It buys and stocks devices, which brings sale and distribution licensing into view for the entity that supplies you and for your own pharmacy where applicable. And it uses them on patients, which brings in adverse event reporting through the Materiovigilance Programme of India coordinated by the Indian Pharmacopoeia Commission. Both capacities assume you can identify the specific unit involved.
The honest position on unique device identification in India is that implementation has been signalled and phased rather than switched on universally, and the practical requirement varies by device category and by what the manufacturer already prints. That is an argument for building your register now rather than waiting. A hospital that already captures lot and serial at the point of implant absorbs a future mandate as a configuration change. One that does not will be running a data-entry project on live theatre lists.
Capturing the identifier at the point of implant
The only reliable capture point is the operating theatre, at the moment the device is opened, by the circulating nurse or the scrub nurse. Every alternative degrades. Capture at goods receipt tells you what arrived, not what was implanted. Capture at billing tells you what was charged, which is the same thing often enough to be dangerous and different often enough to break a recall. Capture at discharge summary preparation depends on someone reading a case sheet correctly.
The workable mechanism is the peel-off label. Most implant packaging carries adhesive labels bearing the model, lot and expiry, designed to be affixed to a record. Build the theatre record around those labels: one designated page or field set, filled at the time of use, countersigned by the surgeon. Where the packaging carries a barcode or data matrix, scanning it into the implant field removes the transcription error that manual lot entry reliably produces.
The failure mode to design against is the emergency case at three in the morning where the implant comes from the loaner set a distributor representative brought in. Consignment and loaner stock is where traceability breaks in almost every hospital, because the device never passed through your stores and so never entered your item master. Require the representative to leave the labels and the supply documentation before the set leaves the premises, and make that a condition in the distributor agreement rather than a request.
Point-of-implant capture rules worth making non-negotiable
- Labels affixed at the time the device is opened, not reconstructed afterwards
- Barcode or data matrix scanned where present, rather than lot numbers typed
- Every component of a multi-part implant recorded separately with its own lot
- Explanted or discarded devices recorded with the reason, not silently dropped
- Loaner and consignment sets documented before the representative leaves
The implant register: fields, custody and retention
An implant register is a searchable list of every implanted device, keyed so you can query in both directions: given a patient, what is in them, and given a lot number, which patients hold it. That bidirectional requirement is what rules out a paper theatre register and most spreadsheet solutions, because the second query is the one you will need under time pressure and the one paper cannot answer.
Beyond the identifiers, the register needs the encounter context: patient identifier, date and time of procedure, procedure performed, operating surgeon, anatomical site and side, and the supplier the device came from. It should also carry the disposition of the device — implanted, explanted, discarded unused, returned — because a device recorded as issued but never accounted for is exactly what an assessor will pick on.
Retention is the part hospitals get wrong by underestimating. An implant may sit in a patient for decades, and the traceability record has to outlive the patient's active treatment relationship with you. Align the register's retention with your medical records retention position rather than with your stores or purchase document retention, which is typically far shorter. HealUDoc can hold implant identifiers on the encounter record so the device data ages with the clinical record rather than with the purchase file.
Fields the register needs beyond the device identifiers
- Patient identifier, procedure, date and time, surgeon and anatomical site with laterality
- Supplier or distributor and the purchase or consignment reference
- Disposition: implanted, explanted, discarded unused, or returned to supplier
- Whether an implant card or record extract was handed to the patient, and when
- Any adverse event reference raised against the device
“The register earned its keep the first time a distributor called about a lot. We ran one query, found two patients, and had both surgeons briefed before the formal notice reached us in writing.”
Running a recall traceback before you need one
Treat traceback as a drill, the way you treat fire and code blue. Pick a lot number from a device implanted eighteen months ago, hand it to the team without warning, and time how long it takes to produce the list of affected patients with contact details and treating surgeon. Do it once a quarter. The first attempt will be embarrassing and will find every gap in your capture discipline more efficiently than any audit.
The drill should not stop at the patient list. It should continue into the actions a real recall requires: identifying unimplanted stock of the affected lot and quarantining it, notifying the surgeons involved, agreeing the clinical position on whether patients need review, drafting the patient communication, and recording the whole sequence. Half of a recall response is clinical decision-making, and rehearsing only the query half leaves you unprepared for the harder part.
Record the drill results as evidence. An accreditation assessor asking about implant traceability is far more convinced by a dated drill record showing a four-hour traceback than by a policy statement claiming full traceability. It also gives you a trend: if the traceback time is not falling over successive drills, your capture process is not improving, whatever your compliance percentages say.
Building the register before it is mandated
The argument for building early is that the expensive part is not the software. It is the behaviour change in theatre, the distributor agreements covering loaner stock, and the item master discipline that gives every implantable a catalogue entry it can be recorded against. Those take a year of steady attention and cannot be compressed into the notice period of a regulatory deadline.
Start with the categories where the clinical stakes and the recall probability are highest: cardiac stents and valves, orthopaedic joint replacements, spinal hardware, pacemakers and defibrillators, intraocular lenses. Get those to full lot-level capture before extending to lower-risk implantables such as meshes and screws. A narrow register that is complete is worth considerably more than a broad register that is half filled.
Then close the loop with the patient. An implant card carrying the manufacturer, model, lot and date of implant, handed over at discharge and repeated in the discharge summary, costs almost nothing and makes the patient a second custodian of their own traceability. It is also the part that survives when the patient presents at a hospital that has never heard of you, which is ultimately what device traceability is for.
