On May 26, 2021, the EU introduced the most sweeping changes to the Medical Device legal framework since the mid 90's. Ulf Grundmann, Senior Partner, King & Spalding (Frankfurt), reviews some of these regulatory changes, from the perspective of medical device innovators. The presentation includes Scope and Definitions, Classification and Conformity Assessment, Placing a Device on the EU Market, UDI and EUDAMED, Supply Chain Obligations, PMS and Vigilance
6. Legal Framework
6
Two New Regulations on Medical Devices
Regulation on Medical Devices
2017/745 entered into force on
May 25, 2017
Regulation on In Vitro Diagnostic
Medical Devices 2017/746 entered
into force on May 25, 2017
The Regulation on Medical Devices
2017/745 will repeal and replace the
Medical Device Directive
(93/42/EEC) and Active Implantable
Medical Devices Directive
(90/385/EEC) on May 26, 2021
The Regulation on In Vitro Diagnostic
Medical Devices 2017/746 will repeal
and replace the In Vitro Diagnostic
Device Directive (98/79/EC)
on May 26, 2022
The Regulation 2017/745, also called « MDR », is the
general regulation for Medical Devices
8. What is a Medical Device?
8
When do the MDRs apply?
Product to be used for human beings with a medical purpose, like
• Diagnosis,
• Prevention,
• Monitoring,
• Prediction,
• Prognosis,
• Treatment, or
• Alleviation
of a disease.
(Art. 2, No. 1 Regulation (EU) 2017/745)
9. What is a Medical Device?
9
Products that shall be deemed to be MD:
• Devices for control/support of conceptions
• Devices intended for the cleaning, disinfection or sterilization of MD
Non-MD (without medical purpose) which also fall under the MDRs:
• Contact lenses
• Products for specific (non-medical) purposes in acc. with Annex XVI of MDR
(Art. 1, Sec. 4 MDR)
10. What is a Medical Device?
10
Where do the MDRs NOT apply?
• Medicinal products
• Cosmetic products
• Food products
• Human blood, blood products, plasma or blood cells
• Transplants, tissues or cells of human or animal origin, or their derivatives -
except: devices manufactured utilizing tissues or cells of human or animal
origin or their derivatives, which are non-viable or are rendered non-viable
• Any other products consisting viable biological material or organisms, living
micro-organisms, bacteria, fungi or viruses
(Art. 1, Sec. 6 MDR)
11. How to Place a Device on the Market
11
• Providing a Technical Dossier (“TD”)
• Self-assessment of TD by Manufacturer (Class I)
• Assessment of TD by Notified Body (Class IIa, IIb and III)
• If assessment is positive, right to carry “CE”-mark
• Medical Device must carry “CE”-mark
• Normally no governmental authority is involved
12. Transition Period
12
A device which is a class I device pursuant to MDD, for which the declaration of
conformity was drawn up prior to 26 May 2021 and for which the conformity
assessment procedure pursuant to the MDR requires the involvement of a
notified body, or which has a certificate that was issued in accordance with
MDD and that is valid, may be placed on the market or put into service until 26
May 2024, provided that from 26 May 2021 it continues to comply with either of
those Directives, and provided there are no significant changes in the design
and intended purpose. However, the requirements of this MDR relating to
post-market surveillance, market surveillance, vigilance, registration of
economic operators and of devices shall apply in place of the
corresponding requirements in those Directives.
13. Transition Period
13
Other devices lawfully placed on the market pursuant to MDD prior to 26 May
2021, and devices placed on the market from 26 May 2021 with MDD
certificates, may continue to be made available on the market or put into service
until 26 May 2025.
Devices which comply with MDR may be placed on the market prior to 26 May
2021.
Notified Bodies which comply with the MDR may be designated and notified
prior to 26 May 2021. Notified Bodies which are designated and notified in
accordance with the MDR may carry out the conformity assessment procedures
laid down in the MDR and issue certificates in accordance with this Regulation
prior to 26 May 2021.
14. Derogations Caused by Covid-19-Situation
14
Any competent authority of a Member State may authorize, on a duly justified
request, the placing on the market or putting into service within the territory of
the Member State concerned, of a specific device for which the applicable
procedures under MDD have not been carried out but use of which is in the
interest of public health or patient safety or health. The Member State may
inform the Commission and the other Member States of any authorization
granted before 24 April 2020. Following a notification of a Member State, the
Commission, in exceptional cases relating to public health or patient safety or
health, may, by means of implementing acts, extend for a limited period of time
the validity of an authorization granted by a Member State when granted before
24 April 2020, to the territory of the Union and set the conditions under which
the device may be placed on the market or put into service.
