Skip to content
CROSSWALK

ISO 14971 §5.2

WHAT CARRIES OVER

Documented intended use specifying patient population, user profiles, use environment, and clinical indication as traceable input to hazard identification.

WHAT’S NEW

“Reasonably foreseeable misuse” is now a defined term — explicit documentation of off-label and misuse scenarios is required, not optional.

AUDIT FOCUS

Hazard-to-use traceability — every hazard in the Risk Table must trace back to a specific intended use or misuse scenario in the source document.

Maps to

ISO 14971: §5.2 Intended use and reasonably foreseeable misuse

ISO 13485: §7.3.3 Design and development inputs

Pre-QMSR Part 820: §820.30(c) Design input.

Requirement text

The manufacturer shall document the intended use of the medical device and shall also document reasonably foreseeable misuse. The intended use documentation should take into account the intended medical indication, patient population, part of the body or type of tissue interacted with, user profile, use environment, and operating principle.

ISO 14971:2019 — ISO catalogue

Why this clause exists

A hazard analysis that begins without a documented user profile and use environment is building on an unstable foundation — what counts as a foreseeable harm depends entirely on who is using the device and where. Manufacturers who skip or thin out the intended-use documentation tend to produce hazard analyses anchored only to engineering failure modes, missing the larger category of harms that arise from correct use by the wrong person, in the wrong environment, or for a slightly different purpose than intended. ISO 14971:2019 clause 5.2 formalizes this requirement because regulators observed repeatedly that post-market safety issues disproportionately trace to user-interface mismatches and off-label use patterns that were foreseeable at design time but never documented. The explicit addition of "reasonably foreseeable misuse" as a defined term in the 2019 edition signals that documenting anticipated misuse is not an admission of fault — it is a prerequisite for designing against the actual risk landscape the device will encounter in the field.

What changed

ISO 14971:2019 was a major revision reorganizing the standard from 9 to 10 clauses and moving extensive guidance material into a separate technical report (ISO/TR 24971:2020), making normative requirements clearer and more auditable.

Guidance on risk-acceptability policy moved into an informative NOTE: clause 4.2 NOTE 1 lists reducing risk as low as reasonably practicable (ALARP), as low as reasonably achievable (ALARA), and as far as possible (AFAP) without adversely affecting the benefit-risk ratio as approaches a manufacturer's policy can define. None of the three replaced the others, and the standard mandates no single one of them. Benefit-risk analysis became its own subclause (7.4) with a mandatory record, and three new definitions were added (benefit, reasonably foreseeable misuse, state of the art). Criteria for risk acceptability are a required element of the risk management plan (4.4 d)), and clause 6 evaluates risks against the criteria defined in that plan — though NOTE 4 to clause 4.4 states the plan or parts of it can be developed over time.

Post-production requirements (Clause 10) were substantially expanded into four sub-clauses (Establish, Collect, Review, Act), mandating active collection and review of post-market data rather than passive complaint handling. The overall residual risk evaluation (Clause 8) is a distinct step: the manufacturer evaluates the overall residual risk taking into account the contributions of all residual risks, in relation to the benefits of the intended use, against the method and criteria set in the plan. Clause 4.3 shifted emphasis from personnel qualifications to demonstrated competence. ISO/TR 24971:2020 (informative companion) adds Annex G (cybersecurity risk management) and Annex H (legacy device risk file remediation).

Common gaps (what we see in audits)

  • Reasonably foreseeable misuse insufficiently documentedThe 2019 edition formally defines 'reasonably foreseeable misuse' and requires it to be documented. FDA precedent (e.g., surgical mesh cases) shows that manufacturers must document and design against foreseeable misuse based on clinical trends, even when that use is explicitly 'off-label' in the instructions for use.

Related clauses

Join the waitlist to check your documents against this clause →

Further reading

A free compliance scan is coming.

No credit card. No sales call. No consultants required.

We'll notify you when the scanner launches. No spam.