The Workbench · Craft

Contamination control only applies when risk says so

A cleanroom procedure is easy to picture as something only a handful of manufacturers need — the ones assembling implants or packaging sterile product under a laminar flow hood. ISO 13485:2016 Clause 6.4 doesn't scope itself to a device category. It scopes itself to a condition: whether the work environment could adversely affect product quality. A device that never sees a cleanroom can still trigger the clause, and a device that does can still fail it with a procedure that never asks the harder question underneath.

The trigger is a condition, not a device type

Clause 6.4.1 requires the organization to document requirements for the work environment needed to achieve conformity to product requirements, wherever conditions of that environment could have an adverse effect on product quality. The clause doesn't hand out an exemption by product category — a bench-assembled device with no sterile claim can still have a work environment condition, static discharge near sensitive electronics, humidity near a moisture-critical material, that adversely affects quality just as directly as a contamination risk does. A quality manual that scopes 6.4 out entirely because “we don't run a cleanroom” has answered a question about facilities, not the question the clause actually asks about risk.

Personnel are named as part of the environment

Where contact between personnel and the product or the work environment could affect a device's safety or performance, Clause 6.4.1 requires the organization to document requirements for the health, cleanliness, and clothing of that personnel. That's a specific, named sub-requirement, not a general housekeeping expectation left to a site's own judgment. A gowning procedure that exists as a training slide but never traces back to a documented requirement tied to a specific product risk has built the practice without the record the clause asks a file to hold onto. And documenting the requirement isn't the same as showing someone met it — a training record is what later has to demonstrate a specific person was actually qualified against the gowning or hygiene requirement the environment procedure set, not just that a session was scheduled.

Contamination control is a second, harder threshold

Clause 6.4.2 applies where the medical device is contaminated, or particulate contamination poses an elevated risk during processing, in ways not addressed elsewhere in the standard — language that keeps the sub-clause conditional rather than universal, the same way 6.4.1 is. Where it does apply, the organization has to establish documented requirements for controlling the contamination of product or the work environment, appropriate to the device and the manufacturing process, with particular attention where a device is assembled or packaged under clean-room-like conditions. Guidance on cleanroom classification and biocontamination monitoring in this area commonly draws on ISO 14644 and ISO 14698, standards written for exactly this kind of environmental control. A contamination procedure that copies a cleanroom classification without connecting it to what the device or process actually requires has borrowed a number without doing the risk analysis the clause assumes sits behind it.

A device already contaminated needs its own procedure

Clause 6.4.2 also requires the organization to plan and document arrangements for the control of contaminated or potentially contaminated product, as appropriate, so that the contamination doesn't spread to the work environment, personnel, or other product. That's a different document than the one governing how contamination is prevented in the first place — it covers what happens once something has already gone wrong, a quarantine and containment step distinct from the nonconforming-product record that follows once the contaminated unit is formally dispositioned. A site with a strong prevention procedure and nothing written for the moment prevention fails has covered the easier half of the clause.

Where this meets the rest of the file

Clause 6.4's own conditional logic — document a work environment requirement wherever conditions could affect quality, add contamination controls where the device or process calls for them, and keep a separate arrangement for product already contaminated — sits upstream of the process validation that later has to run inside whatever environment this clause defines. A work-environment and contamination-control worksheet built around that structure is previewed in the launch catalog. If your program draws this line differently, the shelf takes that correction directly.

The Regulatory Toolkit launches soon — a free shelf of source-mapped templates, checklists and browser-only tools for regulatory teams. Get one email when it opens, or contribute a template.

All Workbench notes