16. Key Changes
16
MDRs add new requirements
Emphasis on a lifecycle approach to
safety, backed up by clinical data
Bring more stringent requirements for
designation and control of Notified Bodies
MDRs reclassify certain devices and
have a broader scope
Cover internet sales of devices offered
at a distance
Introduce clinical evaluation
consultation procedure for some high
risk devices
Introduce new Unique Device
Identification system
Information on devices and studies
made public via the new European
Database for Medical Devices –
EUDAMED
18. Scope
18
Scope of MDRs has broadened
Products without an indented medical purpose
subject to MDR once respective Implementing
Regulation(s) adopted
Specific rules for combination products
Devices sold online now explicitly subject to MDRs
19. Definitions
19
‘Medical Devices’ means any instrument, apparatus, appliance,
software, implant, reagent, material or other article intended by the
manufacturer to be used, alone or in combination, for human beings
(a full definition can be found in article 2.1)
Medical Devices must have a specific medical Purpose
Examples:
• dental and surgical instruments
• bandages and splints
• treatment chairs and hospital beds
Borderline Cases
Some products are
hard to classify as
either a medicine or
medical device. These
products are called
‘borderline Products’
until their status is
decided
The Regulation has a wider scope
For instance, it covers:
• all devices for cleaning, sterilizing or disinfecting
other medical devices
• reprocessed single-use medical devices
• certain devices with no intended medical purpose
(Annex XVI)
Medical Device Coordination Group
(MDCG):
Assists the European Commission with
deciding on a case-by-case basis whether
or not a specific product, category or
group of products falls within the scope
of this Regulation
A Medical Device covered
by the Regulation can be
subject to other
Directives
Example: The Directive on
electromagnetic
compatibility covers the
electromagnetic
interference that a medical
device may emit or receive
20. Key Changes
Definition of a medical device
slightly modified
More definitions of terms in MDRs
than in MDDs
Examples include: Unique Device
Identifier, clinical data, clinical
evidence, and serious incident
20
Definitions
21. In vitro diagnostic medical devices
(Regulation 2017/746)
Medicinal products (Directive 2001/83/EC)
Blood products (Directive 2002/98/CE)
Biocidal products (Regulation 528/2012)
Food products (Regulation 178/2002)
Tissues and cells of human origin (Directive
2004/23/CE) or animal origin
Cosmetic Products (Regulation 1233/2009)
MDR Does Not Apply To
21
23. Conformity Assessment
23
Classification is based on risk
Manufacturers need to demonstrate that their device
meets requirements in MDR or IVDR by carrying out a
conformity assessment procedure
Risk class determines whether or not a conformity
assessment is required (which is done by a Notified Body)
25. Key Changes
Some devices will be reclassified or
will need to be scrutinized by a
Notified Body
MDR sets out 22 rules for
determining risk classes
Classification
25
26. Example: Annex VIII, Rule 11 „SOFTWARE“
“Software intended to provide information which is used to take decisions with
diagnosis or therapeutic purposes is classified as class IIa, except if such
decisions have an impact that may cause:
— death or an irreversible deterioration of a person's state of health, in which
case it is in class III; or
— a serious deterioration of a person's state of health or a surgical intervention,
in which case it is classified as class IIb.”
26
27. Example: Annex VIII, Rule 11 „SOFTWARE“
“Software intended to monitor physiological processes is classified as
class IIa, except if it is intended for monitoring of vital physiological
parameters, where the nature of variations of those parameters is such
that it could result in immediate danger to the patient, in which case it is
classified as class IIb.
All other software is classified as class I.”
27
28. Conformity Assessment
28
Manufacturers need to demonstrate that the medical
device meets requirements in MDRs by carrying out a
conformity assessment
Assessment route depends on classification of device
Manufacturers place CE mark on the product to show
that medical device meets requirements
30. Key Changes
Assessment of the conformity varies
according to the risk class and
specific features of certain devices
Intervention of a Notified Body
needed for all Class IIa, IIb and III
devices, as well as some specific
Class I devices
Conformity
Assessment
30
31. Key Changes
For certain high risk devices new
clinical evaluation consultation
procedure required
General safety and performance
requirements specified in Annex I,
technical documentation specified in
Annexes II and III
Conformity
Assessment
31
32. Key Changes
Scope of the Quality Management
System now includes clinical
evaluation and post-marketing
clinical follow-up (PMCF)
Common specifications defining
additional requirements may be put
in place for certain devices
Conformity
Assessment
32
34. Conformity Assessment
34
5
4
3
2
1
Notified Body surveillance activities and post-certification monitoring
The NB has the right and duty to carry out unannounced on-site audits and to
conduct physical or laboratory tests on devices.
