01 Volume PSB Gelbband
01 Volume PSB Gelbband
Copyright 2018 by
Exclusion of liability
This VDA volume is a recommendation which is free for anyone to use.
Anyone who implements it is responsible for ensuring that it is used
correctly in each case.
This VDA volume takes account of the latest state of the art at the time it
is issued. The application of the VDA recommendations does not in any
Copyright protection
This publication is protected by copyright. Its use outside the strict limits
of the copyright laws is prohibited without the permission of the VDA
and is punishable by law. This applies in particular to copying, transla-
tion, storing on microfiche, and storing or processing in electronic sys-
tems.
Translations
This publication will also be issued in other languages. The current sta-
tus must be requested from VDA QMC.
3
Preface to the first edition
Product innovation frequently results in increasing product complexity,
with simultaneous shorter development cycles. Combined with increas-
ing customer expectations in terms of the function and safety of prod-
ucts, this raises particular challenges for all companies involved.
Companies not only have to deal with new customers and their cultures,
but also with changing customer expectations and the country-specific
laws and requirements that apply to the products. Furthermore, the sen-
sitivity and connectedness of product users and authorities, and public
discussions on the issue of product integrity have increased significant-
ly.
In this context, the question arises as to which organization structures
4
From these insights, companies can develop preventive measures with
regard to internal processes, methods and tools, as well as the organi-
zation structure.
This volume provides recommendations for implementation. The ac-
companying VDA training provides a more in-depth look at the content
of this volume using real-world examples.
Conformity with these recommendations does not absolve a company
from consequences under product liability law. The requirements of this
VDA volume have no relevance in terms of liability or warranty towards
the relevant user with regard to the scope of liability and warranty.
The objective of this volume is to create a better understanding of prod-
uct safety and product conformity - combined under the term product
integrity for the purposes of this volume.
5
6
© VDA QMC Gelbband 2018 | Free version | www.vda-qmc.de/publikationen/gelbdrucke
Content
1 Introduction 9
1.1 Instructions for use 11
2 Organization of product integrity 13
2.1 Requirements for delegation of product integrity
duties 14
2.2 Qualification requirements 16
3 Product integrity over the product lifecycle 19
3.1 Determination of product integrity focus areas in the
company 23
3.2 Handling of PI requirements during the product
lifecycle 25
3.2.1 Requirements phase 26
7
5.4 Configuration management 50
5.5 Communication guidelines 51
5.6 Lessons learned 52
5.7 Special features 52
6 Glossary 53
8
1 Introduction
Every company in the supply chain has an obligation to guarantee the
safety and conformity of its products. This means that the legal regula-
tions for product integrity applicable in the relevant countries and re-
gions have to be met, and also that reasonable safety expectations from
the general public have to be satisfied.
For products that are identified as “unsafe” in the market or whose con-
formity with legal requirements is not adequate, the economic agent has
an obligation to initiate the necessary measures.
The term “product integrity” is used in this volume to refer to this obliga-
tion to ensure product safety and product conformity (Figure 1).
9
To aid readability, all roles outlined are described as functions and can
be performed by people of any gender.
10
1.1 Instructions for use
The senior management of a company has a fundamental responsibility
for the product safety and conformity of products brought into circula-
tion. Therefore, the recommended actions in this VDA volume are initial-
ly assigned to the senior management of the company.
Responsibility extends over the entire product lifecycle and the entire
supply chain. The depth of the supply chain must be documented in
contractual arrangements.
1
The meaning of the term “product” as set out in this volume has been
agreed from the perspective of the consequences of any discrepancy in
terms of safety and conformity.
11
their suppliers in the field of quality.
12
2 Organization of product integrity
The fundamental responsibility of senior management cannot be dele-
gated, but duties designed to meet this responsibility can. Responsibility
for particular duties can be delegated, provided that the competences
(for decision-making and action) are verifiably defined (e.g. in writing),
the relevant person is carefully chosen and their qualifications can be
confirmed. This kind of delegation should take place explicitly, promptly
and effectively.
