Third party agreement FAQs

This page contains frequently asked questions about third party agreements. This information is only applicable to establishments within the tissue and cells for patient treatment (human application) sector.

What is a third party agreement (TPAs)?

The Human Tissue (Quality and Safety for Human Application) Regulations 2007 (the Regulations) define a third party agreement (TPA) as:

“An agreement in writing between a licence holder (or the designated individual on behalf of the licence holder) and another person, which is made in accordance with any directions given by the Authority under section 23(1) of the 2004 Act for the purpose of securing compliance with the requirements of Article 24 of the first Directive (relations between tissue establishments and third parties), and under which the other person:

(a) carries out licensed activity (other than storage) on behalf of the licence holder; or
(b) supplies to the licence holder any goods or services which may affect the quality or safety of tissue or cells.”

A TPA may be used to provide a third party with the authority to undertake licensable activities on behalf of a licensed establishment. For this reason, there are stringent criteria that a TPA must meet, set down in paragraph 118 of HTA’s Directions 002/2007.

For TPAs where a person or establishment is supplying to the licence holder any goods or services which may affect the quality or safety of the tissues or cells, the requirements for the TPA are contained in paragraph 119 of HTA’s Directions 002/2007.

What is a Service Level Agreement?

A Service Level Agreement (SLA) is an agreement that sets out the roles and responsibilities of two parties. An SLA cannot be used to provide a third party with the authority to undertake licensable activities on behalf of a licensed establishment, and is not sufficient for governing the supply of goods or services which may affect the quality or safety of tissues and cells.

If two establishments are licensed by the HTA and one undertakes licensable activities on behalf of the other, an SLA setting out roles and responsibilities is sufficient to document the working relationship between the two licensed establishments.

What are relevant third party premises (RTPP)?

  • Any premises on which a third party procures, tests, processes, distributes, or to which a third party imports, or from which a third party exports, tissue and / or cells on behalf of any person authorised by a licence to carry on that activity; or
  • Any premises from which a third party provides any goods or services which may affect the quality and safety of tissue cells for patient treatment in connection with licensed activities carried out on that person.

Can a third party undertake all licensable activities on behalf of an establishment?

No, storage of tissue and cells cannot be undertaken by a third party under a third party agreement. All other licensable activities can be; however, all the activities must be specifically described in the agreement and must be authorised by the licensed establishment’s licence.

Can an establishment have a third party agreement with another hospital within the same NHS Trust?

No. A third party agreement (TPA) is defined as being between an establishment and another person (including corporate entity) i.e. between two distinct legal entities. If an NHS Trust is the Licence Holder (LH), it cannot have a contractual agreement in place with itself, even if such agreement would be on behalf of another hospital in the same Trust.

When licensed activities are carried out by a third party within the same NHS Trust, the LH could consider putting individual TPAs in place with third party staff, or applying for a satellite licence (see satellite premises webpage).

What must a TPA include?

The full requirements for TPAs are set down in paragraphs 118 and 119 of HTA’s Directions 002/2007.

The Licence Holder (LH) and Designated Individual (DI) of the licensed establishment should also refer to paragraph 22 of Directions 002/2007, which state that “third party agreements must specify the terms of the relationship and responsibilities of the parties involved together with the protocols to be followed by both parties to meet the required performance specifications. The LH and DI should evaluate what parts of paragraphs 118 and 119 are applicable on the basis of the relationship between themselves and the third party.

What are the duties of the Designated Individuals regarding activities that take place under TPAs?

The full requirements for DIs are set down in paragraphs 4 of HTA’s Directions 001/2006 and paragraphs 11 and 12 of HTA’s Directions 002/2007.

How do I assure myself as the Designated Individual that the premises at which the third party activity takes place is appropriate for the activity?

  • ongoing audits of the procedures, facilities and personnel;
  • risk assessments of the premises and activities being carried out under the licence;
  • periodic review of the TPA to ensure it remains fit for purpose;
  • provision of a pro forma for risk assessing risks that may arise on an ad hoc basis;
  • ongoing review of SOPs for maintenance of premises and facilities;
  • ensure controlled access and security measures;
  • ensure that appropriate back-up and emergency clinical facilities (if appropriate) are in place;
  • review environmental monitoring, air quality and other critical processing parameters; and 
  • provide and / or review the appropriateness of garments and equipment for personal protection and hygiene.

Does a Designated Individual need to carry out periodic audits of the activities that take place under a third party?

