Compliance Resources

Medical Device Regulatory Compliance Checklist

A structured, source-ready checklist for medical device manufacturers and importers covering EU MDR 2017/745, US FDA pathways, ISO 13485, certification matrices, and import/export documentation.

Regulatory Systems

Certification Types

Checklist Items

1. EU MDR Compliance Checklist (Regulation (EU) 2017/745)

Fully applicable since 26 May 2021. Devices are classified into four classes based on risk, duration of contact, and invasiveness. Official legal text: Regulation (EU) 2017/745 (EUR-Lex).

EU Class	Risk Level	Examples	Conformity Route
Class I	Low	Non-sterile dressings, non-sterile examination gloves	Self-declaration + EU declaration of conformity (no notified body for most)
Class IIa	Low-medium	Reusable surgical instruments, infusion pumps, wound drainage catheters	Notified body assessment required (Annex IX or XI)
Class IIb	Medium-high	Surgical staplers, chest drainage systems, ventilator circuits	Notified body full QA assessment + design dossier review
Class III	Highest	Implantable devices, cardiovascular stents, heart valves	Notified body + clinical evaluation + often clinical investigation

7-step EU route

Determine device classification under MDR Annex VIII (22 classification rules)
Appoint an EU Authorized Representative (mandatory for non-EU manufacturers)
Implement a Quality Management System compliant with ISO 13485
Prepare technical documentation (Annex II or III), including clinical evaluation report (CER)
Undergo notified body assessment (Class IIa and above)
Issue EU Declaration of Conformity and affix CE marking
Register in EUDAMED and maintain post-market surveillance (PSUR, vigilance reporting)

2. US FDA Compliance Checklist

The FDA classifies devices into three classes. Overview: FDA Overview of Device Regulation.

FDA Class	Risk Level	Examples	Premarket Pathway
Class I	Low	Bandages, manual instruments (most exempt)	General controls; most exempt from 510(k)
Class II	Moderate	Chest tubes, surgical drapes, infusion sets, catheters	Premarket Notification 510(k) - substantial equivalence to a predicate
Class III	Highest	Implantable pacemakers, heart valves	Premarket Approval (PMA) - full clinical data required

6-step US route

Determine FDA classification and product code
Register the establishment and list the device (annual FDA registration & device listing)
Implement QMS per 21 CFR Part 820 / ISO 13485 (2024 QMSR alignment)
Submit 510(k) for Class II (or PMA for Class III), or confirm exemption
Apply UDI / GUDID data submission and ensure labeling compliance
Maintain post-market compliance - MDR adverse event reporting, corrections & recalls

3. Certification Comparison Matrix

Key medical device certifications with typical validity and timeline.

Certification	Governing Body	Validity	Typical Timeline
ISO 13485:2016	Notified body / accredited registrar	3 years (+surveillance audits)	4-8 months
CE Marking (MDR)	EU notified body	5 years, renewable	12-24 months (Class IIa+), 6-12 months (Class I)
FDA 510(k)	US FDA (CDRH)	Continuous (no expiry)	3-6 months preparation + 90-180 days FDA review
FDA PMA	US FDA (CDRH)	Continuous	12-36 months
NMPA (China)	NMPA / provincial authorities	5 years	6-18 months

4. Import / Export Documentation Checklist

Standard documents required when importing or exporting medical devices.

Document	Purpose	Required For
Commercial Invoice & Packing List	Customs clearance, valuation	All shipments
Bill of Lading / Air Waybill	Transport title document	All shipments
Certificate of Origin	Tariff preference, origin rules	Most countries
ISO 13485 Certificate	QMS proof for distributors/importers	EU, Asia, Middle East buyers
CE Certificate (MDR)	EU market access	EU / EEA imports
FDA Establishment Registration & Device Listing	US market access	US imports
Free Sales Certificate (CFS)	Proof of legal sale in origin country	Latin America, Middle East, Africa
UDI / Labeling Documentation	Traceability (GUDID / EUDAMED)	EU & US

5. Quick Answers (FAQ)

What certificates do I need to import medical devices into the EU?

For Class IIa and above: a valid CE certificate issued by a notified body under MDR 2017/745, ISO 13485 QMS certification, EU Declaration of Conformity, technical documentation, and registration in EUDAMED. Class I devices require self-declaration and EU registration.

What is the difference between 510(k) and PMA?

510(k) is for Class II devices demonstrating substantial equivalence to a legally marketed predicate (no clinical trial usually required). PMA is for Class III devices requiring full clinical evidence and scientific review - the most rigorous US pathway.

How long does CE certification take under MDR?

Typically 12-24 months for Class IIa/IIb devices including notified body audit and technical documentation review; Class I devices take 6-12 months. Notified body capacity is limited, so booking early is critical.

Is ISO 13485 required for FDA compliance?

Under the 2024 QMSR update, FDA recognized ISO 13485 as the basis of 21 CFR Part 820 requirements. A single QMS built on ISO 13485 can satisfy both FDA and EU requirements.