ISO 17025 Complaints & Nonconforming Work

ISO 17025 Complaints Nonconforming Work Clause 7.9 Clause 7.10 CAPA

Overview

Establish complaint handling and nonconforming work procedures per ISO/IEC 17025:2017 Clauses 7.9 and 7.10. These two processes are closely linked but serve distinct purposes: complaint handling addresses external dissatisfaction and feedback, while nonconforming work management deals with internal deviations that may affect the validity of test results.

The complaint handling procedure covers the full lifecycle from receipt and registration through investigation, root cause analysis, corrective action, and formal response to the complainant. It includes a tracking register for trend analysis so recurring patterns can be identified and addressed systemically. A key requirement is that the investigation must be conducted independently from the activity being complained about.

Nonconforming work management defines what constitutes a nonconformity in the laboratory context, how to identify and report deviations, how to evaluate their impact on released results, and what actions to take — halting work, holding results, recalling reports if necessary, and notifying affected customers. Both processes feed into the laboratory’s corrective action (CAPA) system to close the loop on systemic issues.

What It Covers

Complaint receipt and registration — channels for receiving complaints, acknowledgment timelines, unique tracking identifiers
Investigation process — independent investigation, root cause analysis, evidence gathering
Corrective actions — linking complaint outcomes to the CAPA system per Clause 8.7
Complainant response — formal communication of investigation findings and resolution
Trend analysis — periodic review of complaint data for patterns and recurring issues
Nonconforming work definition — triggers such as QC failures, equipment out-of-calibration, procedural deviations
Impact evaluation — determining which results are affected and their significance
Halt/hold/recall actions — stopping work, withholding results, recalling already-issued reports
Customer notification — criteria for when and how to inform customers of affected results
Resumption authority — who can authorize resuming work after corrective action is complete

Example Conversation

You: We need complaint handling and nonconforming work procedures for our lab. We’re LabTech Analytical, environmental testing lab in Austin — drinking water and soil, 12 analysts, going for A2LA accreditation. We’ve never had a formal complaint process, people just kind of deal with things informally when a client calls.
Agent: That informal approach won’t pass an A2LA assessment — Clause 7.9 requires a documented, systematic process. Let me build both procedures for you. A few questions to tailor them:
Who should be the complaint coordinator — someone who receives and tracks all complaints?
Do you have a current corrective action process, or will we need to reference one being built separately?
For nonconforming work — what are your most common deviation types? QC failures, instrument issues, sample handling errors?
You: James Park, our QM, should own complaints. We’re building the CAPA process with the risk management skill separately. For NCW — honestly our biggest issues are QC check sample recoveries outside acceptance limits on metals runs, and occasionally the ICP-MS drifting mid-sequence. We had one case last year where we reported results from a run where the CCV failed and didn’t catch it until the next day.
Agent: That CCV failure scenario is exactly the kind of case the nonconforming work procedure needs to handle — including a report recall mechanism. I’ll draft both procedures now.
For the complaint procedure, I’m setting James as the complaint coordinator with a 2-business-day acknowledgment requirement. The investigation will be assigned to someone not involved in the complained activity, per Clause 7.9.2.
For nonconforming work, I’ll define these trigger categories based on your operations:
QC failures (method blanks, LCS/LCSD recoveries, CCV/CCB, duplicates)
Equipment malfunctions (ICP-MS drift, IC pump failures, balance checks)
Sample integrity issues (temperature exceedances, holding time violations)
Procedural deviations (analyst errors, SOP non-compliance)
You: That looks right. One thing — for the report recall, we need to be careful about how we handle clients like the City of Austin water utility. They submit regulatory compliance samples and if we have to recall a report it could affect their SDWA compliance reporting to TCEQ. So the notification process needs to be fast.
Agent: Good point. I’ll build in a tiered notification approach:
Regulatory compliance samples — immediate phone notification within 4 hours of discovery, followed by written notice within 24 hours
Routine monitoring samples — written notification within 3 business days
Internal/research samples — notification at next scheduled reporting
The recall procedure will include issuing an amended report clearly marked as replacing the original, with an explanation of what changed and why.
I’ve drafted both procedures. Let me validate them now.
Running complaint_process_validator… PASS. All 9 required elements present — receipt, acknowledgment, investigation, root cause, corrective actions, complainant response, tracking, trend analysis, and independence.
Running nonconforming_work_checker… PASS. All required elements verified — definition, identification triggers, impact evaluation, halt/hold/recall actions, customer notification, resumption authority, root cause, CAPA linkage, and records.
Both procedures are finalized in the output folder.

