<DOC>
[106th Congress House Hearings]
[From the U.S. Government Printing Office via GPO Access]
[DOCID: f:57443.wais]


 
           Y2K AND MEDICAL DEVICES: SCREENING FOR THE Y2K BUG

=======================================================================

                             JOINT HEARING

                               before the

                            SUBCOMMITTEES ON
                         HEALTH AND ENVIRONMENT

                                  and

                      OVERSIGHT AND INVESTIGATIONS

                                 of the

                         COMMITTEE ON COMMERCE
                        HOUSE OF REPRESENTATIVES

                       ONE HUNDRED SIXTH CONGRESS

                             FIRST SESSION

                               __________

                              MAY 25, 1999

                               __________

                           Serial No. 106-25

                               __________

            Printed for the use of the Committee on Commerce


                                <snowflake>


                      U.S. GOVERNMENT PRINTING OFFICE
 57-443CC                    WASHINGTON : 1999
------------------------------------------------------------------------------
                   For sale by the U.S. Government Printing Office
 Superintendent of Documents, Congressional Sales Office, Washington, DC 20402



                         COMMITTEE ON COMMERCE

                     TOM BLILEY, Virginia, Chairman

W.J. ``BILLY'' TAUZIN, Louisiana     JOHN D. DINGELL, Michigan
MICHAEL G. OXLEY, Ohio               HENRY A. WAXMAN, California
MICHAEL BILIRAKIS, Florida           EDWARD J. MARKEY, Massachusetts
JOE BARTON, Texas                    RALPH M. HALL, Texas
FRED UPTON, Michigan                 RICK BOUCHER, Virginia
CLIFF STEARNS, Florida               EDOLPHUS TOWNS, New York
PAUL E. GILLMOR, Ohio                FRANK PALLONE, Jr., New Jersey
  Vice Chairman                      SHERROD BROWN, Ohio
JAMES C. GREENWOOD, Pennsylvania     BART GORDON, Tennessee
CHRISTOPHER COX, California          PETER DEUTSCH, Florida
NATHAN DEAL, Georgia                 BOBBY L. RUSH, Illinois
STEVE LARGENT, Oklahoma              ANNA G. ESHOO, California
RICHARD BURR, North Carolina         RON KLINK, Pennsylvania
BRIAN P. BILBRAY, California         BART STUPAK, Michigan
ED WHITFIELD, Kentucky               ELIOT L. ENGEL, New York
GREG GANSKE, Iowa                    THOMAS C. SAWYER, Ohio
CHARLIE NORWOOD, Georgia             ALBERT R. WYNN, Maryland
TOM A. COBURN, Oklahoma              GENE GREEN, Texas
RICK LAZIO, New York                 KAREN McCARTHY, Missouri
BARBARA CUBIN, Wyoming               TED STRICKLAND, Ohio
JAMES E. ROGAN, California           DIANA DeGETTE, Colorado
JOHN SHIMKUS, Illinois               THOMAS M. BARRETT, Wisconsin
HEATHER WILSON, New Mexico           BILL LUTHER, Minnesota
JOHN B. SHADEGG, Arizona             LOIS CAPPS, California
CHARLES W. ``CHIP'' PICKERING, 
Mississippi
VITO FOSSELLA, New York
ROY BLUNT, Missouri
ED BRYANT, Tennessee
ROBERT L. EHRLICH, Jr., Maryland

                   James E. Derderian, Chief of Staff
                   James D. Barnette, General Counsel
      Reid P.F. Stuntz, Minority Staff Director and Chief Counsel

                                 ______

                 Subcommittee on Health and Environment

                  MICHAEL BILIRAKIS, Florida, Chairman

FRED UPTON, Michigan                 SHERROD BROWN, Ohio
CLIFF STEARNS, Florida               HENRY A. WAXMAN, California
JAMES C. GREENWOOD, Pennsylvania     FRANK PALLONE, Jr., New Jersey
NATHAN DEAL, Georgia                 PETER DEUTSCH, Florida
RICHARD BURR, North Carolina         BART STUPAK, Michigan
BRIAN P. BILBRAY, California         GENE GREEN, Texas
ED WHITFIELD, Kentucky               TED STRICKLAND, Ohio
GREG GANSKE, Iowa                    DIANA DeGETTE, Colorado
CHARLIE NORWOOD, Georgia             THOMAS M. BARRETT, Wisconsin
TOM A. COBURN, Oklahoma              LOIS CAPPS, California
  Vice Chairman                      RALPH M. HALL, Texas
RICK LAZIO, New York                 EDOLPHUS TOWNS, New York
BARBARA CUBIN, Wyoming               ANNA G. ESHOO, California
JOHN B. SHADEGG, Arizona             JOHN D. DINGELL, Michigan,
CHARLES W. ``CHIP'' PICKERING,         (Ex Officio)
Mississippi
ED BRYANT, Tennessee
TOM BLILEY, Virginia,
  (Ex Officio)

                                  (ii)



              Subcommittee on Oversight and Investigations

                     FRED UPTON, Michigan, Chairman

JOE BARTON, Texas                    RON KLINK, Pennsylvania
CHRISTOPHER COX, California          HENRY A. WAXMAN, California
RICHARD BURR, North Carolina         BART STUPAK, Michigan
  Vice Chairman                      GENE GREEN, Texas
BRIAN P. BILBRAY, California         KAREN McCARTHY, Missouri
ED WHITFIELD, Kentucky               TED STRICKLAND, Ohio
GREG GANSKE, Iowa                    DIANA DeGETTE, Colorado
ROY BLUNT, Missouri                  JOHN D. DINGELL, Michigan,
ED BRYANT, Tennessee                   (Ex Officio)
TOM BLILEY, Virginia,
  (Ex Officio)

                                 (iii)



                            C O N T E N T S

                               __________
                                                                   Page

Testimony of:
    Hubbard, William K., Acting Deputy Commissioner for Policy, 
      accompanied by Thomas Shope, Special Assistant to the 
      Director, Office of Science and Technology Center for 
      Devices and Radiological Health, Food and Drug 
      Administration.............................................    13
    Nunn, John C., Vice President for Patient Care Services, 
      Henry Ford Hospital, on behalf of the American Hospital 
      Association................................................    63
    Smith, Kent T., Global Project Manager, Baxter Healthcare 
      Corporation, on behalf of the Health Industry Manufacturers 
      Association................................................    52
    Willemssen, Joel C., Director, Civil Agencies Information 
      Systems Accounting and Information Management Division, 
      General Accounting Office..................................    20
    Williams, Noel Brown, Senior Vice President, Columbia HCA 
      Health Care Corporation, on behalf of the Federation of 
      American Health Systems; accompanied by Don Workman, 
      Columbia HCA Health Care Corporation.......................    59

                                  (v)



           Y2K AND MEDICAL DEVICES: SCREENING FOR THE Y2K BUG

                              ----------                              


                         TUESDAY, MAY 25, 1999

              House of Representatives,    
                         Committee on Commerce,    
                Subcommittee on Health and Environment,    
      and the Subcommittee on Oversight and Investigations,
                                                    Washington, DC.
    The subcommittees met, pursuant to notice, at 10:10 a.m., 
in room 2123, Rayburn House Office Building, Hon. Michael 
Bilirakis (chairman, Subcommittee on Health and the 
Environment) and Hon. Fred Upton (chairman, Subcommittee on 
Oversight and Investigations) presiding.
    Members present Subcommittee on Health and Environment: 
Representatives Bilirakis, Upton, Sterans, Burr, Bilbray, 
Ganske, Bryant, Bliley (ex officio), and Brown.
    Members present Subcommittee on Oversight and 
Investigations: Representatives Upton, Burr, Bilbray, Ganske, 
Blunt, Bryant, Bliley (ex officio), Klink, and McCarthy.
    Staff present: Lori Wall, majority counsel; John Manthei, 
majority counsel; Michael Flood, legislative clerk; Chris 
Knauer, minority professional staff member, and John Ford, 
minority counsel.
    Mr. Bilirakis. The hearing will come to order. Good 
morning.
    I am pleased that our two subcommittees, the Health and 
Environment Subcommittee and the Oversight and Investigations 
Subcommittee under Mr. Upton, have convened today to ensure, or 
at least to try to help to ensure, that healthcare delivery is 
not interrupted by the Y2K computer problem.
    Specifically, we want to guarantee that medical devices 
using computer software will function properly after the 1st of 
January of the year 2000. Any failure, by any device, caused by 
the Y2K problem is one failure too many; I am sure we all agree 
with that. There is no room for error because human lives are 
at risk.
    Today, we will hear what steps have been taken by the Food 
and Drug Administration, the medical device industry, and 
individual hospitals on medical device Y2K compliance.
    Medical devices play a critical role in the daily delivery 
of healthcare, and can range from basic thermometers to more 
complex devices such as electrocardiograms and infusion pumps. 
Certainly, if devices that utilize computer software fail to 
operate, or give improper readings, patients all over the 
country, and indeed the world, may be put at an unnecessary 
risk.
    The FDA has testified before Congress on this subject over 
the last couple of years. Unfortunately, in some instances, the 
FDA has not had positive news to report. Today, I look forward 
to hearing the progress that the agency has made toward 
addressing this very pressing health concern.
    The General Accounting Office will offer additional 
testimony on the FDA's efforts. In particular, the GAO will 
provide Congress with recommendations on its thorough audit of 
FDA's activities and the Y2K problem.
    With respect to our second panel, we will hear about the 
steps individual hospitals and medical device manufacturers are 
taking to address the unique challenges resulting from the Y2K 
problem. Only the medical device manufacturers have complete 
access to a device's design, operating details, and 
manufacturing parameters. Therefore, their testimony is 
particularly important.
    We look forward to hearing about the steps that the 
industry is taking to guarantee the safety of patients. With 
respect to the hospital industry witnesses, we are interested 
in specific examples of initiatives being undertaken to provide 
hospitals with the most up-to-date information and products.
    On behalf of Mr. Upton and myself, I would like to welcome 
all of our witnesses and thank them for taking time out of 
their very busy schedules to join us this morning, and we all 
look forward to hearing your testimony. Mr. Bliley, the 
chairman of the full committee, for an opening statement.
    [The prepared statement of Hon. Michael Bilirakis follows:]
Prepared Statement of Hon. Michael Bilirakis, Chairman, Subcommittee on 
                         Health and Environment
    Mr. Chairman, I am pleased that we have convened our two 
Subcommittees today to ensure that health care delivery is not 
interrupted by the Y2K computer problem.
    Specifically, we want to guarantee that medical devices using 
computer software will function properly after January 1, 2000. Any 
failure, by any device, caused by the Y2K problem, is one failure too 
many. There is no room for error because human lives are at risk.
    Today, we will hear what steps have been taken by the Food and Drug 
Administration, the medical device industry, and individual hospitals 
on medical device Y2K compliance.
    Medical devices play a critical role in the daily delivery of 
health care, and, can range from basic thermometers to more complex 
devices such as electrocardiograms and infusion pumps. Certainly, if 
devices that utilize computer software fail to operate, or give 
improper readings, patients all over the country, and indeed the world, 
may be put at an unnecessary risk.
    The FDA has testified before Congress on this subject over the last 
couple of years--unfortunately, in some instances, the FDA has not had 
positive news to report. Today, I look forward to hearing the progress 
the Agency has made toward addressing this pressing health concern. The 
General Accounting Office will offer additional testimony on the FDA's 
efforts. In particular, the GAO will provide Congress with 
recommendations on its thorough audit of FDA's activities on the Y2K 
problem.
    With respect to our second panel, we will hear about the steps 
individual hospitals and medical device manufacturers are taking to 
address the unique challenges resulting from the Y2K problem. Only the 
medical device manufacturers have complete access to a device's design, 
operating details, and manufacturing parameters, therefore, their 
testimony is particularly important.
    I look forward to hearing about the steps that the industry has 
taken to guarantee the safety of patients. With respect to the hospital 
industry witnesses, I am interested in specific examples of initiatives 
being undertaken to provide hospitals with the most up to date 
information on products.
    Finally, I want to welcome all of our witnesses and thank them for 
taking time out of their busy schedules to join us this morning. I look 
forward to hearing your testimony.

    Chairman Bliley. Thank you, Mr. Chairman.
    Several months ago, this committee began an in-depth look 
at the healthcare industry and its efforts to become ready for 
the year 2000. Letters were sent to the Health Care Financing 
Administration and healthcare associations representing 
Medicare contractors and Medicare providers, asking them about 
their progress in becoming year 2000 ready, or Y2K compliant.
    Over the past year, this committee has received regular 
updates on the progress of the Department of Health and Human 
Services and what progress they have made in addressing their 
Y2K problems. Just last month, this committee held a hearing on 
the Y2K problem as it relates to billing and financial systems.
    However, the issue of Y2K readiness includes not only 
billing and financial services, but also products associated 
with healthcare delivery, such as medical devices.
    Today, we will hear about how medical devices and 
biomedical equipment are in terms of Y2K readiness. Medical 
devices are critical to medical treatment and research in both 
Federal as well as private sector healthcare facilities. Any 
equipment that performs a date or time calculation is 
potentially susceptible to the Y2K bug.
    Since 1997, the Food and Drug Administration of FDA, as 
well as the Veterans' Health Administration, and others, have 
attempted to collect information from manufacturers of medical 
equipment regarding any Y2K problem a device or piece of 
equipment may have. A data base clearinghouse was established 
that would allow providers to find out whether a particular 
piece of equipment was Y2K compliant.
    Since this process began over 2 years ago, progress has 
been made. Unfortunately, there are still device manufacturers 
who have not responded to repeated requests from the FDA to 
provide information on the Y2K status of their equipment. 
Therefore, Medicare providers are often left wondering whether 
or not their equipment will be safe as we enter the new year.
    I hope this hearing will allow us to gain a better insight 
into the process that medical device manufacturers, Medicare 
providers, and FDA have undertaken in order to ensure that 
medical devices and equipment will be Y2K compliant. The health 
and safety of Medicare patients is of the utmost importance.
    I would like to welcome all our panelists here today and 
thank you all for coming and testifying before us. Mr. 
Chairman, thank you.
    Mr. Bilirakis. Thank you, Mr. Chairman. Mr. Klink.
    Mr. Klink. Thank you, Mr. Chairman, for having this hearing 
today.
    This hearing is about whether medical devices we use in the 
everyday practice of medicine are Y2K compliant and, if not, 
what corrective actions we must take to make them so.
    In short, today's hearing has both good news and bad news. 
The goods news is that today, we now have much more information 
on the Y2K problem and how it may affect certain medical 
devices than we had only a couple of months ago. The bad news, 
though, is that we still have a significant amount of 
information to gather and much more work ahead of us, and the 
clock and the calendar are running out on us.
    Here is what we know so far about the biomedical side of 
the Y2K problem: Within the past several months, thanks to the 
help of the GAO, the FDA finally created a single, Internet-
accessible clearinghouse, so that providers could determine the 
status of their existing inventories of medical equipment. To 
complete this data base, the FDA identified about 2,300 
companies that they believe might have a Y2K problem, and so 
should be part of this data base.
    The FDA then sent letters to, and attempted to contact 
directly, as many as of the 2,300 potentially susceptible 
companies as they could locate. Most of those responded to the 
FDA in one form or another. But, about 200, for reasons 
unknown, have yet to respond.
    In discussions with the FDA and industry officials, 
committee staff were told that none of the non-reporting 200 
companies appear to be major equipment manufacturers; that is, 
that they make medical equipment that could be life-threatening 
if a Y2K problem exists.
    FDA reported, in fact, that many of the companies may have 
merged with others and, thus, may no longer exist, or may 
really never have existed at all, and were placed in error on 
the original list. Nevertheless, I would ask the FDA and the 
device industry to continue to identify all of the companies on 
this list, to try to determine with certainty that we are not, 
somehow, missing any companies that may be making critical 
equipment.
    Of those that did report to the FDA's data base, some seem 
to have few, or no, Y2K-related equipment problems, while 
others have reported that some of their devices are affected by 
the date change. For example, while a number of the original 
2,300 companies reported that none of their products were Y2K-
susceptible, and thus, the FDA did not have to worry about 
their status, about 300 companies have reported that about 1000 
biomedical devices that they collectively manufacture do have a 
Y2K problem.
    Still another group, rather than listing information in the 
FDA data base, has opted instead to link to each of their own 
websites, where their equipment status can be identified. This 
group of about 400 companies will most certainly report at 
least some equipment requiring a Y2K fix.
    What does this all mean? I believe that the group of 
approximately 300 companies reporting about 1000 problems, and 
the approximately 400 companies linking the FDA clearinghouse 
to their own websites, must be the major focus of these 
subcommittees' attention. What we can determine is that there 
exists a rather sizable group of companies, and thus devices, 
that do have Y2K problems. What we have not yet determined, 
however, is the exact nature of this equipment and how it may 
affect the healthcare delivery system of our Nation.
    Quite simply, Mr. Chairman, we have begun to collect decent 
Y2K data, but I don't think we have made full use of it. I 
believe that this committee must work with the FDA and the GAO 
and the device industry to make further sense of this data. We 
presently know only that there are at least some Y2K problems 
affecting some medical devices. We must go beyond this general 
statement and place this problem into context. At a minimum, I 
would like to know, No. 1, the nature of the equipment being 
reported as having Y2K problems; No. 2, how the problem could 
affect each piece of equipment, and No. 3, exactly how, and 
when, the problem will be dispositioned by the manufacturer. 
This is very achievable, I believe, in the limited months 
remaining before the year's end.
    So, Mr. Chairman, I don't think the sky is falling 
regarding the Y2K safety of biomedical equipment but, 
nevertheless, I am not fully comfortable with the present 
status of this industry. In order to fully gain public 
confidence, I think we must go further and truly attempt to 
assess existing data to determine what areas are fully safe and 
where we need to pay additional attention.
    Let me conclude by saying that I will split the difference 
between my good friends from GAO and what they have recommended 
and what the FDA has approved, or has proposed.
    Frankly, I don't think there is enough time or the 
technical resources available at the FDA to undertake the kind 
of verification measures the GAO advocates. Quite simply, I 
don't believe the FDA is equipped to systematically review all 
of the Y2K assessments made by the device manufacturers 
reporting to the FDA's data base. Nevertheless, I do welcome at 
least some additional checks on behalf of the FDA, particularly 
in those areas where a serious Y2K problem has been identified 
in a medical device that could cause life-threatening failure.
    Scrutiny in such areas cannot be overdone, and I am willing 
to work with our friends at both the GAO and the FDA and the 
device industry itself to reach some accommodating measures.
    So, Mr. Chairman, we have made significant progress in 
these areas, but we have much more work ahead of us in the few 
months ahead. I look forward to working with you and other 
members of this committee and the witnesses before us today to 
continue our efforts.
    I would just like to mention my friend, Mr. Upton, and I 
have been discussing, and I just bring this up publicly, we 
also have grave interest, as technology moves forward, talking 
about computers, and we would like subcommittee chairman 
Bilirakis to work with us also, it has come to our attention 
about the difficulties, right now, in reining in the sale of 
some pharmaceutical problems over computers, some of them 
without prescriptions, some of them being sold that are drugs 
that are illegal in this country. We have talked about it, and 
we want to bring you into that conversation. It is something 
that both the majority and the minority have great interest in, 
and we would like to be able also to pursue this together at 
some future time, Mr. Chairman. With that, I yield back.
    [The prepared statement of Hon. Ron Klink follows:]
Prepared Statement of Hon. Ron Klink, a Representative in Congress from 
                       the State of Pennsylvania
    Thank you Mr. Chairman for having this hearing.
    Today's hearing is about whether the medical devices we use in the 
everyday practice of medicine are Y2K compliant, and if not, what 
corrective actions we must take to make them so. In short, today's 
hearing has both good news and bad news: the good news is that today, 
we now have much more information on the Y2K problem and how it may 
affect certain medical devices than we had only a few months ago. The 
bad news is that we still have a significant amount of information to 
gather, and much more work ahead of us.
    Here is what we know so far about the biomedical side of the Y2K 
problem:
    Within the past several months, thanks to the help of the GAO, the 
FDA finally created a single Internet-accessible clearinghouse, so that 
providers could determine the status of their existing inventories of 
medical equipment.
    To complete this database, the FDA identified about 2,300 companies 
that they believed might have a Y2K problem, and so should be part of 
this database. FDA sent letters to, and attempted to contact directly, 
as many of the 2,300 potentially susceptible companies as it could 
find. Most of these responded back to the FDA in one form or another. 
Nevertheless, approximately 200, (for reasons unknown) have yet to 
respond.
    In discussions with FDA and industry officials, Committee staff 
were told that none of the non-reporting 200 companies appear to be 
major equipment manufacturers that make medical equipment that could be 
life threatening if a Y2K problem exists. FDA reported, in fact, that 
many of the companies may have merged with others and thus no longer 
exist or may have never existed at all and were placed in error on the 
original list.
    Nevertheless, I would ask that the FDA, and the device industry 
continue to try to identify all of the companies on this list to 
determine with certainty that we are not somehow missing any companies 
that may make critical equipment.
    Of those that did report to FDA's database, some seem to have few 
or no Y2K-related equipment problems while others have reported that 
some of their devices are affected by the data change.
    For example, while a number of the original 2,300 companies 
reported that none of their products were Y2K susceptible, and thus the 
FDA did not have to worry about their status, about 300 companies have 
reported that about 1,000 biomedical devices they collectively 
manufacture, have a Y2K problem. Still another group, rather than 
listing information in FDA's database has opted instead to link to each 
of their own websites where their equipment's status can be identified. 
This group of about 400 companies will, with almost certainty, report 
at least some equipment requiring a Y2K fix.
    What does this all mean, Mr. Chairman?
    I believe that the group of approximately 300 companies reporting 
about 1,000 problems, and the approximately 400 companies linking the 
FDA clearinghouse to their own websites, must be the major focus of our 
attention. What we can determine is that there exists a rather sizeable 
group of companies, and thus devices, that have a Y2K problem. What we 
have not yet determined, however, is the exact nature of this equipment 
and how it may affect the health care delivery system.
    Quite simply, Mr. Chairman, we've begun to collect decent Y2K data, 
but I don't think we've made full use of it.
    Mr. Chairman, I believe that this Committee must work with the FDA, 
the GAO, and the device industry, to make further sense of this data. 
We presently know only that there are at least some Y2K problems 
affecting some medical devices. We must go beyond this general 
statement and place this problem into context. At a minimum, I would 
like to know: (1) the nature of the equipment being reported as having 
a Y2K problem; (2) how the problem could affect each piece of 
equipment, and (3) exactly how and when the problem will be 
dispositioned by the manufacturer.
    This is very achievable in the limited months remaining before the 
year's end.
    Mr. Chairman, I don't think the sky is falling regarding the Y2K 
safety of biomedical equipment. Nevertheless, I'm not fully comfortable 
with the present status of this industry. In order to fully gain public 
confidence, I think we must go further, and truly attempt to assess 
existing data to determine what areas are fully safe, and where we need 
to pay additional attention.
    Finally, let me conclude by saying that I will split the difference 
between what my good friends from GAO have recommended, and what the 
FDA has proposed. Frankly, I don't think there's enough time, nor the 
technical resources available at the FDA to undertake the kinds of 
verification measures the GAO advocates. Quite simply, I don't believe 
the FDA is equipped to systematically review all of the Y2K assessments 
made by the device manufacturers reporting to FDA's database. 
Nevertheless, I do welcome at least some additional checks on behalf of 
the FDA, particularly in those areas where a serious Y2K problem has 
been identified in a medical device that could cause a life threatening 
failure. Scrutiny in such areas cannot be overdone and I am willing to 
work with my friends at the GAO, the FDA, and the device industry 
itself, to reach some accommodating measure.
    Mr. Chairman, we've made significant progress in this area, but we 
have much more work ahead of us. I look forward to working with you, 
the other members of this Committee, and our witnesses before us today 
to continue our efforts.
    With that, I yield back.

    Mr. Bilirakis. Thank you. Mr. Upton.
    Mr. Upton. Thank you, Mr. Chairman. I would ask unanimous 
consent that my lengthy opening statement be made part of the 
record.
    Mr. Bilirakis. With unanimous consent, all the lengthy 
opening statements of the members of the two subcommittees will 
be made a part of the record.
    Mr. Upton. I would just like to add that I appreciate this 
hearing by both of our two subcommittees and it stems from an 
earlier hearing that we had about a month ago with regard to 
billing within the health community and the Y2K problem.
    This is a daunting task. In fact, a number of hospitals 
across the country are spending perhaps as much as $1 million 
to comply, to make sure that things work when the calendar page 
turns.
    Since FDA's clearinghouse began in 1998, they have heard 
from some 4000 manufacturers regarding compliance, but there 
are still hundreds that they have not heard from. As we all 
know, there is no room for error. I recently spent the day with 
one of my hospitals in Berrien County, Michigan, and looked at 
virtually every sector of what they do to provide good 
healthcare in our region. I can remember well a visit to the 
renal dialysis facility where virtually every single one of the 
booths was occupied. In fact, they said that they are occupied 
for the complete day, 24 hours a day, 6 days a week, providing 
assistance for folks, and there was no room even for visitors 
to come in from other parts of the country that might be 
visiting friends or families in our part of the State. If they 
had a reason, or need, for renal dialysis, the answer would be 
no.
    With that type of occupancy, it is pretty clear that we 
have to make sure that these machines and other devices work 
within the hospitals and to try and get a better gauge of that.
    I appreciate the hearing today and look forward to the 
testimony from the witnesses, and I yield back the balance of 
my time.
    [The prepared statement of Hon. Fred Upton follows:]
   Prepared Statement of Hon. Fred Upton, Chairman, Subcommittee on 
                      Oversight and Investigations
    Today, the Subcommittee on Oversight and Investigations and the 
Subcommittee on Health and the Environment are holding a joint hearing 
on the issue of the Year 2000 problem as it relates to medical devices. 
Over the past several months, the Committee on Commerce has undertaken 
an extensive review of the progress the Health Care Financing 
Administration, or H-C-F-A, its Medicare contractors and its hospitals, 
nursing homes, doctors and other providers have made in becoming Y-2-K 
compliant. Last month, these two subcommittees held a hearing on the Y-
2-K status of Medicare providers and their billing and financial 
systems.
    Today, our hearing will focus on the status of medical devices. 
Medical devices and equipment, such as cardiac monitoring systems, 
cardiac defibrillators and x-ray machines, are critical to providing 
health care treatment in a variety of health care settings. These 
devices have the potential to adversely affect patient safety if they 
perform any type of date or time calculation. The degree of risk 
increases significantly if the machine is a critical care of life 
support device.
    Several weeks ago, the importance of ensuring that medical devices 
and equipment are Y-2-K compliant really came home to me in a powerful 
way. I toured a renal dialysis unit in St. Joseph/Benton Harbor, 
Michigan, my home community, with a population of about 50,000. The 
dialysis center operates 6 days a week, 24 hours a day, at full 
capacity. It was during that visit that I learned that there was no 
room for visitors to use this facility. Obviously, should this unit and 
others in other communities across the nation fail to operate properly 
on January 1, 2000, lives would be put in serious jeopardy.
    I have been talking with hospitals in my Congressional district 
about their Y-2-K efforts to ensure that their medical devices and 
equipment are compliant, and I have learned a lot. First, the magnitude 
of the effort is daunting. All of the hospitals inventoried their 
devices as an initial step--one hospital system had 8000; another 5000. 
The direct costs of reviewing critical devices and upgrading or 
replacing those which are not compliant are also significant--$\1/2\ to 
$1.0 million.
    As a second step, each hospital contacted device manufacturers for 
information on the device's Y-2-K compliance. All reported that 
initially, they often had difficulty getting information, particularly 
from smaller manufacturers. However, all have seen improvement and 
greater cooperation in meeting the challenges of Y-2-K, particularly 
with the creation of the FDA's central data base.
    In 1997, the Food and Drug Administration, or F-D-A, began 
collecting data from device manufacturers regarding the Y-2-K 
compliance status of their devices. After several letters and a small 
response rate from manufacturers, the F-D-A joined in partnership with 
the Veterans Health Administration, the Department of Defense and the 
Health Industry Manufacturers Association, to assemble a single 
database clearinghouse. The goal of the clearinghouse was to provide a 
centralized source of information on the Y-2-K compliance status of 
biomedical equipment in the United States.
    Since F-D-A's data clearinghouse began in September of 1998, they 
have heard from 4,116 manufacturers regarding the compliance status of 
their equipment. They are still awaiting information from another 232 
manufacturers. Since F-D-A began its database, the flow of information 
has increased significantly. However, the F-D-A has stated that they 
are in no way ensuring that the information displayed on their 
clearinghouse is accurate or complete. In other words, the 
clearinghouse serves as a central point for data, but not a guarantee 
by the F-D-A that the data provided is accurate or complete.
    While information regarding medical devices continues to increase, 
recent surveys conducted show that Medicare providers are still 
expressing concern over the compliance status of their equipment. I 
hope this hearing will demonstrate the need for all manufacturers to 
release information to providers regarding the Y-2-K status of their 
devices and equipment. It is crucial at the turn of the century that 
service to Medicare beneficiaries is uninterrupted and patient safety 
is not jeopardized.
    I would like to welcome all of our panels here today to testify. 
Thank you all for coming and appearing before us today.

