Requirements for medical software and the manufacturer seeking the CE-marking

The essential compliance criteria are similar to those for any other medical device under the EU MDR or any in-vitro diagnostic device under the IVDR. Here's a concise overview:

1. Comprehensive technical documentation as outlined in EU MDR or IVDR Annex II. This documentation should furnish evidence of adherence to the General Safety and Performance Requirements (GSPR, as enumerated in Annex I), and Annex III for post-market surveillance. The central proof of GSPR compliance should be rooted in conformity with the EN 62304 standard on medical device software lifecycle management.
2. A robust quality management system, as stipulated in EU MDR or IVDR Article 10 at the very least. For device classes that necessitate Notified Body certification, an EN ISO 13485 compliant quality management system is a prerequisite.
3. A Person Responsible for Regulatory Compliance (PRRC), in accordance with EU MDR or IVDR Article 15. the PRRC serves as a crucial bridge between the company's operations and the regulatory environment, ensuring that all activities related to medical device manufacturing and distribution align with the applicable laws and standards.
4. For manufacturers situated outside of the EEA, an EU Authorized Representative is required, as stipulated in EU MDR or IVDR Article 11.
5. Assignment of Unique Device Identification (UDI). Assigning a UDI to a medical device involves obtaining a unique code from a UDI issuing agency, which is responsible for managing and maintaining the UDI system. This code is then encoded into a barcode or a data matrix, which is physically marked on the device label or packaging.
6. EUDAMED registration, which mandatory for medical device manufacturers aiming to market their products within the European Union. It involves submitting information about the device, its specifications, intended use, and more, to the European Databank on Medical Devices. This centralized database helps regulatory authorities monitor and regulate medical devices in the EU market.
7. Certification by a Notified Body, for medical software other than Class I under the EU MDR or Class A under the IVDR. A Notified Body is an independent organization designated by an EU member state to assess and verify the conformity of medical devices with the applicable regulatory requirements.

Handling the regulatory landscape for Medical Device Software is a multifaceted endeavor that demands attention to detail and a thorough understanding of the EU MDR and IVDR. Adhering to the outlined requirements, including quality management systems, technical documentation, certification by a Notified Body, and the appointment of a Person Responsible for Regulatory Compliance (PRRC), is of great importance. The assignment of a Unique Device Identification (UDI) and EUDAMED registration further underscore the rigors involved. By diligently following these steps, manufacturers of MDSW can confidently pursue CE marking, ensuring their products meet the highest standards of safety, quality, and performance in the European market and beyond. This diligent adherence to regulatory standards not only facilitates market access but also upholds the integrity of patient care and medical innovation.