Sample Output Excerpt

The skill produces a complaint handling procedure and a nonconforming work procedure. Here is an excerpt from the nonconforming work procedure showing the impact evaluation and action framework.

5. Nonconforming Work Identification and Reporting

5.1 Trigger Events

Nonconforming work shall be identified through any of the following triggers:

Trigger Category	Examples	Typical Source
QC Failures	LCS/LCSD recovery outside limits, CCV drift >10%, method blank contamination	Analyst during data review
Equipment Malfunction	ICP-MS plasma instability, IC pump pressure exceedance, balance verification failure	Analyst or equipment log
Sample Integrity	COC discrepancy, temperature >6 °C at receipt, holding time exceeded	Sample custodian
Procedural Deviation	Wrong dilution factor, incorrect preservation check, SOP step skipped	Analyst or supervisor
External Notification	PT unsatisfactory result, client-reported discrepancy, subcontractor nonconformance	QM or Technical Manager

5.2 Immediate Actions

Upon identification of nonconforming work, the identifying person shall:

Halt — immediately stop the affected testing activity
Notify — inform the supervisor and Quality Manager
Isolate — quarantine affected samples and data; mark status as “HOLD — Do Not Release”

5.3 Impact Evaluation

The Technical Manager shall evaluate the significance of the nonconformity:

Which specific sample results are potentially affected?
Were any affected results already reported to customers?
Could the nonconformity affect results from other analytical batches?
Is the root cause systemic (affecting ongoing operations) or isolated?

5.4 Report Recall Criteria

If results from a nonconforming event have already been reported, the following actions apply:

Severity	Action	Notification Timeline
Results invalid — regulatory samples	Recall report, issue amended report, phone notification to client	Within 4 hours of discovery
Results invalid — routine monitoring	Recall report, issue amended report, written notification	Within 3 business days
Results questionable but within specification	Document evaluation, notify client of potential impact	Within 5 business days

5.5 Authority for Resumption

Work shall not resume until the Quality Manager has:

Confirmed the root cause has been addressed
Verified that corrective actions are in place or in progress
Authorized resumption in writing on the NCW record form (NCW-FORM-001)

Extension Tools

`complaint_process_validator`

Validates the complaint handling procedure for all elements required by Clause 7.9.

Check	What It Validates
Receipt and registration	Complaint intake process with logging mechanism defined
Acknowledgment	Formal acknowledgment to complainant is addressed
Investigation process	Systematic investigation procedure documented
Root cause analysis	Root cause analysis included in the investigation
Corrective actions	Link to corrective action system for complaint outcomes
Complainant response	Formal response communicating investigation outcome
Tracking register	Complaint tracking database or register defined
Trend analysis	Periodic analysis of complaint patterns and recurring issues
Independence	Investigation independence from the complained activity (Clause 7.9.2)

`nonconforming_work_checker`

Validates the nonconforming work procedure for all elements required by Clause 7.10.

Check	What It Validates
Definition	Clear definition of what constitutes nonconforming work
Identification/reporting	Mechanism for detecting and reporting nonconformities
Significance evaluation	Impact assessment to determine which results are affected
Halt work	Procedure to stop testing when nonconformity is found
Hold results	Procedure to quarantine or withhold affected results
Recall reports	Report recall or amendment procedure for already-issued results
Customer notification	Criteria specifying when and how customers are notified
Resumption authority	Defined authority for who can authorize resuming work
Root cause analysis	Root cause analysis requirement included
Corrective action linkage	Connection to CAPA process established
Record keeping	Requirements for documenting nonconforming work events

Getting Started

Activate the ISO 17025 Complaints & Nonconforming Work skill and describe your laboratory’s current situation — whether you have existing informal processes, the types of complaints you typically receive, and the most common sources of nonconforming work in your operations.

Have this information ready:

Who will serve as the complaint coordinator (typically the Quality Manager)
Your primary client types and whether any submit regulatory compliance samples
Common QC failure modes and equipment issues in your lab
Whether you have an existing corrective action process or are building one in parallel
Your preferred notification timelines for different client categories
Who has authority to authorize resumption of work after a nonconformity

The agent will draft both procedures tailored to your laboratory’s scope and testing activities, then validate them using the extension tools. Both procedures reference the corrective action system (Clause 8.7), so coordinate with the Risk, Opportunity & Corrective Action Management skill if you are building that process concurrently.