Medical Device Regulation (MDR)

« Back to Glossary Index

What it is

Medical Device Regulation (MDR) is the EU law that sets the rules for the safety, performance, and market access of medical devices in the EU/EEA. It replaces the MDD and AIMDD with stronger requirements for clinical evidence, transparency, traceability, and post-market oversight (MDR 2017/745; applies with IVDR for IVDs). It defines roles for manufacturers and economic operators, introduces UDI, and aligns evaluation with current science.

EU law: 2017/745Focus: Safety & performanceLifecycle: Design to post-market

Regulatory framework

  • Scope & definitions: MDR Art. 1–2 (device, accessory, intended purpose, economic operators).
  • Classification: Risk classes I, IIa, IIb, III and rules (Annex VIII).
  • General Safety and Performance Requirements (GSPRs): Annex I.
  • Technical documentation: Annex II–III.
  • Conformity assessment & CE marking: Annex IX–XI; manufacturer duties in Art. 10.
  • Clinical evaluation & PMCF: Art. 61 and Annex XIV.
  • UDI & EUDAMED: Arts. 27–33.
  • PMS, PSUR & vigilance: Arts. 83–92.
  • Market surveillance & enforcement: Arts. 93–100.

Key elements

  • Risk-based classification that drives evidence and assessment route (Annex VIII).
  • QMS obligations for manufacturers, including risk, usability, and supply-chain control (Art. 10; Annex I).
  • Clinical evidence through clinical evaluation and, where needed, PMCF (Art. 61; Annex XIV).
  • Traceability via UDI and actor/device registration in EUDAMED (Arts. 27–31).
  • Transparent oversight with PSURs, trend reporting, and strict vigilance timelines (Arts. 86–92).

Process — how it works

  • Define & classify: Set intended purpose and apply Annex VIII rules to determine class and route.
  • Build evidence: Compile technical documentation, risk files, and clinical evaluation; plan PMCF as needed (Annex II–III, XIV).
  • Assess conformity: Undergo Notified Body audit/review for most classes (Annex IX–XI); then affix CE marking and register actors/devices (Arts. 29–31).
  • Launch & monitor: Operate PMS, issue PSUR/PMS Report on schedule, and report incidents/field actions within set timelines (Arts. 83–92).
  • Maintain compliance: Update files, labeling, and UDI data; manage changes and renew certificates during surveillance.

Common pitfalls

  • Vague intended purpose that misleads classification and clinical claims (Art. 2, Annex VIII).
  • Insufficient clinical evaluation or weak PMCF plans (Art. 61; Annex XIV).
  • UDI/EUDAMED data that do not match technical files or labeling (Arts. 27–33).
  • PSUR content that lacks robust PMS trending or benefit-risk updates (Art. 86).
  • Poor supplier and economic-operator controls, leading to traceability gaps (Art. 10; Annex I §7, §8).

Quick checks / Tips

  • Write a tight intended purpose and map it to the correct rule and class first.
  • Link every claim to clinical evidence and risk controls; plan PMCF early.
  • Prepare for NB scrutiny on software, sterilization, and equivalence justifications.
  • Keep UDI, labeling, and EUDAMED entries consistent and current.

FAQ

What did MDR replace?

MDR 2017/745 replaced the MDD (93/42/EEC) and AIMDD (90/385/EEC) with a single, stronger regulation that raises clinical and PMS expectations.

How are devices classified under MDR?

By risk using Annex VIII rules into Classes I, IIa, IIb, or III; the class then sets the conformity assessment route and clinical evidence depth.

Is clinical data always required?

Yes, clinical evaluation is required for all devices (Art. 61). The depth varies; PMCF is expected unless you justify why it is not needed.

What are the core post-market duties?

Run PMS per Art. 83–86, issue PSUR or PMS Report, trend events, and submit vigilance reports within 2/10/15-day windows depending on severity (Art. 87).

What identifiers are used for traceability?

Unique Device Identification (UDI) on labels and in EUDAMED, plus Single Registration Numbers (SRNs) for actors (Arts. 27–31).