    Mr. Bilirakis. I thank the chairman. Mr. Brown.
    Mr. Brown. Thank you, Mr. Bilirakis.
    I would also ask to enter to my written statement into the 
record.
    I just have a couple of comments that are a bit off the 
subject but I have not really heard much said during this whole 
Y2K debate and I find it interesting that in our much vaunted 
private sector in this country, where all wisdom begins and 
ends, that all of the computer geniuses, in all of the large 
companies that bought computer systems in the last 20 to 30 
years, really did not anticipate this whole Y2K problem.
    That companies that made billions of dollars, computer 
executives that are worth hundreds of millions, billions of 
dollars, in some cases, that companies where the purchasing 
agents, and the vice presidents in charge of putting in these 
computers, and buying these computers, made these purchases 
without really anticipating what was going to happen in the 
year 2000.
    If that had been a government decision we would see 
newspaper article after newspaper article criticizing big 
government and telling us how government does nothing right in 
this country, but since it was the much vaunted private sector 
we have not really seen those kinds of newspaper articles.
    I would imagine that that computer company executives that 
created this problem, and did not foresee this problem until 
not very many years ago, still got their bonuses and I would 
imagine large companies that have had this, that bought these 
computer systems and that installed them and did not warn their 
CEOs about the Y2K problem until only a small number of years 
ago still got their bonuses and were still doing very well, 
thank you.
    I just think it is important that as this country has 
begun, in the last small number of years, to deal with Y2K, and 
this Congress has been involved, that we are aware of some of 
the history of this and we are aware that this problem is one 
that has cost us so much money and has cost us so much time in 
this Congress, and in the private sector, and the public sector 
all over in dealing with it.
    So, I thank the Chair and yield back the balance of my 
time.
    [The prepared statement of Hon. Sherrod Brown follows:]
Prepared Statement of Hon. Sherrod Brown, a Representative in Congress 
                         from the State of Ohio
    Thank you, Mr. Chairman. I'm pleased to participate in our second 
joint hearing on Y2K issues, and I thank our distinguished panelists 
for joining us.
    Today's hearing is important from a number of perspectives: to the 
extent the Year 2000 transition disrupts medical devices and the 
production and distribution systems supporting them, health care 
access, quality and continuity could all be affected.
    According to FDA, there are more than 100,000 medical devices, 
equipment ranging from tongue depressors to MRIs.
    Fortunately, the great majority of these devices are not date-
dependent, and medical device manufacturers have been working hard to 
ensure that the production and distribution systems around these 
devices experience no disruption as we transition into the next 
century.
    I commend FDA, which has worked with the Department of Veterans 
Affairs, the Department of Defense and the Health Industry 
Manufacturers' Association to develop a clearinghouse for compliance 
information.
    One of the areas I hope today's witnesses will address involves 
devices made by manufacturers who are no longer in business or who have 
otherwise refused or have been unable to reply to FDA's request for 
information. How do we ensure that there will be no harm done to 
patients or disruption in the delivery of care?
    I understand the response rate to FDA's clearinghouse information 
request was strong--about 90%--but that some 399 device manufacturers 
have not provided FDA any information.
    I hope our witnesses also touch on areas we didn't explore during 
the last hearing, including the implications of the Y2K transition for 
non-hospital providers and their patients--areas such as home health 
care and setting such as skilled nursing facilities and community 
health clinics.
    Today's hearing will provide valuable information in our continuing 
examination of Y2K transition issues. I look forward to hearing your 
comments.

    Mr. Bilirakis. I thank the gentleman. Let's see, do we have 
an order here? Mr. Bryant.
    Mr. Bryant. Thank you, Mr. Chairman. Good morning.
    I want to thank you and Chairman Upton, as well as Mr. 
Brown and Mr. Klink, for holding this second hearing on the Y2K 
bug and its potential effects on medical care.
    As we are all aware, the clock is ticking. The countdown 
continues to January 1, 2000. To be frank, I am concerned about 
what is going on and what is going to happen with my friends, 
relatives, and constituents who will need medical care at that 
time. Will we be prepared?
    For some people, the answer to that question will mean the 
difference between life and death. For that reason, I am 
looking forward to the hearing today and the testimony that we 
will hear about the efforts of the manufacturers, and 
healthcare providers, and those in government, to assess the 
Y2K compliance of medical devices.
    I sincerely hope that the news is encouraging, and taking 
leave of my prepared statement just briefly, for those of you 
who are prepared to testify, I would also like to hear 
testimony about the potential liability issues out there. I 
know in the Judiciary Committee we have looked at a Y2K 
liability bill that, in fact, has been passed out of the House 
of Representatives. And when it will be signed into law, I 
don't know, but I have talked to some people in the medical 
industry, particularly about the services in terms of their 
potential exposure as to whether or not medical devices, 
whether they take the assurance of the manufacturer, that it is 
going to work. Should they, themselves, test it independently 
of that and would they then incur liability for doing that 
testing?
    There are lots of intriguing issues, and I realize that you 
did not come to testify specifically about that, but if you 
have any statements that you would like to make public on the 
potential impact of liability, I certainly would welcome those.
    I would like to take a moment to welcome one of the 
witnesses who will appear on the second panel, and I want to 
particularly welcome her, Ms. Noel Brown Williams, of Columbia 
HCA Healthcare Corporation, who is here this morning 
representing the Federation of American Health Systems. I am 
particularly pleased she is here because we have two hospitals 
in my district from the Columbia system. One of those serves 
the good people of Cheatham County. It is the Cheatham Medical 
Center in Ashland City in Cheatham County, and the Horizon 
Medical Center in Dickson, and I am very interested and pleased 
with the progress that Columbia HCA hospitals have made, and 
will continue to make, to ensure that patient care is not 
compromised as we reach the turn of the century.
    Again, Mr. Chairman, I want to thank all the witnesses for 
their testimony and you for having this hearing, and I would 
yield back.
    Mr. Bilirakis. I thank the gentleman. Mr. Burr, for an 
opening statement.
    Mr. Burr. Thank you, Mr. Chairman. I will be brief.
    I want to take this opportunity to thank all of the 
witnesses who are here today.
    A couple of the areas I want to concentrate on are the 
distinction between urban and rural. Do we have the same 
assurances with some of the rural facilities that their 
equipment is as up-to-date, even though it may be much older 
than equipment that we currently asked manufacturers about?
    Another area of concern is, whose responsibility is it for 
the end-to-end testing, if it is needed, for this equipment? 
And, could this equipment be interconnected with other devices 
where end-to-end testing becomes extremely important as to who 
goes first?
    I think that, Mr. Chairman, we all share the same common 
goal, that is, to give America the assurance that healthcare 
will go on uninterrupted. I have every reason to believe that 
we have very capable people working on this, and the 
clearinghouse certainly has produced good work.
    We are reliant on manufacturers to share with us their 
information as it relates to the Y2K problem. I remind all of 
us that, just 6 months ago, most people thought that Y2K was a 
spot remover. The reality is that we have all had a very steep 
learning curve, but these agencies and this Congress must 
assure the American people that their healthcare will be of the 
same quality, and uninterrupted, as we head into the new 
millennium.
    I hope that we are further down that road when we complete 
this hearing. I yield back.
    Mr. Bilirakis. I thank the gentleman. Mr. Bilbray for an 
opening statement. Dr. Ganske.
    Mr. Ganske. Thank you, Mr. Chairman, for holding this 
hearing. I think this is an important hearing, and I want to 
build on the remarks that Congressman Bryant made related to 
liability.
    Last week, the House passed a liability relief for Silicon 
Valley and for manufacturers. I voted against that bill because 
I had some concerns, particularly for the users of those 
products, many of whom are represented today whose patients are 
going to be on ventilators, life-support, run with computer 
chips.
    Vern Ehlers tried to get an amendment made an order for 
that bill that basically would have restricted the liability 
relief for products made after 1995. That was not made an 
order.
    I sincerely hope that, when that Y2K liability bill comes 
back from the Senate and from conference, that we take into 
account the fact that, within that liability bill that we 
passed, there is a 90-day moratorium on legal redress for 
products that are not working because of their Y2K computer 
chips. I mean, I don't think that a patient on a ventilator has 
90 days.
    I think the message should be to the manufacturers and to 
the software Silicon Valley folks that we are not going to give 
you liability relief. You know, we have about 8 months to get 
this fixed, and there are going to be a lot of patients that 
potentially could be harmed if we don't fix this Y2K problem.
    So, I believe that we need to pass more wise legislation on 
Y2K than what we have looked at so far in the House, and I will 
also be interested, like Congressman Bryant, in comments from 
members of the panels today on this issue.
    Thank you very much.
    Mr. Bilirakis. I thank the gentleman.
    [Additional statements submitted for the record follow:]
Prepared Statement of Hon. Cliff Stearns, a Representative in Congress 
                       from the State of Florida
    I want to thank Chairman Bilirakis and Chairman Upton for holding 
this important hearing today.
    I believe we would all like to be assured that all medical devices 
will be Y2K compliant.
    What many people may not realize is that computer software is 
frequently imbedded as a component of devices. For example, software 
contained on a microchip to control a devices operation could deeply 
impact individuals who rely upon their pacemakers, ventilators and 
other life saving equipment for survival.
    There is also the question of non-embedded software which is 
usually operated on a personal computer. This would involve such 
equipment as MRI's, Sonograms, X-rays, and CAT scans to name a few.
    There are those who say there is too much hype about the Y2K 
problem and that we don't need to worry. I disagree and look forward to 
hearing from our distinguished panels about what they have done to 
prevent any possible future catastrophes from occurring.
    As Chairman of the VA Subcommittee on Health, I noted Mr. Hubbards' 
comments about the Department of Veterans Affairs testimony before the 
VA Subcommittee on Oversight and Investigations indicating they had 
been assured by manufacturers that all the critical care devices are 
expected to be in compliance by the year 2000. This is good news for 
our nation's veterans. I was also pleased to learn about the 
partnership between the VA and the FDA to develop a single data 
clearinghouse for biomedical equipment year 2000 status information.
    I also look forward to hearing Mr. Noel Williams' testimony since 
several hospitals in my district are Columbia Health Care facilities. 
In fact, Ocala Regional Medical Center is in my home town. The other 
two HCA facilities are Putnam Community Hospital and Orange Park 
Medical Center. It is very reassuring to know that Columbia/HCA began 
planning for the Y2K problem back in 1996. Their efforts are to be 
commended and should serve as a role model for those in the public and 
private sectors that are not yet fully in compliance.
                                 ______
                                 
Prepared Statement of Hon. Karen McCarthy, a Representative in Congress 
                       from the State of Missouri
    Thank you Mr. Chairman. Today we are discussing the issue of 
medical device Y2K compliance. We must ensure that medical devices that 
are date sensitive are Y2K compliant, so that patients depending on 
these devices are not adversely affected when the new year begins. I 
would like to thank the witnesses who are testifying today. I look 
forward to hearing your ideas about how to bring all medical devices 
into Y2K compliance.
    Many people do not realize the serious nature of the Y2K problem. 
Dates are important to the functionality of many medical devices that 
contain internal computer chips. Basically, anything that is electronic 
is at risk for noncompliance. For example, in a Kansas City Star 
article on May 23, 1999, Dr. Andrew V. Kauftnan, a Kansas City 
neurosurgeon explains the importance of Y2K compliance for the gamma 
knife. The gamma knife is a device used to treat brain tumors. A 
computer chip in the knife determines the length of radioactive 
exposure to the brain that is needed. Dr. Kaufman states, ``It has to 
be perfect. We don't want to undertreat, because if we do, we are 
inadequately treating the condition. Were we to overtreat, we run the 
risk of brain injury or other complications such as brain swelling.'' 
Fortunately, preliminary tests have shown this device to be Y2K 
compliant, but more tests will be conducted in the next 60 days to be 
certain.
    The costs associated with bringing medical devices into Y2K 
compliance are high, and could be an insurmountable burden for smaller 
hospitals. For example, Health Midwest of Missouri expects to spend 10 
million dollars to check 21,000 biomedical devices. Because of these 
high costs and also because of the potential crises that could arise as 
a result of the failure of medical devices, we must explore contingency 
plans for this issue. I look forward to hearing more about such 
contingency plans as we continue this discussion.
    I am eager to work with our witnesses and with my colleagues to 
find a solution that will protect our nation's patients and provide a 
fiscally responsible solution for the medical providers. Thank you. I 
yield back the balance of my time.
                                 ______
                                 
  Prepared Statement of Hon. Lois Capps, a Representative in Congress 
                      from the State of California
    Mr. Chairman, thank you for holding this important hearing to gain 
insight on the Y2K compliance of medical devices. These devices, such 
as cardiac defibrillators, pacemakers, and cardiac monitoring systems, 
are all computer-run, and thus are subject to the Y2K bug. It is 
imperative that we take a proactive stance on this matter.
    The importance of this hearing is clear. Millions of people rely on 
medical devices everyday, and the consequences of these machines not 
working on January 1, 2000 would be devastating.
    Pursuant to the Federal Food and Drug Act, it is the responsibility 
of the FDA to ensure the safety and effectiveness of medical devices in 
the marketplace. I know the FDA has tried, through various mail 
campaigns and the Federal Year 2000 Biomedical Clearinghouse, to do 
this as thoroughly as possible. However, the FDA heard back from less 
than 10% of those doctors who were mailed these questionnaires, and the 
success of the clearinghouse is so far indeterminate. It is clear that 
there is much to be done.
    I am eager to hear from our witnesses today, to see how we can all 
work together to make sure the medical community is properly prepared 
for the Year 2000. Again, I thank you, Mr. Chairman, for holding this 
hearing, and I look forward to working with you.
    Thank you.

    Mr. Bilirakis. The Chair will now call for the first panel: 
the Honorable William Hubbard, Acting Deputy Commissioner for 
Policy with the U.S. Food and Drug Administration; Dr. Thomas 
Shope, Special Assistant to the Director, Office of Science and 
Technology Center for Devices and Radiological Health, U.S. 
Food and Drug Administration, and Mr. Joel C. Willemssen, 
Director, Civil Agencies Information Systems, Accounting and 
Information Management Division of the General Accounting 
Office.
    The Chair now yields to his co-Chair, Mr. Upton.
    Mr. Upton. Thank you. Panel, we have a longstanding 
tradition in the Oversight and Investigations Subcommittee of 
our witnesses being sworn under oath. Do any of you have any 
objection to that, or problem with that?
    [All witnesses shake head indicating no.]
    And we also provide, under House rules, if you desire to 
have counsel. Do you need to have a counsel for your questions?
    [All witnesses shake head indicating no.]
    If not, if you would stand and raise your right hand?
    [Witnesses sworn.]
    I yield back to the chairman. Thank you.
    Mr. Bilirakis. I thank the chairman. Each of you is now 
under oath. I am going to set the clock at 5 minutes. 
Obviously, your written statement is a part of the record, and 
we would hope you would complement it in your oral remarks. I 
am going to set the 5-minute clock, but, obviously, if it takes 
a little longer for you to get your message across, I want you 
to feel free to do so. Let us see, I guess we will call on Mr. 
Hubbard first.

TESTIMONY OF WILLIAM K. HUBBARD, ACTING DEPUTY COMMISSIONER FOR 
 POLICY, ACCOMPANIED BY THOMAS SHOPE, SPECIAL ASSISTANT TO THE 
 DIRECTOR, OFFICE OF SCIENCE AND TECHNOLOGY CENTER FOR DEVICES 
AND RADIOLOGICAL HEALTH, FOOD AND DRUG ADMINISTRATION; AND JOEL 
  C. WILLEMSSEN, DIRECTOR, CIVIL AGENCIES INFORMATION SYSTEMS 
    ACCOUNTING AND INFORMATION MANAGEMENT DIVISION, GENERAL 
                       ACCOUNTING OFFICE

    Mr. Hubbard. Thank you, Mr. Chairman. As you said, Mr. 
Chairman, we have a written statement which I will not read 
today.
    Let me first mention that I have Dr. Thomas Shope, from our 
Center for Devices, and expert legal help with me today. He is 
an expert in this matter.
    What I will do, Mr. Chairman, is briefly give you some 
sense of the many things that we have done in the FDA on this 
issue thus far. We have sent a number of letters to the 
industry giving them advice and advising them of what they need 
to do on the worry about this problem, to make sure that their 
products are Y2K compliant. We have given written guidance to 
the industry that spells out certain procedures that they need 
to follow. Our field staff has asked the right questions; we 
have inspected device firms, and we believe we are helping in 
that way. We have done a substantial amount of outreach to the 
industry, Mr. Chairman, with press contacts and speeches and 
meetings and mailings and articles and lots of other things to 
make sure that the industry and hospitals know what to look for 
here.
    We have developed a rapid response plan so, as the year 
progresses, if there are problems with these devices, our field 
force and our headquarters' specialists will be able to jump in 
right away. As a matter of fact, that program will be staffed 
on a 24-hour basis beginning in the fall.
    We have developed, as you know, a biomedical equipment 
clearinghouse, a website, which initially listed all of the 
non-compliant medical devices, and now is attempting to list on 
that website compliant devices, so that the public, the 
hospitals, the physicians, and others will be able to access it 
readily.
    We have worked with the VA and the hospitals to help 
identify critical devices that, if they fail, would be a 
problem. We have tried to identify those devices that might 
present a high risk to patients if they were not compliant and 
fail for that reason. We are pursuing those most vigorously.
    All of these activities, Mr. Chairman, have led us to a 
fairly high degree of confidence that no serious problems exist 
from medical devices and that, as the year progresses, and we 
go into the first of the year, there won't be a problem.
    Nevertheless, Mr. Chairman, our colleagues at the GAO have 
recommended that we take an additional step, the auditing of 
manufacturers' records, demonstrating that they have verified 
that no problem will exist and that a fix has been properly 
implemented, if a problem did exist for a given device.
    The GAO believes that this additional step will provide 
assurance to the agency, hospitals, and the public that certain 
potentially high-risk devices will function properly at the 
turn of the century. We, of course, respect that view and have 
the clue that such a program could, feasibly, be constructed. 
We believe somewhere over 300 firms make these so-called 
potentially high-risk devices, the sort of devices that, if 
they failed, could cause serious injury to patients.
    So, we propose to begin in June an audit program that would 
have contractors, hired by the FDA, specialists in this area, 
go to manufacturers and review their records and ascertain 
that, in fact, they have asked the right questions, done the 
proper validation and verifications, and have the proper 
paperwork to demonstrate that that is the case; Where there was 
a device that was not compliant, that they have done the 
necessary upgrades and properly implemented those.
    We would propose, Mr. Chairman, to phase this concept in. 
As I said, there are somewhere over 300 manufacturers. so the 
concept would be to perhaps do a representative sample of 
perhaps 60 manufacturers initially, and if we found no problems 
with those, we would then consult with others and reassess 
whether we should go do the entire universe of these particular 
manufacturers. and, of course, if problems were found in that 
representative sample, we would be prepared, of course, to go 
to all these manufacturers and do the same sort of audit for 
those.
    With that, Mr. Chairman, briefly, I hope I have given you a 
sense of where we are, and I would be glad to answer any 
questions you have.
    [The prepared statement of William K. Hubbard follows:]
 Prepared Statement of William K. Hubbard, Acting Deputy Commissioner 
  for Policy, Food and Drug Administration, Department of Health and 
                             Human Services
                              introduction
    Good morning, my name is William Hubbard. I am the Acting Deputy 
Commissioner for Policy, Food and Drug Administration (FDA or the 
Agency). I am pleased to be here today to provide information on the 
Year 2000 date issue as it relates to medical devices. FDA has taken a 
number of constructive actions to work with manufacturers and provide 
information to users about medical device Year 2000 compliance.
    FDA promotes and protects public health by helping to ensure that 
medical devices are safe and effective. The Center for Devices and 
Radiological Health (CDRH) is the component of FDA that has 
responsibility for regulating medical devices. CDRH helps carry out the 
Agency's mission by evaluating new products to determine if they can be 
marketed; assuring quality control in manufacture through inspection 
and compliance activities; monitoring adverse events in already 
marketed products; and taking action, when necessary, to prevent injury 
or death. A device manufacturer must comply with all applicable 
requirements of the Federal Food, Drug, and Cosmetic (FD&C) Act, 
including, but not limited to, establishment registration and device 
listing, premarket review, use of good manufacturing practices, and 
reporting adverse events.
                       what is a medical device?
    According to the definition in the FD&C Act, a ``device'' is:
        an instrument, apparatus, implement, machine, contrivance, 
        implant, in vitro reagent, or other similar or related article, 
        including any component, part or accessory, which is intended 
        for use in the diagnosis of disease or other conditions, or in 
        the cure, mitigation, treatment, or prevention of disease, in 
        man or other animals, or intended to affect the structure or 
        any function of the body and which does not achieve its primary 
        intended purposes through chemical action and which is not 
        dependent upon being metabolized for the achievement of its 
        primary intended purposes.
    As this definition suggests, many different types of products are 
properly regulated as medical devices. Medical devices include over 
100,000 products in more than 1,700 categories. The products regulated 
by FDA as medical devices range from simple everyday articles, such as 
thermometers, tongue depressors, and heating pads, to the more complex 
devices, such as pacemakers, intrauterine devices, diagnostic imaging 
devices, and kidney dialysis machines.
    Any computer software which meets the legal definition of a medical 
device is within the scope of the law and must comply with applicable 
FDA regulations. Medical devices which use computers or software can 
take several forms including: products containing embedded microchips 
which are part, or components, of the devices; devices employing non-
embedded software which is used with, or to control, the devices or to 
record data from the devices; or individual software programs that use 
or process patient data to reach a diagnosis, aid in therapy, or track 
donors and products.
A. Embedded Computer Software
    Computer software frequently is embedded as a ``component'' of 
devices, i.e., software contained on a microchip to control device 
operation. Examples of such common, important devices are pacemakers, 
infusion pumps and ventilators. The majority of these products will not 
be affected by the Year 2000 problem since almost none of them require 
knowledge of the current date to operate safely and effectively. For 
example, pacemakers do not use the current date in their operation.
B. Non-embedded Computer Software
    Non-embedded software is intended to be operated on a separate 
computer, often a personal computer or work station. Such software 
devices may be used to control or enhance the operation of another 
device or devices and, further, may use the two-digit year format. It 
is possible that non-embedded software devices may rely on date 
information for proper operation and might be affected by the Year 2000 
date change if not designed appropriately.
    An example of non-embedded software is a computer program used to 
plan radiation therapy treatments delivered using radioactive isotopes 
as the radiation source (teletherapy or brachytherapy). These 
treatments possibly could be affected if the computer program that 
calculates the radiation dose parameters uses only a two-digit year 
representation. The calculation of the length of time since the source 
was last calibrated could be in error and thus lead to an incorrect 
treatment prescription.
    Other examples of uses of non-embedded software devices include: 
conversion of pacemaker telemetry data; conversion, transmission, or 
storage of medical images; automated analysis and interpretation of ECG 
data; programming or control of rate response for a cardiac pacemaker; 
perfusion calculations for cardiopulmonary bypass; and calculation of 
bone fracture risk from bone densitometry data. Since there is a chance 
that the two-digit format may affect the performance of these software 
devices, FDA believes that the Year 2000 risk requires that healthcare 
facilities take steps to identify and mitigate such problems through 
proactively working with manufacturers.
                 fda efforts to address year 2000 issue
Year 2000 Database
    In order to give the general public, government agencies, and the 
healthcare and research communities one comprehensive source of 
publicly available information on the Year 2000 compliance status of 
biomedical equipment, the Federal Year 2000 Biomedical Equipment 
Clearinghouse database was established in March 1998 and is available 
to facilities via the World Wide Web. The Biomedical Equipment 
Clearinghouse provides Year 2000 product status information in five 
categories including: products that are Year 2000 compliant; products 
that do not use a date; products that have a date related problem; 
products whose status is provided on the manufacturer's website; and 
identification of manufacturers for whom no information is available 
(nonrespondents to FDA requests).
    The Biomedical Equipment Clearinghouse database is being maintained 
by FDA on its World Wide Web site at the request of the Interagency 
Biomedical Equipment Working Group. This Working Group was organized 
early in 1997 under the Subcommittee on the Year 2000 of the Chief 
Information Officers' Councils. The database can be found on the 
Internet at: http://www.fda.gov/cdrh/yr2000/. Manufacturers also may 
submit a World Wide Web link to their own website, if they so choose, 
where the requested information is provided to the public.
    FDA and the Department of Veterans Affairs (DVA) have worked in 
partnership to develop a single data clearinghouse for biomedical 
equipment Year 2000 status information. DVA, as a purchaser of medical 
devices, collected information from its vendors as to the compliance 
status of the medical devices used in its facilities. This data, along 
with data from the Department of Defense, has been provided to FDA and 
following confirmation by FDA, has been added to the clearinghouse 
database. Both FDA and DVA are working with private sector associates, 
mostly professional associations and organizations such as the American 
Medical Association, the American Hospital Association, the Joint 
Commission on Accreditation of Healthcare Organizations, the Health 
Industry Manufacturers Association (HIMA), the Medical Device 
Manufacturers Association (MDMA), and the National Electrical 
Manufacturers Association (NEMA) that provide advice and assistance as 
requested.
                     recent letters to manufactures
A. March 29, 1999 Letter on Year 2000 Compliant Products
    Biomedical equipment users have expressed the need for specific 
information on all Year 2000 vulnerable products that are compliant and 
have urged the establishment of a single, comprehensive source for this 
information. On March 29, 1999, FDA issued a letter requesting that 
medical device manufacturers submit a complete list of individual 
product models that are Year 2000 compliant to the FDA-operated Federal 
Year 2000 Biomedical Equipment Clearinghouse. Many biomedical equipment 
users have told FDA that a single statement that all of a 
manufacturer's products are Year 2000 compliant does not meet their 
need to have affirmatively identified specific compliant equipment. 
Once information on compliant products is received from medical device 
manufacturers it will be made available, with improved search tools, as 
part of the Biomedical Equipment Clearinghouse.
    This database of Year 2000 compliant products is intended to 
provide information on products that biomedical equipment users might 
consider to be vulnerable to date-related problems because these 
products could utilize software, a computer or microprocessor control. 
Accurate Year 2000 status information on these products is critical to 
these users as they evaluate their product inventory and plan any 
needed remedial actions.
B. March 29, 1999 Letter on Interim Inspectional Policy Regarding Y2K 
        Issues.
    On March 29, 1999, the Director, Division of Emergency and 
Investigational Operations, Office of Regulatory Affairs (ORA), issued 
a memorandum to the FDA field instructing investigators to raise the 
awareness of potential Year 2000 problems to firms during FDA 
inspections. In this letter, ORA expanded the Year 2000 activities to 
include asking questions regarding what the firm has done to assure 
themselves that their computer controlled/date sensitive products, 
manufacturing processes and distribution systems are Year 2000 
compliant, and to include information on this subject in their 
Establishment Inspection Reports when relevant. In addition, if the 
investigators encounter serious problems or concerns, or find the firm 
is not taking appropriate steps to avoid serious Year 2000 problems, 
this information must be reported to appropriate District and Center 
personnel.
C. January 13 and March 3, 1999 Letters on Non-Compliant Products
    On January 13, 1999, FDA issued a letter to device manufacturers 
announcing FDA's intent to expand the product information maintained on 
the FDA-operated Federal Year 2000 Biomedical Equipment Clearinghouse 
and requested the continued cooperation of biomedical equipment 
manufacturers in this effort. The letter requesting this information 
was issued on March 3, 1999. In this letter FDA indicated that in some 
of the manufacturer responses to the earlier requests the information 
on the FDA website was not sufficiently detailed to adequately assist 
facilities in assessing the impact of non-compliant products. FDA 
requested that biomedical equipment manufacturers carefully review the 
Year 2000 status information that they have provided or intended to 
submit, and, where necessary, provide more specific information on non-
compliant products.
                   previous letters to manufacturers
A. June 25, 1997 Notification to Manufacturers
    In light of the review of the impact of the Year 2000 on some 
medical device computer systems and software applications, FDA has been 
actively alerting the medical device industry through a series of 
letters to medical device manufacturers for approximately two years. 
The first alert letter was sent on June--5, 1997, to all CDRH 
registered medical device manufacturers (8,322 domestic and 5,085 
foreign) indicating that manufacturers needed to address this issue and 
review both embedded and non-embedded software products. FDA reminded 
manufacturers that, in addition to potentially affecting the 
functioning of some devices, the two-digit year format also could 
affect computer-controlled design, production, or quality control 
processes. FDA requested that manufacturers review the software used in 
medical devices to determine if there is any risk.
    Device manufacturers who identify products that have a date-related 
problem are required to take appropriate action to remedy the problem. 
An example of appropriate action in some instances would be 
notification to device purchasers so that their devices can be 
appropriately modified before the year 2000.
B. January 21, 1998 Request for Information
    In a letter dated January 21, 1998, Department of Health and Human 
Services (DHHS) Deputy Secretary Kevin Thurm asked approximately 16,000 
medical device and biomedical equipment manufacturers to voluntarily 
provide information on the Year 2000 compliance status of their 
products. Included in the mailing were all FDA registered manufacturers 
without respect to the specific kind of device produced, even though 
FDA estimates that only approximately 2,000 manufacturers make products 
listed in the categories which include computerized products 
potentially sensitive to Year 2000 problems. Approximately 3,000 of the 
manufacturers included in the mailing are not regulated by FDA; for 
example, scientific instrument manufacturers. The letter detailed 
instructions on ways to submit the data requested and explained that to 
be Year 2000 compliant products must function as intended regardless of 
the date. Manufacturers also were given the opportunity to certify that 
their products are not affected, if that is the case, or certify that 
none of their products use computers or date information.
C. Targeted Follow-up with Manufacturers of Computerized Devices
    On June 29, 1998, FDA issued a targeted, follow-up letter to 
specific manufacturers of computerized devices urging them to respond 
to our January 21 request to submit product data. This list was derived 
from the names of those firms which have registered as manufacturers of 
devices in the categories where Year 2000 vulnerability is likely.
    Then on September 2, 1998, FDA issued a follow-up to the June 29, 
1998 letter, directed to the manufacturers of potentially computerized 
devices who had not responded to the previous requests to specific 
manufacturers for information on the Year 2000 status of their devices. 
In the letter, FDA requested that the manufacturers respond to FDA 
within two weeks with the Year 2000 compliance status of their devices, 
or at least indicate that a complete response was being developed.
    On August 14, 1998, Dr. Bruce Burlington, then Director, CDRH, and 
on September 2, 1998, Dr. Friedman, then Acting Commissioner of the 
Food and Drug Administration, issued letters to HIMA requesting that 
HIMA take aggressive and immediate actions to encourage and assist 
medical device equipment manufacturers in providing information to FDA 
about the Year 2000 compliance status of their products.
    In late September 1998, FDA decided that it would be useful to 
provide an indication of whether a particular manufacturer of 
computerized devices potentially susceptible to Year 2000 concerns has 
or has not provided information on Year 2000 compliance. To that end, 
FDA posted on the website those manufacturers of selected product 
categories which are likely to include vulnerable products that had not 
provided a response to FDA's inquiries. FDA will continue to work with 
manufacturers to obtain this data and report to Congress on the status 
of these Year 2000 requests.
                    additional outreach and guidance
    In addition to the website and the letters, CDRH has been 
conducting extensive outreach to the device industry and to other 
consumers on this issue. CDRH's Division of Small Manufacturers 
Assistance provided an article entitled ``Biomedical Equipment 
Manufacturers Urged to Share Year 2000 Information'' to 12 medical 
device trade press contacts and to 65 U.S. and 35 foreign medical 
device trade associations in order to facilitate the dissemination of 
information to their members regarding the website database and to 
encourage the posting of data by manufacturers. The website and 
database were mentioned in the FDA Column of the June 3, 1998, Journal 
of the American Medical Association and in an article in FDA's Medical 
Bulletin that was sent to approximately 700,000 healthcare 
practitioners this past summer.
    In the Spring of 1998, CDRH developed a Guidance Document on FDA's 
expectations of medical device manufacturers concerning the Year 2000 
date problem. The guidance is available on the FDA website. The 
guidance was published in the Federal Register on June 24 for greater 
dissemination. The guidance re-emphasizes the provisions in existing 
regulations that require manufacturers to address any date problems 
which may present a significant risk to public health.
    FDA also developed an article addressed to the users of radiation 
treatment planning systems regarding the need to assess these systems. 
The article was published in the newsletters of relevant professional 
associations. Staff of CDRH have participated in numerous conferences 
and video teleconferences devoted to the Year 2000 problem in 
healthcare in order to communicate with healthcare facilities regarding 
the Biomedical Equipment Clearinghouse and the need to address the Year 
2000 issue with devices.
    Although most devices are regulated by CDRH, FDA's Center for 
Biologics Evaluation and Research (CBER) regulates blood bank software, 
which is of particular concern for potential Year 2000 problems. In 
January 1998, CBER posted guidance for industry entitled ``Year 2000 
Date Change for Computer Systems and Software Applications Used in the 
Manufacture of Blood Products'' on the FDA website. The guidance 
provided specific recommendations to assist industry in its evaluation 
of computer and software systems used in the manufacture of blood 
products and to assist in evaluating the impact of potential Year 2000 
problems.
                 what is the data telling us thus far?
    As indicated above, FDA believes that approximately 2,000 
manufacturers may produce equipment that may be affected by the Year 
2000 problem. As of May 18, 1999, FDA has entered a total of 4,133 
responses from the 16,000 manufacturers originally contacted. The data 
from all of these manufacturers who have responded have been entered 
into the database on the FDA website. These numbers change daily as 
data are entered, corrected or even removed at the request of 
manufacturers. Of the 4,133 manufacturers who have responded, 3,401 
have reported that their products do not use daterelated data or all of 
their products are compliant. Six hundred and sixty-one manufacturers 
[312 manufacturers listed on the FDA website and 349 manufacturers 
listed on the manufacturer's website] have reported one or more 
products with date-related problems. Four hundred and twenty 
manufacturers have provided World Wide Web links (URLs) to data 
provided on their own manufacturer-operated websites. There are a few 
submissions in which the data were incomplete or unclear in some 
manner. FDA is communicating with these manufacturers to obtain 
clarification before entering the information into the database. FDA 
will continue to post additional responses as they are received.
    In reviewing the data received from the manufacturers so far, FDA 
sees no indication of widespread problems which will place patients at 
risk, if and only if the solutions being developed and offered by 
manufacturers are implemented as they have indicated. Of course, FDA 
can not make assurances about manufacturers who have not reported 
product status. FDA believes that the information received to date 
confirms our original expectation that the Year 2000 problems with 
medical devices will not be significant or widespread if facilities 
take appropriate actions to address this issue. There will be specific 
problems which need correction; however, the current assessment is that 
they are much more likely to disrupt patient care rather than be of 
direct danger to patients. Nonetheless, such disruption could be 
serious and the potential for it to happen certainly merits rigorous 
attention to the problem.
    One indication of FDA's belief that Year 2000 problems are not 
significant or widespread has been borne out by DVA in their testimony 
and responses to questions before the House Committee on Veterans' 
Affairs, Subcommittee on Oversight and Investigations. The DVA 
indicated that they had received answers from manufacturers on all of 
the critical care device components and they expected to be ready for 
Year 2000.
Legal Authority
    FDA's Quality System Regulation (QSR) (21 CFR 820) places on 
manufacturers an ongoing responsibility to take corrective and 
preventive actions that may include recall for problems with current 
production. Devices automated with computer software are subject to all 
requirements of Title 21, Code of Federal Regulations (CFR), Part 820, 
unless expressly exempted by regulation. The regulation puts in place a 
system whereby manufacturers must incorporate a set of procedures and 
processes in their design and manufacturing activities to assure that 
products being manufactured are safe, effective finished products. The 
QSR regulation does not require the submission of any reports to FDA, 
however, it does require firms to maintain internal procedures and 
documentation of corrective and preventive actions (21 CFR 820.100).
    The Removals and Corrections Regulation (21 CFR 806) requires 
manufacturers to submit reports to FDA. In order to be reportable, a 
Year 2000 problem must pose a ``risk to health'' as defined in section 
806.2(j). Many of the problems reported in the Biomedical Equipment 
database or on manufacturers' Year 2000 Web pages concern date 
recording or display problems that are readily apparent to the user and 
are unlikely to pose a risk to health. In the Year 2000 context, a 
decision to correct a problem may occur long before the correction 
itself is actually announced to customers. Once the decision for action 
is made, however, and if the action is to correct a risk to health, 
then the firm has 10 working days to notify the Agency through a report 
of correction or removal. A firm that previously notified FDA about a 
removal or correction through a Medical Device Report (under 21 CFR 
803) does not have to submit an additional report under 21 CFR 806.
    FDA will continue to emphasize to manufacturers the importance of 
reporting on the Year 2000 compliance status of their products and take 
additional steps to boost the response rate. Healthcare facilities need 
information from all manufacturers to properly prepare and plan for any 
actions they need to take to assure their devices needing corrections 
or updates receive these well before the Year 2000.
                               conclusion
    Thank you for the opportunity to update you about the issue of the 
Year 2000 and medical devices. Let me assure you that FDA takes this 
issue very seriously and is committed to a scientifically sound 
regulatory environment which will help provide Americans with the best 
medical care. In the public interest, FDA's commitment must be coupled 
with a reciprocal industry commitment: that medical device firms will 
meet high standards in the design, manufacture, and evaluation of their 
products. FDA recognizes that this can only be attained through a 
collaborative effort--between government and industry--grounded in 
mutual respect and responsibility. The protections afforded the 
American consumer, and the benefits provided the medical device 
industry, cannot be underestimated.
    FDA will continue to provide any assistance it can to address 
specific problems that any other agency, such as the DVA, identifies. 
FDA also is working with other agencies, patient groups, medical 
associations and industry to optimize data collection and information 
sharing. FDA will continue urging manufacturers to ensure the continued 
safety and effectiveness of their medical devices by ensuring that 
their devices can perform date recording and computations that will be 
unaffected by the Year 2000 date change.
    Thank you for the opportunity to testify.

