EU MDR 2017/745 Requirement Guide: Key Steps for Placing Medical Devices on the European Market
Placing a medical device on the European Union market requires strict adherence to Regulation (EU) 2017/745 (EU MDR). Replacing the old Medical Device Directive (MDD 93/42/EEC), the European regulation raises the bar for clinical safety, traceability, and post-market oversight.
To maintain compliance and obtain CE marking, manufacturers must understand every core EU MDR 2017/745 requirement across the entire product lifecycle—from initial classification to post-launch surveillance.
Contact Us For EU MDR Compliance Assistance
Quick Overview: Key EU MDR Compliance Milestones
| Compliance Step | Core Requirement | Key Deliverable |
| 1. Device Qualification | Confirm medical device definition & risk class | Risk Class (I, IIa, IIb, III) |
| 2. GSPR Compliance | Meet Annex I essential safety standards | GSPR Checklist |
| 3. Risk & Quality Management | Implement ISO 14971 & ISO 13485 QMS | Risk Management File (RMF) |
| 4. Clinical Evaluation | Gather continuous clinical evidence | Clinical Evaluation Report (CER) |
| 5. Technical Documentation | Assemble full technical file | DHF / DMR Technical Dossier |
| 6. UDI & EUDAMED | Assign device identification & upload data | UDI Code & EUDAMED SRN |
| 7. Conformity Assessment | Audit by Notified Body (Class IIa+) | CE Marking Certification |
| 8. Post-Market Oversight | Establish active PMS and PMCF mechanisms | PMS Plan & PSUR |
Step 1: Device Qualification and Risk Classification
The initial step in fulfilling any EU MDR 2017/745 requirement is establishing whether your product qualifies as a medical device under Article 2. Once qualification is confirmed, manufacturers must classify the device according to Annex VIII rules.
Devices are divided into four primary risk classes:
Class I: Low risk (e.g., non-sterile reusable hand instruments)
Class IIa: Low-to-medium risk (e.g., diagnostic ultrasound equipment)
Class IIb: Medium-to-high risk (e.g., surgical lasers, infusion pumps)
Class III: High risk (e.g., coronary stents, active implantable devices)
Your device classification dictates the conformity assessment pathway, the depth of technical documentation, and the degree of oversight required by Notified Bodies.
Step 2: General Safety and Performance Requirements (GSPR)
Compliance with Annex I General Safety and Performance Requirements (GSPR) forms the structural core of the EU MDR regulation. Replacing the old Essential Requirements checklist, GSPR contains 23 detailed requirements focusing on:
General Requirements: Risk reduction, chemical/physical properties, and benefit-risk ratio optimization.
Design & Manufacture: Biocompatibility, infection control, software lifecycle management, and electrical safety.
Information Supplied with the Device: User manuals, electronic Instructions for Use (eIFU), and standardized labeling.
Leveraging harmonized standards (such as EN ISO 13485 and EN ISO 14971) simplifies demonstrating compliance with each GSPR item.
Step 3: Risk Management and Quality System Integration
Risk management under EU MDR is an iterative, continuous process throughout the device lifecycle. Manufacturers must establish a systematic risk management plan compliant with ISO 14971, identifying all known and foreseeable hazards.
Key expectations include:
Eliminating or reducing risks through safe design and manufacture.
Implementing adequate protection measures (e.g., alarms) for residual risks.
Informing users of remaining unmitigated risks via labeling and IFUs.
Integrating risk management directly with your Quality Management System (QMS).
Schedule a Compliance Consultation
Accelerate Market Access with End-to-End Regulatory Guidance
Step 4: Clinical Evaluation Process and CER Compilation
Under EU MDR 2017/745, demonstrating clinical safety requires significantly more clinical evidence than under legacy directives. Equivalence claims are strictly limited, especially for Class III and implantable devices.
Manufacturers must execute a structured clinical evaluation process:
Clinical Evaluation Plan (CEP): Defines clinical parameters, state of the art, and intended clinical benefits.
