EU MDR 2017/745 — A Practical Guide for Medical Device Manufacturers Entering the European Market
EU MDR 2017/745 came into full force in May 2021, replacing the Medical Device Directive and fundamentally changing what is required to CE mark a medical device. This guide explains what changed, what manufacturers must now have in place, and where the most common compliance gaps occur — referenced throughout to the specific articles and annexes that create each requirement.
What EU MDR Changed — and Why It Matters for Asian Manufacturers
EU MDR 2017/745 replaced the Medical Device Directive (93/42/EEC) as the governing regulation for medical devices in the European Union. While the MDD had been in place since 1993 with relatively limited amendments, EU MDR represented a comprehensive overhaul — not an incremental update.
For manufacturers in China, India, South Korea, Taiwan, and Pakistan who have been selling CE-marked devices under the MDD for years, EU MDR is not a continuation of what existed before. It is a new framework with substantially higher documentation requirements, more rigorous clinical evidence standards, and new obligations that did not exist under MDD at all.
MDD certificates that have not been transitioned to EU MDR are no longer valid for placing devices on the EU market. Manufacturers relying on legacy MDD certification without a valid EU MDR certificate from a notified body are not legally placing their devices on the EU market — regardless of what the certificate face date says. Verify your certification status before proceeding.
The five most significant changes EU MDR introduced compared to MDD are as follows. Each is addressed in detail in the sections below.
- Substantially higher clinical evidence requirements — Article 61 and Annex XIV now require a structured Clinical Evaluation Report per MEDDEV 2.7/1 Rev 4 for all Class IIa and above devices. Equivalence-based evaluations are significantly more restricted.
- Mandatory EUDAMED registration — All manufacturers, devices, certificates, and serious incidents must be registered in the EU's central database. Device registration must precede market placement for many device categories.
- Unique Device Identification — UDI assignment, labelling, and EUDAMED registration are now mandatory under Articles 26–34 for all device classes on a phased schedule.
- Post-market surveillance is now a structured, documented obligation — not an afterthought. A standalone Post-Market Surveillance Plan and periodic Post-Market Surveillance Reports are required under Articles 83–86.
- Notified body scrutiny is substantially increased — particularly for Class IIb devices, which now require scrutiny procedures under Article 54 that did not exist under MDD.
Device Classification Under EU MDR
Device classification under EU MDR follows the same four-class structure as MDD — Class I, IIa, IIb, and III — but the classification rules were revised and, in some cases, reclassified devices upward compared to their MDD status. Manufacturers should not assume their MDD classification carries forward without review.
Classification is governed by Annex VIII of EU MDR, which contains 22 classification rules organised into categories: non-invasive devices (Rules 1–4), invasive devices (Rules 5–8), active devices (Rules 9–13), and special rules (Rules 14–22). Each rule defines the conditions under which a device falls into a particular class.
Classification is based on the intended purpose of the device as declared by the manufacturer — not purely on the physical characteristics of the device. Two physically identical devices with different intended purposes can carry different classifications. EU MDR Annex VIII Rule 1
| Class | Risk Level | Conformity Assessment Route | Clinical Evidence Required | Notified Body Required |
|---|---|---|---|---|
| Class I | Low risk | Self-declaration (manufacturer); Annex IV if sterile or measuring | Clinical summary / limited evaluation | No (unless sterile/measuring) |
| Class IIa | Medium risk | Annex IX (QMS) or Annex X/XI (type examination) | Full CER per MEDDEV 2.7/1 Rev 4 | Yes |
| Class IIb | Medium-high risk | Annex IX + Annex X scrutiny for implantables | Full CER · higher evidence threshold | Yes + scrutiny procedure |
| Class III | High risk | Annex IX Chapter II or Annex X | CER + clinical investigation in most cases | Yes + mandatory scrutiny |
For manufacturers uncertain about their device classification under EU MDR Annex VIII, the MDCG has published guidance document MDCG 2021-24 which provides worked examples and borderline case guidance. Where a classification is genuinely ambiguous, the competent authority of the EU member state where the device will first be placed on the market is the appropriate body to request a formal classification opinion.