A company should identify people, qualify them and assign them the
required authority to formulate and implement preventive and corrective
measures. Senior management in the affected companies must guaran-
tee that the contact person for the employees’ contact in the company is
13
2.1 Requirements for delegation of product
integrity duties
The following items must be ensured to achieve effective delegation:
14
Two examples of two-stage sub-delegation:
15
2.2 Qualification requirements
The company’s senior management is responsible for the content and
quality of the PSR qualifications. The qualification requirements and the
necessary qualification level is determined by the delegation cascade
throughout the product lifecycle.
16
Topic Content
Customer-specific (safety)
Internal company checklists
requirements
Identification of product
Internal company guidelines
safety related discrepancies
Management of safety
related product discrepan-
Internal company guidelines
cies including case conclu-
sion
17
The VDA recommends training on product integrity, which will provide
participants with the knowledge to identify and implement the appropri-
ate product integrity measures for their company.
Conformity with the content of this volume and completion of the corre-
sponding training also satisfies key requirements of IATF 16949 regard-
ing product safety and conformity.
18
3 Product integrity over the product lifecycle
Companies are responsible for the integrity of their products over the
entire product lifecycle, including the continuous risk management re-
quired.
QMS standards, for example DIN EN ISO 9001 and IATF 16949, require
companies to have a risk-based solution for defining processes and
methods.
This must be taken into account along with the relevant product re-
quirements through the development phase (design), the production
phase (manufacturing), and
the usage phase. The usage phase covers the time from sale until the
Process and handling instructions for product integrity duties result from:
19
These three product integrity duties are key elements of the product
lifecycle and must be included in the relevant corporate management
system.
Below, the VDA maturity level model is used as an example, which has
milestones and testing points for particular phase sections.
20
This determination is a risk assessment to be performed internally on
the company’s product range.
Change management
21
Example information sources are set out in Figure 4.
22
3.1 Determination of product integrity focus areas
in the company
Because of their different product ranges,companies have different
product integrity risks. The risks are selected based on assemblies,
functional groups or specifically for individual products.
Examples:
Examples of this:
For the products included in this selection, the requirement lists for
23
evaluating product integrity (PI requirement lists) are created.
This task extends over the entire product lifecycle, from design/develop-
ment through to the end of the usage period, including disposal.
24
be assigned to the products (Figure 6).
Monitoring means:
25
Presentation of results from the valid PI requirement list for ap-
proval after completion of the activity.
Result: Requirement has been fully implemented or not fully implement-
ed. If a requirement is not fully implemented, the PSR issues a request
for action to the specialist department / experts / project manager. If
these requirements are not feasible for a product approval in terms of
product integrity, the company must make a decision with support from
the internal or external experts that need to be involved.
26
During the requirements phase, the PSR supports the creation and in-
terpretation of functional and requirement specifications using lessons
learned. This ensures that insights relevant to PI are incorporated from
an early stage.
27
Examples:
During the usage phase, the PSR observes any insights from product
and market monitoring and supports, coordinates or leads any neces-
sary corrective measures.
28
3.2.5 Product monitoring
Companies must guarantee product monitoring in the field. Product
monitoring can essentially be divided into
reactive and preventive components. Reactive product monitoring in-
volves obtaining information on complaints about the product in the field,
e.g. customer complaints, guarantee claims or inquiries from authorities.
Preventive product monitoring could include, for example, targeted
analysis of possible discrepancies in the manufacturing or safeguarding
process, demand for spare parts or media research on comparable
products.
The scope of the obligations for product monitoring may differ for the
parties involved in the supply chain. In particular, the production moni-
toring obligation for the OEM relates to the entire vehicle; for suppliers it
generally only refers to the supplied product.
29
3.2.6 Market monitoring
As part of market monitoring, changed consumer expectations or habits
are monitored, along with changes in the behavior of competitors.
30
4 Recommended actions for
product discrepancies
4.1.1 Implementation of a recall management system in
the company
If the safety or conformity of a product is not ensured, suitable measures
must be taken. Involving the PSR in this is recommended. For example,
this can include an obligation to report to the authorities, a product warn-
ing, rework or a recall of the product. The aim is to protect the product
user or third parties against possible harm caused by the product or its
usage or to ensure conformity with legal requirements.
