Medical Device Regulation (MDR) Guide for Buyers

As a professional buyer, mastering the Medical Device Regulation (MDR - EU 2017/745) is essential to ensure patient safety and the compliance of your purchases. This practical guide gives you the keys to navigate its requirements, from CE marking to UDI traceability, and secure your supply chain.

Understanding the Medical Device Regulation (MDR) and its impact

A major strengthening of safety requirements

Regulation (EU) 2017/745 (MDR), applicable since May 26, 2021, has replaced the old directives to drastically strengthen the safety and performance of medical devices in the EU ^[S1]. For you, the buyer, this means greater confidence in the quality and reliability of the products you select.

Key changes and their impact on your purchases

The MDR imposes rigorous surveillance throughout the device's life cycle. For your purchases, this translates into:

• Stronger clinical evidence: Manufacturers must provide more rigorous clinical data to prove the safety and effectiveness of their products, limiting unsubstantiated claims.
• Enhanced post-market surveillance (PMS): Manufacturers are required to actively collect data on the performance of their devices once on the market. As a buyer, you benefit from products whose safety is continuously monitored.
• Total traceability: With the UDI system, each device can be tracked from the factory to the patient, which is crucial in case of recall or incident.

Unlike the centralized system of the American FDA, Europe relies on notified bodies (for risk classes higher than I) that audit manufacturers and validate conformity through CE marking ^[S2]. Your role is to verify that this procedure has been scrupulously followed.

CE marking: a passport to the European market

More than a logo: a declaration of conformity

The CE marking certifies that the manufacturer declares its product compliant with all the requirements of the MDR (Regulation (EU) 2017/745) ^[S8]. It is not a simple quality label, but the essential passport for its commercialization in Europe. For a buyer, it is the first control point, but it must be supplemented by a documentary verification.

How to verify the validity of CE marking?

Rigorous verification goes beyond the mere presence of the logo:

• Examine the labeling and packaging: The CE logo must appear visibly, legibly, and indelibly.
• Demand the EU Declaration of Conformity: This legal document, provided by your distributor, is formal proof of product conformity.
• Check the notified body number: For Class IIa, IIb, and III devices, the CE logo is followed by a 4-digit number identifying the certifying body. Its absence is a critical warning sign.

Do not confuse the MDR with the IVDR (EU 2017/746) regulation, which applies only to in vitro diagnostic medical devices ^[S8].

Classification of medical devices under the MDR: what the buyer needs to know

Four risk classes for four levels of control

The MDR classifies medical devices into four risk categories, from lowest to highest, according to the rules of its Annex VIII ^[S5]:

• Class I: Low risk (e.g., bandages, tongue depressors).
• Class IIa: Moderate risk (e.g., syringes, contact lenses).
• Class IIb: Moderate to high risk (e.g., blood bags, condoms).
• Class III: High risk (e.g., breast implants, hip prostheses).

This classification is based on precise criteria such as the duration of contact with the body or the invasive nature.

Practical implications of classification for the buyer

The risk class of a device determines the level of control and documentation you must require:

• Class I (non-sterile, non-measuring function): The manufacturer can self-certify its conformity. However, the EU Declaration of Conformity remains mandatory.
• Classes IIa, IIb, and III: Evaluation by a notified body is mandatory. You must therefore demand the Declaration of Conformity AND the CE certificate issued by this body. The higher the class, the more rigorous the clinical evidence.

For your bulk purchases, such as wholesale medical consumables, verifying that the classification is correct and that the corresponding documentation is available is a fundamental step in risk management.

Labeling requirements and traceability (UDI, EUDAMED)

The UDI: the identity card of each device

The Unique Device Identification (UDI) is a unique code that ensures perfect traceability of each product, from its manufacture to its final use. This is a major advance of the MDR for patient safety ^[S3].

UDI in practice: what you need to check and record

In practice, integrating UDI into your reception procedures is crucial for:

• Ensuring authenticity: It allows the detection of counterfeits and secures your supply chain.
• Optimizing your inventory: It facilitates precise tracking of batches and expiration dates.
• Acting quickly in case of incident: In case of a recall by an authority like the ANSM ^[S8], the UDI allows immediate identification and isolation of the affected batches.

Ultimately, the European EUDAMED database will centralize this information, increasing transparency for all stakeholders ^[S8]. Integrate UDI verification and recording into your reception processes now.