Notified Body certification
Upon positive assessment, the NB issues the approval certificate or attestation.
Each certificate shall refer to only one conformity assessment procedure.
Notified Body assessment report
Manufacturer’s assessment application
A NB’s tasks will vary depending on the classification of the products concerned
and the conformity assessment route a manufacturer has chosen.
Manufacturer’s choice of a Notified Body (NB)
Manufacturers can certify their products with any NB within the EU. A NB is
selected from a formal list.
⚠
Under the EU Regulation there are
4 procedures:
- Conformity Assessment based on a
quality management system and on
an assessment of technical
documentation;
- Conformity Assessment based on
type-examination;
- Conformity assessment based on
product conformity verification;
- Procedure for custom-made devices.
In the US, there are three main
procedures before the FDA:
- Premarket notification (‘510k’)
- Premarket approval
- Product development protocol
35. Key Changes
Have to be designated under MDRs;
more stringent criteria
The database of Notified Bodies (NANDO) can
be found here: http://ec.europa.eu/growth/tools-
databases/nando/
Notified
Bodies
35
37. Key Changes
MDRs reinforce requirements for
clinical evaluation
Concept of equivalence for a limited
number of situations, tighter rules
New and more precise requirements
for clinical investigations
Clinical
Requirements
37
38. Key Changes
For Class III and implantable
devices, manufacturer must
draw up summary of safety
and clinical performance
Part of technical documentation Summary of
Safety and
Clinical
Performance
38
39. Key Changes
ISO 10993 set entails a series of
standards for evaluating the
biocompatibility of medical devices
ISO 13485:2016 Medical devices —
Quality management systems —
Requirements for regulatory purposes New Technical
Norms
39
40. Key Changes
ISO 14971 requirements for risk
management to determine safety of
a medical device during the product
life cycle
European harmonized standard
adopted as EN ISO 14971:2012 for
devices intended to be marketed in
the EU (not ISO 14971 from 2007)
New Technical
Norms
40
42. 4. Technical
documentation
• The technical documentation is mandatory for all categories of products, regardless of their classification. This document
shall contain: (i) the description of the medical device, design and manufacturing information; (ii) the information for the
demonstration of conformity with the general safety and performance requirements; (iii) the information on the benefit-risk
analysis; (iv) the results and critical analyses of all verification and validation tests and studies undertaken to demonstrate
the conformity of the device with the requirements of the Regulation.
3. Clinical
evaluation
• The clinical evaluation is mandatory for all categories of products, regardless of their classification.
• The clinical evaluation makes it possible to demonstrate that, under normal conditions of use, the performances of the
device are in conformity with those assigned to them.
2. Conformity
assessment by a
Notified Body or
self-assessment
• Medical Devices are not subject to a marketing authorization procedure. However, a conformity assessment procedure by
a Notified Body is needed in most cases: Class IIa, IIb, and III devices, as well as some specific Class I devices.
• Conformity assessment procedures include three types of activities: design, manufacturing and final control of the
products.
Placing a Device on the EU Market
42
1. Product
specific
requirements
• The medical device must comply with the general requirements for safety and performance defined in Annex I. Those
requirements are divided into three categories: (i) requirements for the risk management system; (ii) requirements
regarding design and manufacture; (iii) requirements regarding the information supplied with the device.
43. 8. Affix the CE
marking
• The CE marking is subject to the general principles set out in Article 30 of Regulation (EC) No 765/2008.
• The marking must be visible, legible and indelible.
• Where applicable, the CE marking shall be followed by the identification number of the Notified Body responsible for the
conformity assessment procedures.
7. EUDAMED
• Key information about the manufacturer, authorized representative and importer if applicable, must be submited to the
European databank on medical devices (EUDAMED).
6. EU declaration
of conformity
• The EU Declaration is a written statement and a single declaration drawn up by the manufacturer to demonstrate the
fulfilment of the EU requirements relating to a product bearing the CE marking it has manufactured.