31
Affected product
Type of discrepancy
Risk evaluation
Reporter
Number of parts identified with the product discrepancy
Determination of the production volume potentially affected
The report must be made immediately when the product discrepancy is
identified, using the process defined in the company. If necessary, open
issues must be submitted promptly afterwards or updated.
32
4.3 Information flow within the supply chain
Implementation of PI measures is in the interests of the manufacturer, in
order to ensure that only safe and legally conforming products are being
used in the field. These PI measures include the company organization,
which must have clearly defined processes, duties, authorities and
competences to ensure product integrity. This approach not only relates
to the company itself, but also to the interfaces to process partners in
the supply chain.
33
© VDA QMC Gelbband 2018 | Free version | www.vda-qmc.de/publikationen/gelbdrucke
34
Table 3: Explanation of the example reporting process in Figure 9.
8 R (I) If a potential risk cannot be ruled out, the OEM must report
it to the authorities and, if affected, to its suppliers.
35
This reporting process can also be transferred to the n-tier supplier in a
similar form. Correspondingly, it reports to its respective higher-level
suppliers at all times.
The figures and procedures described in this chapter relate to the status
at the date of publication of this volume. The manufacturer must always
independently keep themselves informed of the current country-specific
reporting obligations and times.
36
4.4 Corrective measures
In addition to the general requirements of IATF 16949 (International
Automotive Task Force), the rest of chapter four describes the specific
requirements for product safety and conformity in the
automotive supply chain in the event of product discrepancies.
37
The following points provide a guideline as to what contents should be
covered in the facts analysis.
Cause
Effect
Determination
Amount affected
Country distribution
Measures
38
Which measures have been (immediate measures) or will be
(long-term solutions) adopted to enable current series production
to be carried out with no product discrepancy?
What opportunities are there for correcting the components or
vehicles that have been manufactured and/or delivered?
The process cycle should take place in a period of time and to a level of
detail that is appropriate for the situation.
39
4.6.2 Example method for RAPEX
The guidelines for management of the community system for rapid in-
formation exchange “Rapid Exchange of Information System” (RAPEX)
were defined in the European Commission’s resolution of 16/12/2009
(reference number K (2009) 9843). The description of a guideline for
risk evaluation on consumer products is an integral component of the
resolution. This guideline applies to risk evaluation of issues in the au-
tomotive industry and is summarized in the following section.
The RAPEX risk evaluation has a relatively simple structure (see Figure
11).
The groups are defined using RAPEX help tables. A RAPEX table also
shows the resulting risk. The help tables can be found on the German
Federal Institute for Occupational Safety and Health (Bundesanstalt für
Arbeitsschutz und Arbeitsmedizin - BAuA) site.
40
Figure 11: Schematic flow chart for a RAPEX risk evaluation
41
© VDA QMC Gelbband 2018 | Free version | www.vda-qmc.de/publikationen/gelbdrucke
4.7 Resolutions concerning further action
Decisions are made in the decision-making committee based on the
analysis of the specific issue. The range of options for decisions de-
pends on the role that the relevant company takes in the course of its
business activities. Examples of this are: Supplier for an OEM, supplier
with direct business (aftermarket sales), OEM, vehicle customizers. The
legal obligations of the relevant company must be considered here.
OEM
No measures required
Introduction of an appropriate internal corrective measure
Quality improvement measure (customer service measure with-
out customer notification, during next service visit)
Quality improvement measure (customer service measure with
customer notification)
Recall with customer notification and information sent to the rele-
vant authority
Report to the authorities
42
4.8 Examples
43
The company guideline specifies that the decisions in the com-
mittee must be unanimous. If an agreement is not reached, the
decision is escalated to the company management.
The committee can only take a decision if all competences are
represented. This is determined by the chair at the beginning of
each meeting.
The decision-making committee meets as required.
