Regulation (EU) 2017/745 · market access · lifecycle control
MDR basics
The MDR is not a gate at the end of development. It is the operating system around the device.
A medical device reaches the EU market only when its intended purpose, risk class, evidence, organisation and production controls tell the same story. CE marking is the visible result. The regulatory work begins much earlier and continues long after launch.
Enter the MDR system ↓Purpose · claims · users · patient
Risk · design · clinical · validation
Class · QMS · dossier · scrutiny
UDI · PMS · vigilance · change
CE marked and continuously compliant
The essential shift
The MDR does not start with a certificate
It starts with a precise intended purpose and a defensible decision that the product is a medical device.
Every later decision, from classification to clinical evidence and post-market surveillance, inherits that starting point.
01
What the MDR actually is #
Regulation (EU) 2017/745 is the central EU legal framework for medical devices. It became applicable on 26 May 2021 and replaced the former Medical Device Directive and Active Implantable Medical Devices Directive, subject to the applicable transitional provisions.
Because it is a regulation rather than a directive, the MDR applies directly across EU Member States. National law still matters for matters such as competent authorities, sanctions, language and local implementation, but it does not replace the European framework.
The MDR is not simply a collection of laboratory tests or a certification checklist. It governs how a device is defined, designed, evaluated, manufactured, identified, placed on the market and monitored throughout its lifecycle.
Directly applicable requirements rather than optional guidance
Product, evidence, organisation, supply chain and lifecycle controls
A high level of health protection within a functioning internal market
Development, market entry, surveillance, change and eventual withdrawal
A product can perform beautifully and still fail regulatory review if its intended purpose, evidence, labelling, manufacturing controls and post-market strategy do not form one coherent case.
02
Before classification, decide what the product is #
Classification asks how much regulatory control a medical device needs. Qualification comes first and asks whether the product is a medical device at all.
The answer depends primarily on the manufacturer’s intended purpose, including the medical objective, intended users, patient population, use environment, claims and principal mode of action. A weak or contradictory intended purpose destabilises everything built on it.
Diagnosis, prevention, monitoring, prediction, prognosis, treatment, alleviation or another purpose within the MDR definition
The principal intended action is not achieved in or on the human body by pharmacological, immunological or metabolic means
Labelling, instructions, promotional statements, software outputs and actual use describe the same product
Medical device, IVD, medicinal product, accessory, general product or a combination requiring specific analysis
A product that examines specimens derived from the human body may fall under the IVDR rather than the MDR. Borderline and combination products may require analysis under several legal frameworks before the correct route becomes clear.
03
A device enters Europe with a regulatory identity #
The MDR does not regulate an isolated object. It regulates a device connected to accountable economic operators, a documented intended purpose, traceable identifiers and controlled information.
Owns conformity and the regulatory evidence
Required for a manufacturer established outside the Union
Places a third-country device on the Union market
Makes the device available through the supply chain
Provides regulatory compliance expertise within the required arrangement
Legal manufacturer details, authorised representative where applicable, Basic UDI-DI, UDI-DI, device name, models, intended purpose and certification scope must remain aligned. A mismatch between these elements can expose a deeper break in regulatory control.
04
Risk class changes the route, not the obligation to comply #
Medical devices are assigned to classes I, IIa, IIb or III under the rules in Annex VIII. Classification is not a score for product quality. It determines the depth of external scrutiny and the applicable conformity-assessment route.
The decision may turn on contact duration, invasiveness, anatomical site, whether the device is active, whether software drives clinical decisions, whether substances are absorbed or dispersed, and the seriousness of harm if the device fails.
Self-declaration is possible for many devices
Notified-body conformity assessment is required
Deeper technical-documentation assessment applies
The most intensive assessment and clinical scrutiny
Class I devices supplied sterile, with a measuring function or as reusable surgical instruments require notified-body involvement limited to the relevant sterile, metrological or reuse aspects.
05
The technical file is the visible surface of an evidence system #
The MDR requires technical documentation that allows conformity to be assessed. A strong file is not a warehouse of disconnected reports. It is a traceable explanation of how the product meets the applicable general safety and performance requirements.
Defines the product and its clinical promise
Identifies hazards, controls and residual risk
Verifies specifications and validates intended use
Supports safety, performance and benefit-risk
Translates residual risk into labels and instructions
Tests the original conclusions against real use
The requirements the device must satisfy
The evidence assembled before market entry
The system for learning after market entry
The clinical evidence process across the lifecycle
06
Conformity assessment is a route, not a single audit #
Before placing a device on the market, the manufacturer must complete the conformity-assessment procedure that applies to the device. The route depends on classification and product characteristics.
