Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
IEC 62274: Safety of Radiotherapy Record and Verify Systems
Ensuring Patient Safety Through Robust Treatment Verification and Data Integrity
1. Scope and System Requirements for Radiotherapy RVS
IEC 62274 is the international safety standard for Radiotherapy Record and Verify Systems (RVS), defined as Programmable Electrical Medical Systems (PEMS) or subsystems that compare radiotherapy treatment machine setup parameters against predetermined values before treatment delivery. The RVS serves a critical safety function: it prevents the treatment machine from operating if the actual parameter configuration does not match the prescribed settings within user-defined tolerances, and it records every treatment session for subsequent verification and audit.
The scope of the standard covers RVS used with medical electron accelerators, gamma beam therapy equipment, and other radiotherapy treatment machines. It addresses systems that provide, define, or display treatment machine setup data, import data through operator input or directly from other devices, and may control the ability of the treatment equipment to operate. The standard explicitly excludes dynamic beam deliveries (addressed in later standards) and RVS developed by a user exclusively for their own use, though it strongly recommends applying the same principles in such cases.
Inaccuracies in RVS data or errors in the record-and-verify process can directly lead to patient safety hazards, including incorrect radiation dose delivery, treatment to wrong anatomical sites, or omitted treatment fractions. This is why IEC 62274 mandates rigorous verification and validation processes for both software and data handling.
| Requirement Area | Key Provisions | Verification Method |
|---|---|---|
| Radiation Quantities | Correct units, scaling, and display | Calibration verification, unit consistency check |
| Date and Time | Synchronized with treatment machines | Network time protocol, manual cross-check |
| Coordinate Systems | Per IEC 61217 standard | Independent coordinate verification |
| Unauthorized Use Prevention | Access controls, operator authentication | Role-based access testing |
| Data Transfer Correctness | No data corruption during transmission | CRC/checksum, read-back verification |
| Data Acceptance | Validation before clinical use | Automated range/consistency checks |
2. Safety Requirements and Data Integrity
The standard establishes comprehensive safety requirements organized around data integrity. Radiation quantities must be displayed and stored using correct units with unambiguous scaling factors — a seemingly obvious requirement that addresses real-world incidents where unit confusion (e.g., Gy vs. cGy, monitor units vs. time) led to patient overdoses. Date and time synchronization between the RVS and treatment machines is mandatory, as mismatched timestamps can cause confusion in treatment records and potentially lead to repeated or omitted fractions.
Coordinate systems and scales must conform to IEC 61217 (Radiotherapy equipment — Coordinates, movements and scales), ensuring that all positioning data — including gantry angle, collimator rotation, couch position, and field size — use a common, unambiguous reference frame. The standard requires protection against unauthorized use through user authentication and role-based access control, distinguishing between the responsibilities of radiation oncologists, medical physicists, and radiation therapists.
Data backup and archiving requirements are particularly stringent. The RVS must provide mechanisms for regular data backup (typically daily), secure long-term archiving (meeting medical record retention regulations, often 10+ years), and data recovery procedures that have been validated to restore system functionality without data loss.
The standard mandates treatment machine set-up verification as the core safety function. Before each treatment session, the RVS compares the actual machine parameters against the prescribed values. If parameters fall outside the predefined tolerance windows, treatment is prevented. An override mechanism may exist but must be strictly controlled — requiring explicit operator action, documentation, and preferably a secondary authorization. Every override event must be recorded in the treatment log.
3. Software Safety, Human Factors, and Lifecycle Management
IEC 62274 integrates closely with IEC 60601-1-4 (Programmable Electrical Medical Systems) for software safety. The manufacturer must conduct a systematic risk management process: identify all potential hazards associated with the RVS, assess their severity and probability, implement risk control measures, and verify their effectiveness. For software-related hazards, this includes analysis of specification errors, coding defects, and edge-case logic failures that could compromise treatment safety.
Human errors in software design are specifically addressed — the standard recognizes that software design flaws can systematically affect all patients treated with the system. Requirements include defensive programming practices, input validation, boundary condition testing, and fail-safe design for abnormal conditions (power loss, network failure, data corruption). Change in software versions requires rigorous regression testing, with the manufacturer maintaining version control records and providing clear documentation of changes and their potential safety impact.
A well-implemented RVS following IEC 62274 not only prevents catastrophic treatment errors but also improves clinical workflow efficiency. Automated verification reduces the time therapists spend on manual double-checks, and comprehensive treatment records support outcomes analysis and continuous quality improvement programs.
Human errors in use are addressed through usability engineering per IEC 60601-1-6. The standard requires that the RVS interface design minimize the potential for operator mistakes through clear labeling, confirmation dialogs for critical actions, logical workflow sequencing, and unambiguous error messages. The accompanying documents must include clear instructions for use, technical descriptions of all safety features, and installation test procedures that verify safe operation after deployment.
The standard also covers abnormal operation and fault conditions. Hardware diagnostics must detect failures in processors, memory, storage, and communication interfaces. For stored data, error-detecting codes (e.g., CRC) must protect against silent data corruption. When faults are detected, the system must transition to a safe state that prevents treatment delivery until the issue is resolved.
Frequently Asked Questions
Q: What types of radiotherapy equipment are covered by IEC 62274?
A: The standard covers RVS used with medical electron accelerators (linacs), gamma beam therapy equipment (e.g., Gamma Knife, cobalt-60 units), and other radiotherapy treatment machines. It does not cover dynamic beam deliveries such as IMRT with dynamic MLC, which are addressed in subsequent standards.
Q: Does IEC 62274 apply to RVS software only, or does it also cover hardware safety?
A: The standard focuses primarily on software safety and system-level requirements. Hardware safety (electric shock, fire, EMC) is not covered in the main body but is addressed through references to IEC 60601-1, IEC 60601-1-2, and IEC 60950-1, as detailed in Annex A.
Q: How does the standard address cybersecurity for networked RVS?
A: While the 2005 edition predates modern cybersecurity frameworks, it requires that RVS connecting to networks or other devices use appropriate communication protocols and that data transfer correctness is verified. Manufacturers should supplement this with current cybersecurity risk management practices per IEC 60601-4-5 or AAMI TIR57.
Q: What testing is required during RVS installation?
A: The manufacturer must provide an installation test document demonstrating that the RVS performs according to its operational description. This includes verification of data transfer between the RVS and treatment machines, accurate display of treatment parameters, proper functioning of treatment prevention mechanisms, and correct recording of treatment sessions.