    Mr. Bilirakis. Thank you very much, sir.
    Dr. Shope, I know you are not prepared to give an opening 
statement, but do you have anything you would like to add to 
what Mr. Hubbard has said, at least at this point?
    Mr. Shope. No, Mr. Chairman, I think we will just respond 
to questions.
    Mr. Bilirakis. Okay. Mr. Willemssen, please proceed, sir.

                 TESTIMONY OF JOEL C. WILLEMSSEN

    Mr. Willemssen. Thank you, Mr. Chairman, Chairman Upton, 
Ranking Member Brown, members of the subcommittees. Thank you 
for inviting us to testify today. As requested, I will briefly 
summarize our statement.
    As you have noted, biomedical equipment that uses a 
computer or embedded chip to perform date or time calculations 
can be susceptible to a Y2K problem. The significance of that 
problem can range from a nuisance to the more serious, with a 
potential to decrease patient safety.
    FDA has made progress in obtaining Y2K compliance 
information from manufacturers in establishing its biomedical 
equipment clearinghouse. As of May 10, over 4,000 biomedical 
equipment manufacturers have submitted data to that 
clearinghouse. About 60 percent reported having products that 
do not use a date, while about 8 percent reported having date-
related problems. FDA is now in the process of getting more 
detailed information that is product-specific and plans to put 
that on its website.
    Less progress has been made in reviewing biomedical 
equipment test results. Last year, we recommended that HHS take 
steps to review manufacturers' compliance test results for 
critical-care and life-support biomedical equipment, to give 
the public additional assurance that these items would work as 
expected, come January 2000. However, at that time in response 
to our report, HHS had said that submitting compliance 
certifications alone was sufficient.
    What we have found, in contrast to that position, was that 
some hospitals were actually going out and testing their own 
biomedical equipment. They felt it was necessary to prove that 
they had exercised due diligence in the protection of patient 
health and safety. Hospital officials, in some cases, have told 
us that their testing has identified some non-compliant 
equipment that manufacturers had certified as compliant.
    We recently met with HHS and FDA to discuss options for 
reviewing test results, and we are pleased to hear in its 
testimony today that FDA is moving out in this regard. I think 
it will provide you, the Congress, and the American public with 
greater assurance that biomedical equipment items, especially 
critical-care and life-support items, will work as intended 
come the turn of the century.
    Now, while there is much information now available on 
biomedical equipment, it is still not clear how extensively 
healthcare providers are using this available information. 
According to the FDA, it has taken steps to make users aware of 
the clearinghouse. More than 100,000 inquiries have been made. 
However, according to FDA it is not possible to determine the 
source of the inquiries.
    Further, of the Y2K health surveys we reviewed, only the 
AMA survey mentioned the FDA clearinghouse, and for the AMA 
survey only 11 percent of the respondents indicated they were 
aware of the FDA clearinghouse.
    Other information contained in available surveys is also 
not encouraging. For example, less than one-third of hospitals 
responding to the survey of the HHS Inspector General stated 
that the biomedical equipment was compliant, while only 6 
percent of hospitals responding to an American Hospitals 
Association survey said their equipment was compliant. It is, 
therefore, quite apparent that there is a great deal of work 
remaining in a relatively short amount of time. That concludes 
the summary of my statement, and I would be pleased to address 
any questions you may have.
    [The prepared statement of Joel C. Willemssen follows:]
  Prepared Statement of Joel C. Willemssen, Director, Civil Agencies 
 Information Systems, Accounting and Information Management Division, 
                       General Accounting Offive
    Messrs. Chairmen and Members of the Subcommittees: We are pleased 
to be here today to discuss the Year 2000 (Y2K) compliance status of 
biomedical equipment.<SUP>1</SUP> The question of whether medical 
devices such as magnetic resonance imaging (MRI) systems, x-ray 
machines, pacemakers, and cardiac monitoring equipment can be counted 
on to work reliably on and after January 1, 2000, is obviously of 
critical importance to our nation's health care. To the extent that 
biomedical equipment uses computer chips, it is vulnerable to the Y2K 
problem.<SUP>2</SUP> In the medical arena, such vulnerability carries 
with it possible safety risks.
---------------------------------------------------------------------------
    \1\ Biomedical equipment refers both to medical devices regulated 
by the Food and Drug Administration (FDA), and scientific and research 
instruments, which are not subject to FDA regulation.
    \2\ The Y2K problem will affect everyone because it is rooted in 
how dates are recorded and computed. For the past several decades, 
computer systems have typically used two digits to represent the year, 
such as ``98'' for 1998, in order to conserve electronic data storage 
and reduce operating costs. In this format, however, 2000 is 
indistinguishable from 1900 because both are represented as ``00.'' As 
a result, if not modified, systems or applications that use dates or 
perform date- or time-sensitive calculations may generate incorrect 
results beyond 1999.
---------------------------------------------------------------------------
    Responsibility for oversight and regulation of medical devices, 
including the impact of the Y2K problem, lies with FDA--an agency 
within the Department of Health and Human Services (HHS). FDA is 
collecting information from medical device and scientific and research 
instrument manufacturers, and providing this information through an 
Internet World Wide Web site. In addition, the Veterans Health 
Administration (VHA) <SUP>3</SUP>--a key federal health care provider--
has taken a leadership role in determining the Y2K compliance status of 
biomedical equipment by sharing the information obtained from 
manufacturers with FDA.
---------------------------------------------------------------------------
    \3\ A component of the Department of Veterans Affairs (VA).
---------------------------------------------------------------------------
    My testimony today will discuss (1) the status of FDA's Federal Y2K 
Biomedical Equipment Clearinghouse, (2) HHS' and VA's positions on our 
recommendation to obtain and review the test results supporting 
manufacturers' compliance certifications for critical care/life support 
medical devices, and (3) information on the biomedical equipment 
compliance status of health care providers.
                               background
    Biomedical equipment is indispensable; it plays a central role in 
virtually all health care. It is defined as any tool that can record, 
process, analyze, display, and/or transmit medical data--some of which 
may include medical devices, such as pacemakers, that are implanted in 
patients--and laboratory research instruments, such as gas 
chromatographs <SUP>4</SUP> and microscopes. Such equipment may use a 
computer for calibration or for day-to-day operation. If any type of 
date or time calculation is performed, susceptibility to a Y2K problem 
exists, whether the computer is a personal computer that connects to 
the equipment remotely, or a microprocessor chip embedded within the 
equipment itself. This could range from the more benign--such as 
incorrect formatting of a printout--to the most serious--incorrect 
operation of equipment with the potential to decrease patient safety. 
The degree of risk depends on the role of the equipment in the 
patient's care.
---------------------------------------------------------------------------
    \4\ Such instruments are used to separate the components of a 
solution with heat and measure their relative quantities.
---------------------------------------------------------------------------
    According to officials at VHA, biomedical equipment manufacturers 
reporting products as noncompliant most frequently cite incorrect 
display of date and/or time as the main problem. For example, a 
noncompliant electrocardiograph machine, used to monitor heart signals, 
would print charts with two-digit dates, showing the year 2000 as 
``00.'' According to a VHA official, these cases generally do not lead 
to the devices' failing to operate and do not present a risk to patient 
safety because health care providers, such as physicians and nurses, 
are able to work around such problems.
    However, VHA recognizes that incorrect date-time representation or 
use could pose a risk when the date is used in a calculation, or when 
records generated by the equipment are sorted automatically to present 
a picture of a patient's condition over time to a physician for 
diagnosis and treatment. Specifically, when records are sorted by date 
of recording, the accuracy of such dates can be critical to a 
physician's monitoring of patient progress in, for instance, the case 
of blood sugar readings. If readings were taken, for example, on 
December 25, 27, and 30, 1999, and again on January 1, 2000, the 
ordering might appear with the last entry first if it were abbreviated 
``00'' and read as January 1, 1900. If the physician or other clinician 
did not pay close attention, a diagnosis or treatment decision could be 
made based on a misreading of the data trend.
    VHA also recognizes that an equipment function that depends on a 
calculation involving a date, and that is performed incorrectly as the 
result of a date problem, could present a risk to the patient. Examples 
of such equipment include a product used for planning the delivery of 
radiation treatment using a radioactive isotope as the source. An error 
in the calculation of the radiation source's strength on the day the 
therapy is to be delivered could result in a dose that is either too 
low or too high, which could have an adverse impact on the patient. 
Other examples of equipment presenting risk to patient safety--
identified by FDA--include hemodialysis delivery systems; therapeutic 
apheresis systems; <SUP>5</SUP> alpha-fetoprotein kits for neural tube 
defects; <SUP>6</SUP> various types of medical imaging equipment; and 
systems that store, track, and recall images in chronological order.
---------------------------------------------------------------------------
    \5\ Such equipment allows therapeutic apheresis--the exchange or 
purification of blood plasma. Therapeutic apheresis is recognized as a 
successful treatment for more than 40 autoimmune diseases.
    \6\ Devices that use computer calculations of gestational status to 
help assess the risk of neural tube defects in the fetuses of pregnant 
women.
---------------------------------------------------------------------------
     much biomedical equipment status information available in fda 
                             clearinghouse
    Last September we testified that FDA was trying to determine the 
Y2K compliance status of biomedical equipment.<SUP>7</SUP> FDA's goal 
was to provide a comprehensive, centralized source of information on 
the compliance status of biomedical equipment used in the United States 
and make this information publicly available on a web site. However, at 
the time, FDA had a disappointing response rate from manufacturers to 
its letter requesting compliance information. And while FDA made this 
information available to the public, it was not detailed enough to be 
useful. Specifically, FDA's list of compliant manufacturers lacked 
detailed information on the make and model of compliant equipment.
---------------------------------------------------------------------------
    \7\ Year 2000 Computing Crisis: Leadership Needed to Collect and 
Disseminate Critical Biomedical Equipment Information (GAO/T-AIMD-98-
310, September 24, 1998).
---------------------------------------------------------------------------
    To provide more detailed information on the compliance status of 
biomedical equipment, as well as to integrate more detailed compliance 
information already gathered by VHA, we recommended that HHS and VA 
jointly develop a single data clearinghouse to provide such information 
to all users. We said development of the clearinghouse should involve 
representatives from the health care industry, such as the Department 
of Defense's Office of the Assistant Secretary of Defense (Health 
Affairs) and the Health Industry Manufacturers Association. We 
recommended that the clearinghouse contain compliance status 
information by product make and model, and identify manufacturers that 
are no longer in business. Finally, we recommended that FDA and VHA 
determine what actions should be taken regarding biomedical equipment 
manufacturers that had not provided compliance information.
    In response to our recommendation, FDA--in conjunction with VHA--
established the Federal Y2K Biomedical Equipment 
Clearinghouse.<SUP>8</SUP> With the assistance of VHA, the Department 
of Defense, and the Health Industry Manufacturers Association, FDA has 
made progress in obtaining compliance status information from 
manufacturers. For example, according to FDA, 4,116 biomedical 
equipment manufacturers had submitted data to the clearinghouse as of 
May 10, 1999. As shown in figure 1, about 60 percent reported having 
products that do not employ a date, while about 8 percent reported 
having date-related problems such as incorrect display of date/time. 
Also, according to FDA, 232 manufacturers have not yet responded.
---------------------------------------------------------------------------
    \8\ The clearinghouse can be found on the World Wide Web at http://
www.fda.gov/cdrh/yr2000/year2000.html.
---------------------------------------------------------------------------

 Figure 1: Biomedical Equipment Compliance-Status Information Reported 
              to FDA by Manufacturers as of May 10, 1999.
[GRAPHIC] [TIFF OMITTED] T7443.001

    Note: Total number of manufacturers = 4,116.
    Source: FDA.

    In addition, FDA did not have complete information on the number of 
products with date-related problems because some manufacturers did not 
clearly identify their products this way in their original submissions. 
However, according to FDA, on March 3, 1999, it requested information 
on specific product types for products with date-related problems. FDA 
told us it is now receiving updated data.
    Also, in response to our recommendation, FDA has expanded 
information in the clearinghouse; users can now find information on 
manufacturers that have merged with or have been bought out by other 
firms. Further, in collaboration with the National Patient Safety 
Partnership, <SUP>9</SUP> FDA is in the process of obtaining more 
detailed information from manufacturers on noncompliant products, such 
as descriptions of the impact of the Y2K problem on products left 
uncorrected. FDA also sent a March 29, 1999, letter requesting that 
medical manufacturers submit to the clearinghouse a complete list of 
individual product models that are Y2K compliant.
---------------------------------------------------------------------------
    \9\ The National Patient Safety Partnership is a coalition of 
public and private health care providers, including VA, the American 
Medical Association (AMA), the American Hospital Association (AHA), the 
American Nurses Association, and the Joint Commission on Accreditation 
of Healthcare Organizations.
---------------------------------------------------------------------------
     fda is now considering reviewing manufacturers' certifications
    Last September, we expressed concern that FDA relied on 
manufacturers alone to validate, test, and certify that their medical 
devices were Y2K compliant.<SUP>10</SUP> Further, we said, since FDA 
did not require manufacturers to submit test results certifying 
compliance, the agency lacked assurance that manufacturers have 
adequately addressed the Y2K problem for noncompliant devices. 
Accordingly, we recommended that HHS and VA take prudent steps to 
review manufacturers' compliance test results for devices previously 
determined to be noncompliant but now deemed by manufacturers to be 
compliant, or devices for which concerns about compliance remain. We 
also recommended that HHS and VA determine what legislative, 
regulatory, or other changes were necessary to obtain assurances that 
the manufacturers' devices were compliant, including the need to 
perform independent verification and validation (IV&V) of the 
manufacturers' certifications.
---------------------------------------------------------------------------
    \10\ Year 2000 Computing Crisis: Compliance Status of Many 
Biomedical Equipment Items Still Unknown (GAO/AIMD-98-240, September 
18, 1998).
---------------------------------------------------------------------------
    In response to our report, HHS stated that it did not concur with 
our recommendation to review test results supporting medical device 
equipment manufacturers' compliance certifications. It reasoned that 
submission of appropriate certifications was sufficient, further 
stating that it did not have the resources to undertake such reviews. 
However, we were not aware of HHS' requesting resources from the 
Congress for this purpose.<SUP>11</SUP> In February 1999, FDA's Special 
Assistant to the Director of the Office of Science and Technology, part 
of the Center for Devices and Radiological Health, likewise said that 
FDA saw no need to question manufacturers' certifications. VA stated 
that it had no legislative or regulatory authority to implement the 
recommendation to review manufacturers' test results.
---------------------------------------------------------------------------
    \11\ Year 2000 Computing Crisis: Readiness of Medicare and the 
Health Care Sector (GAO/T-AIMD-99-160, April 27, 1999).
---------------------------------------------------------------------------
    In contrast to FDA's and VHA's positions, several hospitals in the 
private sector said that testing of biomedical equipment is necessary 
to prove that they have exercised due diligence in the protection of 
patient health and safety. Officials at three hospitals told us that 
their biomedical engineers established their own test programs for 
biomedical equipment and, in many cases, contacted manufacturers for 
their test protocols. Several of these engineers informed us that their 
testing identified some noncompliant equipment that the manufacturers 
had previously certified as compliant. According to these engineers, to 
date, the equipment found to be noncompliant all had display problems 
and was not critical care/life support equipment. Equipment found to be 
incorrectly certified as compliant included a cardiac catheterization 
unit, a pulse oxymeter, medical imaging equipment, and ultrasound 
equipment.
    According to FDA, VHA, and the Emergency Care Research 
Institute,<SUP>12</SUP> manufacturers are best qualified to analyze 
embedded systems or software to determine Y2K compliance. They further 
believe that manufacturers are the ones with full access to all design 
and operating parameters contained in the internal software or embedded 
chips in the equipment. VHA believes that such testing can potentially 
cause irreparable damage to expensive health care equipment, causing it 
to lock up or otherwise cease functioning. Further, a number of 
manufacturers have recommended that users not test for these same 
reasons.
---------------------------------------------------------------------------
    \12\ An international, nonprofit health services research agency. 
This organization believes that superficial testing of biomedical 
equipment by users may provide false assurances, as well as create 
legal liability exposure for health care institutions.
---------------------------------------------------------------------------
    We continue to believe that organizations such as FDA can provide 
medical device users with a greater level of confidence that their 
equipment is Y2K compliant through independent reviews of 
manufacturers' compliance test results. The question of whether to 
independently verify and validate biomedical equipment that 
manufacturers have certified as compliant is one that must be addressed 
jointly by medical facilities' clinical staff, biomedical engineers, 
and corporate management. The overriding criterion should be ensuring 
patient health and safety.
    We recently met with HHS' Chief Information Officer and FDA's 
Associate Commissioner for Policy Coordination to discuss options for 
FDA to obtain and review test results supporting manufacturers' Y2K 
compliance certifications. FDA said that it is now thinking about 
reviewing manufacturers' IV&V reports that support compliance 
certification. FDA also informed us last week that it is developing a 
list of critical care/life support biomedical equipment. It plans to 
complete this list by June 1, and use it to identify manufacturers of 
such equipment who have not yet responded to its requests for 
compliance information. In addition, an FDA official stated that the 
list would be used in considering options for reviewing manufacturers' 
test results supporting compliance certifications.
information on biomedical equipment compliance of health care providers 
                               incomplete
    While information is available on the Y2K compliance status of 
biomedical equipment through the FDA clearinghouse and other sources, 
it is not clear at this time how extensively health care providers are 
using this information to determine their Y2K readiness. According to 
FDA, it has taken steps to make users aware of the clearinghouse. For 
example, FDA has published articles in professional trade journals and 
participated in conferences aimed at health care facilities.
    FDA also informed us that the Federal Y2K Biomedical Equipment 
Clearinghouse had received about 101,000 inquiries between May 1998 and 
January 1999. However, according to FDA, it is not possible to 
determine the source of the inquiries.
    To determine whether health care providers were using the FDA 
clearinghouse to assess the Y2K compliance status of their biomedical 
equipment, we reviewed readiness surveys sent to providers by several 
federal agencies and professional health care 
associations.<SUP>13</SUP> Except for the AMA's survey, none referred 
to the FDA clearinghouse. Eleven percent of the respondents to the AMA 
survey indicated they were aware of the FDA clearinghouse.
---------------------------------------------------------------------------
    \13\ These include HHS' Office of the Inspector General, the AHA, 
and AMA.
---------------------------------------------------------------------------
    In addition, the Y2K readiness status of biomedical equipment at 
health care providers is not known because a significant number of 
providers did not respond to the surveys. As shown in table 1, the 
response rates to a survey from the HHS Office of the Inspector General 
to urban hospitals, nursing facilities, home health agencies, and 
physicians were all less than 50 percent. The response rates to surveys 
from the AHA and the AMA on this subject were even less, at 29 and 7.5 
percent, respectively. Lastly, the response rate to a survey from the 
American Health Care Association (AHCA) <SUP>14</SUP> was very 
disappointing, at less than 3 percent.
---------------------------------------------------------------------------
    \14\ This is a federation of 50 state health organizations that 
represent nearly 12,000 nonprofit and for-profit assisted living, 
nursing facility, long-term care, and sub-acute care providers.

                        Table 1: Survey Results of Y2K Readiness of Biomedical Equipment
----------------------------------------------------------------------------------------------------------------
                                                                                         Percentage   Percentage
                                                                 Number     Number of    Responding   Responding
           Entity Performing Survey/Group Surveyed              Surveyed    Responses    Currently       Not
                                                                                         Compliant    Applicable
----------------------------------------------------------------------------------------------------------------
HHS Office of the Inspector General \1\ (December 1998)
HOSPITALS
  Rural.....................................................          500          281           31            3
  Urban.....................................................          500          208           23            4
NURSING FACILITIES
  Rural.....................................................          500          221           21           31
  Urban.....................................................          500          191           21           27
HOME HEALTH AGENCIES
  Rural.....................................................          500          136           26           41
  Urban.....................................................          500          133           21           39
PHYSICIANS
  Rural.....................................................          500          124           30           36
  Urban.....................................................          500           95           20           52
American Hospital Association (AHA) (February 1999).........        2,000          583            6          n/a
American Medical Association (AMA) (February 1999)..........        7,000          522          \2\          n/a
American Health Care Association (AHCA) \1\ (March 1999)....       12,000          342           24           28
----------------------------------------------------------------------------------------------------------------
\1\ The survey instructions directed respondents to mark N/A if a question did not apply.
\2\ According to the survey results, 65 percent of responding physicians rent or lease biomedical equipment that
  will be affected by Y2K; 41 percent of them were confident that their vendors have prepared the equipment for
  Y2K. Data were not provided on the remaining 35 percent of responding physicians.
Source: Organizations listed. We did not independently verify this information.

    The survey results also indicated that much work remains in 
renovating, testing, and implementing compliant biomedical equipment. 
Table 1 shows that less than one third of the hospitals responding to 
HHS' Office of the Inspector General stated that their biomedical 
equipment was currently compliant, and only 6 percent of the hospitals 
responding to the AHA survey stated that their biomedical equipment was 
currently compliant. At the same time, more than one third of the home 
health agencies and physicians responding to HHS' Office of the 
Inspector General stated that the survey question on biomedical 
equipment compliance did not apply to them.
    In summary, while compliance status information is available for 
biomedical equipment through the FDA clearinghouse, FDA has not yet 
reviewed test results supporting manufacturers' certifications. FDA has 
now begun to think about obtaining and reviewing IV&V reports that 
support manufacturer compliance certifications. Such reviews would 
provide the American public with a higher level of confidence that 
medical devices will work as intended. However, because a significant 
number of health care providers are not responding to Y2K surveys sent 
by federal agencies and professional associations, the public lacks 
information on the readiness of providers. Such information would help 
alleviate public concerns about the Y2K readiness of health care 
providers and the biomedical equipment they use in patient care.
    Messrs. Chairmen, this concludes my statement. I would be pleased 
to respond to any questions that you or other members of the 
Subcommittees may have at this time.