Technical documentation and EU declaration of conformity, with limited notified-body involvement for Is, Im and Ir
QMS and technical documentation assessed through the applicable MDR route
QMS-based route with the required technical-documentation assessment
EU type examination followed by production-conformity verification
The exact pathway may include sampling, device-specific assessment, consultations or additional procedures. A manufacturer should resolve the route early because it shapes the QMS, evidence plan, notified-body application and certification workload.
07
A notified body does not design the compliance strategy #
A notified body is an independent conformity-assessment organisation designated for defined legislation, technologies and device types. It is neither the manufacturer’s consultant nor the competent authority.
Where its involvement is required, the notified body evaluates the applicable QMS and technical documentation, reviews relevant clinical evidence, performs surveillance and issues the certificates within its scope.
Classification, compliance strategy, evidence, suppliers, production and continued conformity
Whether the manufacturer’s system and evidence meet the applicable MDR requirements
Market surveillance, enforcement, vigilance and the regulatory system
A four-digit notified-body number is not enough. The designation and codes published in NANDO must cover the relevant regulation, technology and conformity-assessment activities.
08
CE marking is the visible outcome of an invisible system #
Once conformity with the applicable requirements has been demonstrated through the correct procedure, the manufacturer draws up the EU declaration of conformity and affixes the CE marking. Where a notified body is responsible for the conformity-assessment procedure, its identification number accompanies the mark.
CE marking is not a quality award and does not transfer responsibility from the manufacturer. It is the manufacturer’s legal declaration that the device conforms to the applicable Union requirements, supported by notified-body certification where the MDR requires it.
The moment after the mark
CE is a launch condition, not a finish line
The evidence used for market entry becomes a set of hypotheses that real-world use must continuously test.
Controlled release to market
PMS, PMCF and vigilance
Trend and signal evaluation
Risk, evidence and controls
CAPA and product change
09
Not every regulatory document has the same legal weight #
One of the most useful MDR skills is knowing what a document does. The Regulation, common specifications, harmonised standards and MDCG guidance can all shape the compliance strategy, but they do so differently.
Creates the legal obligations and determines the required outcome
Manufacturers comply unless they duly justify solutions providing at least equivalent safety and performance, with stricter treatment for Annex XVI products
Voluntary technical routes whose cited provisions can support conformity with covered MDR requirements
Non-binding guidance that communicates important implementation expectations and regulatory practice
Calling every standard “mandatory” is inaccurate. Ignoring recognised standards without a strong alternative rationale is equally risky. The manufacturer must understand both the legal requirement and the technical route used to meet it.
10
Traceability now lives in identifiers and connected data #
The MDR introduced a UDI system and EUDAMED to make devices, actors, certificates and market information more traceable. Regulatory identity is no longer confined to labels and certificates stored in separate files.
Identifies the registered economic operator
Connects models sharing key regulatory characteristics
Identifies a specific device configuration
Carries production-specific information where applicable
Actor registration, UDI and device registration, notified bodies and certificates, and market surveillance became mandatory following the Commission’s declaration of functionality and the applicable transition period.
Names, addresses, identifiers, device data and certificate information must be governed as one data set. Registration does not repair inconsistencies created earlier in the regulatory system.
11
After launch, compliance becomes a learning system #
The manufacturer must keep the QMS, technical documentation, clinical evaluation and risk-management conclusions current. Post-market surveillance is not a reporting appendix. It is the mechanism that tests whether the original assumptions remain true.
New information may require updates to risk controls, labelling, clinical evaluation, PMS documentation, CAPA, design or regulatory submissions. A compliant device is therefore not a frozen design. It is a controlled design with a functioning feedback loop.
- Freeze the intended purpose and qualification rationale
- Document classification and the applicable conformity route
- Map Annex I requirements to planned evidence
- Build the QMS and technical documentation together
- Resolve clinical, technical and usability evidence gaps
- Align economic operators, UDI and registration data
- Complete assessment, declaration and CE marking
- Operate PMS, vigilance, PMCF and change control
Official sources
- Consolidated Regulation (EU) 2017/745 on medical devices
- European Commission overview of the medical-device regulations
- European Commission collection of MDCG guidance
- European Commission information on notified bodies
- European Commission EUDAMED overview and implementation status
- European Commission overview of harmonised standards
The bottom line
The MDR is one connected argument about the device
Qualification defines the product. Classification determines the scrutiny. Evidence demonstrates safety and performance. Conformity assessment tests the system. CE marking makes the result visible.
Then EUDAMED, PMS, PMCF, vigilance and change control keep that result connected to reality.
The strongest MDR strategy is not the one that produces the most documents. It is the one in which every document describes the same device, the same risks and the same controlled lifecycle.
MDR regulatory strategy
Need to turn an MDR requirement list into a workable market-access system?
Discuss your MDR pathway ↗From the knowledge centre
