Clause 8.1.4.2 is about contractors and the controls needed to control activities that impact your organization, the contractors’ workers and other interested parties in the workplace. Clause 8.1.4.3 is about outsourcing and ensuring that the arrangement and control for outsourcing are aligned with legal requirements and OH&S outcomes. The difference between these two may seem subtle, but if you look at the definition of contractor in clause 3.7 it becomes more clear; in the note for contractor it gives an example of construction activities.
So, the requirements are different because contractors are very often providing services in your facility (such as construction, electrical, plumbing, etc.) and as such the ability of the contractor to directly affect your workplace health & safety is much greater. You also need to worry about the health & safety rules that are being followed by your contractor employees when they ar e on your site.
By comparison outsourced services (such as computer services, accounting, etc.) can often be done away from your workplace and as such have less of an effect on your workplace health & safety. This means the controls for these services do not necessarily need to be as thorough. The standard separates these two types of externally provided services so that the requirements can be more clearly stated.
Non-EU based company blocking EU users by IP while still offering services in EU
It is not the same thing. If you use a VPN just for the sole purpose of trying to bypass the EUGDR or other such means to cheat your way out of compliance, then this is definitely going to work. However, if you genuinely don`t know where your website comes from and you are not knowingly targeting or monitoring individuals in the Union, then you should be bound by the EU GDPR. I hope this is more clear now, please try to read my responses in the right context.
How long to keep prosthesis product in the even of knee transplant
Answer:
The Standard does not state how long a product should be kept. Generally, it should follow applicable regulatory guidelines or the projected useful life of the medial device depending on whichever is the longest. In this case, there should be documented records for traceability of the prosthesis in case of any field safety notice and recall.
GDPR responsibilities for small web design business
Answer:
My guess is that you are building websites for your clients thus, your clients will be the data controllers as regards to the personal data of the website users/visitors. In this case one of your main duties in terms of privacy is building the website as to allow your customers to comply with the provisions of the GDPR - this means, among other things, to provide a way to your customer to provide Privacy Notices to their visitors/users, capture and store the consent, allow personal data to be delet ed when no longer needed or anonymized.
Yes, it results in a non-conformity. And the auditor can even consider it as a major non-conformity. With ISO 9001:2015 there is no longer the possibility for voluntary exclusion of a clause. Within the scope of the quality management system of the organization all applicable clauses must be considered.
Each auditor has autonomy to devise the best way to audit a particular clause of the standard. For example, I could ask:
* Can your organization evidence the determination of what knowledge is necessary for performing a function relevant for achieving process performance and/or products and services conformity?
* Can your organization evidence how that knowledge is kept alive and is shared when needed? Can be a database, can be Work Instructions, can be reports, can be sharing information meetings.
* Can your organization evidence actions to prevent knowledge loss? For example, today, I visited a company that has only one person able to perform an important task. I ask them what if the person is sick or leaves the company?
* Can your organization evidence the knowledge transmission when someone starts in a function?
* Can your organization evidence routines to be aware of new knowledge? Subscription of technical magazines? Regu lar meetings with suppliers? Partnerships with customers and/or universities? Regular participation at seminars and conferences?
It is sufficient to have just a single set of Quality Management System in place to meet the different regulatory requirements. Any devices intended for import into the States has to comply with the requirements of FDA 820 depending on the classification and registration route of the device.
Answer:
ISO 9001:2015 does not specify any particular retention period for records. I have four rules that I follow to guide decisions about retention periods:
1. Is it required by law? If required by law, we have to keep records as long as law determines (as a minimum);
2. Is it required by a contract with customers? If required by a contract, we have to keep records as long as the contract determines (as a minimum);
3. Is it useful to track changes or evolution along time? If that is the case, I recommend keeping records for 4 years to ensure that the organizations keep a memory that always includes the totality of the 3-years certification cycle;
4. All other records can be kept for one year.
The following material will provide you information about documented information control:
Quality objectives are overall goals or targets stated by the organization in order to achieve improvement within the QMS. These quality objectives can be measured by the KPI´s which are individual or specific activities defined in order to monitor and measure a stablished target/goal. Usually most quality objectives are supported by many KPI´s. For example, an objective can be increasing turnaround by 5% while KPI´s could be increasing sales activities by 8% and reducing bussiness costs by 5%.
You need to keep in mind that while quality objectives are a mandatory requirement in ISO 9001:2015, KPI´s are just optional.
Quality Plan is a list of arrangements needes for the creation of a product or serviec including the necessary tools, process steps, measurement points and other information.
These materials can help you to understand the differences between objectives, KPIs and a Quality Plan:
According to ISO 9001:2015 getting calibration from ISO 17025 is not a requirement. However, all monitoring and measurement equipment used for product and process verification must be controlled and calibrated against national or international traceable standards at specified intervals, so basically you can decide which standard best fits your needs, but where such standard does not exist you need to record what was used
This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.
If you decline, your information won't be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.