    Mr. Bilirakis. Thank you, Mr. Willemssen.
    I have a couple of generic questions, but before I go into 
that, I would like to ask the FDA if FDA is concerned, was 
concerned, will be concerned about the safety of the medical 
device to operate properly after January 1?
    Do you feel, Mr. Hubbard, that the agency presently has 
adequate legal authority to pull a product from the market and 
take steps to ensure that the patients will not be at risk, or 
will it require something from the Congress to be helpful in 
that regard?
    Mr. Hubbard. Well, certainly, we have written regulations 
based on the statutory authority we have been given, Mr. 
Chairman, to do that. If we determine that a medical device has 
not been properly made compliant, and could fail, and could 
cause patient harm, yes, we could order that----
    Mr. Bilirakis. You do have that authority now, you feel?
    Mr. Hubbard. Yes, sir, we believe we do.
    Mr. Bilirakis. You won't need any help from the Congress in 
that regard, any----
    Mr. Hubbard. On that particular issue, I don't believe so.
    Mr. Bilirakis. Are there other issues, on that particular 
issue, but are there other issues involving this where you feel 
that you need more legislative authority in order to be able to 
do your job better?
    Mr. Hubbard. I think funding has really been the issue, to 
some extent, because the program that is doing this, Dr. 
Shope's program, and the other folks, they are working very 
hard, as you know, to get new medical devices on the market 
because we are a gateway to this new technology. It is very 
important and we are putting a huge amount of effort into 
getting all these new products on the market and to take those 
people away to do Y2K has been a stressful situation. But we 
have been seeking additional money through the appropriations 
process, and some has been coming forward.
    Mr. Bilirakis. Thank you. Mr. Hubbard.
    Dr. Shope, based on your experiences at FDA on this issue, 
are you confident that the medical technology industry will be 
ready on January 1?
    Mr. Hubbard. I think we are, Mr. Chairman. I would ask Dr. 
Shope to elaborate on that, if I may.
    Mr. Bilirakis. Doctor?
    Mr. Shope. Yes, sir. I think from my reading of the 
information we have received in our data base and discussions 
with manufacturers, and knowing our regulatory process, that 
manufacturers are taking the necessary steps to evaluate and 
assess their products, to provide information to customers 
about the status of those products, and the steps to remediate 
products, the upgrades, or the fixes that the manufacturer can 
make available for those products.
    So, I am rather sanguine about the situation with regard to 
the manufacturers' actions. I think the question, if there is 
one, is the extent to which hospitals, who own this equipment, 
and use it, are taking advantage of the information and taking 
the necessary steps to ensure that the products they have in 
their inventory have been checked, have been verified as 
having----
    Mr. Bilirakis. All right, that is certainly a significant 
question, I agree with you, but are we taking steps to be sure 
that that is taking place on a timely basis, in the hospitals?
    Mr. Shope. Certainly, FDA has taken as many steps as we can 
to inform the hospitals about this issue, working with the 
American Hospitals Association, the American Medical 
Association, very active participants in our healthcare sector 
working group under Mr. Koskinen's Y2K Conversion Council out 
of the White House. So there is a lot of communication going on 
there.
    FDA took steps such as publishing in the Journal of the 
American Medical Association, mailings of our FDA medical 
bulletin, and other kinds of trade press, and other types of 
announcements, to make people aware of this issue.
    Controlling hospitals is a little bit out of FDA's purview. 
Typically, we are dealing with the manufacturers and the 
manufacturers' responsibilities to provide good products, and 
get those into the hands of the users.
    So, I think that this is an issue that we at FDA have not 
seen as our prime role, as far as actually ensuring that 
hospitals are doing this.
    Mr. Bilirakis. Who has that prime role?
    Mr. Shope. Well, I think that it is the responsibility of 
each hospital to make sure that their patients are treated with 
equipment that is going to work and do the right job.
    Mr. Bilirakis. Let me go to Mr. Willemssen. Mr. Willemssen, 
of course, you and Mr. Hubbard both testified to the fact that 
the GAO has made certain recommendations to them. Taking all 
that into consideration, do you agree with the positive answers 
that we have received from the FDA to my question?
    Mr. Willemssen. As of today, I am more optimistic than I 
would have been even at the hearing that you held a month ago. 
However, there is still a great deal of work remaining. What I 
heard in the oral statement today was very reassuring, that FDA 
intends, for those critical-care and life-support items, to get 
additional information, making sure they do work as intended.
    I will also point out that, if you look at the kind of 
response rate that FDA has gotten compared to where it was less 
than a year ago, that has gone up tremendously, and they should 
be given credit for this. There still are a couple hundred 
manufacturers outstanding who have not yet responded, but this 
is a tremendously better rate than it was. So, bottom line, I 
am more optimistic, but there is a lot left to do, and 
relatively little time to do it.
    Mr. Bilirakis. So, what you are saying is that we are in 
danger of not being ready, as far as GAO is concerned, on 
January 1?
    Mr. Willemssen. I think what is critical right now is that 
FDA follow through on some of the steps that they have 
mentioned here today, and very importantly, to publicize the 
results of those steps, and make it clear to the public, what 
we know and what we don't know. As we move closer to the turn 
of the century and to the extent that we can, increasing the 
percentage of what we do know will go a long way to reducing 
any potential panic that could result.
    Mr. Bilirakis. With the indulgence of the subcommittee, the 
question of whether the hospitals are ready, that Dr. Shope 
mentioned, I mean that is a very significant question, and 
certainly at least the patients of those hospitals ought to 
know whether they are going to be ready, God knows. But, do you 
have any suggestions as to how that can be done, what can be 
done there?
    Mr. Willemssen. I would concur with you, the available data 
are not reassuring on the extent to which hospitals appear, or 
are saying they are checking this. So, I think that FDA can 
step-up its publicity campaign a few more degrees. For example, 
it could make sure this is a major agenda item--and you might 
want to address this with the second panel--at some of the 
major conventions, health-related conventions.
    Also, I think, that when FDA plans to come out on June 1--I 
believe that is the date they are listing the critical-care and 
life-support items they will be checking for Y2K--it should be 
publicizing this list and letting the public know, ``We are 
going to take an extra step for these kinds of items, and give 
you added assurance of what the Y2K issues are, and what we 
have found.''
    So, I think, again, that the FDA has done some good things 
in putting the word out. They can do more, though, especially 
as we get closer to the date.
    Mr. Bilirakis. Well, you know, I can't get over how we have 
gotten into this fix. We have put people on the moon; we have 
done so many great things technologically, and we all knew that 
the year 2000 was coming up. I am certainly not computer 
literate, I am ashamed to say, but most people are, certainly 
the experts and the agencies, departments, and with the various 
companies out there in the industry are. They have all known 
this was coming up, and yet we are running into this problem. 
If we have got to put ourselves into the shoes of that patient 
out there who reads about this, and maybe unduly so, is being 
really shook up--well, all right, Mr. Brown.
    Mr. Brown. Mr. Chairman, thank you. I would first like to 
ask unanimous consent to keep the record open for 3 days, say, 
for questions to be submitted.
    Mr. Bilirakis. By all means and, of course, we always ask 
the witnesses if they are willing to receive additional 
questions, and are willing to respond to them. By all means, 
without objection.
    Mr. Brown. Mr. Willemssen, you have made the argument 
several times that FDA should require manufacturers to submit 
test results certifying compliance because, unless they do so, 
the agency really has no assurance that those manufacturers 
have adequately addressed the Y2K problem. Why should the FDA 
do that?
    Mr. Willemssen. We recommended this, for a subset of 
biomedical equipment items, those considered to be in the 
critical-care and life-support areas. So, we don't recommend 
that for all items, but just a small subset where the impact of 
a Y2K failure would have resulting effects on patient safety. 
We think this additional step is necessary to provide the 
public with added assurance that these items are going to work 
as anticipated.
    As I mentioned in my testimony, we have identified some 
hospitals who told us that in some cases their own testing has 
identified items thought to be compliant that were not 
compliant. Now, in those cases, none of those, to date, that we 
are aware of have had a safety impact. They have primarily been 
display problems. But I think that because of the criticality 
of the issue, we think for that subset of items, that the 
additional step is warranted.
    Mr. Brown. What form would the data take? Would it be in 
great detail, in binders, and hundreds of pages or would it be 
a study or sort of outline of the methodology and then a 
concise report of the results?
    Mr. Willemssen. It would not entail, or should not entail, 
any additional work on the part of the manufacturers because 
they should already have those results available in order for 
them to come to a conclusion that the item, is indeed, 
compliant. I would say, the process would work along the lines 
of FDA asking to look at the information to see if there is 
support behind the determination that the item was compliant.
    Mr. Brown. What kind of resources would it take for FDA to 
do that? Have you conducted any analysis to determine if the 
FDA even has the resources to implement your recommendation, 
even if, in fact, it agreed with it?
    Mr. Willemssen. In talking with FDA on this issue, we 
suggested that they not just look internally, but they also 
look at other available resources, both private and public. You 
may or may not know, one of the leaders in this area has been 
the Department of Veterans Affairs, who actually was on board 
first in putting together quite a bit of information on 
biomedical equipment items. FDA then came on board with VA, but 
VA also has some expertise in this area. So, I think in looking 
at the resource question, FDA needs to go outside of its own 
boundaries and look at what available expertise there is.
    Mr. Brown. Dr. Shope or Mr. Hubbard, do you think that FDA 
has the technical expertise internally and in other parts of 
the government into which it can reach to do that?
    Mr. Hubbard. Well, not in any great numbers, Mr. Brown. We 
have a small staff of physicists and other biomedical engineers 
in Mr. Shope's office. It is a handful of people. They probably 
do have the technical expertise. Beyond that, I don't think so, 
because the kinds of data that you would get from a company, 
you know, probably large stacks of verification data and test 
data results would require someone with some knowledge of the 
product and the way that the software was designed and the way 
it operates. In the case of a fix of a non-compliant product, 
how that was done, and how that was tested and verified to be 
sure.
    There may be the technical talent out in the country that 
could be contracted with to do that, of course, understand that 
the numbers could be perfectly enormous at a 100,000 different 
medical devices and 1,700 different categories. But only around 
2,000 perhaps, have some date issue. We think, perhaps, in 
range of 300 to 600 actually are of the type, so called, 
critical care devices that Mr. Willemssen is talking about that 
might be in that category. So the number that would be most 
concerned is a much more manageable number. We believe that it 
would be possible to contract with professionals in the IT 
area, and perhaps, engineers to go to firms to look at this 
data. It would cost some millions of dollars, however, to do 
that. And I think there is a question as to whether or not the 
taxpayers' funds should be spent to do that sort of thing. That 
is why we are proposing our sampling proposal, which could be 
done much more cheaply, to build additional confidence, and 
then determine if, in fact, we need to do more than that.
    Mr. Brown. Mr. Willemssen, you note in your testimony, FDA 
saw no need to question manufacturers certifications regarding 
Y2K compliance status. Is GAO taking the position that FDA 
should question the reliability or truthfulness of 
manufacturers certificates?
    Mr. Willemssen. What we are saying is for those critical 
care and life support items, added assurance is needed to the 
American public to make sure that they work as intended. Some 
hospitals have told us that their own testing has identified 
some equipment that was thought to be compliant that wasn't. It 
is not to say that organizations are not to be trusted, but 
where the criticality is high, an extra pair of eyes could be 
very useful.
    Mr. Brown. Mr. Chairman, could I ask for 60 additional 
seconds?
    [Mr. Upton nods head to indicate yes.]
    Mr. Brown. Thank you.
    So, Mr. Willemssen, if the FDA does certify that a 
manufacturer has undergone Y2K compliance testing, in taking 
into play, into consideration, the comments of Mr. Hubbard 
about a possible lack of resources, including technical 
expertise in the agency, does the Government run the risk of 
becoming liable if a serious Y2K problem develops with 
equipment that the FDA reviewed?
    Mr. Willemssen. I think there can be no absolute guarantee 
that equipment will work as intended, even with additional 
checks being made. What you have done is closed the gap on the 
risk and made it more manageable for those especially critical 
items.
    Mr. Brown. You have closed the gap on the risk that have 
you, in fact, shifted some of the responsibility then to a 
Government agency from the private sector, who ultimately 
should, in fact, be responsible for compliance and for success.
    Mr. Willemssen. Well, under this recommendation, FDA would 
not be independently testing items themselves. They again, 
would be relying on the work that has been done by the 
manufacturers.
    Mr. Brown. But FDA technical experts would review the 
methodology, look at the results, and ultimately have to make * 
* *, and put a stamp of approval on it. Correct?
    Mr. Willemssen. Under that process, it ultimately come to 
some judgment as to the risk involved, and whether all 
appropriate good manufacturing practices have been followed in 
assuring themselves that this a Y2K compliant item.
    Mr. Brown. So, are they shifting some of the reliability on 
the FDA? This recommendation?
    Mr. Willemssen. I will, in part, defer to the record on 
that because I am not an attorney by training. I would defer to 
Dr. Shope and Mr. Hubbard, but we did not, on the face, see it 
in that way.
    Mr. Brown. Could Dr. Shope answer the question and then I 
will yield back? Dr. Shope.
    Mr. Shope. I just wanted to make a comment on the issue of 
the testing, or not so much testing, but the verification of 
manufacturers activities. What we are talking about here is 
really exactly the same kind of activities that FDA undertakes 
on a routine basis in our inspection of manufacturers quality 
systems. It is the quality system that a manufacturer has in 
place that gives us the assurance that they are developing, 
designing, producing, evaluating medical devices in a way that 
gives us assurance about their safety and effectiveness. And 
what we are talking about here is focusing some additional 
effort, if we were to do it, on those changes related to Y2K. 
We rely on this quality system for the initial development of 
medical devices. We rely on it when we clear them for pre-
market and we rely on them for any other kinds of changes.
    Medical devices frequently are found to have problems; 
those problems get corrected. Particularly with software 
control products, new features are added, those are done under 
the quality system and the design control process. All of that 
is done by the manufacturer, using the quality system that they 
have in place.
    I think that the issue here is that whether something 
additional is needed for dealing with these Y2K upgrades. I 
think, strongly, that our regulatory system that we have, with 
the quality systems that manufacturers use, and that FDA 
exercises oversight to verify that are in place and are being 
used gives us a high level of confidence that these activities 
are being conducted and they do give us this kind of assurance. 
The question is, do we need to do something more and additional 
and special just for the Y2K issues?
    Mr. Brown. Thank you, I thank the chairman for his 
indulgence.
    Mr. Upton. Thank you.
    Mr. Hubbard, I was very interested in seeing that there 
were, I guess, 232 companies that did not respond to the 
inquiry from FDA. What is happening to these companies? What is 
the level of your concern?
    Mr. Hubbard. All right, that is a subset of the firms that 
we believe might make products that are date dependant, as 
opposed to the large universal products that have no computer 
issue involved in them. We are continuing to pursue those 
companies. We have a contractor of calling and trying to 
identify those companies. By and large, we believe that they 
are companies that are, perhaps, foreign companies that have 
gone out of business or we can't find, otherwise, and perhaps, 
aren't marketing a product in this country anymore. Even though 
that is our suspicion, we are trying to confirm that, that is 
in fact true, and that none of those 232 are marketing any 
products. I believe, Tom, that it is actually 199 now, it is 
down to 199, we have found a few more in the last 3 days.
    Mr. Upton. Well, that is good to hear. In your statement, 
your written statement, you didn't talk about the statistical 
sampling that you have now decided to embark on that you talked 
about in your verbal statement. As I recall, you said something 
like, you are going to survey about 60 firms, is that right?
    Mr. Hubbard. Our belief is, we have asked various experts 
at the device program to look at the sorts of devices that the 
GAO has identified, as perhaps, what they call critical care 
devices. But devices that have a potentially high risk to 
patients if they were to fail due to a date dependency. We 
believe there is somewhere over 300 manufacturers of such 
devices. So, the concept would be to develop a representative 
sample of that 300-plus device manufacturers and then go out 
and audit that sample. And 60 sounded like, we are looking 
around 60 as being a good representative sample to feel that we 
have covered the range of these kinds of products.
    Mr. Upton. Is there a reason why you might have waited so 
long, the end of May, to sort of begin to do that?
    Mr. Hubbard. I think, as we have said earlier, Mr. Upton, 
we do have a fairly high confidence level that there is not a 
problem here with these products. Every time that there has 
been an allegation that a device has failed, we have followed 
up on it, stringently, and we have not been able to find the 
sorts of life-threatening concerns that exists. But that is not 
to say that, as Dr. Shope just said, that perhaps we can do 
more. The GAO is saying, take it to one more level and go into 
the firms and look at their data and quiz them more and develop 
yet an additional layer of confidence for the hospitals and the 
public and the Congress that, in fact, things are okay. We have 
a fairly high degree of confidence now that these devices have 
been attended to.
    Mr. Upton. Mr. Willemssen, have GAO's efforts primarily 
been focused on the manufacturing end and the FDA end? Have you 
at all looked at the degree of communication between the 
hospitals and their communication, their networking among 
themselves?
    Mr. Willemssen. We have to some degree, but most of our 
audit effort in this area has been focused primarily at what 
FDA actions have been taken and less so in the other areas.
    Mr. Upton. Do you think that that would be a wise approach, 
to talk to some of the hospitals to see how they are fairing?
    Mr. Willemssen. Yes. One thing, because of our concern on 
what the data was showing about the apparent lack of use by 
some of the healthcare providers of the FDA data base, we were 
pondering whether some independent organizations do spot checks 
of major healthcare providers to ask them, ``Have you checked 
the data base?'', and ``Oh, by the way, did you know that these 
particular items are considered non-compliant? Do you have any 
of these items in your inventory? You should probably go 
check.'' We don't have a high degree of confidence as to 
whether those kind of activities have been done or not. They 
may, in fact, have been done to large degree, but the data 
doesn't show this. And that is the reason for our concern.
    Mr. Upton. Thank you. Mr. Bryant.
    Mr. Bryant. Thank you, Mr. Chairman. I have just a question 
for, I guess, the FDA, Mr. Hubbard. I missed your testimony, I 
had to run to another committee meeting. So, you may have 
talked about this, and this may be a real basic question, a 
simple question, if you will. Regarding the FDA approval 
process for medical devices, has that been a standard, is that 
a standard now for approval of a medical device, that it be Y2K 
compliant?
    Mr. Hubbard. Well, it certainly is now. We have been 
identifying it, as you know, we have review staff, physicians 
and others that review new medical devices for their safety and 
efficacy. And, of course, a different process for changes in 
approved devices that are already on the market. Certainly, our 
reviewers are now making that one of the things that they look 
at. Obviously, the companies have great incentive to make sure 
that that is not a problem, but as an additional check, our 
reviewers are asking that question and making sure that there 
is not a date dependency issue with new devices going on the 
market, now.
    Mr. Bryant. How long has that been a standard? I understand 
that your testimony is that it is a standard of FDA before it 
approves a medical device, that it be Y2K compliant. How long 
has it been the standard?
    Mr. Shope. If I might answer that. We focused on this issue 
early in 1996, and I think we got a general agreement in our 
Office of Device Evaluation that, for those types of devices 
where this date issue could be a critical aspect to their 
functionality, those pre-market review staff were sensitized to 
this issue in late 1996, early 1997. We have to note, however, 
that there are two routes to market. One is a new device, the 
pre-market approval process, which gets a high level of 
scrutiny. The second is substantial equivalence. Back at the 
end of the 1997/98 timeframe, we actually had a few products 
come to market that had been under development through the 
510(k) process, that the manufacturer said, ``I realize this 
product is not Y2K compliant today, but by the time it is an 
issue for this particular product, we will have a software 
upgrade.'' So, based on the issue of substantial equivalence 
determination, those products were allowed to go to the market. 
But, the manufacturer had the understanding that he needed the 
software upgrade in the next couple of years, and to get that 
into the hands of the users. And that those products will be 
misbranded and adulterated as of year 2000, if that hadn't been 
remediated.
    Mr. Bryant. How do we catch and correct those instances 
now?
    Mr. Shope. Those are, again, products----
    Mr. Bryant. The manufacturer?
    Mr. Shope. The manufacturer knows about it already. He has 
communicated to the users of those products, if they are still 
out there, and those early software versions should be listed 
in our website as a non-compliant version that the hospital 
needs to check to make sure that they have gotten the upgrade. 
So I think the information about that is there. Again, a big 
part of the responsibility here is on the healthcare users to 
compare what they have to what has been demonstrated to have 
issues, then to take the remediation steps that are necessary.
    Mr. Bryant. Thank you. I will yield the balance of my time 
to my colleague from Iowa.
    Mr. Ganske. Thank you.
    Mr. Willemssen, I want to be sure that I heard you 
correctly. I think you quoted some study that said only 6 
percent of hospitals say that their equipment is Y2K. Was that 
correct?
    Mr. Willemssen. I believe so, yes, sir.
    Mr. Ganske. Six percent?
    Mr. Willemssen. Yes, the table on page 14 of our statement 
reflects that 6 percent statement.
    Mr. Ganske. Okay. Well, then, coupled with your other 
statement that said that you know of some hospitals that are 
doing their own testing of equipment where they say the 
manufacturers say they are compliant but then when the 
hospitals do their testing, they aren't, can you give me some 
examples of what type of equipment they have checked?
    Mr. Willemssen. Yes. There were equipment such as a cardiac 
catheterization unit, a pulse oximeter, medical imaging 
equipment, and ultrasound equipment. Now, what the hospitals 
that we talked to said, that the issues they found were display 
problems that didn't appear to have immediate health impacts.
    Mr. Ganske. Except that if you have a pulse oximeter and it 
is not reporting correctly, that can be a pretty serious 
problem.
    Mr. Willemssen. Yes.
    Mr. Ganske. Like if you had a pulse oximeter on a patient 
during anesthesia and it is incorrectly reporting. Now, Dr. 
Shope, you are shaking your head no?
    Mr. Shope. I would just say that most of these kinds of 
issues have to do with recording a record of what the device 
has done; and, typically, do not impact the actual 
functionality of the device. The pulse oximeter, I don't know 
the specifics of this one, but my information would be that 
that pulse oximeter would work as intended; it will give the 
display as intended. What might be the problem here is either 
the display on its face or a readout showing the day's date and 
time or a record of what was occurring and the date and times 
associated with that record of what the device did. Typically 
very few medical devices have a date dependency in their 
functionality. Many of the problems that we have that are 
listed as non-compliant problems are problems associated with 
keeping a record of what the device did, or the way in which 
that date is displayed.
    Mr. Ganske. But, some do have time-dependent functions, 
such as ventilators, where you set the rates and things like 
that, or dialysis machines and things like that. Is it possible 
that those could be affected by chips as well?
    Mr. Shope. It is not out of the realm of possibility. 
However, most medical devices are kept as simple as possible, 
and therefore, I can't think of very many of these issues where 
the day of the week or the day of the month, that kind of date 
record is relevant to the operation of the device. What is 
relevant perhaps is time intervals, and there are other ways of 
keeping track of that than having to record date and time 
information.
    So, we think manufacturers, the vast majority of these 
approaches, keep it as simple as possible; use only the timing 
that is necessary; don't depend on date, month, year kind of 
information when that is not necessary. So, it is not out of 
the realm of possibility that a system could be so designed.
    One of the very large issues is many medical devices are 
either controlled by, or provide data to, or through, a PC-type 
system. So if that associated PC can't keep good records of the 
date and time, any recording that it does, files that are 
stored, dates associated with that information, gets corrupted 
because of the Y2K problem. It really doesn't impact the 
functionality of the device. The service that you want from 
that device gets delivered. It is the recordkeeping associated 
with what happened that may not be as you would desired.
    Mr. Bryant. Mr. Chairman, the time is out. I will come 
back. I will try to be back for additional questions.
    Mr. Upton. Thank you. Ms. McCarthy.
    Ms. McCarthy. Thank you, Mr. Chairman. Dr. Shope, I note in 
a article from Healthcare Today last November/December, Joseph 
Jorgen's piece that states, ``Since Y2K non-compliant products 
function appropriately at this time, the Center for Devices and 
Radiological Health will clear and approve Y2K non-compliant 
devices. However, manufacturers will be informed that if these 
devices are not upgraded, they will be considered adulterated 
as of January 1, 2000.''
    You can recall products. Are there any products that you 
intend to recall because of Y2K? If, for example, some 
manufacturers face this dilemma described in this article in 
their projects, or products under investigation, you know, 
don't comply, at what point should healthcare providers go into 
contingency plans? And would you expand upon what those should 
be?
    Mr. Shope. We have no plans right now, or no products 
identified that would merit a recall as far as our authorities 
go, because, by and large, all of the products that have 
problems, those problems have been identified and the 
manufacturer is providing a route to upgrading or correction of 
that problem. It is only if there were a product which 
presented a very serious risk to injury and there was no action 
being taken by the manufacturer, there was no upgrade 
available, then our regulatory authority to do a recall would 
come into play.
    I think the contingency for hospitals, or for healthcare 
facilities, is not so much a contingency, but what they need to 
be doing now. Which is doing their inventory, assessing their 
products, determining which of the inventory might be 
susceptible to a problem, availing themselves of the solution 
that the manufacturer has provided for that problem, and 
remediating their inventory. If there are products for which 
they cannot find the manufacturer because there are a few 
manufacturers that do go out of business--I don't think this is 
a very large issue--but should they not be able to find the 
original manufacturer, and they can't obtain any technical 
information about that product, then the hospital has to make a 
decision based on what that product is and the way it could 
impact patient care as to whether they can somehow evaluate it 
themselves, have a third party evaluate it for them, or take it 
out of service. Probably the best thing is to take it out of 
service and find a replacement for that device.
    Ms. McCarthy. But, you are approving Y2K non-compliant 
devices now, correct, or is this article factually incorrect?
    Mr. Shope. Well, I think at the time that the article was 
written, back in November, we were still anticipating that we 
could get 510(k) submissions which would come in and say, I 
have a problem, I want to get clearance for the software as I 
have designed it now, but it has got to have an upgrade to be 
Y2K compliant 1\1/2\ years from now, or 2 years from now. We 
had no mechanism to deny access to market for that kind of 
product.
    Ms. McCarthy. But you do have the power of recall. So if 
you find, having taken that step that was appropriate, that 
recall is needed, because the next step, per your request, was 
not met, will you take action of recall?
    Mr. Shope. Oh, certainly, if we find any product where 
there is a potential risk to health that would rise to the 
threshold that is contemplated for the recall authority, we 
would certainly vigorously pursue that issue.
    Ms. McCarthy. Well, on a second point that you raised to my 
question on the hospitals taking necessary steps, Health 
Midwest, which is a very huge presence in my congressional 
district in Kansas City, expects to spend about $10 million to 
check the 21,000 biomedical devices that they have. This was in 
a big piece over the weekend in the Kansas City Star. How are 
the smaller hospitals going to pay for these activities, my 
teaching hospitals, Children's Mercy and others?
    Mr. Shope. If they are going to attempt to test all of 
their inventory, they have a rather tremendous undertaking. 
However, I think there is real question about whether hospitals 
need to do this kind of testing. There are a number of groups 
that have weighed in on this issue, FDA has not taken an 
official position, but I think our knowledge of the medical 
device industry and the medical device designs would say that 
the manufacturers is really the only one in a good position for 
a complex medical device to do an adequate evaluation and 
testing of that product. So, my advice to a hospital would be 
to rely on the information from the manufacturers about the 
compliant status of the device and I would question a massive 
undertaking to test medical devices on the part of hospitals.
    Ms. McCarthy. With all due respect, your organization 
having approved non-compliant Y2K products, appropriately at 
the time, and then relying on the companies to come forward and 
assure hospitals, indeed, that all of that has been addressed, 
what does that do for the risk of the hospital if that is 
somehow factually wrong? I can see why hospitals want to do 
their own testing. They have a stake in this, too. They will be 
responsible to the patients that they serve. Do you see the 
sort of argument going round and round.
    Mr. Shope. Right, and it is the same kind of argument that 
would apply, I think, in a much bigger issue, which are the 
products that were approved without knowing they were non-
compliant. Now, we have many of those that are, in fact, non-
compliant, and the manufacturers are developing upgrades. So, 
the situation, I don't see much difference between the 
situation there. The issue is the manufacturers have assessed 
their products; they know which ones have problems; they are 
providing solutions for those. If it comes to our attention 
that there is a product that is out there and it is a type of 
product that could present such a risk to a patient and no 
action is being taken, that is the kind that we would be able 
to exercise our recall authority. I have to say that, there are 
very few products that I can contemplate that would rise to 
that level of risk-to-patients that the manufacturers haven't 
addressed and provided a fix for.
    Ms. McCarthy. I see that I have gone beyond my time, Mr. 
Chairman, and I apologize, but I wanted to pursue this issue, 
and I thank you.
    Mr. Upton. Mr. Burr.
    Mr. Burr. Dr. Shope, let me just say that your answer to 
Dr. Ganske was the most reassuring thing that I have heard in 
this hearing so far, when you answered Dr. Ganske earlier. Let 
me stick with you for just a second. Do I take from your answer 
to Ms. McCarthy that, from a standpoint of a rural versus 
urban, we shouldn't have a concern that rural America is more 
at risk than urban America?
    Mr. Shope. No, I wouldn't conclude that, because I think 
one could anticipate the amount of resources being available to 
the smaller, rural facilities and the kinds of expertise 
available to them to simply do the inventory, to do the 
evaluation, to do the followup, and perhaps, if there are items 
that need to be replaced, to make those replacements. I think 
the facilities have work to do.
    Mr. Burr. We are still very reliant on the facilities to 
make determinations as well?
    Mr. Shope. Yes.
    Mr. Burr. Let me ask you, Mr. Hubbard, 16,000 manufacturers 
originally contacted; we heard, from 4,100, you said that there 
are roughly 200 that you are chasing. That is 4,400. Clarify 
for me, if you will, where the other 12,000 are. Are they 
hospitals, doctors, what?
    Mr. Hubbard. Right, the numbers can get confusing. Our 
initial letter went to 16,000. There are about 13,500 device 
manufacturers; we added in, at the request of the White House, 
2,500 instrument manufacturers, so that the larger world of 
biomedical products would be covered, even though some of those 
are not devices that FDA regulates. Then, I think the important 
number is that about 2,000 are manufacturers of products that 
might have a date-dependency issue. Things like tongue 
depressors, obviously, aren't a problem, so they are in that 
16,000, but they are not a problem. They got a letter, but they 
either didn't write back or we don't care if they don't write 
back.
    Mr. Burr. Do we know all the medical devices that have a 
chip or software problem?
    Mr. Hubbard. Well, as I said, if you take the 2,000, 
roughly, that might have a date-dependency issue, we have heard 
from all but about 200 of those. So, it is those 200 that we 
haven't heard from we are trying to trace down. As I said 
earlier, they seem to be firms that aren't doing business here 
any longer, and they are not a problem, but we don't want to 
just assume that; we are continuing to try to find them.
    Mr. Burr. Based upon what we know today, how many medical 
devices have a potential chip or software problem?
    Mr. Shope. FDA does not, per se, have a list of all medical 
devices by make and model number. What we have are 
manufacturers who have gotten an approval for a particular type 
of device, one of our classification regulation types. We have 
1,700 classifications, different generic types of devices.
    Mr. Burr. Wasn't one of the recommendations of GAO that we 
track this based upon model serial number as far as the 
clearinghouse purposes of listing, so that people would know 
the classification?
    Mr. Shope. Right, we, in fact, have done that. We have 
gone--let me just make the point. We don't have this list of 
make and model because manufacturers design many different 
models, many different makes. So we don't have that list of 
inventory. What we have done, though, is look at the 
manufacturers that make the generic types of products that we 
think are susceptible to being computerized or having computer 
control, or having microprocessor control. It was that activity 
that identified the roughly 2,000 manufacturers that we wanted 
to focus on because they make the types of products that are 
likely to be susceptible, even though we don't know for a fact 
that each one of those has computerized their particular 
versions. There can be computerized and non-computerized 
versions of the same equipment. Our data base doesn't get to 
that level of specificity.
    So, to address this issue of specific information about 
products that could be vulnerable, we have asked the 
manufacturers, that same universe of roughly 2,000 
manufacturers, to give to us a list by make and model number of 
the devices that they have verified do not have a Y2K problem. 
And we are in process now of collecting that information.
    Mr. Burr. That do not?
    Mr. Shope. Do not have a problem. We already had 
information on the products that have problems.
    Mr. Burr. And there are how many that have a problem?
    Mr. Shope. We don't have that exact number. I can tell you 
that in our data base we have heard from roughly 310 
manufacturers that have described 800 or so products that have 
specific problems.
    Mr. Burr. So the number is, from the respondents so far, 
800-plus?
    Mr. Shope. Plus, and the plus is because we have 350 
manufacturers that haven't given us the list of problem 
products. They have posted it on their website, and we haven't 
enumerated those.
    Mr. Burr. And what was the deadline that the FDA gave these 
manufacturers for reporting this information?
    Mr. Shope. This is a voluntary effort, and we didn't give 
them a deadline. We asked them, as soon as you have finished 
assessing all of your products, because one of the issues here 
is that manufacturers with extensive inventory had to have 
assessed all their current and previously manufactured products 
that might be in use in order to submit this information, and a 
conclusive list of any product that could have a problem, and I 
think the rate of submissions of that have slowed down 
considerably around the first of the year.
    In March, we asked some of the manufacturers who hadn't 
given us sufficient detail to provide additional detail on the 
nature of the problems. So a hospital going to our data base 
would see, not just the product as non-compliant, but why it is 
non-compliant and how that would affect the functionality of 
the product.
    Mr. Burr. Does the FDA have any contact with hospitals 
relative to this list of 800-plus pieces of equipment that 
might or might not have a problem?
    Mr. Shope. I am not sure I understand your question.
    Mr. Burr. Well, I take it for granted that Mr. Hubbard's 
answer earlier that, in the 16,000 people contacted, that did 
not include hospitals or doctor's offices----
    Mr. Shope. No, that's just manufacturers' devices.
    Mr. Burr. My question is, now that we have identified 800-
plus possible devices that might have a date-sensitive or 
software-sensitive problem, has there been any correspondence 
from the FDA to hospitals saying, ``Here is what we have found 
so far.''? Or are we relying on hospitals to go into the 
website to look up this information?
    Mr. Shope. Right, we are making the website our mechanism 
of disseminating this information. I will add that the Health 
Care Financing Administration and several mailings to all of 
their practitioners and healthcare facilities have emphasized 
the need, not just to address their financial systems and their 
payment issues, but also their hospital equipment inventories, 
and have given the hospitals the reference of how to find the 
FDA data base and the kind of information that is there. So, 
there has been a lot of notification to hospitals about this 
issue.
    Mr. Burr. Does HHS look at HCFA as their conduit to 
hospitals and rural health clinics and community health centers 
and doctors' offices? Is that our line of communication?
    Mr. Hubbard. Well, certainly not solely; I think, in fact, 
that they have that conduit; that has been very helpful. But, 
as we said earlier, we have also tried a number of direct means 
through the press, mailings directly to physicians and others, 
articles in various professional journals that we know these 
people read and other things.
    Mr. Burr. Is there a primary part of HHS that is 
responsible for hospitals and community health centers and 
rural health clinics and doctors' offices?
    Mr. Hubbard. Certainly HCFA is in the sense of payments, 
and has regular contact with them and knows who they are and 
how to reach them. We do not; we do not regulate the practice 
of medicine or these facilities.
    Mr. Burr. Are we the first one to ask that question?
    Mr. Hubbard. I am sure that you are not.
    Mr. Burr. I see that my clock has run out, and I hope that 
we will be the last ones to ask the question of whose 
responsibility it is.
    And I will yield back.
    Mr. Upton. The gentlemen's time has expired. Dr. Ganske.
    Mr. Ganske. Thank you, Mr. Chairman.
    Dr. Shope, can you provide us with that list of 800-plus 
products?
    Mr. Shope. Yes, sir, that is on our website. It can be 
downloaded by any citizen that wants it, and we can provide it.
    Mr. Ganske. Okay. Please send that directly to my office.
    Now, we were having a discussion before where I think you 
were basically saying that a lot of this is equipment with the 
timer function related to readout data. Congressman Vern 
Ehlers, who I respect a lot on his knowledge on these issues, 
has pointed out that, for instance, with household appliances--
i.e., let's say thermostats that run off of computer chips that 
have timer functions, they don't necessarily have a year on 
your readout, but the chips that are in there may be older 
chips or chips that are not Y2K compliant. And he has 
speculated that there could be problems with the functioning of 
the rest of the chip if it is not Y2K compliant, even though 
you may not get the readout. Do you have any perspective on 
that?
    Mr. Shope. I think in our discussions with our design 
engineers about this issue, our conclusion is that we would be 
very surprised if a medical device designer inserted into a 
medical device, particularly a medical device that had any 
critical life-supporting, life-sustaining kind of 
functionality, that kind of a timing chip or device that was 
unnecessary to the design. So, I think this is an issue that 
has been speculated a lot about, but I have really no hard 
evidence that, in fact, is an issue.
    Mr. Ganske. Except for the fact that the hospitals that 
have done some of their own testing have shown that some of 
those devices that were supposed to be Y2K compliant are not.
    Mr. Shope. That's right, and to the ones that I am aware 
of, it has not been the kind of problem that you have just 
described. It was usually an oversight between a manufacturer 
and a parts supplier about a functionality for some accessory 
device used with the device, and missing the fact that there 
was a minor date issue there that needed to be addressed and 
didn't get addressed in the initial assessment.
    Mr. Ganske. Dr. Shope, I see that you are with the Center 
for Devices and Radiological Health, so I want to go to ask you 
a question specifically I think that is from Mr. Willemssen's 
testimony on page 4, where he talks about radiation treatment 
delivery devices using a radio isotope as a source and that an 
error in the calculation in the radiation source strength on 
the day therapy is to be delivered could result in a dose that 
is either too high or too low. Are you familiar with this 
particular device and potential problem?
    Mr. Shope. Yes, sir.
    Mr. Ganske. Could you describe that in a little bit more 
detail?
    Mr. Shope. Okay. Radiation treatment planning systems are 
basically software programs, or computer programs, and often 
they come with a workstation interface that the medical 
physicists in the hospital or the radiation therapists in the 
hospital use. These are programs that use imaging data that is 
acquired, either from something like a computer tomography x-
ray machine or a MRI scanner, where you delineate the patient's 
anatomy. You then take that information, import it into the 
computer program that plans the radiation treatment, and the 
radiation therapist, in consulting with the medical physicist, 
develops the plan for the direction of the radiation beams and 
the intensity of the beams and the number of them and frequency 
with which they will be used to treat a tumor volume and to 
spare radiation damage to the surrounding tissues. So, these 
are very complex calculational programs.
    This kind of therapy is typically delivered, for the most 
part, currently, by a device called a linear accelerator. That 
is a big machine; you turn on the switch, and it emits 
radiation or electrons, and you turn it off and it stops.
    There are some older versions of radiation therapy, 
however, that don't use an electronic means for the source of 
the radiation; they use radioactive isotopes. This is referred 
to as teletherapy when it is a cobalt-60 unit, which is a 
source of the radiation. You open the shutter, and let the beam 
out for the radiation.
    Another type of treatment is called brachytherapy, which is 
when the isotopic source is either inserted into the patient or 
applied directly to the patient. In either of those types of 
planning, if you are planning brachytherapy or teletherapy, one 
of the calculations that has to be made about the therapy is 
what is the strength of that radioactive source on the day you 
use it, compared to the day in which it was calibrated 
initially, which may be 6 months ago. And so there is a date 
calculation involved. Some of the earlier versions of software 
that incorporated brachytherapy or teletherapy features for 
planning that kind of therapy did, in fact, use two digits to 
represent the year. So this calculation of source strength on 
the day of use could be an error, if that wasn't corrected.
    There were products on the market that did that 
incorrectly. The manufacturers have identified those, and have 
either said, this is the upgrade, the software fix needed to 
address that issue, or this product is so old, there are so 
many new features in our current version of product, that we 
aren't going to upgrade the old product; we suggest you buy a 
new replacement. In fact, the Department of Veterans' Affairs, 
I think, had seven of those types of systems that they had to 
replace, at no small expense. But they chose to do the 
replacement.
    Mr. Ganske. Do you know where all of those machines are?
    Mr. Shope. No, sir. These are software programs that are 
purchased by hospitals.
    Mr. Ganske. Right. So you do not know, then, whether the 
hospitals that have those software programs have received data 
warning them of that?
    Mr. Shope. No, sir, we don't have specific knowledge of 
that.
    Mr. Ganske. So, it is possible, then, that on January 1, 
2000 a patient could get an inappropriate calculation?
    Mr. Shope. If the hospital has paid no attention to this 
issue and ignored all of the information that has been 
presented, I have to----
    Mr. Ganske. And what would be the consequence of a patient 
receiving an overdose?
    Mr. Shope. It could be either an overdose or an underdose; 
one would be----
    Mr. Ganske. Underdose, they don't get treated enough.
    Mr. Shope. Complications to the therapy used.
    Mr. Ganske. Could a patient die if they get an overdose?
    Mr. Shope. It depends on the level of the overdose, sir.
    Mr. Ganske. Possible?
    Mr. Shope. It is certainly possible.
    Mr. Ganske. Thank you.
    Mr. Upton. Thank you. We will go to a second round for 
those that have additional questions, and I do have one.
    You know, when I think about my own purchase habits, 
whether it is a gas grill, or certainly an automobile, even an 
alarm clock, you get a little warranty card and they ask for 
your name and address, and if something is wrong, I suspect 
that they come back to you. The fact is that I have had 
problems with even seatbelts and that type of thing; I hear 
back from the manufacturer, and when I take that car back in to 
the facility, it is on record there, so if I happen to forget 
that was a cause, then they remind me and they take care of it.
    Is there any such, when you talk about the 800 devices that 
are, in fact, could be a problem with the date, is there any, 
other than checking the website--and I appreciate that, and we 
are going to get that information out to my providers in our 
State for sure--but is there any way that the hospital would 
hear or that the provider would hear directly from the 
manufacturer that their product is on that list of 800 
products, directly from the manufacturer versus them taking the 
initiative?
    Mr. Shope. Yes. There has been a tremendous amount of 
communication from manufacturers to their purchasers, 
particularly for products that the manufacturer has identified 
as being non-compliant. We can't say 100 percent that every 
manufacturer of every one of those 800 products has mailed a 
letter to each one of their purchasers, if they know them. But, 
I think manufacturers have a very large interest in 
communicating with those purchasers. If it is known that a 
purchaser has a product that needs replacement, it certainly 
makes a lot of good business sense that the company would want 
to be there and be involved in that purchaser's mind about 
replacement activity. So, I think the original manufacturer has 
lots of incentive to communicate to their purchasers problems 
about products they may have in the past purchased. This is a 
very common activity.
    Mr. Upton. So, to your knowledge, what would you say, 90 
percent, a 100 percent of the providers have been contacted if 
they are on the list of 800?
    Mr. Shope. I couldn't put a number on it, sir. But, I think 
it is not uncommon. You might ask the representative from the 
manufacturers about this. But, I think the vast majority of 
manufacturers do communicate with their customers about these 
issues.
    Mr. Upton. But, probably not 100 percent?
    Mr. Shope. No, sir.
    Mr. Upton. Okay. Mr. Brown.
    Mr. Brown. Dr. Shope or Mr. Hubbard--Dr. Shope, you 
mentioned, in response to a question I believe from Mr. Burr--I 
am not sure--that you had some information on which specific 
companies have Y2K problems. Talk through that again. I mean, 
the overall feeling that I am getting from this hearing is 
neither of you, Dr. Shope or Mr. Hubbard, seems real concerned 
that there is any significant problem here yet. When I hear 
some of your answers to which companies, how many companies 
making how many products, have problems, I am a little 
concerned. So, run through. Does the FDA have a list of medical 
equipment, one, that presently has a Y2K problem; second, 
presently has a Y2K problem that might actually be life-
threatening? Tell me what you know about that.
    Mr. Shope. We have two kinds of information about products 
with problems. We have the information that the manufacturers 
have voluntarily provided to us, and that is posted on our 
website. That is currently on the order of 900 specific 
products.
    Mr. Brown. That is some 300 companies, you said?
    Mr. Shope. Yes. The second kind of information is 
information from roughly 350 companies that are posted on their 
own websites. I can't say that I have looked at every one of 
those companies, but I have reviewed a large number of that 350 
to see what kind of information is there, what kind of products 
are being described, what the nature of the problem is. I have 
also looked at our own website, probably when the number was 
more like 600, instead of 800, and gone through that list and 
looked and tried to gather some impressions of the kind of 
products that were there, the nature of the problems, and 
whether any of those presented a very significant risk.
    There are a few products there that one would be concerned 
about if the hospital didn't take action. The vast majority of 
them are date display or recording in a way that, I think, 
would be rather insignificant in terms of patient-immediate 
impact. It could lead to some potential confusion and hospital 
records later on and after the fact. Is that----
    Mr. Brown. That is the start. Can you tell me, can you tell 
these subcommittee, No. 1, how many companies there are that 
have not reported to you--you have looked at their website 
perhaps--but how many there are that haven't reported to you 
and how many products those companies make and how many of 
those products might be life-threatening?
    Mr. Shope. We can do some arithmetic. We certainly know, of 
our original estimate of roughly 2,000 companies, there are 
less that 200 that we haven't heard from, and we don't expect 
that they are manufacturers of any significant volume in that 
sample. We have not gone and done an individual company-by-
company comparison to see what kind of product those non-
responding companies make. However, that is something that is 
on our plate to take a look at as we continue our effort to 
analyze this information.
    We don't have a list of the products manufactured by every 
company by make and model. We just don't have that information.
    Mr. Brown. Don't you need that? Some of them might be life-
threatening perhaps.
    Mr. Shope. We can identify by manufacturer if they make a 
life-threatening-type product. We are currently developing that 
list of manufacturers which would be the focus of our extensive 
follow-up effort that we are talking about here.
    Mr. Brown. Mr. Willemssen, what should they be doing?
    Mr. Willemssen. Well, I want to express one caveat to some 
of the numbers that have been discussed. That has to do with, 
as of May 10, we show that for about 420 manufacturers, FDA 
relies on their web sites to provide information on non-
compliant products. Usually those manufacturers are larger 
companies. So in terms of the number of 800 or 900 devices that 
are non-compliant, the actual number is significantly higher 
than that.
    For example, I went on the web site this morning and pulled 
up one company, and just within the digital imaging sub-systems 
area of that one company, it listed 11 products with a Y2K 
issue. So I want to caution you on the numbers that have been 
discussed, that the numbers are probably, quite a bit higher, 
because we haven't been talking about all of these web sites 
that give you an avenue into another whole wide range of 
products.
    Mr. Brown. Isn't this a pretty serious problem? There are 
400 companies on the website; you have spent some time looking 
at one and found 11 products. I mean, obviously, you don't 
necessarily multiply 400 by 11, but you have a significant 
number, some of them probably, life-threatening. Don't we need 
to know a lot more than what we know?
    Mr. Willemssen. That is why we agree with what FDA is doing 
now. You have got to have a list of critical care and life 
support items and, based on that list, take the additional 
actions that we have talked about earlier. We think that is a 
step in the right direction.
    Mr. Brown. How do you define critical care? Does FDA define 
it? Do you define it? What do you mean?
    Mr. Willemssen. I would rely on Dr. Shope's medical 
expertise to come up with that definition, but during the 
course of work it is clearly something that has come up. Our 
overriding criterion is patient safety and where that patient 
safety can be degraded because of a Y2K issue in a biomedical 
equipment device. We feel that needs to be addressed.
    Mr. Brown. Okay. Thank you, Mr. Chairman.
    Mr. Upton. Mr. Bilirakis?
    Mr. Bilirakis. Well, and I really planned to go into this 
with the next panel, too, but we have asked a lot of questions, 
and of course, a lot of statistics have been thrown out and 
that sort of thing. How difficult would it be for the Congress, 
for this committee, to receive the hard data supporting some of 
the statements that you have made and some of the responses 
that you have given us, Dr. Shope? I mean, you know, the 
particular companies that you have contacted and communicated 
with; the critical medical devices associated with those 
companies, things of that nature. I mean, is that something 
that is available that you could just push a button and, in 
effect, give us a copy of all of that?
    Mr. Shope. Certainly, the data that is on our website is 
available in that fashion. We are continuing to work on our 
list of these, what we call, high-risk devices, and we expect 
to complete that list very shortly. We will use that list, 
then, to identify the manufacturers of those types of products. 
So, any of the information that we have with regard to what we 
know about manufacturers is certainly available. It would be 
difficult to produce lists of the products that are on the 
manufacturers' websites. We haven't downloaded that 
information.
    We have to go back and look at the intended purpose of this 
website, initially, which was the outgrowth of a joint Federal 
agency activity to determine which products would have negative 
impacts from the year 2000 and how to get information out to 
the Federal purchasers and to the public purchasers of that 
equipment. The website was seen to be a convenient method for 
doing that. We relied on manufacturers to voluntarily provide 
this information because we didn't have a regulatory authority 
or regulation on the books that would require that kind of 
information to be provided to us.
    Mr. Bilirakis. You know, Doctor, with all due respect, I 
really don't feel any better about everything. You know, you 
and Mr. Hubbard flat out said that you feel that we will be 
ready, insofar as the medical devices are concerned, insofar as 
the FDA jurisdiction area is concerned. But you can't be very 
much help, apparently, as far as hospitals are concerned, the 
use of those devices, so to speak, down at that level. And 
again, how in the hell did we get ourselves into this kind of a 
situation, knowing darn well that the year 2000 was coming, et 
cetera, et cetera?
    You have enough to know, and I don't want to add anything 
additional to your workload, when you can better be using your 
time getting ready, rather than giving us any of this hard 
data. And I don't know, Mr. Chairman, whether getting that hard 
data would be of any consequence as far as help is concerned to 
this subcommittee. Maybe we can talk about that rather than 
request it now; we can always request it if we feel that it 
would be.
    But, Mr. Willemssen, you have been kind of chomping at the 
bit when Mr. Burr was asking you a question, and Dr. Ganske. Is 
there anything more that you want to add? I just want to kind 
of give you the rest of my time.
    Mr. Willemssen. The issue that I was concerned about was 
when some of the numbers were being discussed, and I wanted to 
make sure there was some context for those numbers, and that 
the numbers that weren't talked about were all of those items 
on large companies' web sites, which increases the number 
exponentially. So, I just wanted to make sure that item was out 
on the table.
    Mr. Bilirakis. Yes, sir, Doctor.
    Mr. Shope. I just make the comment, the fact that those 
items are on the manufacturer's website normally means the 
manufacturer has assessed that product; he has looked at the 
vulnerability of that product, and he has provided the solution 
for that product, or a description of what kind of solution he 
is going to provide for that product. So, I think one needs to 
know that piece--I think the concern that may still be there 
is, how well has the manufacturer done that? That is the kind 
of thing that we depend on our quality system for and our 
potential follow-up activities to address and get some 
additional assurance.
    Mr. Bilirakis. Thanks, Mr. Chairman. I still don't really 
feel very good about it.
    Mr. Upton. Well, make sure you get the end-of-the-year 
checkup.
    I would just like to note, for those in the audience that 
those that don't have the testimony, that the website is 
www.fda.gov.
    Mr. Bryant, do you have additional questions?
    Mr. Bryant. Just a couple of quick questions. I hope that 
they have quick answers.
    I know all of you have been working very diligently trying 
to assess this situation and remediate it, but I am still 
unclear--there appear to be some 200 to 400 people out there 
who have manufactured medical devices that have not responded 
to this survey. Am I understanding your testimony, that the FDA 
is going to be more aggressive in contacting these people, 
affirmatively contacting them, to determine if they are 
bankrupt, if they have merged, if they have disappeared, but 
trying to get together this information?
    Mr. Hubbard. That is right, Mr. Bryant. We have been doing 
that. Our contractors are trying to find them, call them, 
whatever way we can contact them, to find out if, in fact, they 
still exist, if they are still manufacturing medical devices, 
if those medical devices are being sold in the United States or 
exist anywhere in the United States. You know, our suspicion 
is, as I said, that they are perhaps not marketing products any 
longer; they are foreign companies that planned to market here, 
never did, or companies that have gone out of business, or such 
things as that. We think the vast majority of manufacturers we 
have been able to find and asked the questions and gotten the 
answers. But, we are not giving up on those 200, either; we are 
continuing to look for them.
    Mr. Bryant. Are you trying to get help from the hospitals 
and the doctors and the people who----
    Mr. Shope. We haven't pursued that kind of assistance to 
locate these manufacturers. It usually works the other way 
around. We hear from the hospitals, ``Can you tell me how to 
find this manufacturers,'' as opposed to, ``I found one for 
you; here he is.'' I think a comment needs to be made about the 
source of our list of manufacturers. That comes from our 
registration and listing data base, and that data base 
oftentimes can have in it people who are no longer in business 
at the time that we use that address list, people who had an 
intention when they registered with us that they were going to 
go into business, but that never came to fruition, people who 
maybe submitted a pre-market submission, but, for one reason or 
another, had a clearance for a product but never took that 
product to market. So there are a lot of business kinds of 
problems that arise that prevent someone who actually 
registered and listed with us from continuing in business.
    I suspect the large number of the ones that we are trying 
to track down now are that type of company that really never 
brought a product to market. The other issue is that they may 
have a product that they brought to market, but it my not be a 
computerized device. It got flagged because they make an 
accessory or supply used with the computerized device. So, when 
we ask them about computerized device status, they have no real 
incentive to respond to us.
    In fact, just a couple of days ago, I got a list of 20 
companies that our contractor had tried and failed on three 
different occasions to try to contact. We will now take that 
list and see if there are any products that we can associate 
with any of those companies that would raise concern. If not, 
we will have to say this is a list of 20 that we are writing 
off as non-contactable and products of non-concern.
    Mr. Hubbard. So, if it is any consolation, Mr. Bryant, it 
is unlikely that these manufacturers, if they exist at all, are 
making any large number of products where there is a very large 
problem. But, again, even if there is a small problem, we would 
like to track them down.
    Mr. Brown. Okay. Mr. Willemssen, do you have any comments.
    Mr. Willemssen. One thing that I would add related to that 
is to the extent that, if FDA cannot get that information, then 
they need to consider publicizing that list of non-respondents 
on its web site, so that hospitals are aware of who those 
manufacturers are, and if they have equipment from those 
manufacturers in their inventory, they will want to think twice 
about whether to use it or not.
    Mr. Brown. Very good. Thank you.
    Mr. Upton. Dr. Ganske? Okay. Mr. Burr.
    Mr. Burr. Thank you, Mr. Chairman.
    Let me ask you, Mr. Hubbard, somebody earlier asked about 
the possible 510(k)'s that were in process now.
    Mr. Hubbard. Right.
    Mr. Burr. What process do you go through to assure of 
compliance?
    Mr. Hubbard. I will have to ask Dr. Shope to answer that.
    Mr. Burr. Okay. Dr. Shope.
    Mr. Shope. The process for 510(k), and basically for 
software products, they are very similar between a 510(k) and a 
pre-market approval application. That is, the manufacturer, if 
they are making a computerized device, will provide to us, 
based on what we call our level of concern or the level of risk 
that device could present to a patient, varying levels of 
information and documentation about the software development 
process used in developing that device. What we would see are 
artifacts of that software development design process, such 
things as the overall description of the design process, the 
types of verification and validation activities the 
manufacturer undertook, and perhaps some sample test records 
and test data for the very-high-risk devices. That comes in as 
part of the application and is reviewed by the pre-market 
reviewer or sometimes by some of our software specialists. It 
is not a line-by-line review of the code.
    Mr. Burr. In your estimation, is it possible for a device 
that is non-compliant to be approved today?
    Mr. Shope. It is probably possible if a manufacturer makes 
a good case to us that, ``I have been working on this product 
for 2 years.''
    Mr. Burr. The manufacturer makes the case that it is 
compliant, and in fact, the product is not compliant in some 
fashion?
    Mr. Shope. Certainly, that is possible. Our review process 
is not foolproof.
    Mr. Burr. You mentioned earlier, Mr. Hubbard, resources.
    Mr. Hubbard. Yes, sir.
    Mr. Burr. I won't dispute it with you. I will only ask, did 
the FDA make a line-item request in the 1999 budget for 
specifically the compliance resources needed for this?
    Mr. Hubbard. Well, what we have done, Mr. Burr, is I 
believe Congress appropriated a sum of funds for Y2K across the 
administration as being the funds that have been managed by the 
Office of Management Budget at the White House, and agencies 
have gone to that, to the OMB, for specific Y2K-related 
activities. We have done so for our internal systems correction 
and had some money funded. We have done some of our emergency 
response process, so to have our field prepared if problems 
occur later in the year, and there has been funding for that. 
We are preparing now to survey drug and device manufacturers to 
ask more questions about the compliance.
    Mr. Burr. So, you do have sufficient resources?
    Mr. Hubbard. Well, certainly funding is coming. The 
activity we describe today has not been funded, and we will 
have to go back to the OMB and ask to release some of those 
funds for that activity.
    Mr. Burr. But, you have never made a line-item request from 
Congress for money for compliance?
    Mr. Hubbard. Not to my knowledge, but, again, because there 
was this money appropriated by Congress for all of the agencies 
across----
    Mr. Burr. How about in the 2000 budget, even though that 
doesn't kick in until extremely late in the year; there wasn't 
a specific line item in the request?
    Mr. Hubbard. Again, I think the reliance has been on these 
funds already appropriated, Mr. Burr.
    Mr. Burr. May I ask you--let us assume for a minute that 
you ID an non-compliant device. What happens?
    Mr. Hubbard. Depending on the risk, obviously, if we found 
one today, we would be advising the manufacturer that they need 
to do to make it compliant. We have the authority, if we 
believe that device poses a risk to health and could fail some 
way, we have authority to have it seized or the manufacturing 
might be stopped, or to have it recalled if it is out in the 
marketplace.
    Mr. Burr. How do you go through that market recall?
    Mr. Shope. The market recall process is in section 518 of 
the act.
    Mr. Burr. No, I am asking specifically, what process kicks 
in where you ask or request the recall? The actual products to 
go back to the manufacturer to be pulled off of the market, not 
to be used, what process does the FDA go through?
    Mr. Shope. We would be working with the manufacturer to 
identify purchasers of those products.
    Mr. Burr. Manufacturer would supply you with the list of 
people that purchased?
    Mr. Shope. Yes, sir. I am not an expert on these 
compliance-type operations. So, I am getting into unknown 
territory from my personal knowledge to describe this 
compliance activity.
    Mr. Burr. I hope you understand, what I am trying to 
determine is, to what degree do we search for the relevant 
information when we identify we have a potential health risk in 
the marketplace versus what are we doing now with our ability 
to identify equipment that may or may not have a Y2K compliant 
problem? It seems like the two processes are significantly 
different. Would you agree?
    Mr. Shope. I am not sure I can compare the processes.
    Mr. Burr. Well, let me put it this way: Have we in any of 
the Y2K-compliant activities at FDA sought from the 
manufacturer every location that purchased a specific device 
and contacted to say, ``You purchased this. We understand it is 
non-compliant to Y2K. We would advise you to go through this 
process.''?
    Mr. Shope. No, sir. We haven't done that because I think it 
is a little premature for that decision. What would be 
happening now would be manufacturers----
    Mr. Burr. How close to January 1 do we get before it is no 
longer premature?
    Mr. Shope. I think it has to be pretty close if the 
manufacturer is working on a fix and is going to make that 
available.
    Mr. Burr. Define ``pretty'' for me, because I need to know 
at what time do we cry ``wolf'' and start notification, and how 
long does it take you to notify?
    Mr. Shope. I can give you a personal view here. If it is 
after October 1 and we come across a device that could present 
a significant risk to patient health, and the manufacturer 
hasn't taken the appropriate action to make a solution 
available, I think we would get very engaged with that 
manufacturer about his intentions.
    Mr. Burr. Now, let me ask you, because there is still a 
discrepancy today about whose responsibility it is about 
oversight, can I safely assume there are some non-compliant 
devices in hospitals and non-compliant devices in doctors' 
offices?
    Mr. Shope. Yes, sir.
    Mr. Burr. Private homes?
    Mr. Shope. Possibility.
    Mr. Burr. Okay. There is still a disagreement over whose 
primary responsibility it is for hospitals, doctors' offices, 
and I don't even think we have discussed private homes. Who 
will take the lead if we get to October 1, you identify a piece 
of equipment or several pieces of equipment, the alarm goes 
off, who takes the primary lead on hospitals? You, HCFA, who?
    Mr. Shope. I think the realistic scenario would be, if 
there is a product that has a problem that is not being 
appropriately addressed and it rises to the level, we could do 
a mandatory recall-type activity. Typically, before we get to 
that level, the manufacturer has exercised the voluntary recall 
and has notified purchasers and had that product removed--
either a product withdrawal or some kind of voluntary recall, 
offering a solution or an alternative to that solution.
    Mr. Burr. Mr. Chairman, could I ask for unanimous consent 
for 2 additional minutes?
    Let me skip over to the in-home use. Has FDA determined the 
amount of time it would take, once you have requested of a 
manufacturer to contact every person who had a specific non-
compliant devices if it were in people's homes, how long would 
it take a manufacturer to go through the process of 
notification and for the FDA to receive assurances that 
everybody had been contacted and that these devices had been 
taken care of? Is that something that you feel could be done in 
90 days?
    Mr. Shope. It is a little bit beyond my expertise, but I 
suspect that a critical-type device like that manufacturers 
could do a reasonable job of identifying and providing 
information in a 90-day timeframe.
    Mr. Burr. So, the likelihood is that they would have to 
contact a distributor of medical devices or something, who then 
sold that or has it out on rent or loan or something to an 
individual, and that whole chain is going to work, and they are 
going to contact that individual and have all of that 
information back in a 90-day timeframe? Do you feel like that 
is possible?
    Mr. Shope. I am a little beyond my expertise here in terms 
of how fast these compliant recall-type activities work. I am 
sure we can provide some information on that.
    [The following was received for the record:]