Key standards and quality management systems (ISO 13485, ISO 14155)

ISO 13485: the pillar of quality management

ISO 13485 defines the international standard for Quality Management Systems (QMS) for medical devices. For most devices, this certification is a prerequisite for obtaining CE marking under the MDR, as it guarantees the robustness of the manufacturer's processes ^[S1].

For the buyer: An ISO 13485 certified supplier demonstrates a commitment to quality and risk management. This is an essential indicator of reliability in your selection.

ISO 14155: the guarantee of clinical ethics

ISO 14155 governs good practices during clinical investigations on human subjects. It ensures that trials are conducted ethically, safely, and scientifically rigorously ^[S7].

For the buyer: This standard assures you that the device's efficacy evidence is based on reliable data, strengthening your confidence in its advertised performance.

Distributors and importers: roles and responsibilities in the conformity chain

An active link in the conformity chain

The MDR gives the distributor an active role in market surveillance, with precise legal obligations ^[S8]. They are no longer just a logistics provider but a control link that must exercise due diligence before marketing a product.

Choosing a competent and rigorous distribution partner is therefore essential to secure your purchases.

Checklist for evaluating your distributor

Use this list to audit the compliance of your suppliers:

• Access to documentation: Can they quickly provide the EU Declaration of Conformity and the CE certificate from the notified body?
• Control procedures: Do they have a process to verify CE marking, labeling compliance, and the presence of UDI upon receipt?
• UDI traceability: Does their system allow recording and tracing the UDIs of delivered devices?
• Storage conditions: Can they guarantee compliance with the storage and transport conditions specified by the manufacturer?
• Vigilance management: Do they have a procedure for managing complaints and collaborating on product recalls with authorities like the ANSM ^[S8]?

Compliance timeline and anticipated regulatory developments

Extended deadlines but vigilance required

Transition periods have been granted to devices certified under the old directives ('legacy devices') to facilitate the transition to the MDR. However, to benefit from this, manufacturers had to have submitted an MDR certification application before May 2024 and have a compliant QMS ^[S1].

Depending on their risk class, the certificates of these devices remain valid until the end of 2027 or the end of 2028 ^[S6].

What does this timeline mean for your supplies?

These transition periods require proactive management of supply risks on your part:

• Anticipate stock shortages: Ask your suppliers about their MDR transition plan. A manufacturer who has not met the May 2024 deadline will no longer be able to sell their products after the expiration of their MDD certificate.
• Verify certificate validity: Ensure that the MDD certificate of a legacy device is still valid and that the manufacturer is actively engaged in the re-certification process.
• Secure your critical products: Discuss with your suppliers the timeframes for placing MDR-compliant versions on the market to avoid any service interruption.

Frequently Asked Questions

What are the main differences between the MDR and the old MDD?

The MDR is stricter than the MDD on several key points: it expands the scope of regulated devices, requires stronger clinical evidence, introduces a traceability system (UDI), strengthens post-market surveillance, and adopts a full product life cycle approach.

How to verify the conformity of a medical device with CE marking?

Start by checking the CE logo on the packaging. Then demand the manufacturer's EU Declaration of Conformity. For risk classes higher than I, the CE logo must be followed by the notified body number. Eventually, the EUDAMED database will facilitate this verification ^[S8].

What are the responsibilities of a medical device distributor?

The distributor must verify that the product bears the CE marking, has a UDI, and is accompanied by the required documentation. They must also ensure adequate storage conditions and cooperate in vigilance actions (traceability, recalls) with manufacturers and authorities ^[S8].

How does the classification of medical devices affect regulatory requirements?

The risk class (I, IIa, IIb, III) dictates the level of regulatory control. The higher the risk, the stricter the requirements for clinical evidence, quality system, and the involvement of a notified body, which is reflected in the technical documentation to be provided ^[S5].

What is UDI and why is it important for traceability?

UDI (Unique Device Identification) is a unique code that allows a device to be tracked from its manufacture to its use. It is crucial for traceability as it facilitates product recalls, post-market surveillance, and the prevention of medical errors ^[S3].

What are the key dates to remember for MDR compliance?

The general application date is May 26, 2021. A key date for legacy devices was May 2024, the deadline for manufacturers to submit their MDR certification application ^[S1]. Existing certificates gradually expire until the end of 2027 or 2028, depending on the risk class ^[S6].