Importance of MDR / IVDR Compliance for Medical Devices and IVDs

Regulations MDR 2017/745 and IVDR 2017/746 introduced stringent requirements that are now critical for legally placing medical devices and in-vitro diagnostics on the EU market. Compliance not only improves patient safety but also minimises the risk of financial penalties and reputational damage. Robust procedures, an ISO 13485 quality-management system, effective PMS and an operational Vigilance system have become the standard for every market participant.

Manufacturer Obligations for Medical Devices under the MDR

A manufacturer of a medical device is fully responsible for ensuring the product meets all MDR 2017/745 requirements—preparing the technical file, completing conformity assessment, affixing the CE mark, assigning a UDI code and operating an effective QMS. Each element is essential for legal market access.

Technical Documentation & Conformity Assessment

Manufacturers must compile a comprehensive technical file covering design data, risk analysis, clinical evaluation and evidence of compliance with the MDR’s general safety and performance requirements. Detailed rules are outlined in the guide to technical documentation for MDR medical devices. The file underpins the conformity-assessment procedure and is scrutinised during notified-body audits.

CE Marking & UDI

Every device placed on the market must bear the CE mark confirming MDR compliance. A unique UDI must also be assigned to enable supply-chain traceability and EUDAMED registration. Correct CE marking is a pre-requisite for EU market entry.

ISO 13485 Quality-Management System

Implementing and maintaining a QMS that meets ISO 13485 is mandatory. The system must cover design, production, post-market monitoring and incident management.

PMS Monitoring & Vigilance

Manufacturers must operate post-market surveillance (PMS) procedures to collect real-world safety and performance data. Serious incidents must be reported through the Vigilance system as described in the Vigilance system for devices and IVDs.

Appointing a PRRC

Each manufacturer must designate a Person Responsible for Regulatory Compliance (PRRC) who oversees ongoing conformity. The PRRC’s qualifications must meet MDR criteria and be documented.

Manufacturer Obligations for IVDs under the IVDR

IVDR 2017/746 significantly toughened obligations compared with IVDD. The new risk-based classification, expanded performance-evaluation requirements and stricter documentation demands affect all phases of the product life-cycle.

New IVD Classification Scheme

IVDR introduces four classes—A, B, C, D—based on public-health risk. Higher-risk classes C and D follow the most rigorous conformity routes, usually with a notified body. Classification rules are explained under manufacturer obligations for IVDs.

Performance Evaluation & Technical File

Manufacturers must complete a full performance evaluation—analytical, clinical and usability—and document it in the Performance Evaluation Report. The results form part of the technical file and are critical for certification and market surveillance.

Risk Management & PMS

A clinical-risk-management system must identify hazards, analyse their impact and implement mitigation. Parallel PMS activities continuously evaluate safety and performance in real-world use.

EUDAMED Registration Duties

IVD manufacturers must register their organisation, devices and certificates in EUDAMED, assign SRNs and integrate UDI data for EU-wide traceability.

OBL Manufacturer Responsibilities under MDR / IVDR

Own-Brand Labelling (OBL) manufacturers placing OEM products under their own brand assume full MDR/IVDR liability. They must create their own technical documentation, perform conformity assessment and ensure traceability via CE marking and UDI. Duties are detailed in OBL manufacturer obligations.

Conformity & Documentation Responsibility

An OBL manufacturer must prove the product meets all MDR/IVDR requirements—using OEM data but compiling a complete file in its own name.

Labelling & Traceability Requirements

OBL products require the OBL holder’s CE mark, UDI and EUDAMED registration under its own trade name. Non-compliance may lead to severe regulatory action.

Role & Duties of the EU Authorised Representative (AR)

Non-EU manufacturers must appoint an authorised representative (AR) within the EU. The AR’s mandate and obligations—including document retention and Vigilance cooperation—are defined in the duties of the EU authorised representative.

Scope of AR Responsibility

The AR checks technical files, keeps declarations, participates in market-surveillance actions and assists with corrective measures or recalls.

Documentation & Regulatory Communication

The AR must maintain complete records and promptly inform authorities of serious incidents, coordinating corrective actions with the manufacturer.

Importer Obligations for Medical Devices & IVDs

Importers verify CE marking, UDI, declarations and EUDAMED registration before devices enter the EU market. They also collaborate in market-surveillance activities. Full duties are outlined under importer obligations.

Compliance Checks Before Placing on the Market

Importers must confirm valid CE marking, UDI and DoC, and ensure an EU AR is appointed.

Storage, Transport & Market Surveillance

Importers maintain storage/transport conditions and support corrective actions, recalls and Vigilance reporting.

Distributor Obligations for Medical Devices & IVDs

Distributors verify product compliance, store devices correctly and aid incident reporting. Their duties are detailed under distributor obligations.

Pre-Distribution Compliance Checks

Distributors must confirm CE marking, UDI and DoC before supplying the product.

Co-operation in Corrective Actions & Vigilance

Distributors actively support corrective measures and relay serious incidents within the Vigilance framework.