    FDA routinely oversees recalls of all products regulated by the 
Agency under its voluntary recall authority, and, less frequently, has 
required recalls of medical devices under the authority of the Federal 
Food, Drug and Cosmetic (FD&C) Act. The Agency's recall authority 
provides FDA with a highly effective and expeditious means of 
protecting the public from potentially harmful products. The length of 
time the entire recall process takes can vary widely based on the 
device and the extent to which it has been distributed.
    Although the ultimate goal of any recall is to repair a dangerous 
product or remove it from distribution, the primary public health goal 
of the recall authority--halting the use of a product that poses a 
health risk--can be accomplished during the initial stages involving 
notification and publication of information concerning the device. 
Under the mandatory recall requirements, the individual or firm to whom 
FDA issues the order must immediately issue notifications and 
instructions to cease use. This is accomplished through directed 
notification to the manufacturers, distributors, purchasers, etc., and 
also through press releases. These actions ensure that health care 
workers can make informed decisions about patient care.
    FDA's mandatory recall authority is reserved for medical devices 
that pose a high degree of risk to the public health. Section 518(e) of 
the FD&C Act requires that the Agency first order an appropriate 
individual to issue notification of the risk of the device to user 
facilities and health professionals, along with instructions to cease 
use of the device. The appropriate individual is the individual most 
well-situated to locate the device and contact those responsible for 
its use. This person frequently will be the manufacturer, although FDA 
may use its authority under 518(e) to impose orders on distributors, 
importers, or other individuals the Agency determines are best able to 
respond to the requirements of the order. Most mandated notifications 
can be completed within 48 hours.
    The procedures under FDA's voluntary recall regulation are more 
flexible. Under its procedures for voluntary recall, the Agency can 
work with manufacturers to initiate a variety of actions, including 
notifications and recommendations concerning discontinuation or 
modification of use of the product. Voluntary recall procedures are 
available for all levels of product risk.
    The length of time it will take to remedy the device or remove it 
from distribution will depend on the number of devices in distribution 
and other factors; FDA cannot predict this time period in the absence 
of a particular set of facts. FDA'S mandatory recall regulations, 
however, provide authority for the Agency to respond with immediacy to 
serious threats. Although the mandatory recall regulations require that 
FDA provide an opportunity for a hearing before amending a notification 
order to include recall, the preamble to the regulation makes clear 
that FDA may issue its notification order, hold its hearing, and amend 
the order to require recall all in a single day when the public health 
requires immediate action. 61 FR 59004, 59007 (November 20, 1996). Only 
an extreme risk would dictate such an urgent response. FDA's recall 
authority was designed to empower the Agency to respond with Urgency to 
significant health threats. FDA anticipates this authority will enable 
the Agency to control health risks it identifies by October 1, 1999, 
(or an earlier date) within 90 days.