Literature Reviews & Data Analysis: Systematic analysis of published clinical literature and clinical investigation data.
Clinical Evaluation Report (CER): Documents the final synthesis proving clinical safety, performance, and acceptable risk-benefit profile.
Step 5: Technical Documentation Assembly
Compiling comprehensive technical documentation is mandatory prior to seeking market access. Outlined in Annex II and Annex III, the technical dossier must include:
Device description, specifications, and variants.
Detailed manufacturing processes and design verification/validation data.
Risk Management File (RMF) and GSPR checklist.
Clinical evaluation records and Post-Market Clinical Follow-up (PMCF) plans.
Comprehensive technical file documentation ready for audit inspection.
Step 6: UDI Assignment and EUDAMED Registration
Traceability is a central pillar of the European medical device regulatory framework. Every device must carry a Unique Device Identification (UDI) code, consisting of:
UDI-DI (Device Identifier): Identifies the specific manufacturer and device model.
UDI-PI (Production Identifier): Identifies unit production data (e.g., lot number, expiration date, serial number).
Furthermore, manufacturers must register their economic entity and device details on EUDAMED (the European Database on Medical Devices) to obtain a Single Registration Number (SRN) and ensure full transparency across EU member states.
Additionally, manufacturers must designate a qualified Person Responsible for Regulatory Compliance (PRRC) as mandated by Article 15 to oversee compliance and technical file accuracy.
Step 7: Conformity Assessment and EU Declaration of Conformity
Depending on device classification:
Class I (Self-Declaration): Manufacturers can compile technical files and sign an EU Declaration of Conformity independently (unless sterile, having a measuring function, or reusable surgical tools).
Class IIa, IIb, and III: Require formal audit, QMS assessment, and technical file review by an accredited Notified Body.
Once conformity is verified, the CE mark can be officially affixed to the product packaging.
Step 8: Post-Market Surveillance (PMS) and PMCF
Market launch does not conclude regulatory obligations. EU MDR mandates continuous post-market oversight:
PMS Plan & Report: Required for Class I devices to summarize user feedback and trends.
Periodic Safety Update Report (PSUR): Mandatory for Class IIa, IIb, and III devices, updated regularly based on risk class.
Post-Market Clinical Follow-up (PMCF): Continuous gathering of real-world clinical data to update your CER and risk management files throughout the product lifetime.
How Operon Strategist Can Help You Achieve EU MDR Compliance
Navigating every EU MDR 2017/745 requirement can be complex, time-consuming, and resource-intensive. Operon Strategist delivers comprehensive regulatory consulting solutions to ensure seamless European market entry:
Gap Analysis & Strategy: Complete review of legacy MDD technical files against EU MDR 2017/745 standards.
GSPR & Risk Management Setup: Structuring compliant Annex I checklists, ISO 14971 files, and QMS SOPs.
CER & Clinical Support: Professional drafting and updating of Clinical Evaluation Reports and PMCF plans.
Notified Body Coordination: Preparing Technical Files (Annex II/III) and representing manufacturers during Notified Body audits.
EUDAMED & UDI Assistance: Managing actor registration, SRN acquisition, and UDI data submission.
Ensure Seamless Regulatory Compliance for Your Device
Get Your Medical Device Market-Ready with Expert Regulatory Support
FAQ's
What is the main objective of EU MDR 2017/745?
To enhance patient safety, clinical transparency, and device traceability across European markets.
Are legacy MDD CE certificates still valid under EU MDR?
Yes, valid MDD certificates can be utilized during defined transitional periods, provided no significant device changes occur.
What is a GSPR checklist in EU MDR?
A mandatory document demonstrating compliance with all 23 General Safety and Performance Requirements in Annex I.
Who requires a Person Responsible for Regulatory Compliance (PRRC)?
All medical device manufacturers and authorized representatives operating under EU MDR must designate a PRRC.
How often must a PSUR be updated under EU MDR?
Class III and Class IIb devices require annual updates, while Class IIa devices require updates at least every two years.