Yes. In addition, the DI must be allowed access to the facilities, RTPPs, documentation and records, including audit of the premises and practices of the TP. This will allow the DI to ensure that suitable practices are being carried out and that the conditions of TPAs are being complied with.

DIs should also be aware of their specific duties under Regulation 12 of the Human Tissue (Quality & Safety for Human Application) Regulations 2007 and the relevant provisions under Paragraph 12 of Directions 002/2007.

As a Designated Individual (DI), do I need to let the HTA know if I have a third party agreement (TPA) in place?

Yes. It is a requirement under the HTA Directions to provide information to the HTA about what TPAs you have in place. The HTA asks all DIs to provide us with details of all TPAs that are in place where the TP is carrying out procurement, processing, testing, distribution and import / export of tissues and cells for human application on your behalf.

NB: DIs will be considered to be in breach of the standard condition on all tissue and cells for patient treatment  (human application) licences issued by the HTA if you fail to report third party agreements to the HTA. This may result in regulatory action being taken.

I am a DI or LH, how can I fulfill my reporting requirements about TPAs?

You should complete the online form by using the TPA submission form.

You will be asked to provide full details about the third party, the activities carried out by the third party and confirm that these activities are taking place under a third party agreement.

How should Designated Individuals manage records that are related to activities covered by a third party agreement?

Records must:

  • comply with Standard Operating Procedures (SOPs) for records management. These SOPs should be provided to the third party by the Designated Individuals of the licensed establishment;
  • be intact, complete and legible;
  • facilitate traceability from donation to end use;
  • be stored securely;
  • remain confidential (restricted access);
  • provide for execution of duties in relation to disclosure of information (as per the Regulations); and
  • be retained / maintained in line with reported activities taking place under a third party agreement as part of an annual activity report to the HTA.

How long must I retain documentation and records of activities undertaken by third parties?

All documentation and records to facilitate the traceability of donors must be retained for 30 years after the cells are used or disposed of. This includes donor identification, product identification, identification of the supplier establishment clinician or end user, tissue / cell type, date of application, identification of the recipient (paragraph 71, Directions 002/2007) and donor records (paragraph 36, Directions 001/2006)

All records, including raw data, critical to activities that may affect the quality and safety of tissues and cells must be retained for 10 years after use or disposal of the cells. Provisions must be in place in any TPA to ensure that records are transferred to a licensed establishment in the event of termination of activities.

What are the requirements for transfer of tissue and / or cells and records when terminating a third party agreement?

The third party agreement (TPA) must include provision of the transfer of any tissues and cells to a HTA-licensed establishment (paragraph 118 (ccc), Directions 002/2007). There must also be a documented process for the transfer of records from the third party to the licensed establishment (paragraph 118 (nn), Directions 002/2007).

How are third parties made aware of regulatory alerts from the HTA?

It is the responsibility of the Designated Individual of the licensed establishment to communicate information to third parties, including regulatory alerts and other relevant communications from the HTA regarding serious adverse events and reactions (SAEARs).

What should the third party do if an adverse incident occurs during the period of the licensable activity?

Specific obligations for the third party reporting of adverse events and reactions should be detailed in the third party agreement, either directly or by provision of a standard operating procedure from the Designated Individual of the licensed establishment. These obligations include;

  • a system for reporting the event to the DI of the licensed establishment;
  • a system for investigation, including risk assessment and internal audit; and
  • a process for escalation and reporting to the HTA if the event is deemed serious.

What should the Designatd Individual do if an adverse incident is reported by a third party acting on behalf of his/her establishment?

The Designated Individual (DI) of the licensed establishment is responsible for assessment and documentation of the adverse incident occurring under the licence, and reporting of any serious adverse event or reaction to the HTA and any other affected establishments.

The DI should:

  • assess the seriousness of the incident;
  • investigate the incident;
  • document the reporting, assessment, evaluation and investigation of the incident;
  • retain all documentation related to investigation of the incident;
  • if deemed serious, notify and report the adverse event or reaction to the HTA and to  personnel within the establishment and other establishments; and
  • if appropriate, effect a recall of the implicated tissues and / or cells.

What additional responsibilities will the establishment and any third parties have once a serious adverse event or reaction (SAEAR) is reported?

The establishment and the third party must make available to the HTA (on request) all records related to a SAEAR and aid in any investigation process. This process must be clearly specified in the third party agreement. The Designated Individual should also ensure the retention of records related to the SAEAR once provided to the HTA, including any follow up reports.