    Mr. Bilirakis. If the gentleman would yield?
    Mr. Burr. Yes, back to you.
    Mr. Bilirakis. So this gets back to your ``pretty close,'' 
``pretty close'' point, Doctor. The discussion here is 90 days, 
and I guess I am not sure where the 90 days came from; maybe I 
wasn't paying attention. I was ordering something to eat.
    Mr. Burr. There is a lead time in any case, particularly if 
we are going to go to the private homes.
    Mr. Bilirakis. And that sort of thing--I don't know, I hope 
we are not really making a mountain out of a molehill here. I 
think it is just significant that we not leave anything 
unlooked at. But keeping in mind the timeline, you know, there 
is a period of time here for recall and getting into the 
private homes and getting into the hospitals, et cetera, et 
cetera. When you say, ``pretty close,'' what are we talking 
about there? You are certainly not talking December, are you? 
Are you talking December or are you talking November or are you 
talking October? October is 30 days; September is really 30 
days.
    Mr. Shope. I think we would be wanting to have some good 
understanding of the situation by October 1 in order to be 
realistic about taking care of a significant problem. I would 
like to add that I have a very hard time thinking about a 
device used in the home that is date-dependant in a way that it 
would present a significant risk to the patient. There are 
blood glucose monitors that are used in home use, and some of 
those do trending of readings, and there is a potential for 
problems there with some models of that type of device. But, I 
am hard-pressed to think of other products used in the home 
where a date functionality is critical to the use of the 
device. But, that is not to say there may not be something.
    Mr. Burr. Doctor, have we ruled out every implantable 
device possibly having a Y2K-compliant problem?
    Mr. Shope. We know of no implantable devices that have Y2K-
date dependencies.
    Mr. Burr. I appreciate the answer, but I asked it in a 
different way. Are we assured that there are no implantable 
devices that might have a Y2K problem?
    Mr. Shope. I am not sure that I can answer it in any other 
way than the fact that we are not aware of any product like 
that. We have been in touch with the manufacturers of such 
things as pacemakers, implantable infusion pumps, implanted 
defibrillators. It just doesn't make sense to design those with 
an unneeded date dependency. And none of those products work in 
a way that requires them to have knowledge of the date. Those 
things use timing circuits, but when they use timing circuits, 
they are using a register counting oscillations of a 
oscillator. It is the external device that maybe interrogates 
that device that adds the date-time type of information to the 
record that it brings out from that device.
    Mr. Burr. Well, I thank all of you. This has been 
enlightening. Just as a personal observation, I think we still 
have quite a bit of work to do. I don't think that I would find 
disagreement from any of our panelists. I would also urge my 
colleagues that we, as a committee, try to work with the FDA 
and with all the agencies that have some oversight. I would 
encourage the FDA to encourage HHS to draw a little clearer 
lines of responsibility as it relates to hospitals and rural 
health centers and doctors' offices. I think it is important 
that at least that question have an answer versus to pass it 
off on the manufacturers. It may be their responsibility. If it 
is, then let us make sure that we clearly communicate it. If it 
is not, let us make sure that we know which arm of the Federal 
Government is going to be responsible for notification.
    I yield back.
    Mr. Hubbard. We will follow up on that, Mr. Burr.
    Mr. Bilirakis. I would hope, Mr. Chairman, if I may, I 
would hope that we get our heads together and schedule another 
hearing, maybe like in September, something of that nature, as 
we get closer to these timelines.
    Mr. Upton. I think that would be a very good idea.
    If no other members have questions----
    Mr. Brown. I would just add, thank you, Mr. Chairman. If we 
do another hearing in September, as Chairman Bilirakis 
suggests, and we do find ourselves continuing to give more 
responsibility and expect more responsibility to and expect 
more from the FDA, that we look at their funding also. That is 
something that, at least, we should consider because Mr. 
Hubbard's comments on the technical expertise, in response to 
my question, sound like partly a paucity of resources, in 
addition to a lack of technical expertise. I think we should at 
least consider that in an emergency situation, if it comes to 
that.
    Mr. Upton. Thank you. Panel, you are excused. Thank you 
very much for your testimony, and you may be getting some 
questions further down the road from us as well.
    Our next panel includes Mr. Kent Smith, who is the global 
project manager of Baxter Health Care Corporation. He is the 
spokesperson for the Health Industry Manufacturers Association, 
HIMA. Mrs. Noel Brown Williams, senior vice president at 
Columbia HCA Health Care Corporation, spokesperson for the 
Federation of American Health Systems. And Mr. John C. Nunn, 
vice president for patient care services from Henry Ford 
Hospital, representing the American Hospital Association.
    We are delighted that you are here this morning, and we 
appreciate you listening, certainly, to the first panel. And as 
you heard me say to the first panel, we have a long tradition 
in the Oversight and Investigations Subcommittee of taking 
testimony under oath. Do you have any objection to that?
    [No response.]
    Seeing none, also, under House rules, you are allowed to 
have counsel, if you prefer that. Do you have a need for a 
counsel?
    [No response.]
    Then if you would stand and raise your right hand?
    [Witnesses sworn.]
    You are now sworn in, and as we did with the first panel, 
your entire statement will be made part of the record. If you 
would like add or summarize, but try and observe the 5-minute 
rule, that would be terrific. We will start with you.

  TESTIMONY OF KENT T. SMITH, GLOBAL PROJECT MANAGER, BAXTER 
   HEALTHCARE CORPORATION, ON BEHALF OF THE HEALTH INDUSTRY 
  MANUFACTURERS ASSOCIATION; NOEL BROWN WILLIAMS, SENIOR VICE 
 PRESIDENT, COLUMBIA HCA HEALTH CARE CORPORATION, ON BEHALF OF 
 THE FEDERATION OF AMERICAN HEALTH SYSTEMS; ACCOMPANIED BY DON 
  WORKMAN, COLUMBIA HCA HEALTH CARE CORPORATION; AND JOHN C. 
  NUNN, VICE PRESIDENT FOR PATIENT CARE SERVICES, HENRY FORD 
    HOSPITAL, ON BEHALF OF THE AMERICAN HOSPITAL ASSOCIATION

    Mr. Smith. Thank you, Mr. Chairman. As mentioned, I am the 
chairman of Baxter Healthcare Corporation.
    Mr. Bilirakis. Will you pull the mike closer?
    Mr. Upton. Yes. Pull the mike up a little bit closer.
    Mr. Smith. That is the first time I have ever heard 
somebody tell me I couldn't speak loud enough, by the way.
    I am the chairman of Baxter Healthcare Corporation's 
committee on the year 2000. And just for your information, 
Baxter is a global medical products and services company that 
provides critical therapies for patients' life-threatening 
conditions. I am very pleased to testify today on behalf of 
HIMA and the medical device industry's Y2K readiness.
    The device industry shares the concern of healthcare 
providers and patients regarding the year 2000 date problem. 
Over the past year, HIMA has stepped up the challenge and 
worked effectively with the FDA, the Veterans' Administration, 
and the National Safety Patients' Partnership, as well as 
others, to identify critical issues, communicate Y2K 
compliance, and ensure patient access to safe and effective 
devices on January 1, 2000.
    To date, HIMA members are at different levels in their Y2K-
compliance process. Most are now focused on the Y2K business 
contingency planning process. And I want to emphasize the point 
that all HIMA members have a year 2000 process in place today. 
On device compliance, HIMA has worked closely with the FDA and 
the Veteran's Administration to ensure the FDA's year 2000 
clearinghouse is an effective central data base for Y2K device 
compliance information.
    HIMA has also ensured a 100 percent response rate from its 
800 member companies who manufacture 90 percent of the devices 
sold in the country in the US. They communicated with 6,000 
non-member companies, urging them to respond to the FDA to 
ensure their devices were Y2K compliant, which we have heard 
from. They have made phone calls to non-HIMA member companies 
who did not respond to the FDA or the VA request for this 
information. And they have sponsored advertisements with the 
FDA and the VA in industry trade magazines, urging companies to 
respond to the FDA request on the Y2K status information. So, 
in summary, I believe the device industry has risen to the 
challenge of coordinating and effectively communicating the 
medical device industry's progress toward Y2K compliance, 
though we still have some work to do.
    As a window into the activities of a large company with a 
diverse product line, let me quickly highlight elements of 
Baxter's comprehensive Y2K program which have been in place 
since early 1997. Our product compliance checking is complete, 
and it identified fewer than 20 products with Y2K issues. 
Modifications and replacements for these products will be 
complete by mid-1999. Information regarding our Y2K-compliance 
status and implementation solution has been available since 
December 1, 1998. We have sent out over 30,000 compliance 
letters to customers worldwide, describing product issues and 
the process for implementing product fixes.
    To evaluate our suppliers, we have required each supplier 
to communicate its Y2K compliance. We have over a 95 percent 
response rate to questionnaires sent to 7,000 critical 
suppliers. We are conducting face-to-face as well as telephone 
audits with these targeted suppliers.
    With respect to our manufacturing plants, 80 percent of our 
manufacturing and facility systems have been fixed. 
Implementation will continue through the mid-part of this year 
for that piece. And finally, we have a very extensive business 
contingency planning process in place for all of our businesses 
and regions around the world, focused on customer 
communication, human resource planning, and inventory 
management.
    With respect to contingency planning that I just mentioned, 
I participated in a HIMA-wide teleconference to educate the 
other HIMA members on Y2K contingency planning. And while these 
are a normal course of business, in this particular case, we 
happen to know when the year 2000 transition will occur, and so 
it is easier to plan from a contingency planning perspective.
    HIMA has now turned its attention to the serious issue of 
potential or provider stockpiling, if you will, or provider 
hoarding. As a member of the healthcare sector of the 
President's Council on the Year 2000 Conversion, HIMA is 
working with the American Hospital Association, the Health 
Industries Distributors Association, the FDA, HCFA, and others 
on a White House-sponsored roundtable on hospital supplies to 
be held in early June.
    In closing, we are encouraged by the progress of our 
industry in achieving Y2K readiness. However, we cannot achieve 
success alone. The government must play an integral role in 
helping the diverse and segmented healthcare sector coalesce in 
responding to Y2K. You can help us by supporting any consensus 
that is developed in the forthcoming White House roundtable. In 
so doing, you will help every patient in America. Working 
together, we can assure patients that the healthcare sectors 
will continue to provide value and safety into, during, and 
beyond January 1, 2000.
    And obviously, I would be glad to take any questions you 
may have.
    [The prepared statement of Kent T. Smith follows:]]
  Prepared Statement of Kent T. Smith, Chairman, Year 2000 Committee, 
    Baxter Healthcare Corporation On Behalf of the Health Industry 
                       Manufacturers Association
    My name is Kent Smith. I am Chairman of Baxter Healthcare 
Corporation's Committee on Year 2000. Baxter is a global medical 
products and services company that provides critical therapies for 
patients' life-threatening conditions. The company's products and 
services in blood therapies, biopharmaceuticals and blood collection, 
separation and storage devices, cardiovascular medicine, medication 
delivery and renal therapy are used by health care providers and their 
patients in 112 countries.
    I am pleased to testify today on behalf of the Health Industry 
Manufacturers Association (HIMA) on the status of the medical device 
industry's Year 2000 readiness. HIMA is a Washington, D.C.-based trade 
association that represents more than 800 manufacturers of medical 
devices, diagnostic products, and medical information systems. HIMA's 
members manufacture nearly 90 percent of the $62 billion in health care 
technology products purchased annually in the United States and more 
than 50 percent of the $147 billion purchased annually around the 
world. As such, HIMA is the largest medical technology trade 
association in the world.
    The medical device industry recognizes and shares the concerns of 
health care providers, patients, and the general public regarding the 
possible effects of the Year 2000 computer date problem. The American 
medical technology industry has built a reputation for leadership and 
excellence that is recognized worldwide. It goes without saying that 
the health and safety of patients constitute the paramount concerns of 
our industry.
    Over the past year, I believe that the device industry has stepped 
up to the challenge and has worked closely and effectively with key 
constituencies including the FDA, the Department of Veterans' Affairs, 
the National Patient Safety Partnership and others to identify critical 
issues, communicate the industry's compliance, and ensure patient 
access to safe and effective medical devices on January 1, 2000 and 
thereafter. I can speak directly for Baxter Healthcare Corporation when 
I say that we are devoting significant resources to assure the Year 
2000 compliance of our devices and to communicate our compliance status 
to interested parties. I am personally aware of numerous other 
companies that are acting similarly. I am confident that the medical 
technology industry will do whatever is necessary to maintain the 
health and safety of our patients.
    In my testimony today, I will outline for the Subcommittee the 
numerous activities, both past and present, that HIMA has undertaken to 
ensure that both HIMA member and non-member companies fulfill their 
responsibility to provide compliance information to appropriate 
government entities as well as their customers. I will also share with 
you the comprehensive Year 2000 compliance program that Baxter 
Healthcare has developed.
    I would be remiss, however, if I did not express to you the 
legitimate liability fears of the medical technology industry--fears 
that are shared by other industries. Congress recognized these in 
enacting the Year 2000 Information and Readiness Act that has helped 
tremendously to encourage all industries to disseminate Year 2000 
compliance data without fear of liability. The House has now taken the 
second step of passing liability legislation that will help create an 
environment that will encourage remediation and discourage frivolous 
lawsuits. It is our hope that the House, the Senate, and the 
Administration will be able to reach a compromise to ensure that 
liability legislation is passed as soon as possible.
A Diverse Industry Poses Unique Challenges
    The medical device industry is extremely concerned about the 
potential hazards associated with the Year 2000 problems and has put 
substantial effort into ensuring that medical devices function properly 
and safely during and after the century change. We have committed to 
Congress to work with the federal government and other concerned 
parties to ensure that information about Year 2000 medical device 
compliance is publicly available. While we remain confident that there 
will be few disruptions to patient health care as a result of non-
compliant medical equipment, it might be useful to understand the true 
diversity of the medical technology industry.
    More than 50 scientific and engineering disciplines, including such 
diverse fields as solid state physics and holography, are involved in 
the development of our products. Over 50 different medical specialties, 
such as orthopedic surgery, cardiology and ophthalmology, utilize the 
industry's products in applications throughout the human body. There 
are more than 3,000 distinct, major product lines, and approximately 
84,000 individual products. For these reasons, the challenge posed by 
the Year 2000 bug does not represent a single problem that will yield 
to a single solution. For the majority of cases, solutions developed by 
one firm likely will not apply to, or be feasible for, others. Rather, 
each company faces a unique set of circumstances involving its own 
technologies.
    Further, while the number of electrical medical devices containing 
software has been rising, it is important to understand that many of 
the highest risk devices vital to keeping patients alive are not date 
sensitive. For instance, many have cited the potential Year 2000 risks 
associated particularly with pacemakers and implantable defibrillators. 
Pacemakers and implantable defibrillators are required to operate at 
all times regardless of the day or date. We know of no pacemakers or 
defibrillators that are date dependent.
HIMA's Year 2000 Activities
    As a matter of course, HIMA has strongly encouraged its members to 
work to ensure that their devices are Year 2000 compliant and to 
communicate Year 2000 compliance status to their customers. We have 
developed and executed a comprehensive program to advise HIMA member 
and non-member companies regarding their responsibility to provide 
compliance information to the government and have worked closely with 
the FDA and others to disseminate necessary information.
    HIMA has also:

<bullet> Established a member committee to advise on and oversee the 
        Association's efforts to successfully address Year 2000 issues.
<bullet> Created a Year 2000 section on HIMA's Web site to communicate 
        with the public and our members on Year 2000 issues.
<bullet> Consistently reached out to all segments of the industry 
        including the National Electrical Manufacturers Association 
        (NEMA), and the Medical Device Manufacturers Association (MDMA) 
        to coordinate our efforts and to help ensure that critical Year 
        2000 messages reach virtually all device manufacturers.
    Early in the Year 2000 debate, an important coalition--the National 
Patient Safety Partnership--comprising the Department of Veterans' 
Affairs, the American Hospital Association, the American Nurses 
Association, and others concerned about the impact of the Year 2000 
problem on patient health, proposed the development of a central 
clearinghouse on the compliance status of medical technology. Other 
private organizations, such as Rx2000 Solutions Institute, also called 
for centralized databases.
    HIMA has worked diligently and closely with the Food and Drug 
Administration (FDA) and the Department of Veterans' Affairs to help 
the FDA's Year 2000 Biomedical Equipment Clearinghouse become a central 
collection point for Year 2000 device compliance information. The 
initial focus of the FDA clearinghouse effort was to gather information 
on non-compliant devices. In support of that critically important goal, 
HIMA:

<bullet> Ensured a 100-percent response rate from HIMA's 800 member 
        companies who together manufacture 90 percent of the medical 
        technology products sold in the U.S. market.
<bullet> Communicated with more than 6,000 primarily small non-HIMA 
        member companies in the industry urging them to respond to the 
        FDA request for Year 2000 status information and to ensure that 
        their devices are Year 2000 compliant.
<bullet> Sponsored advertisements with the FDA, the Department of 
        Veterans' Affairs, and other industry associations in key 
        industry trade magazines urging device companies to respond to 
        FDA's request for Year 2000 status information.
    It is important to note that in the current device industry 
environment of mergers and acquisitions, it is not always obvious how 
one company may be affiliated with another, or which corporate entity 
should be the responsible reporting entity for a particular product. It 
is accurate to describe our industry as something of a corporate maze. 
For example, HIMA's membership of more than 800 companies actually 
consists of 300 companies and parent companies and their more than 500 
separate subsidiaries and divisions. For these reasons, HIMA also:

<bullet> Asked each member company to designate an individual who is 
        responsible for coordinating Year 2000 activities.
<bullet> Worked with the FDA and the VA in an effort to ensure that 
        their communications were going toY2K coordinators, especially 
        in instances where they were receiving no response.
<bullet> Made calls to non-HIMA member companies who had failed to 
        respond to the VA and FDA requests for Year 2000 information to 
        urge them to post their compliance information on the FDA 
        Biomedical Equipment Web site.
    Of the more than 13,000 FDA-registered device companies, the FDA 
identified 1,935 whose products are likely to have a date-dependent 
function. We understand that FDA's non-response rate is now just over 
200 companies. We can probably assume that many of these companies are 
no longer in business.
    More recently, in an effort to provide ``one stop shopping'' for 
health care providers on Year 2000 compliance information, the FDA has 
expanded their Web site to include information on Year 2000 compliant 
devices. HIMA worked closely with the FDA to help develop a workable 
template in order to facilitate a better industry response. We also 
strongly encouraged our members to respond to this new FDA request for 
information. HIMA's President urged all HIMA members, in a memorandum, 
to provide the requested information. HIMA also used its Web site to 
promote compliance with the request.
Baxter Healthcare Corporation Year 2000 Actions
    As a window into the activities of a large medical technology 
corporation with a diverse product line, I would like to highlight the 
Year 2000 progress and awareness initiatives Baxter Healthcare 
Corporation has undertaken. Given our goal of providing quality care 
for patients, Baxter has since early 1997 been actively addressing Year 
2000 issues relating to our customers, employees, suppliers, 
manufacturing and facility systems, products, services and internal 
systems. We have made tremendous progress and we anticipate that we 
will meet our goal of being Year 2000 compliant by September 30, 1999. 
To date, we have spent approximately 85 percent of our $135 million 
Year 2000 budget to address our role in the health care supply chain. 
Baxter's Year 2000 initiatives are comprehensive and include a variety 
of activities.
    Products--Baxter delivers critical therapies for life-threatening 
conditions. It is important work. Important to patients whose lives 
depend on our products and services. Important to health care 
professionals who count on us to help them treat their patients. 
Consequently, providing timely information regarding the status of Year 
2000-affected products and services is one of the Year 2000 team's top 
priorities. Baxter's product and software engineers have identified 
fewer than 100 electronic medical products that could have been 
affected by Year 2000 issues. Information regarding the Year 2000 
compliance status and implementation solutions for Baxter's electronic 
date-dependent products was available December 1, 1998. Our compliance 
checking has been completed and identified fewer than 20 products with 
Year 2000 issues. Product modifications and replacements are expected 
to be complete by mid-1999.
    Customers--The Year 2000 challenge isn't just about rewriting 
computer code, it's about being responsive to customers. We are 
actively working with customers to address various Year 2000 issues, 
including medical device compliance, viability of the supply chain, and 
Electronic Data Interchange (EDI). Beginning in June 1998, Year 2000 
certification documentation (letters, compliance certificates, and 
Baxter's compliance definition) began to be distributed to customers we 
identified as having date-dependent products.
    Also in June 1998, Baxter launched its Year 2000 Web site, which 
includes a complete list of Baxter's electronic medical products, 
detailed information regarding Year 2000-affected products, a customer 
inquiry form, compliance definition, product supply requirement 
information and other information on Baxter's Year 2000 Program. To 
date, we have responded to over 4,500 Year 2000 customer inquiries and 
have mailed over 25,000 compliance letters to customers worldwide. 
40,000 Baxter brochures in 10 languages were distributed to customers, 
suppliers, and employees to help increase global Year 2000 awareness.
    In early 1999, all customers who communicated with Baxter through 
EDI were notified about Baxter's implementation of the newest EDI 
standards that are Year 2000 compliant. While a change to a newer 
version may not have been required in all cases, it is the preferred 
way to communicate with Baxter.
    Suppliers--Suppliers in the broadest sense include all those 
parties that provide material, products, or services to Baxter. One of 
the biggest risks facing our global company is the potential failure of 
key strategic business partners, suppliers, and third parties on which 
we depend to address Year 2000 issues. To evaluate our suppliers, we 
have a coordinated effort through Baxter's Purchasing Council to 
address our raw materials/finished goods and maintenance, repair and 
operations (MRO) suppliers. Each Baxter facility is also requiring 
their local suppliers to communicate their progress toward Year 2000 
compliance. These suppliers may include utilities, telecommunications, 
third-party logistics providers, distributors, service providers, 
property managers and any other critical business supplier. We have 
received an over 90 percent response rate from questionnaires sent to 
our identified 7,000 critical suppliers asking for their Year 2000 
readiness information. We are also conducting face-to-face and 
telephone audits with targeted suppliers. Our goal is to complete these 
audits by mid-1999.
    Manufacturing--Baxter manufacturing worldwide adheres to high 
standards of quality. Our manufacturing plants are consistently 
recognized for their dedication to total quality and manufacturing 
excellence. As a health care manufacturer, Baxter has over 70 
manufacturing facilities, distribution centers and replenishment 
centers around the world. To date, 80 percent of Year 2000 
manufacturing and facility systems have been fixed and implementation 
will continue through mid-1999 according to plan.
    Internal Systems--As a global company, Baxter has literally 
thousands of internal interconnections and interactions amongst and 
between computer operating systems. In an effort to make it easier for 
our customers to do business with us, enhance our employees' ability to 
respond to customers, as well as improve our overall economic 
efficiency, we are implementing a global integration project. This 
project will implement software upgrades that are certified as Year 
2000 compliant as well as integrate our operational processes. To date, 
Baxter has achieved all major milestones relating to systems 
initiatives with approximately 75 percent of systems implementations 
complete as of March 1999.
    Contingency Planning--As part of its contingency planning and 
awareness efforts, Baxter is:

<bullet> meeting with customers to discuss their requirements and 
        obtain key information as input into our contingency plans;
<bullet> contacting customs officials to identify potential Year 2000 
        issues;
<bullet> monitoring the Year 2000 progress of its key distributors and 
        suppliers;
<bullet> assessing the viability of the entire supply chain and 
        developing appropriate contingency plans at each of its 
        manufacturing facilities worldwide;
<bullet> upgrading, replacing or modifying all major computer-based 
        business and finance systems where necessary to enhance 
        interactions with customers; and
<bullet> developing strategies for communicating with customers during 
        the Year 2000 transition.
    We are confident our comprehensive Year 2000 plan and 
implementation strategy will help us continue our mission of providing 
critical therapies for life-threatening conditions.
HIMA Contingency Planning Activities
    With respect to company operations' contingency planning, HIMA has 
helped to educate its membership on the importance of Year 2000 
contingency planning and the various components involved. For example, 
I participated in an association-wide teleconference to educate my 
colleagues on the many aspects of the contingency planning process in 
order to avoid critical interruptions of the supply chain and to 
enhance communications with customers. Year 2000 contingency planning 
is focused on developing alternate operating procedures that support 
business continuity. It should be noted that contingency plans are part 
of a company's normal course of business. Prudent companies must 
protect their operations during storms, strikes and other potential 
disruptions. In the case of Year 2000, these plans could range from 
taking customer orders by hand instead of by computer to establishing a 
Year 2000 command center for critical communications during the Year 
2000 transition.
    The President's Council on Year 2000 Conversion is working to 
evaluate the readiness of critical industries. To support the Council's 
initiative, HIMA circulated to its members a survey based on a template 
prepared by the President's Council. While we have not completed our 
analysis of the survey, our initial work indicates that the companies 
that supply the bulk of the country's medical devices are well on the 
way to complete Year 2000 readiness before the end of the year. The 
results collected thus far have given us a handle on general industry 
trends. For instance, we believe the companies that sell the vast 
majority of medical devices sold in the U.S. are communicating with 
their suppliers and their customers using multiple means such as face-
to-face meetings, 800 numbers, Web sites, e-mail, etc. In addition, the 
preliminary results indicate that these same companies expect to be 
Year 2000 compliant with respect to both their products and their 
operations.
Preemptive Buildup of Supplies
    On another equally important front, HIMA has recently turned its 
attention to the more serious issue of the potential for preemptive 
inventory build-up or stockpiling. As January 1, 2000 nears, serious 
concerns have been expressed throughout the supply chain that some 
providers may, as part of their contingency planning, preemptively 
hoard supplies. As a member of the Health Care Sector of the 
President's Council on Year 2000 Conversion, HIMA is working closely 
with the American Hospital Association, the Health Industry 
Distributors Association and others on a White House-sponsored 
Roundtable on Hospital Supplies to be held in early June.
    We expect the Roundtable to be a major source of valuable 
information and policy development that will relieve the pressure 
related to concerns over potential hoarding of hospital supplies. For 
instance, a possible outcome could be an industry/health care provider 
consensus that would, in effect, limit the amount of inventory 
providers would purchase to previous historical levels plus some 
minimal additional amount.
Proposals for Independent Verification of Industry Test Protocols
    A number of parties, including the General Accounting Office, have 
called for third-party verification of medical technology Year 2000 
test protocols. Others have advocated user or third-parting testing of 
devices. Some have argued that FDA should properly take on such 
responsibilities. Still others have called on industry to make public 
its test protocols as well as detailed testing results. We would like 
to highlight a number of concerns with such approaches:

<bullet> It is unlikely that enough independent third-party test 
        organizations exist to analyze and process the highly complex 
        test protocols associated with thousands of devices in the 
        available time.
<bullet> It would take tremendous resources and staffing for any 
        organization, including the FDA, to begin to verify 
        independently the numerous testing protocols involved for each 
        model of each device, some of which for complex devices can 
        approach 100 pages.
<bullet> Making public test protocols assumes that the provider 
        technicians responsible for such testing would be able to 
        properly and safely use and understand the protocols.
    We believe that at this late date, such activity would be a 
misdirection of resources. We understand that this view is shared by 
ECRI, a leading independent, non-profit research agency for health care 
technology and the Department of Veterans' Affairs, which expressed 
this opinion in several of our meetings with them. We have attached a 
slide prepared by the chief biomedical engineer of the Department of 
Veterans' Affairs describing the reasons for not entering into a major 
program to retest medical devices.
    Medical device manufacturers are strictly required by the FDA to 
verify and validate all product changes affecting patient safety. These 
activities are undertaken as part of each company's Design Control 
program under the FDA Quality Assurance regulation. These rules require 
written procedures for design change validation and verification, and 
independent internal audits of quality assurance activities. There are 
severe sanctions for failure to validate changes, and FDA has 
significant inspection authority to assure compliance. It is difficult 
to conceive that either users or third parties can more effectively 
verify device Year 2000 readiness than the manufacturers who originally 
designed the devices.
Conclusion
    In closing, HIMA will continue to work on a variety of fronts to 
ensure that the medical technologies on which millions of patients 
depend continue to function safely and effectively as we move into the 
next millenium. We want the patients who we serve as an industry to 
have confidence in us, and we will continue to do whatever we must to 
deserve their trust. We are committed to working cooperatively with 
anyone who shares this goal. We are open to suggestions and look 
forward to working with members of the Subcommittees.

