EU Medical Device Regulation Compliance

Start with the product's intended purpose, claims, software functions, accessory status, and EU market role. The MDR covers medical devices and accessories placed on the Union market, and it also reaches certain Annex XVI products without an intended medical purpose once common specifications apply.

Classification must be documented against Annex VIII. The MDR divides devices into classes I, IIa, IIb, and III by intended purpose and inherent risk. That classification drives the conformity assessment route, notified-body involvement, clinical evidence depth, PMS reporting, and UDI/EUDAMED timing.

The conformity route follows the risk class and device type. Class I devices generally remain under manufacturer responsibility unless a specific feature triggers notified-body involvement, while class IIa, IIb, and III devices require an appropriate level of notified-body involvement under Article 52.

Do not treat a notified-body certificate as a substitute for the manufacturer's compliance file. The manufacturer remains responsible for conformity, the CE marking, technical documentation, the EU declaration of conformity, and keeping the notified body informed where the chosen procedure requires it.

Article 10 requires manufacturers to establish and maintain risk management, clinical evaluation, UDI and registration obligations, technical documentation, a quality management system, PMS, and incident and field safety corrective-action reporting. The QMS should be proportionate to the risk class and type of device, but it still needs controlled procedures and records.

The technical file should connect Annex I general safety and performance requirements to design inputs, risk controls, verification and validation, standards or common specifications, labelling, instructions for use, clinical evaluation, and PMS feedback. Clinical evaluation under Article 61 must support the GSPR conformity claim with sufficient clinical evidence unless a justified exception is documented in the technical documentation.

UDI and EUDAMED records should be treated as regulatory master data, not as final-form administrative uploads. Article 27 ties UDI to serious-incident and field safety corrective-action reporting, and manufacturers must keep an up-to-date list of assigned UDIs in the technical documentation.

PMS must be planned, documented, implemented, maintained, and updated for each device as part of the QMS. When PMS identifies preventive or corrective action, the manufacturer must implement appropriate measures and inform competent authorities and, where applicable, the notified body. Serious incidents and field safety corrective actions are reported under Article 87.

Legacy transition claims need their own evidence register. Regulation (EU) 2023/607 extended transitional provisions for certain devices, but only where the conditions are met, including no significant change in design and intended purpose, QMS implementation by 26 May 2024, formal notified-body application by 26 May 2024, and a written notified-body agreement by 26 September 2024 where the transition path requires it.

Treat every compliance conclusion as versioned evidence. The most important governance control is the trigger list: design or intended-purpose change, software functionality change, new clinical evidence, supplier or manufacturing change, harmonised-standard change, complaint trend, serious incident, field safety corrective action, notified-body finding, or EUDAMED data correction.