What is Post-Market Surveillance (PMS)?

Post-Market Surveillance (PMS), as defined in the MDR (EU 2017/745) and IVDR (EU 2017/746) regulations, is a systematic and proactive process of collecting and analyzing data regarding the quality, performance, safety, and effectiveness of a medical device or in vitro diagnostic device after it has been placed on the market and put into use. PMS is a key component of the manufacturer’s quality management system and is intended to ensure ongoing compliance with the essential requirements, as well as early detection of risks and non-conformities.

The obligation to establish a PMS system applies to every manufacturer of a medical device or IVD, regardless of the risk class. According to Article 83 of the MDR and Article 78 of the IVDR, the PMS system must be proportionate to the device’s class, complexity, clinical application, and target population. The implemented PMS system should enable the assessment of the benefit-risk ratio based on actual use in clinical conditions.

Studies conducted within Eudamed have shown that an effectively functioning PMS system can reduce the risk of serious incidents by up to 35% during the first year of device use. As noted by Dr. Jürgen Steinbach, medical regulatory expert: “The PMS system is not only a legal requirement – it is a key quality tool that enables earlier risk detection than passive systems.”

PMS process – step-by-step workflow

An effective PMS system follows a structured lifecycle:

  • data collection (complaints, literature, registries)
  • data validation and categorization
  • trend analysis and signal detection
  • risk assessment and benefit-risk update
  • CAPA implementation
  • feedback into technical documentation and QMS

Manufacturer’s obligations in post-market surveillance

The manufacturer is responsible for designing, implementing, and maintaining the PMS system in accordance with current legal and technical requirements. This system should be documented, auditable, and reviewed periodically to ensure ongoing compliance with essential requirements and the protection of user and patient health.

Manufacturer responsibilities include:

  • developing and regularly updating the PMS Plan in accordance with Article 84 MDR and Article 79 IVDR,
  • proactively collecting and analyzing data from the market, scientific literature, databases, and competitor monitoring,
  • preparing PMS reports for Class I devices or periodic PSURs (Periodic Safety Update Reports) for Class IIa, IIb, and III devices,
  • initiating CAPA (Corrective and Preventive Actions) based on PMS and vigilance outcomes,
  • continuously updating the technical documentation, including clinical evaluation (MDR) or performance evaluation (IVDR).

PMS within the quality management system

PMS must be fully integrated into the ISO 13485 quality management system. It should interact directly with CAPA processes, risk management (ISO 14971), and clinical evaluation. A disconnected PMS system is one of the most common causes of non-conformities identified by notified bodies.

PMS Plan

The PMS Plan is a document describing the structure and mechanisms of the PMS system and forms an integral part of the technical documentation. According to Annex III of the MDR/IVDR, the PMS Plan must be proportionate to the device risk and relevant to the post-market phase.

What must a PMS Plan include in practice?

In practice, notified bodies expect the PMS Plan to clearly define:

  • data sources and collection frequency
  • defined KPIs and alert thresholds
  • description of mechanisms for integration with the vigilance system,
  • roles and responsibilities within the organization
  • methods for signal detection and escalation
  • integration with CAPA, risk management, and clinical evaluation

Key PMS indicators and metrics

Typical PMS indicators include:

  • complaint rate per 1,000 units
  • serious incident frequency
  • trend thresholds for signal detection
  • time-to-CAPA implementation
  • PMCF data completion rate

PMS Report

The PMS Report and PSUR (Periodic Safety Update Report) are key documents for documenting and reporting the results of PMS activities.

For Class I devices, a PMS report must be available upon request. For Class IIa, IIb, and III devices, a periodic PSUR is required (at least every 2 years for Class IIa and annually for Class IIb and III), which must be available to the notified body and competent authority.

The PSUR includes:

  • collection and trend analysis of PMS data,
  • assessment of the benefit-risk ratio,
  • recommendations for updating technical documentation and risk analysis,
  • identification of necessary corrective actions or product withdrawal.

Post-Market Studies: PMCF and PMPF

Post-Market Clinical Follow-up (PMCF) and Post-Market Performance Follow-up (PMPF) are activities aimed at collecting additional clinical and user data after a device has been approved for market placement. These are required by Annex XIV of the MDR (PMCF) and Annex XIII of the IVDR (PMPF).