• Duration is limited to 5 years, it must be regularly renewed.
Placing a Device on the EU Market
43
5. Affix the UDI
to the medical
device or its
packaging
• The manufacturer ensures the traceability of medical devices through a unique and unambiguous international code,
identifying each medical device throughout its life cycle.
44. Key Changes
Manufacturers must have systems
for risk and quality management;
conduct clinical evaluations;
compile technical documentation;
apply a conformity assessment
procedure; responsible for devices
on the market; systems to cover
financial responsibility
Obligations of
Manufacturers
44
45. Key Changes
Name person responsible for
regulatory compliance
For some implantable devices
implant card required
Obligations of
Manufacturers
45
46. Key Changes
Draw up declaration of conformity
and apply CE marking
Manufacturers outside EU/EEA
must have a contract with an EU
authorized representative
Obligations of
Manufacturers
46
48. Key Changes
System of unique identifiers (UDIs)
will enhance the identification and
traceability of devices
UDI enables for the tracing of the
manufacturer (UDI-DI number) and
the unit of production (UDI-PI number) UDI
48
49. Key Changes
EUDAMED database accessible for
manufacturers, suppliers, Notified
Bodies, and competent authorities
Manufacturers need to register,
upload relevant information, apply for
clinical investigation and performance
studies, and upload post-market
surveillance documents
EUDAMED
49
51. EU/EEA
Manufacturer
Non EU/EEA
manufacturer
Identity of treatment for EU and
non EU manufactured products
Authorized representative is
not mandatory
IMPLEMENTATION REGULATION CONTROL:
• EU Commission
• Competent Authority (designated by each
• Member State for the implementation of
the Regulation)
• Notified Body (independent certification bodies
designated by a National Competent Authority
and placed under European control)
Identification of Economic Operators
51
Manufacturer
A natural or legal person who
manufactures or fully refurbishes a device
or has a device designed, manufactured or
fully refurbished, and markets that device
under its name or trademark
Manufacturer outside the EU/EEA shall
have a contract with an authorized
representative inside the EU/EEA
Importer
Any natural or legal person
established within the Union that places
a device from a third country on the
Union market
Distributor
Any natural or legal person in the
supply chain, other than the manufacturer
or the importer, that makes a device
available on the market, up until the
point of putting into service
52. 52
Interactions with the
Authorized Representative
Authorized
Representative
(AR) in the EU
Controls of non-European
manufacturer’s actions during the
entire lifecycle of a device
Cooperates with the competent
authorities on any preventive or
corrective action taken to eliminate
or, if that is not possible, mitigate
the risks posed by devices
Competent
Authority
Ensures the conformity of the
devices produced outside the EU
and serves as a point of contact for
them in the European Union
Non EU
Manufacturers
53. 53
Interaction with Distributors
& Importers
Manufacturer
Authorized
Representative
Notified
Body
Competent
Authority
Verify that:
• The device has been CE marked
• The device has been labelled correctly and a UDI has been assigned
• The device is registered in the Eudamed
Once the Product is
placed on the market:
Cooperate when a device is not in
conformity with the Regulation
Once the Product is
placed on the market:
Inform CA & NB if the device
presents a serious risk
Importer &
Distributor
Before the
Product is placed
on the market:
55. Post-Market Surveillance
Manufacturers must plan risk-
proportionate post-market
surveillance system
Plan must specify methods
and procedures used to
update clinical evaluation
Periodic safety report needed
for high risk devices
55
56. REPORT:
any ‘serious incident’* involving devices
any field safety corrective action
Reactive Obligations
56
Manufacturers
Competent
Authorities
* A ‘serious incident ’ means any incident that directly or indirectly led, might have led or might lead to:
• the death of a patient, user or other person
• the temporary or permanent serious deterioration of a patient’s, user’s or other person’s state of health
• a serious public health threat
EVALUATE:
the risks arising from the reported serious incident
the planned safety corrective actions
57. Defective Devices Liability
Manufacturers first and main
person liable for defects
Accountability
For non-EU manufacturers
EU authorized representative
liable for defects
57
59. Contact Details
Ulf H. Grundmann
Partner
FDA and Life Sciences
ugrundmann@kslaw.com
+49 69 257 811 400
Ulf Grundmann specializes in IP laws,
regulations and compliance regarding the
pharmaceutical, medical devices, cosmetic and
food industries, and in litigation in the
European Union.