Technical File Requirements — Annex II and Annex III
The technical documentation required to support a CE marking application under EU MDR is defined in Annex II (technical documentation) and Annex III (post-market surveillance technical documentation). Together, these two annexes define the complete technical file structure that must be maintained throughout the lifetime of the device on the EU market.
Annex II covers the device description and specification, reference to previous and similar generations of the device, information supplied by the manufacturer (labelling and IFU), design and manufacturing information, general safety and performance requirements (GSPR) compliance documentation, benefit-risk analysis and risk management, product verification and validation, and clinical evaluation documentation.
The GSPR compliance mapping is one of the most commonly incomplete elements in technical files from Asian manufacturers. Annex I of EU MDR contains the General Safety and Performance Requirements — a detailed list of safety and performance obligations. Manufacturers must demonstrate, in the technical file, how each applicable GSPR is met. Omitting this mapping or producing a generic table that does not address your specific device will be flagged as a non-conformity by any notified body auditor. EU MDR Annex I · Annex II §6.1
Annex III is the post-market surveillance documentation annex — it requires a Post-Market Surveillance Plan, Post-Market Surveillance Reports (PMSR for Class I), and Periodic Safety Update Reports (PSUR for Class IIa and above). The PSUR for Class IIb and III devices must be submitted to the notified body at defined intervals and is a new obligation with no direct MDD equivalent.
Article 61 — Clinical Evidence and the Clinical Evaluation Report
Article 61 is the single most commercially consequential article in EU MDR for most manufacturers seeking CE marking. It establishes the obligation that all devices — not just implantables or high-risk devices — must have clinical evidence demonstrating conformity with the applicable General Safety and Performance Requirements under Annex I. EU MDR Art. 61(1)
The key change from MDD is that the equivalence pathway — under which many MDD-era CERs were built — is now significantly restricted. Under EU MDR Article 61(4), to claim equivalence, the manufacturer must demonstrate that the device and the claimed equivalent are clinically equivalent, technically equivalent, and biologically equivalent, and that the manufacturer has access to the technical documentation of the equivalent device. For Class III devices and implantables, equivalence is only permissible under specific conditions.
Equivalence claims based on a competitor's device are generally no longer viable under EU MDR unless the manufacturer has a formal contract giving them access to that competitor's technical documentation. In practice, this means most manufacturers must either rely on equivalence to their own previously-certified device or demonstrate clinical evidence through literature or clinical investigations. EU MDR Art. 61(4) · MDCG 2020-5
The Clinical Evaluation Report itself must be structured per MEDDEV 2.7/1 Revision 4 — the guidance document which, while not formally incorporated into EU MDR by reference, is the methodology that all notified bodies apply when assessing the adequacy of a CER. A CER that does not follow the MEDDEV 2.7/1 Rev 4 structure and content requirements will not pass notified body assessment.
Annex XIV Part A defines what the CER must contain. It requires a Clinical Evaluation Plan (CEP), a systematic literature search per the CEP methodology, appraisal of all relevant clinical data, analysis and conclusions, and a link to the PMCF plan. The CER must be updated throughout the device lifecycle — it is not a one-time submission document. EU MDR Annex XIV Part A
Post-Market Clinical Follow-Up
EU MDR Annex XIV Part B introduces the Post-Market Clinical Follow-Up plan as a mandatory element of the clinical evaluation cycle. The PMCF plan must define how post-market clinical data will be collected and analysed — and must be implemented, not merely drafted. Where a manufacturer concludes that PMCF is not necessary for their device, that conclusion must be justified in the clinical evaluation and documented. EU MDR Annex XIV Part B · MDCG 2020-7
EUDAMED — The EU Database for Medical Devices
EUDAMED is the European database for medical devices — the central registration system for all actors (manufacturers, authorised representatives, importers) and all devices placed on the EU market. Registration in EUDAMED is an obligation that runs in parallel with, but separately from, the notified body certification process. EU MDR Art. 30 · Art. 31
Manufacturers based outside the EU must appoint an EU Authorised Representative — a natural or legal person established in the EU who registers the device on the manufacturer's behalf in EUDAMED and acts as the regulatory point of contact for EU competent authorities. This obligation applies to all non-EU manufacturers, including those in China, India, South Korea, Taiwan, and Pakistan. EU MDR Art. 11
If you are a non-EU manufacturer without an EU Authorised Representative contract in place, this must be resolved before your device can be placed on the EU market. The EU AR must be identified by name in your device labelling and registered as the responsible party in EUDAMED. This is not optional and not something that can be added after certification is obtained.