PMCF – Medical Devices

Typical PMCF methods include:

  • prospective observational studies,
  • patient registries (e.g., for implantable devices),
  • analysis of real-world clinical practice data and PMCF reports.

PMPF – IVD Devices

PMPF is a systematic approach to evaluating IVD test performance under routine conditions. It is especially relevant for Class C and D devices and aims to confirm sensitivity, specificity, and repeatability of test results.

PMPF studies may include:

  • data collection from routine laboratories,
  • audits of test use across different populations,
  • analysis of epidemiological data and false positive/negative trends.

Difference between PMS, vigilance, and PMCF

These systems serve different but complementary roles:

  • PMS – continuous data collection and analysis
  • Vigilance – reporting of serious incidents and FSCA
  • PMCF/PMPF – proactive clinical and performance data generation

Real-world evidence in PMS

PMS systems increasingly rely on real-world evidence (RWE), including registry data, observational studies, and real-use clinical feedback. This type of data provides insight into actual device performance outside controlled clinical trials.

Market Data Analysis System

The PMS system must include methods for collecting, analyzing, and validating market data to ensure its quality, timeliness, and representativeness.

Sources of data include:

  • end-user complaints,
  • incident reports submitted to competent authorities,
  • scientific publications, systematic reviews, meta-analyses,
  • data from device registries,
  • results of internal audits.

Common PMS system failures

In practice, PMS systems often fail due to:

  • passive data collection only
  • lack of defined KPIs
  • poor integration with risk management
  • delayed CAPA implementation
  • inconsistent PSUR updates

Example of PMS failure and regulatory consequences

For example, failure to detect increasing complaint trends may lead to delayed CAPA actions, resulting in serious incidents and mandatory field safety corrective actions (FSCA).

Integration of PMS with Vigilance

Effective integration of PMS and vigilance enables early detection of potential hazards and implementation of corrective actions. These systems should be procedurally and technologically compatible, particularly in terms of:

  • continuous monitoring of serious adverse events,
  • reporting of serious incidents and FSCA actions to Eudamed,
  • cooperation with the notified body in cases of significant clinical risks.

When does PMS trigger regulatory action?

PMS findings may trigger:

  • updates to technical documentation
  • changes in risk classification
  • initiation of FSCA
  • notification to the notified body

Updating Technical Documentation Based on PMS

Data and conclusions from PMS, PMCF, and PMPF must be consistently incorporated into the technical documentation and translated into specific product improvement actions.

This includes:

Expert insight – PMS in practice

In practice, the biggest challenge is not collecting data, but transforming it into actionable regulatory decisions and timely CAPA implementation. Manufacturers often underestimate the importance of structured data analysis and cross-functional integration within the QMS.

How Pure Clinical Can Support Post-Market Surveillance

  • Design and update of PMS Plans and PMCF/PMPF strategies in accordance with MDR and IVDR annexes,
  • Support in the preparation and analysis of PSURs, PMS Reports, and update documentation,
  • Organization of observational studies and patient registries under PMCF,
  • Data quality assessment and integration of vigilance with PMS systems,
  • Preparation of documentation for the notified body and competent authorities.

FAQ

Does the PMS Plan need to be approved by the notified body?

While the PMS Plan is part of the technical documentation and is subject to review by the notified body, formal approval is not always required — it depends on the device class and the stage of the conformity assessment.  

How long must PMS data be retained?

According to Article 10(8) of the MDR and IVDR, data must be retained for at least 10 years after the last device has been placed on the market; for implantable devices – 15 years.

What is the difference between PMS and vigilance?

PMS involves comprehensive monitoring of a device on the market, while vigilance focuses on the reporting and analysis of serious incidents and corrective actions.

Does PMS also include the assessment of marketing materials?

Yes, if marketing materials contain clinical information or performance claims, their consistency with actual PMS data should be monitored as part of the quality management system.

Who is responsible for PMS within the organization?

PMS responsibilities are typically shared between regulatory affairs, quality assurance, and the Person Responsible for Regulatory Compliance (PRRC).

What happens if PMS is insufficient?

Weak PMS systems may lead to regulatory findings, delayed certification, or even suspension of CE certificates.

When should a manufacturer upgrade the PMS system?

Manufacturers should update their PMS system when new risks are identified, device modifications occur, or regulatory expectations change.