Regulatory Strategy: From Device Design to Certification

A sound regulatory strategy covers classification, conformity route, technical documentation and notified-body audits—minimising delays in CE certification and EUDAMED registration. Planning guidance is provided in the regulatory-strategy guide.

Planning the Regulatory Path & Classification

Accurate classification determines the certification route and dictates clinical or performance-evaluation plans, risk-management activities and EUDAMED data requirements.

Selecting a Notified Body & Audit Preparation

Choose an NB with relevant scope and capacity; prepare via internal audits and technical-file reviews.

Vigilance System—Post-Market Obligations

The Vigilance system monitors post-market safety and enables rapid risk mitigation.

Reporting Serious Incidents & FSCAs

Manufacturers must promptly report serious incidents to authorities and their NB as defined in the Vigilance requirements.

Implementing Preventive Measures

Root-cause analysis and effective CAPAs are essential to prevent recurrence and are documented within the PMS plan.

Consequences of Non-Compliance with MDR / IVDR

Failure to comply can lead to market withdrawal, administrative fines and legal action. Loss of CE certification halts sales immediately.

Market Withdrawal & Financial Penalties

Authorities may order immediate recalls and impose substantial fines, plus trade restrictions and reputational damage. Procedures are detailed under handling non-conforming devices and regulatory sanctions.

Effective Non-Conformity Management

A robust CAPA strategy minimises risk and protects business continuity.

Mandatory Liability Insurance for Market Operators

MDR / IVDR require manufacturers, importers and distributors to hold adequate product-liability insurance covering bodily injury, property damage and financial loss. Minimum cover levels are set in the regulations; see liability-insurance requirements.

How Pure Clinical Supports Manufacturers, Importers & Distributors with MDR / IVDR Compliance

Pure Clinical delivers end-to-end support—technical-file creation, ISO 13485 implementation, notified-body audit preparation, device classification, clinical or performance evaluation, EUDAMED registration and Vigilance setup. Our expertise spans the full product life-cycle, ensuring tailored regulatory strategies for each device and target market.

FAQ

Who has obligations under MDR and IVDR?

Four types of economic operators carry obligations under the MDR and IVDR: manufacturers, EU Authorised Representatives (for manufacturers based outside the EU), importers, and distributors. Each has a distinct, legally defined role in ensuring a device or IVD is compliant before and after it reaches the EU market.

What are a manufacturer’s core obligations under the MDR?

A manufacturer must prepare technical documentation covering design data, risk analysis and clinical evaluation, affix CE marking and assign a UDI to the device, implement and maintain an ISO 13485 quality management system, run post-market surveillance and vigilance procedures, and appoint a Person Responsible for Regulatory Compliance (PRRC).

How do IVD manufacturer obligations differ under the IVDR?

IVD manufacturers must classify their device under the IVDR's four risk-based classes (A, B, C, D), complete a performance evaluation (analytical, clinical and usability) documented in a Performance Evaluation Report, run a parallel risk management and post-market surveillance process, and register the organisation, devices and certificates in EUDAMED with assigned SRN codes. Classes C and D require a Notified Body's involvement in conformity assessment.

What is an Own-Brand Labeller (OBL) and what obligations does it have?

An Own-Brand Labeller is a company that places an OEM-manufactured product on the market under its own brand. Doing so makes it a manufacturer under the MDR/IVDR, so it takes on full manufacturer responsibility: creating its own technical documentation, carrying out the conformity assessment, and ensuring traceability through CE marking and UDI.
 

When does a manufacturer need an EU Authorised Representative?

A manufacturer based outside the EU must appoint an EU Authorised Representative (AR) before placing a device on the EU market. The AR verifies the technical file, keeps the declaration of conformity on file, takes part in market surveillance activities, and notifies the authorities of serious incidents on the manufacturer's behalf.

What must an importer verify before placing a device on the market?

Before placing a device on the market, an importer must confirm it carries valid CE marking and a UDI, that a declaration of conformity exists, and that the manufacturer has appointed an EU Authorised Representative where required. It must also maintain proper storage and transport conditions and support corrective actions and vigilance reporting.

What compliance checks must a distributor carry out before supplying a device?

A distributor must confirm CE marking, the UDI, and the declaration of conformity before supplying a product, and must actively cooperate in corrective actions and pass on reports of serious incidents to the manufacturer and relevant authorities.

What must be reported under the MDR/IVDR vigilance system?

Manufacturers must promptly report serious incidents and Field Safety Corrective Actions (FSCAs) to the competent authorities and the Notified Body, investigate the root cause, and implement effective Corrective and Preventive Actions (CAPA) to prevent recurrence.

What are the consequences of non-compliance with MDR/IVDR?

Non-compliance can lead to immediate market withdrawal of the product, significant financial penalties, trade restrictions, and reputational damage. A robust CAPA strategy for managing non-conformities helps minimise this risk and protect business continuity.

How does Pure Clinical support manufacturers, importers and distributors with MDR/IVDR compliance?

Pure Clinical provides end-to-end support including technical file preparation, ISO 13485 implementation, Notified Body audit preparation, device classification, clinical and performance evaluation, EUDAMED registration, and vigilance system setup for manufacturers, importers and distributors alike.