    Mr. Upton. Thank you very much.
    Mrs. Williams.

                TESTIMONY OF NOEL BROWN WILLIAMS

    Ms. Williams. Good afternoon, Mr. Chairman and members of 
the subcommittee.
    Mr. Upton. Could you just put the mike just a little bit 
closer?
    Ms. Williams. A little bit closer. How is that?
    I am pleased to appear before you today on behalf of 
Columbia HCA Health Care Corporation, who is a member of the 
Federation of American Health Systems. The federation 
represents nearly 1,700 hospitals. I am here today to discuss 
Columbia HCA's activities and experience concerning year 2000 
and the medical devices.
    Columbia HCA is one of the leading healthcare service 
companies in the United States. We currently operate 236 
hospitals throughout the country and employ approximately 
225,000 workers, each of whom is committed to the care and 
improvement of human life. Columbia HCA estimates that we will 
spend approximately $86 million on Y2K, which does not include 
capital costs related to replacing non-compliant equipment.
    Columbia HCA began planning for the year 2000 in 1996. We 
established a year 2000 executive committee and have formed a 
multi-disciplinary Y2K support team. This team is monitoring 
over 1.4 million medical equipment information systems and 
physical plant assets. Our Y2K efforts have included activities 
such as contingency planning, coordination with our fiscal 
intermediaries, and medical equipment planning.
    Medical equipment planning has been, and continues to be, 
one of the key areas in our Y2K planning effort. The first 
thing we did was an inventory of our medical equipment assets. 
With few exceptions, this included anything that had a battery 
or power cord. The current medical equipment inventory includes 
over 450,000 pieces of equipment.
    In an attempt to prioritize our medical equipment and 
device planning efforts, we developed a classification system. 
This classification system enables us to focus our efforts on 
medical equipment that is essential to providing patient care. 
The classification has five impact ratings. However, our focus 
is mission-critical equipment, which includes life-support 
equipment such as ventilators and anesthesia machines.
    Next, we identified almost 900 prevalent vendors in the 
Columbia HCA medical equipment network. We then surveyed each 
of these vendors for compliance information. Ninety-five 
percent of those vendors have responded to our request.
    Next, vendor responses were evaluated by our survey teams, 
subject matter experts, and then risk management experts before 
being published in our internal data base. We now have 
compliance information on over 28,000 items in this data base, 
including 11,000 in the medical equipment category. Our 
facilities can now match their equipment inventory back to this 
data base to determine if it is compliant or non-compliant.
    The final step is facility decisions and remediation. Once 
our facility has completed an equipment match to an item to our 
internal data base and have identified that the equipment is 
non-compliant, they can plan accordingly--to use the equipment 
as is, where the Y2K impact does not affect how the equipment 
is used in a patient care setting, plan a workaround, consider 
an upgrade, replace the equipment, or retire the equipment. The 
facility evaluation is based on the equipment classification 
and how this equipment is being used in the facility.
    Our research and evaluation of medical equipment varied 
based upon the equipment's classification. For example, 
stricter acceptance criteria from vendors was required for 
mission-critical devices. Of approximately 450,000 medical 
equipment assets, over 190,000 are mission-critical or impact 
level one. We have identified approximately 8 percent of these 
as limited or non-compliant and will require remediation. In 
addition, we have identified over 800 pieces of mission-
critical or impact level one medical devices which we have 
placed in a status of unknown, because the manufacturer has 
indicated that they are not evaluating the compliance status of 
the devices or for which we have not received acceptable vendor 
information. And I might add, that represents 18 companies.
    There are several issues we feel might be of particular 
significance to the subcommittees, which we have discussed in 
our written testimony. They are proof of compliance, the FDA 
clearinghouse, hospital medical device testing, and supply 
chain issues. We believe that the healthcare providers, the 
equipment manufacturers, and the FDA all have responsibilities 
in this process. The provider must identify their medical 
equipment, obtain the compliance information from the 
manufacturer, and then determine if the Y2K impact requires 
remediation. The manufacturer should be responsible for 
accurately determining the Y2K status of its equipment, 
communicate that status, including specific details about what 
makes the device compliant or non-compliant to the healthcare 
community.
    The FDA can support these initiatives by requiring the 
manufacturers to determine the compliance status of all of the 
equipment, what the impact is, the availability of upgrades, 
replacements, or workarounds, and ensuring that there is an 
easily accessible mechanism for all healthcare providers to get 
the information, including updates. Of special interest is the 
need for manufacturers to provide compliance information for 
all of their devices, as some have chose not to test obsolete 
or retired devices.
    Columbia HCA has taken the initiative to manage the year 
2000 issue in order to protect the safety of our patients and 
to continue providing quality health services. This effort 
requires the support and cooperation of public and private 
sectors. We appreciate the opportunity to testify today and I 
would be happy to answer any questions you have. Thank you.
    [The prepared statement of Noel Brown Williams follows:]
 Prepared Statement of Noel Brown Williams, Sr. Vice President & Chief 
        Information Officer, Columbia/HCA Healthcare Corporation
                              introduction
    Good morning Mr. Chairman and Members of the Subcommittees. I am 
Noel Williams, Senior Vice President and Chief Information Officer of 
Columbia/HCA Healthcare Corporation. I am pleased to appear before you 
today on behalf of my company who is a member of the Federation of 
American Health Systems. The Federation of American Health Systems 
represents nearly 1,700 privately owned and managed community-based 
hospitals and health systems that offer traditional acute care, 
ambulatory care, rehabilitative care; and allied companies involved in 
health care systems.
    For purposes of today's hearing, I will specifically discuss 
Columbia/HCA's activities and experience concerning Y2K and medical 
devices. I will also refer to Columbia/HCA Healthcare Corporation and 
it's affiliates as simply Columbia/HCA. Columbia/HCA is one of the 
leading health care service companies in the United States. We 
currently operate 236 hospitals throughout the country and employ 
approximately 225,185 workers, each of whom is committed to the care 
and improvement of human life.
    Let me begin by thanking you for the dedication and interest you 
have shown for the Year 2000 issue. Columbia/HCA recognizes and shares 
your concern and I appreciate the opportunity to explain how we, as 
representatives of the medical industry, are preparing for Y2K.
    Columbia/HCA estimates that we will spend approximately $86 million 
on Y2K, which does not include capital costs related to replacing non-
compliant equipment.
                   columbia/hca's y2k planning effort
    Columbia/HCA began planning for the Year 2000 in 1996. We 
established a Y2K Executive Committee that includes our CEO and other 
senior managers, and we periodically update our Board of Directors on 
our progress. In addition, we have formed a multi-disciplinary Y2K 
support team made up of physicians and other health care professionals, 
information systems (IS), engineering, risk, financial, audit and other 
experts to provide guidance, oversight and support for our facilities. 
This team is currently monitoring over $1.4 million assets in our 
medical equipment, IS infrastructure and facility and physical plant 
tracks.
    We have also worked closely with other groups and organizations on 
the Y2K issue. These include the American Hospital Association and the 
Odin Group. The Odin Group is a collection of healthcare-related 
companies that include equipment manufacturers, hospitals, 
pharmaceuticals, health equipment manufacturers and others involved in 
the healthcare process.
    Our Y2K efforts have included activities such as contingency 
planning, coordination with our fiscal intermediaries, medical 
equipment and device planning. I would like to talk briefly about our 
activities in the medical equipment and medical device area.
                       medical equipment planning
    Medical equipment planning has been and continues to be one of the 
key areas in our Y2K planning effort. Our process for the evaluation 
and remediation of medical devices includes the following:

1. Inventory. This involved an inventory of all of our medical 
        equipment assets. With few exceptions, this included anything 
        that had a battery, electrical power or power cord. The current 
        medical equipment inventory includes over 450,000 pieces of 
        equipment. Our next step in this process was to classify the 
        equipment.
2. Classification. In an attempt to prioritize our medical equipment 
        and device planning efforts, we developed a classification 
        system. This classification system enables us to focus our 
        efforts on medical equipment that are essential to provide 
        patient care. The classification system includes mission 
        critical equipment, which includes life-support equipment such 
        as ventilators and anesthesia machines, and impact ratings one 
        through four. The next step in our process was vendor research.
3. Vendor Research. We identified approximately 880 prevalent vendors 
        in the Columbia/HCA medical equipment network. We then surveyed 
        each of these vendors for compliance information. I am pleased 
        to say that 95% of these vendors have responded to our request 
        for compliance information.
4. Evaluation. After the research component was completed, we analyzed 
        the survey results using a 3-step process. Vendor responses 
        were evaluated by our survey teams, subject matter experts and 
        then risk management experts, before being published in our 
        internal database. We now have compliance information on over 
        28,000 items in this database, including 11,000 in the medical 
        equipment track. Our facilities can now match their equipment 
        back to this database to determine if it is compliant or non-
        compliant.
5. Facility Decisions/Remediate. Once our facilities complete an 
        equipment match to an item in our internal database and have 
        identified the equipment that is non-compliant, or has a 
        limited compliance status, they can plan accordingly. Their 
        options include:
1) use the equipment ``as is'' where the Y2K impact does not affect how 
            the equipment is used in a patient care setting,
2) plan a ``workaround'',
3) consider an upgrade,
4) replace the equipment or,
5) retire the equipment. The facility evaluation is based on the 
            equipment classification and how this equipment is being 
            used in the facility.
    Our research and evaluation of medical equipment varied based on 
the equipment's classification. For example, stricter acceptance 
criteria from vendors were required for mission critical and impact 
level one devices.
    Of approximately 450,000 medical equipment assets, over 190,000 are 
``mission critical'' or ``impact level one.'' Approximately 92% of 
these mission critical or impact level one devices are compliant, while 
approximately 8% of these have been identified by us as limited or non-
compliant and will require remediation.
    In addition, we have identified 51 models, representing over 800 
pieces of mission critical or impact level one medical devices, which 
we have placed in a status of ``unknown'' because the manufacturer has 
indicated they are not evaluating the compliance status of the devices 
or for which we have not received acceptable vendor information.
    There are several issues we feel might be of particular 
significance to the Subcommittees. I'd like to take a moment to discuss 
these with you.
                          proof of compliance
    The General Accounting Office (GAO) has indicated that medical 
device manufacturers should provide to the FDA and VHA documentation of 
the tests they have conducted on their devices, so they can determine 
whether or not the equipment was compliant. As I have previously 
stated, we required different levels of information from our 
manufacturers, based on the impact level of the equipment.
    For mission critical and impact level one medical devices, we asked 
the manufacturers for version specific compliance information, as well 
as documentation to prove that they had performed testing. We also 
required them to provide testing documentation, or testing scripts and 
protocols indicating appropriate due diligence was exercised. There are 
some obvious advantages in having the FDA manage and standardize such a 
process, but unfortunately it is probably too late to initiate this 
effort.
                           fda clearinghouse
    Although we understand that the FDA has established a clearinghouse 
of medical devices, our approach has been to gather information 
directly from the manufacturers. While the clearinghouse provides a 
source of information for hospitals, there are areas for enhancement of 
the site, which would make it more user friendly. These include 
consistency in the presentation of compliance data, a mechanism for 
tracking manufacturer's compliance updates or changes and standardized 
requirements for compliance information acceptance criteria.
                    hospital medical device testing
    To summarize our process at Columbia/HCA, we begin with a detailed 
inventory of our medical devices, including model, version and in some 
cases serial number.
    Next, we match compliance information from the manufacturer with 
the specific device in our inventory. We rely on the manufacturer to be 
the authoritative source for compliance information, and have adopted a 
testing policy based on the ECRI recommendations that testing should 
not be performed by any one other than the manufacturer, except in 
cases where insufficient information is available from the 
manufacturer.
                            responsibilities
    We believe that the healthcare providers, the equipment 
manufacturer and the FDA all have responsibilities in this process. The 
provider must identify all their medical equipment, obtain the 
compliance information from the manufacturer, and then determine if the 
Y2K impact requires remediation. The manufacturer should be responsible 
for accurately determining the Y2K status of its equipment and 
communicate that status, including specific details about what makes 
the device compliant or non-compliant to the healthcare community. The 
FDA can support these initiatives by requiring the manufacturers to 
determine the compliance status of all of their equipment, what the 
impact is, the availability of upgrades, replacements or workarounds, 
and ensuring that there is an easily accessible mechanism for all 
healthcare providers to get the information, including updates.
    Of special interest is the need for manufacturers to provide 
compliance information for all of their devices, as some have chosen 
not to test obsolete or retired devices.
                          supply chain issues
    There are several supply chain issues related to medical equipment. 
These are:

1) availability of upgrades and service personnel to fix the non 
        compliant equipment, and
2) availability of disposable supply items and reagents that are 
        required for operating the medical devices.
    Hoarding of hospital supplies has recently become a concern in the 
industry. We are working closely with our peers, the American Hospital 
Association, our suppliers and distributors to evaluate the supply 
chain and put safeguards in place to ensure uninterrupted supply 
availability. In our opinion, hoarding or stockpiling of additional 
supplies could create shortages well ahead of the Year 2000 transition. 
We encourage all parties to work collaboratively on this critical 
issue.
                               conclusion
    Columbia/HCA is taking the initiative to manage the Year 2000 issue 
in order to protect the safety of our patients and to continue 
providing quality health services.
    There are serious challenges ahead of us, but we are confident that 
the healthcare industry will meet these challenges. This effort 
requires the support and cooperation of both public and private 
sectors. We appreciate the opportunity to testify today and welcome any 
questions you may have at this time. Thank you.

    Mr. Upton. Thank you.
    Mr. Nunn.

                    TESTIMONY OF JOHN C. NUNN

    Mr. Nunn. Good afternoon. I am John Nunn, vice president 
for Patient Care Services at Henry Ford Hospital, part of the 
Henry Ford Health System in Detroit. I also co-chair the 
Systems Y2K Contingency Planning Committee. I am here on behalf 
of the American Hospital Association's 5,000 hospitals, health 
system networks, and other providers of care.
    Most of the Nation's hospitals expect to be Y2K compliant 
by January 1, 2000, based on the results of the nationally 
representative AHA survey. Of the remainder, almost all expect 
to be sufficiently prepared that critical operations will not 
be affected. Approximately 2,000 hospitals responded to the AHA 
survey which was conducted in February: 5.7 percent of the 
hospitals said that their medical devices were compliant, 90.4 
percent expected their devices to be compliant by the year end 
or expected no problems in their operations, and only .5 
percent expected compliance with possible adverse effects.
    Henry Ford Health System is in the middle category. Our 
devices are not 100 percent compliant, but like the great 
majority of hospitals, we expect no problems as a result. Put 
another way, all of our devices may not be compliant, but our 
hospitals themselves will be.
    At Henry Ford we have about 25,000 medical equipment 
devices; we have completed the Y2K assessment in all but 7,800. 
Those are held up largely because the communication process 
between us and the manufacturers is ongoing. Some cases, 
especially in older devices, simpler devices, or where 
manufacturers are out of business or merged and no longer 
servicing their devices, we are having difficulty getting 
devices declared or certified compliant.
    Of the items we have assessed, only about 3 percent, or 
about 500 devices, required action. Of those, 60 percent 
required a software upgrade; 20 percent will be subject to what 
we call a workaround, which means that staff can work around 
the problem without modification of the device; 18 percent of 
the equipment will need to be replaced. Remediation is required 
if the two-digit date in the medical device's computer chip is 
used in a calculation, archiving or sent to another computer. 
The decision to upgrade or replace the device depends on 
availability and cost. If the data is not critical used in one 
of these calculations, the workaround solution may be used.
    For example, we are replacing or upgrading some of our EKG 
machines because they report to a central reporting computer. 
We will upgrade that equipment. Our standalone EKG equipment, 
on the other hand, may show the wrong date and be technically 
not compliant, but we will work around by striking that date, 
writing in the correct date on the report, and signing the 
correct date.
    Most devices that we still need information on are not 
critical care or the life support area. We have machines in our 
labs that mix--shake blood samples, for example; it monitors 
other equipment that do not have a safety hazard associated 
with them. While we are convinced that many of these devices 
which are electric will not be affected, until we hear from the 
manufacturer, we are hesitant to declare them compliant. As 
January 1 approaches, we will make those decisions and are 
prepared to move ahead without manufacturer information.
    We do rely heavily on the manufacturer testing and 
information, and the information we have been receiving appears 
to be reliable. As the new year approaches, if we cannot get 
the information we need, we will have four options: Try to do 
limited testing ourselves; hire a third-party tester; wait 
until the date change and then recalibrate the device to make 
sure it works, using our normal QC processes, or ultimately 
retire or replace specific devices.
    No matter how hard we prepare, surprises happen. 
Fortunately, hospitals are experienced in and ready for 
surprises. Whether it is Oklahoma, Kansas, Colorado, Georgia, 
forces of nature, failures of man, hospitals expect the 
unexpected. Last summer a construction company dug through our 
hospital's main power line. Ultimately, we lost two-thirds of 
the power to our hospital, and we were able to manage that 
situation without harm to our patients.
    I note that my time is up and am just entering my 
conclusion. Of course, Y2K could be different, but then, again, 
we plan for the unexpected. Y2K is not unexpected. It is 
something that we know will happen; it is at a known time in a 
controlled environment. We have identified the contingencies we 
need to prepare for and are preparing for them. I believe the 
hospitals and the health systems will succeed because of the 
people inside of them. Emergency department personnel to the 
CEO do this type of work and are prepared to make the decisions 
that will be required.
    I would be glad to answer any questions.
    [The prepared statement of John C. Nunn follows:]
  Prepared Statement of John C. Nunn, Vice President for Patient Care 
   Services, Henry Ford Hospital on Behalf of the American Hospital 
                              Association
    Mr. Chairman, I am John C. Nunn, vice president for patient care 
services at Henry Ford Hospital, part of the Henry Ford Health System 
in Detroit. I am here on behalf of the American Hospital Association's 
(AHA) nearly 5,000 hospitals, health systems, networks, and other 
providers of care.
    The AHA and its members are committed to continuing the smooth 
delivery of high-quality health care, at the turn of the century and 
beyond, uninterrupted by the calendar change that will occur at 
midnight December 31. We appreciate this opportunity to update you on 
our efforts, to outline the role that the AHA has taken in aiding the 
health care field, and to focus on what hospitals are experiencing as 
they work to assure themselves, their patients, and their communities 
that the medical devices and equipment they rely on will operate 
safely.
                       progress on y2k compliance
    The majority of the nation's hospitals expect to be completely 
``Y2K compliant'' by January 1, 2000, based on the results of a 
nationally representative survey we conducted. Of the balance, almost 
all expect to be sufficiently prepared that critical operations will 
not be affected. The survey occurred in February 1999, and medical 
device readiness was one of the focuses. Respondents represented not-
for-profit and investor-owned hospitals in urban and rural areas. 
Following are highlights from the medical devices portion of the 
survey:

<bullet> 5.7% of hospitals said their devices were compliant when they 
        responded in February.
<bullet> Another 90.4% of hospitals expected their devices to be Y2K 
        compliant by year end or expected no problems in their 
        operations.
<bullet> 0.5% expected non-compliance with possible adverse effects.
    In the survey, hospitals were asked whether their medical devices 
would be compliant, or noncompliant with no adverse effects. This is 
important, because some medical devices could technically be labeled 
non-compliant, even though they will not fail to operate as a result of 
the date change.
    For example, an EKG machine may provide accurate heart rate 
information, while the strip recording the test information notes the 
date of the test incorrectly. In such cases, medical personnel would 
simply write the correct date onto the readout. In no way would this 
machine be a danger, but it technically would be labeled non-compliant 
because it did not recognize the date change.
                      how hospitals are preparing
    In general, hospitals have been taking the following steps to 
ensure the safety and reliability of their medical devices at the turn 
of the century:

<bullet> Taking inventory of all equipment and devices--identifying 
        which may be potentially affected by Y2K.
<bullet> Determining which are actually affected and how their 
        functioning will be altered--this is done through contact with 
        the manufacturers to get the results of their assessments and 
        testing.
<bullet> Taking follow-up action if those devices or equipment are 
        affected by Y2K--depending on the device or equipment, this may 
        mean repairing, taking out of service, or training staff on how 
        to use the equipment going into the new year.
<bullet> Developing contingency plans--even with all the advance 
        preparations. Hospitals still need to anticipate the 
        unforeseen.
                          contingency planning
    America's hospitals and health systems are in the business of 
dealing with the unexpected. They are used to mobilizing quickly in the 
face of floods, hurricanes and potentially disastrous events that are 
an unfortunate fact of life. There is no reason to believe that they 
will not also be ready for the Year 2000, whether or not every medical 
device in the hospital is Y2K-compliant.
    Patient safety is the highest priority for hospitals and health 
systems. Our ultimate contingency plan is to take care of patients at 
the bedside--as we do 24 hours a day, seven days a week, 365 days a 
year. Should a medical device turn out to be non-compliant, it is very 
likely that the ramifications will be limited, because it is a 
hospital's people who take care of patients, not a hospital's medical 
devices.
    Hospitals are examining a range of options, such as having extra 
staff available for the date change and for the few days after, and not 
scheduling elective surgeries, thus ensuring that only people who 
absolutely need to be in the hospital are there.
    This is not being done out of a sense of panic, but to provide the 
broadest latitude for dealing with the unexpected. Some devices and 
equipment can only be operated in real-time--that is, after the clock 
turns from Dec. 31 to Jan. 1--and hospital personnel will literally 
watch this equipment's clock change to ensure that it works properly 
before allowing it to be used for patient care. The ultimate 
contingency plan is to provide care the old-fashioned way in the 
unlikely case of a modern medical device impeding care.
    Some outside factors could also have an indirect effect on how our 
people deliver care. Specifically, it is incumbent upon hospitals to 
prepare now to respond to the potential loss or disruption of any 
essential hospital processes or services, and our survey indicates that 
our members are doing just that. They are directing their efforts both 
internally across hospitals' facilities, and externally within 
communities. This includes working with such entities as utility 
companies, emergency medical services, and other health care providers.
    According to the AHA's survey, 66 percent of hospitals have 
initiated contact with utilities in their area; 44 percent have 
initiated contact with other hospitals; 38 percent have initiated 
contact with fire and police authorities; 36 percent have initiated 
contact with ambulance services; and 35 percent have initiated contact 
with their local governments.
                        relying on manufacturers
    Hospitals have historically relied on manufacturers' 
representations of the fitness and safety of their products. There is a 
sound reason for this: Manufacturers are in the best position to 
analyze and test their products, and they have a regulatory obligation 
to do so. Absent some bona fide basis for believing that a 
manufacturer's compliance statement is inaccurate, hospitals need to 
rely on the longstanding presumption that manufacturers are acting in 
good faith and issuing information backed up by proper analysis and 
research.
    The FDA's Y2K guidance to manufacturers emphasizes the 
responsibility of manufacturers for their products' Y2K compliance and 
safety. FDA has stressed that the technical know-how for determining 
the compliance status of devices rests with the manufacturers.
    A complex question that hospitals face is whether to undertake 
independent testing of their medical devices and equipment. This is a 
decision that ultimately must be made using the judgement of the 
leaders of each individual hospital or health system.
    ECRI, an international nonprofit health services agency that is 
recognized as the ``Consumer Reports'' for biomedical devices, recently 
published its position recommending how health care organizations 
should address the Y2K medical device testing issue. At AHA's request, 
this position statement was reviewed and discussed by a number of 
health care systems and biomedical manufacturers. Considerations for 
evaluating the thoroughness of a manufacturer's compliance disclosure 
statement also were discussed. The AHA has made the ECRI paper 
available on the AHA Web site and issued a companion advisory.
    The ECRI statement cautions that a program of testing is not a 
panacea for health care providers. Rather, ECRI recommends that health 
care facilities address the Y2K medical device problem in the following 
way:

<bullet> Obtain manufacturer information regarding Y2K compliance 
        status of any susceptible medical devices in their inventories 
        either directly from the manufacturer or through the Food and 
        Drug Administration (FDA) or a commercial data base.
<bullet> If a facility has received complete compliance information for 
        a device, testing of that device by the health care institution 
        is not necessary.
<bullet> If clear and complete information on a device's Y2K compliance 
        status cannot be obtained, the facility should perform Y2K 
        testing or take other appropriate action.
    The ECRI position identifies reasons why health care institutions 
should proceed cautiously when considering a testing program, including 
the lack of expertise and information at most institutions to perform 
an adequate level of testing. ECRI argues, in fact, that the testing a 
provider can accomplish is superficial and may provide false assurances 
about compliance and introduce a wholly different set of problems.
    Although a few hospitals have identified discrepancies between what 
some manufacturers have reported and their own tests of medical 
equipment. ECRI believes that the total number of these occurrences is 
extremely small and none are mission critical.
    The ECRI position separately addresses situations in which testing 
is warranted: devices that are interfaced as a system, those with 
replacement parts, and those user-modified.
                          the role of the fda
    The AHA, as part of the National Patient Safety Partnership, has 
been collaborating with the FDA to ensure that its Federal Year 2000 
Biomedical Equipment Clearinghouse is receiving accurate and useful 
information from manufacturers. This information, easily available on 
the agency's Web site at www.fda.gov, has been improved significantly.
    As the General Accounting Office recently testified before these 
subcommittees, ``In collaboration with the National Patient Safety 
Partnership, FDA is in the process of obtaining more detailed 
information from manufacturers on noncompliant products, such as make 
and model and descriptions of the impact of the Y2K problem on products 
left uncorrected. For example, FDA sent a March 29, 1999, letter 
requesting that medical device manufacturers submit to the 
clearinghouse a complete list of individual product models that are Y2K 
compliant.''
    It is critical that the FDA continue to closely monitor the 
reporting of manufacturers about their medical devices and equipment. 
FDA has the expertise, the resources, and the authority to ensure that 
products are safe and reliable.
    At the same time, we believe that the FDA should play a ``rumor 
control'' role, monitoring such arenas as the Internet and the media to 
make sure that information that circulates about the effects of Y2K on 
medical devices and equipment is accurate, and correcting it when it is 
wrong.
                             y2k liability
    Hospitals cannot meet the Y2K challenge alone. We depend not only 
on medical device manufacturers, but also on vendors and suppliers, 
software companies, even the companies that maintain the elevators we 
use to transport patients, to name a few. Hospitals have made hundreds 
of thousands of contacts through letters and phone calls to learn 
whether manufacturers' and vendors' products are Y2K compliant and, if 
not, what modifications may be necessary to bring them into compliance.
    In most cases, hospitals depend on manufacturers and vendors for 
information and support; hospitals cannot make the changes themselves. 
Unless hospitals are provided the necessary information, they will not 
be able to take appropriate action, including the development of 
responsible contingency plans. Vendors and manufacturers must take the 
initiative for several reasons. From a legal perspective, license 
agreements, warranties and other protections will be at risk if the 
hospital takes action on its own. From a practical perspective, only 
the vendors and manufacturers have the know-how needed to make 
technical evaluations and recommendations.
    In spite of all that is being done, some problems may still arise. 
The AHA and its member hospitals understand and appreciate the desire 
to avoid litigation. Dollars diverted from the delivery of health care 
are dollars lost to the mission of hospitals. In considering any 
proposal for Y2K liability reform, hospitals and health systems have 
one overriding concern: that their ability to deliver high quality care 
will not be hurt in any way.
    We want to ensure that hospitals remain on a level playing field 
when defending personal injury cases. Hospitals must retain all of 
their current rights to take legal action against a vendor or 
manufacturer whose product is involved in a claim. While we believe 
that the legislative proposals do not intend to create a disadvantage 
for hospitals, it is essential that, if a hospital is sued by a patient 
for a Y2K related event, explicit language be included in any proposal 
to ensure that the hospital has the same recourse against a vendor or 
manufacturer as it has today. H.R. 775, recently passed by the House 
does this. We are working to assure that the Senate includes a similar 
provision in their Y2K legislation.
               the role of the aha and other associations
    Mr. Chairman, all of the activities I've described above are part 
of an overall effort by the AHA and its state associations to help 
hospitals and health systems in their Y2K preparation. This effort 
includes:

<bullet> Working with state hospital associations to sponsor Security 
        Third Millennium (SIIIM), an Internet tool helping health care 
        providers get information to minimize malfunction or failure of 
        biomedical devices and equipment on January 1, 2000;
<bullet> Developing a members-only Y2K section of AHA's Web site with 
        up-to-date news and resources to help manage the Y2K computer 
        challenge;
<bullet> Using a toll-free 800 number to provide Y2K information to 
        members on educational opportunities, peer and consultant 
        referrals and speaker recommendations;
<bullet> Creating the ``Y2K: Mission Critical'' executive briefing, a 
        notebook for hospitals that outlines the Y2K problem and offers 
        information on how to deal with it;
<bullet> Using AHA's publications to provide members with information, 
        including ``The Clock's Ticking'' column, devoted entirely to 
        Y2K, in AHA's weekly newspaper;
<bullet> Developing the members-only ``Y2K Communications Action Kit,'' 
        a resource with tools to help communicate a hospital's Y2K 
        progress with the public; and
<bullet> Distributing a contingency planning workbook with templates to 
        help hospitals create internal and external back up plans.
    The AHA, along with state, regional and metropolitan hospital and 
health system associations, is also working hard to make sure that 
America's hospitals and health systems are informed about, educated on, 
and assisted with Year 2000 contingency planning. We recently 
distributed to every AHA member a briefing on hospital contingency 
planning. This briefing emphasizes the interdependent nature of health 
care, and stresses the need for hospitals to plan in advance, with 
their key partners, how they will handle potential Y2K-induced losses 
or disruptions. This executive briefing was followed up by ``how-to'' 
materials for hospital contingency planning, including a business 
continuity planning guide.
    In addition, the AHA will be working with the Federal Emergency 
Management Administration to coordinate emergency preparedness efforts 
at a national level with contingency planning taking place at 
individual hospitals in local communities. We recently brought together 
representatives of major health systems and health care manufacturing 
and supply companies to discuss how we can provide guidance to the 
health care field on issues related to Y2K preparedness and concerns 
about health care equipment and pharmaceutical and medical supply 
stockpiling. We are also participating in the President's Y2K Council's 
roundtables on the issue of stockpiling.
                          the role of congress
    As I have described, health care providers and the associations 
that represent them are devoting significant time, resources and energy 
to preventing potential Year 2000 problems from affecting patient 
safety. It is essential that we all look for ways to help prepare 
America's health care system for the turn of the century, and Congress 
can play an important role. Your attention to this issue, through 
hearings such as this, reflects your understanding of the gravity of 
the situation.
    One major step toward Y2K compliance occurred when Congress passed 
its ``Good Samaritan'' legislation. By shielding from liability the 
sharing of information among businesses that provide it in good faith, 
this law encourages all parties--providers, suppliers, manufacturers, 
and more--to work together.
    We ask you to help America's health care system avoid Year 2000 
problems by taking several other steps:

<bullet> Congress should provide the FDA with any additional authority 
        or resources it needs to ensure the necessary information is 
        disclosed by medical device manufacturers, and to serve a 
        ``rumor control'' function regarding devices.
<bullet> Recently, John Koskinen, chairman of the President's Council 
        on Year 2000 Conversion, mentioned the possibility of creating 
        a contingency fund from which states (in the case of Medicaid, 
        for example) or hospitals could draw monies needed to continue 
        operating in case of a Y2K disruption. We support that 
        principle, and would be glad to be a part of any discussions 
        concerning how such a fund should be set up.
<bullet> MedPAC has included in its hospital prospective payment system 
        update recommendation for fiscal year 2000 an additional 0.5 
        percent to cover hospitals' costs of becoming Y2K compliant. We 
        ask Congress to increase the congressionally mandated hospital 
        update factor by 0.5 percent to reflect this MedPAC 
        recommendation.
                               conclusion
    America's hospitals and health systems, their state associations, 
and the AHA are partners in the effort to prepare for the Year 2000. We 
believe that most manufacturers are being forthcoming and complete in 
their assessments of the medical devices they provide to hospitals. We 
look forward to continuing our work with you, the FDA, and medical 
device manufacturers in ensuring a smooth--and healthy--transition into 
the new millennium.

    Mr. Upton. Thank you very much.
    I will recognize first the vice chair to the subcommittee, 
Mr. Burr, for 5 minutes.
    Mr. Burr. Thank you, Mr. Chairman.
    Mr. Smith, let me commend HIMA for I think going above and 
beyond what associations are set up, but with Y2K we have got 
somewhat of a circumstance we have never been faced with 
before. I think it is wise for the association to engage to the 
degree that they have, and I am hopeful that will be in a form 
of a partnership as well, but the Federal Government will do 
equally their share.
    Let me just ask you, going back to this point where we 
begin to panic, if in fact we have a product in the marketplace 
that is non-compliant, can the manufacturers handle some type 
of recall in 90 days?
    Mr. Smith. As I listened to that earlier discourse, I was 
struck with the fact that perhaps one manufacturer could handle 
a recall in 90 days. I am not so sure that many, many multiple 
manufacturers could handle the recourse in that case.
    Mr. Burr. And the fact is that we don't know whether we 
will have any problems, or whether we will have 10 problems, or 
whether we will have 100 problems. Is that a pretty safe 
assumption right now?
    Mr. Smith. It is a safe assumption that we don't know that. 
I think it is a safe assumption as well that we are all working 
to mitigate those problems such that we have many fewer than 
most.
    Mr. Burr. And I think----
    Mr. Smith. I would like to add one more thing--I am sorry.
    Mr. Burr. Yes, sir.
    Mr. Smith. And that is that I think we have lost, to some 
degree, the ideology that, as the year 2000 gets closer, there 
is much more focus and effort put on trying to solve issues 
associated with the year 2000. It is very common-sensible to me 
that a year ago, having not been as focused on the problem, we 
see things in a certain way. A year later, 6 months later, the 
dynamic nature of this, we are making tremendous strides, I 
think, maybe exponential strides, to continue to address 
things. I think that is true throughout the healthcare arena, 
by the way.
    Mr. Burr. I think one of the responsibilities of this 
committee is to instill the same sense of urgency----
    Mr. Smith. I agree.
    Mr. Burr. [continuing] in all areas of the Federal 
Government.
    Let me ask you, Ms. Williams, who do you think as far as 
Federal agencies has the oversight over this issue as it 
relates to hospitals? Who would you expect to contact you 
relative to Y2K-compliance issues from the Federal Government?
    Ms. Williams. Probably the FDA. Possibly the HCFA, but 
primarily FDA.
    Mr. Burr. Mr. Nunn?
    Mr. Nunn. I think that the best source of communication 
will come from the manufacturer. The most effective source, if 
we do get communicative from the government, I think it is the 
FDA.
    Mr. Burr. Do you see the FDA by design or just because 
nobody else wants to deal with it as the oversight agency?
    Mr. Nunn. Yes.
    Mr. Burr. It wasn't a yes or no, but I will take it by 
design.
    I ask those specifically for Dr. Shope, because he is here, 
interested enough to stay, and I think it is important that 
they understand how hospitals look at FDA's role relative to 
the Y2K, when they go back and try to answer some of these 
questions.
    Ms. Williams, for a hospital that has not done what 
Columbia has done, gone through, looked at the number of items, 
looked at contacting manufacturers, and asked for proof of 
compliance to determine how many potential problems you may 
have in your facilities, let us assume that today they got that 
sense of urgency; can they go through the process that Columbia 
has between now and January 1, 2000?
    Ms. Williams. I would say it would depend on the size of 
the hospital. I mean, if they had a very focused effort. But 
again, it is going to depend on the size of the hospital, the 
number of----
    Mr. Burr. You said for Columbia you started working in 
1996, or at least you began to identify the problems in 1996. 
Is it realistic that there is a hospital that has the 
capabilities in a 7-month period now to actually go through and 
evaluate all their devices?
    Ms. Williams. I would say it would be difficult, but if 
they applied proper resources and, you know, very focused 
efforts.
    Mr. Burr. The smaller the hospital, the fewer the 
resources; the larger the hospital, the more the resources, but 
larger hospitals also have more equipment.
    Ms. Williams. It would be difficult.
    Mr. Burr. Okay. Let me ask you about the FDA clearinghouse 
real quick, because you made some statements, ``although we 
understand the FDA has established a clearinghouse of medical 
devices.'' That statement leads me to believe that you haven't 
even looked at the website.
    Ms. Williams. We have looked at it. We do not rely on it as 
our primary resource. We rely on the manufacturers.
    Mr. Burr. Have you used it in any way as a resource?
    Ms. Williams. Not as a primary resource. We have looked at 
it.
    Mr. Burr. Have you used it as a secondary resource other 
than to just look at it? I would like you to be as honest as 
you can, because I think there is a tremendous reliance at the 
FDA on the clearinghouse as a search, and if it is not 
something that hospitals--I say that in a broad way--are 
utilizing today, I think it is important that we point it out 
to the FDA, so that they can plan accordingly.
    Ms. Williams. As I said, we rely primarily on the 
manufacturers, and our primary use of the FDA website is for 
addresses of the manufacturers, and so forth.
    Mr. Burr. Mr. Nunn, would you like to comment?
    Mr. Nunn. We have used the FDA website. Talking to our 
clinical engineers, they do use it as an information source. 
They also like that you can click into the manufacturer data 
bases when you are in and researching particular information.
    Mr. Burr. If you identified something through the 
clearinghouse, is the likelihood that you would stop there if 
it expressed some concern, or would you then contact 
manufacturer?
    Mr. Nunn. No, we are working directly with the 
manufacturers. We consider them to be our prime source of 
information.
    Mr. Burr. So it is not a one-stop shop?
    Mr. Nunn. That is correct.
    Mr. Burr. I see that my time has run out. Let me just thank 
all three of our panelists today. I can ensure you that it is 
our intent to serve as a facilitator in making sure that sense 
of urgency, but also that the resources are available for that 
partnership between the private sector and the Federal 
Government. So that everybody can have the assurance, not just 
the size of Columbia, or your facility, Mr. Nunn, but also 
right down the rural health clinics that many of us have 
throughout our districts.
    With that, Mr. Chairman, I yield back.
    Mr. Upton. Thanks. The Chair recognizes Mr. Klink.
    Mr. Klink. Thank you, Mr. Chairman.
    Let me ask each of you, the GAO has argued that the FDA 
should not necessarily rely on medical device manufacturers' 
certification of Y2K compliance. Instead, the GAO has advocated 
the FDA itself certify such testing has been completed and then 
review the results themselves. So my question is, do you think 
that the manufacturers' certificate certifying Y2K compliance 
is enough or is it trustworthy, or do you think the FDA needs 
to go behind such certification and review the data itself? Let 
me start with you, Mr. Smith.
    Mr. Smith. From my perspective, I believe we have been 
doing this all along from an industry perspective for many 
years prior to Y2K. And therefore, I think the information that 
is there is sufficient and should be sufficient. I think the 
GAO request to go beyond that on behalf of Y2K, quite frankly, 
is another intervening step. I understand their concern, but at 
the same time I think there is a process in place that has been 
in place for a long time that has met both the industry's needs 
and, more importantly, met the needs of patients during that 
time as well.
    Mr. Klink. Thank you. Ms. Williams.
    Ms. Williams. We agree with that.
    Mr. Klink. Mr. Nunn.
    Mr. Nunn. Yes, I agree with that.
    Mr. Klink. You concur?
    Is there a role that all--let me go back and ask each of 
you and maybe start with you, Mr. Nunn. Do you see a role for 
the FDA in reviewing any of these compliance certificates? What 
role would you think the FDA should have?
    Mr. Nunn. I agree with Dr. Shope that the FDA's role is in 
the assurance that their process is appropriate rather than 
individually looking at equipment. And if there is some 
specific equipment, in terms of high-risk equipment, that it is 
felt that an additional level of diligence is required, I would 
be supportive of that.
    Mr. Klink. Ms. Williams, you concur? Mr. Smith?
    Mr. Smith. I would agree with Dr. Shope's comments that the 
issue is probably the critical items in that--again, while I 
don't think it is necessarily based on the process that goes 
on, the 60 categories that he referenced being critical, et 
cetera, if the FDA feels that is where they should go from a 
HIMA perspective, and certainly from a Baxter perspective, we 
would be very supportive of that.
    Mr. Klink. Ms. Williams, what particular types of equipment 
do you think, at the present time, we should be most concerned 
about regarding Y2K compliance?
    Ms. Williams. I have my colleague, Don Workman, here with 
me who is very technically oriented in this regard. Might I 
defer that question to him?
    Mr. Klink. Mr. Chairman, is that fine?
    Mr. Upton. Sure.
    Mr. Klink. Pull a chair up, sir. Welcome to the committee.
    Mr. Workman. Kind of like Thanksgiving.
    Mr. Klink. If you are the turkey, right?
    Invited to a party.
    Mr. Workman. If I understood the question or heard it 
correctly, what types of devices should we be concerned about?
    Mr. Klink. Yes, what devices should we be most concerned 
about concerning Y2K compliance?
    Mr. Workman. We have a classification system that has 
categorized approximately 700 medical device categories. We are 
focused on the mission-critical in level one. These are devices 
that would have some sort of impact on patient safety or 
patient care--either deliver care to a patient; they are 
electrically charged in some way, shape, or fashion, or a 
failure of these devices would impact patient safety or 
business continuity.
    Mr. Klink. Does anyone else, Mr. Smith or Mr. Nunn, have 
anything to add to that?
    Mr. Nunn. No.
    Mr. Smith. No.
    Mr. Klink. You concur?
    The GAO mentions in their testimony some hospitals have had 
their own in-house compliance engineers test biomedical 
equipment that they believe is the most susceptible to the Y2K 
bug. These hospitals reportedly told GAO that this was proper 
due diligence regarding Y2K testing. This seems to imply that 
hospitals not doing this type of in-house testing are somehow 
being negligent with regard to the public's health and safety. 
Do you believe that every user of a biomedical device should be 
doing their own testing? In other words, is there a certain 
group of providers such as hospitals that should be doing their 
own in-house testing?
    I will start with you, Mr. Smith.
    Mr. Smith. I think, as I mentioned earlier Congressman, I 
don't think they do. I think the process is in place, and has 
been in place for quite a while for medical device 
manufacturers, per the FDA, to meet those standards. We follow 
good manufacturing practices; we have for a long time, and I 
think this has become an issue simply because we are dealing 
with the year 2000. Left to our own device, this would be going 
on as it has many years prior to this.
    Mr. Klink. Ms. Williams.
    Ms. Williams. We agree with that.
    Mr. Klink. You don't have your own in-house biomedical 
engineers at Columbia?
    Ms. Williams. We do, but we are not----
    Mr. Klink, Can you pull the microphone over a little bit?
    Ms. Williams. We do have biomedical engineers, but we are 
not testing every piece of equipment ourselves. We are relying 
on the information that we got from the manufacturers.
    We visited a number of manufacturers in order to understand 
the information that they are providing to us that we asked for 
their testing protocols when we did this compliance survey. So, 
we are, with the exception of those 800 pieces of equipment 
that we don't have answers on, we continue to try to get 
answers on that equipment, and if we don't, then we will make a 
determination what level of testing we need to do there. But, 
otherwise, we are relying on the manufacturer.
    Mr. Klink. Can you tell me how you determine what it is you 
test and how that is decided?
    Ms. Williams. We have relied upon the manufacturers and an 
understanding of their testing protocols. The 800 pieces of 
equipment that we have not received information on we continue 
to try to go back to the manufacturer and receive information. 
If we don't, probably in the third quarter we will determine 
what level of testing we need to do on that equipment based 
upon the impact of the equipment on patient care.
    Mr. Klink. Let us forget about Y2K for 1 second. I assume 
that you didn't just hire these biotechnical engineers because 
the year 2000 is coming up; they work for you?
    Ms. Williams. Right.
    Mr. Klink. At other times, how would you determine what you 
would have them test?
    Ms. Williams. I need to defer that to----
    Mr. Klink. That is fine. Do they test everything that comes 
in or there is certain protocol as to what equipment they test?
    Mr. Workman. No, sir. When the manufacturers come in and do 
software upgrades or bring in new pieces of equipment, we 
depend on the manufacturer to certify that that equipment is 
ready for patient safety or patient care.
    Mr. Klink. Then, how do you determine what it is your 
people are going to test?
    Mr. Workman. We are following the ECRI guidelines. ECRI is 
a sort of the Consumer Reports for medical device testing. They 
came out with a position that said that, in the absence of 
adequate manufacturers' compliance information, a limited 
testing strategy should be put in place. Our program is focused 
on mission-critical and level one and we are going to follow a 
three-step process. Originally, we would hope that the original 
equipment manufacturer would test for us. If we are unable to 
do that, we are going to bring in an authorized service 
provider for that manufacturer, and if we can't get to that 
level, then we signed a contract with General Electric for 
their biomedical folks to come in and help test devices for us.
    Mr. Klink. What does this say about the hospitals that are 
not doing this testing? Do they count on hospitals the size of 
Columbia to do this kind of testing? And is this information 
shared with other hospitals? And if other hospitals are doing 
tests, is that made available to you?
    Mr. Workman. I am not aware of a source for that type of 
information.
    Mr. Klink. Well, let me go back to the first part of my 
question. Does this make any statement about other hospitals 
that don't have the biotechnical engineers or biomedical 
engineers on staff, and aren't able to do the kind of testing 
that you do? I don't want to put you in a bad place; it just 
raises a question to me.
    Mr. Workman. I can express a personal opinion. I think some 
of those hospitals are going to have some problems meeting the 
deadline, given the 7 months that are left.
    Mr. Klink. Thank you very much.
    Mr. Chairman, I see the red light is on also.
    Mr. Upton. Thank you.
    Mr. Smith, first of all, I want to commend the work of 
HIMA, and with your testimony, congratulations certainly are 
deserved as you look at 100 percent compliance with your 
association and your ability to reach out. I think that is 
really terrific, and I want to thank you for that.
    Mr. Smith. Thank you.
    Mr. Upton. You know, as I think about my own congressional 
district, it is really a lot--it is a microcosm, I think, of 
the real Nation in terms of a blend between urban and rural. We 
have got small hospitals and larger ones like Bronson and 
Borges, which I certainly know, Mr. Nunn, you are familiar 
with. There has been a lot of association work, a lot of 
communication between the hospitals, whether they are 
affiliated or not, in terms of how to comply with a number of 
different things.
    Do you feel that the State associations have done a pretty 
good job, and what relationship has Henry Ford had with some of 
the hospitals that it has on the other side of the State from 
me?
    Mr. Nunn. We have been in communication with the State 
associations. There has been work on the issue and education 
around the issue, those kinds of things. We have met with 
hospital groups. In fact, we are meeting next week with a group 
of hospitals in the metropolitan Detroit area on this issue. 
Ultimately, though, I believe when it comes down to your 
devices and what your plans are for your devices, it becomes 
much more focused on the issues as they have been discussed 
here today, which is communication between the manufacturers, 
potentially FDA, and yourself, and what your plans are for your 
devices.
    I think there has been, though, from what I can see, and in 
my discussions with our people who are involved in this, 
extensive communications with people outside of our hospital 
and other hospitals, whether it is trade groups, associations, 
at conventions. This has been on the agendas at conventions to 
be talking about it. So I think that communication has been 
there, but it won't drive the answer, which I think is between 
us and manufacturers.
    Mr. Upton. Do you think that the hospitals have had some 
feeling that they have had to reinvent the wheel, or do you 
think because of the association and the cooperation with other 
hospitals, whether they be in the region or system that they 
might be affiliated with, that it has been a pretty good 
relationship?
    Mr. Nunn. I think it has been a good relationship. It 
certainly was not our intention to reinvent the wheel, but to 
use the information that was out there and bring it into our 
organization and have it work for us. I think the information 
is there for people to do that.
    Mr. Upton. Ms. Williams.
    Ms. Williams. We have worked actively with the federation 
members as well as the American Hospital Association and 
another group called ODEN, which is a research and advisory 
group dedicated to healthcare technology issues. Members of 
that group are equipment manufacturers, pharmaceutical 
companies, payers, and other providers, and we have worked 
within that group across the industry on the medical device 
issues as well as contingency planning. So we have been active 
in a lot of groups in terms of information-sharing and 
coordinated planning.
    Mr. Upton. You know, one of the questions that I have asked 
a number of my folks back home as they prepare for Y2K, they 
always seem to say we think we are going to be okay as long the 
power stays on or, you know, a variety of other units have made 
their successful effort. There has been talk about hoarding of 
supplies. You see that in the news media as well. Have the 
hospitals made any real effort, do you think, to hoard supplies 
in fear that the supply train may have some problem beginning 
January 1?
    Mr. Nunn. Our pharmacy is working with the other pharmacy 
departments at other hospitals around the Detroit area, in 
conjunction with the manufacturers in the supply chain, to 
ensure that there is not a disruption in the supply chain for 
pharmaceuticals, because pharmaceuticals, in particular, the 
supply chain is long. If there is hoarding, there could be a 
problem. So we are working with the appropriate people to 
prevent that from happening. So I think there is recognition of 
the supply chain issues, and work is going on in those.
    I think that one of the areas that support can be given is 
in helping manage the rumors and not having a panic situation 
going into the fourth quarter. If the public is convinced that 
the sky is falling, it will be very difficult, and there will 
be hoarding going on, and I think accurate information being 
distributed so that we are not a society in panic would be very 
helpful in this regard.
    Mr. Upton. Thank you. My light is on and I will recognize 
the chairman of Health and Environment, Mr. Bilirakis.
    Mr. Bilirakis. Thank you, Mr. Chairman.
    I did want to put into record that Dr. Shope is here to 
hear your testimony, and I think that is always very helpful. 
We appreciate your staying, Doctor.
    Well, let us see, Baxter, your company is a global 
company----
    Mr. Smith. Yes.
    Mr. Bilirakis. [continuing] and you have shared with us 
some apparently good work that your company is doing regarding 
addressing this issue. But you do business, as I understand it, 
in over 100 countries?
    Mr. Smith. We do.
    Mr. Bilirakis. Yes, all right, and I don't want you to give 
me any details, but would you say that you are basically being 
prepared or are prepared insofar as the global is concerned?
    Mr. Smith. We have taken the same process in the other 
countries we have taken in the United States, which is from a 
business contingency plan perspective. We have gone out and 
contacted our customers and contacted all the elements, if you 
will, associated with making sure that we can provide 
consistent supply of products in that country. That could be 
something as broad as talking with the customs folks to making 
sure that the import/export activities don't go down as a 
result of a Y2K problem, or something as small as looking at a 
particular product that we only sell in that particular 
country.
    Mr. Bilirakis. Well, how about a medical device that is 
manufactured in one of these other countries. I suppose maybe 
we could have asked FDA that, but in terms of, you know, their 
cooperation, compliance, and things of that nature, what can we 
anticipate there?
    Mr. Smith. From a Baxter----
    Mr. Bilirakis. And I really don't know off the top of my 
head what device I could be referring to, but I would assume 
there are some out there that have been approved that are being 
used by Americans but manufactured elsewhere.
    Mr. Smith. I probably would defer that question to Dr. 
Shope, because I think he is probably better suited to answer 
it. From a Baxter perspective, those plants outside the United 
States where we do make medical devices fall into the same 
provisions as plants that we manage within the United States. 
So we run them just the same way.
    Mr. Bilirakis. You run them?
    Mr. Smith. Meaning we follow the same manufacturing 
practices.
    Mr. Bilirakis. If they are your plants, but if they are not 
your plants?
    Ms. Williams, I know that, and I am not just referring to 
Columbia, but a lot of hospitals around the country, certainly 
many in my area, are having problems these days. What BPA 97 
did to them--I know Herb Katz would want me to make that 
comment. And you know, in other words, they are having some 
problems. So, I know that this is an additional load, because 
obviously there is going to be some finances involved here.
    With all that Columbia apparently has done, I think you 
have said that it has been done in cooperation with the 
American Hospital Association and with other groups. Is that 
right?
    Ms. Williams. Right. That is right.
    Mr. Bilirakis. Well, Mr. Nunn, you said that while all of 
your devices--I don't know that I am quoting you correctly--may 
not be compliant in your hospitals, but all of your hospitals 
will be, or words to that effect.
    Mr. Nunn. Yes.
    Mr. Bilirakis. What do you mean by that?
    Mr. Nunn. If we have a device that we cannot get certified 
or determine that it is compliant, we will be prepared to 
either retire it from service or have a workaround. We know 
that some of our EKG machines will not be technically 
compliant, and we will have a workaround in place, so that that 
does not impact the patient or our storage of information, 
which is really the----
    Mr. Bilirakis. So, you are basically saying that you feel 
that your hospitals will be completely up to par by the year 
2000, by January 1, 2000. So all of the medical devices may not 
be, but your hospitals will be----
    Mr. Nunn. Yes.
    Mr. Bilirakis. [continuing] will be alert, et cetera?
    Mr. Nunn. Yes.
    Mr. Bilirakis. That is what you are saying. Now, you know, 
I think I have kind of expressed it here; sure, we are 
concerned about the FDA role and things of that nature, but we 
also express, I think, maybe even more concern with devices at 
the hospital level, and rural healthcare, and, of course, in 
the homes, and that sort of thing.
    What is the percentage of hospitals that belong to the 
American Hospital Association? I mean, they don't all belong to 
the AHA?
    Mr. Nunn. No. There are 5,000 hospitals in the American 
Hospital Association.
    Mr. Bilirakis. But there is a lot more than 5,000 hospitals 
out there.
    Mr. Nunn. Yes.
    Mr. Bilirakis. So you are working with your hospitals?
    Mr. Nunn. That is correct.
    Mr. Bilirakis. How about all the others that are not 
members of the AHA? In terms of being ready?
    Mr. Nunn. I can't comment on their----
    Mr. Bilirakis. This is not a pitch now for the American 
Hospital Association, although I would suggest probably a good 
idea that they all be members.
    Well, all right, my time is up, but you know we are really 
concerned about this and I am not sure--I mean, frankly, I am a 
little more optimistic in listening to you all. I am not saying 
that FDA has lowered that optimism somewhat, but I guess I see 
a gap there, particularly when it involves the hospitals, home 
health, and whatnot, which FDA apparently does not have overall 
jurisdiction responsibility for, and we not just really sure 
who is going to cover that gap. That is really what concerns 
me, I guess, more than anything else.
    Well, we may have further questions. I was really going to 
ask these good people for some hard data on some of the things 
they have been telling us, but at this point, again, I don't 
want to add just make-work to their heavy responsibilities in 
this regard. If we request that, we will do so at another time 
and give you an opportunity to respond.
    Thank you very much. Thank you, Mr. Chairman.
    Mr. Upton. Thank you, Mr. Chairman.
    And I, again, appreciate the testimony from the witnesses, 
all the witnesses on both panels this morning. And we do have 
four votes in a row on the House floor, so we are going to be 
scurrying over there, but this hearing is now adjourned. Thank 
you.
    [Whereupon, at 12:49 p.m., the subcommittees were 
adjourned.]