All documents required for this process are defined as standard-
ized forms and are stored centrally.
Storage of data, with regard to protection against tampering and
access rights, is managed internally.
44
OEM A receives leaky liquid containers in the course of its regu-
lar field monitoring and passes them to the supplier for detailed
analysis.
In the course of its analysis, the supplier identifies that a different
starting material (granulate) has been used to manufacture the
component.
The supplier verifies the results of its detailed analysis with its
subcontractors.
The supplier compiles the following information in agreement with
the subcontractors:
o Which starting material was wrongly used?
o Why was it used (cause)?
45
In the course of its fault consequence analysis, OEM A deter-
mines that potential danger could result from vehicle operation. In
its analysis, OEM B comes to the conclusion that no
safety hazard could occur. Its component is in a different, non-
critical installation situation in comparison with OEM A.
OEM B incorporates the circumstances into its regular fault elimi-
nation process.
In the case of OEM A, the circumstance process is presented to
the decision-making committee with all available information. The
decision-making committee decides further action. In the example
case, OEM A prepares the steps for a safety recall and sends the
information to the relevant authorities.
A supplier with direct business takes on the role of an OEM in its obliga-
tions for the direct business.
46
5 Examples of tools and methods
5.1 Sensitization of the organization to
product integrity
The overarching company goal must be to ensure product safety and
conformity for all sales markets. In doing so, it is necessary to regularly
check that the established company guideline is up-to-date and, if nec-
essary, to modify it. Employees must be sensitized at regular intervals in
how to correctly deal with issues potentially relevant to product integrity
and the possible consequences of improper action. Figure 12 shows
examples of issues.
Figure 12: Examples of elements and factors influencing product integrity © VDA QMC Gelbband 2018 | Free version | www.vda-qmc.de/publikationen/gelbdrucke
Product integrity must be monitored over the entire product lifecycle. For
example, the measures adopted by the company can be evaluated us-
ing PI key performance indicators.
47
PI key performance indicators should be selected by the relevant com-
pany according to its needs and used to manage product integrity within
the company.
To improve the key performance indicators, the company can use appli-
cable established methods:
Examples of these and other methods are outlined in more detail in the
VDA PSR training.
48
5.3 PSB organization or PSR duties at a glance
49
5.4 Configuration management
Documenting and archiving any evidence created in line with the com-
pany-specific guidelines is recommended.
50
5.5 Communication guidelines
Communication must take into account the company’s internal commu-
nication guidelines. Country-specific regulations, technical conditions,
and locally applicable laws must be taken into account in specific cases
(see Figure 9).
Issues relevant for product integrity are to be directed to the re-
sponsible PSR.
If no direct PSR is appointed, the information should
go to the managing director of the company.
Defining the communication partners (internal and external) is
recommended.
51
5.6 Lessons learned
The product integrity related lessons learned process must be managed
by the PSR or the PSR organization throughout the product lifecycle as
part of their duty of care. The resulting insights are to be passed on to
the relevant responsible departments for implementation. The general
principles of the lessons learned process are set out in the detail in the
VDA volume on Lessons Learned.
52
6 Glossary
53
State of the art Generally recognized technical
rules are the totality of scientific,
technical, and trade experience,
that is broadly known and has
proven correct and usable. It rep-
resents the absolute minimum
level for a product. Falling below
this limit means that the product is
classed as faulty and unsafe.
54
Line walk Checking conformity of PI related
requirements in production
55
Quality Management in the Automotive Industry
The current version of published VDA volumes regarding
quality management in the automotive industry (QAI) can
be found at http://www.vda-qmc.de.
Reference:
Verband der Automobilindustrie e.V. (VDA)
Qualitäts Management Center (QMC)
Behrenstraße 35, 10117 Berlin, Germany
Phone +49 (0) 30 8978 42-235,
Fax +49 (0) 30 8978 42-605
E-mail: info@vda-qmc.de, Internet: www.vda-qmc.de
56
57
© VDA QMC Gelbband 2018 | Free version | www.vda-qmc.de/publikationen/gelbdrucke