UDI — Unique Device Identification
The Unique Device Identification system under Articles 26–34 requires manufacturers to assign a UDI to each device, incorporate the UDI carrier onto device labels and packaging, and register the device in the UDI module of EUDAMED. EU MDR Art. 26
UDI consists of two parts: the Device Identifier (DI) — a fixed code specific to the device model — and the Production Identifier (PI) — a variable code identifying the specific unit (batch number, serial number, manufacturing date, expiry date). Together these form the complete UDI which must appear on device labels in both human-readable form and as a machine-readable carrier (linear barcode, 2D matrix code, or RFID tag).
The UDI assignment must be done through an Issuing Entity — GS1, HIBCC, or ICCBBA — who assigns the company prefix that forms part of the Device Identifier. This is not a process that can be self-administered by the manufacturer without working through an accredited issuing entity.
Post-Market Surveillance — Articles 83 to 86
Post-market surveillance under EU MDR is not an activity that begins after CE marking is obtained — it is a systematic process that the manufacturer must have planned and documented in the technical file before initial certification. EU MDR Art. 83(1)
Every manufacturer must maintain a Post-Market Surveillance System — a set of procedures, data collection activities, and analysis methods for gathering and reviewing experience from devices placed on the market. The system must be described in a Post-Market Surveillance Plan (PMSP), documented as a standalone document that can be reviewed by notified bodies. A quality manual reference to PMS obligations is not sufficient — a standalone, device-specific PMSP is required.
The outputs of the PMS system feed into the Periodic Safety Update Report (PSUR) for Class IIa and above, which must be updated at defined intervals and made available to notified bodies on request. For Class IIb, the PSUR update frequency is annually; for Class III, it is at least annually and submitted proactively. EU MDR Art. 86 · MDCG 2022-21
The Notified Body Pathway
For Class IIa, IIb, and III devices, CE marking under EU MDR requires a conformity assessment by a notified body — an independent organisation designated by a national competent authority to assess conformity with EU MDR requirements. Notified bodies are designated for specific device categories — not all notified bodies can assess all device types.
The conformity assessment route depends on device classification. For most Class IIa and IIb devices, the manufacturer chooses between Annex IX (quality management system and technical documentation assessment), Annex X (type examination), and Annex XI (product conformity verification). The notified body assesses the technical documentation, including the clinical evaluation, and issues a certificate if conformity is demonstrated.
Notified body capacity is constrained. The transition from MDD to EU MDR created a significant backlog across all EU MDR-designated notified bodies. Manufacturers should expect lead times of 6–18 months from initial application to certificate issuance, depending on device complexity and the notified body selected. Beginning the notified body selection and application process before documentation is fully complete is a reasonable strategy — but the technical file and clinical evaluation must be submission-ready before the formal assessment begins.
Plain-English Summary — EU MDR Key Requirements
- Your MDD certificate is no longer valid — you need a new EU MDR certificate from a notified body to place your device on the EU market
- Clinical evidence requirements are substantially higher — a structured CER per MEDDEV 2.7/1 Rev 4 is required for all Class IIa and above, and equivalence to competitor devices is no longer straightforward
- You must appoint an EU Authorised Representative if you are based outside the EU — this person must be named on your labels and registered in EUDAMED
- UDI assignment and EUDAMED registration are mandatory — you need a UDI from an accredited issuing entity and your device must be in EUDAMED before it can be placed on the market
- Post-market surveillance is a structured, documented obligation — a standalone PMSP and periodic PSUR are required, not just quality system references to PMS
- Notified body lead times are long — start the process earlier than you think you need to, and have your documentation in strong shape before you apply
If you are preparing for EU MDR certification and have not yet assessed your current documentation against the requirements above, a Regulatory Readiness Audit from VerityNodes will identify exactly where your gaps are — mapped to specific articles and annexes — before you engage a notified body. Most manufacturers who commission an audit before notified body application discover 10–18 documentation gaps they were unaware of. Finding them early, when remediation is a planned activity, is substantially less expensive than a major non-conformity at assessment stage.