According to European Union Medical Device Regulation (EU MDR) the term “Vigilance” is the identification, reporting and trending of serious incidents and the conduct of safety-related corrective actions (Market surveillance and vigilance).
An ‘incident’ as per article 2(64) MDR is any malfunction or deterioration in the characteristics or performance of a device made available on the market, including use-error due to ergonomic features, as well as any inadequacy in the information supplied by the manufacturer and any undesirable side-effect.
A ‘serious incident’ as per Article 2(65) MDR is an incident as outlined in Article 2(64) MDR that has in addition, either led to or has the potential to lead to significant health or public health outcomes.
In essence, serious incidents refer to a particular category of incidents that have caused, have the potential to cause, or may cause death or severe harm to a patient, user, or any other person.
These incidents can also pose a significant threat to public health. As per Article 87(1) to (5) of the MDR, it is the responsibility of the manufacturer to report such serious incidents to the appropriate regulatory authority.
Any incident which meets all three basic reporting criteriaA to C listed below is considered a serious incident and must be reported to the relevant competent authority:
An incident has occurred
Examples:
A malfunction or deterioration in the characteristics or performance of the device, e.g. a device that fails or is losing its ability to achieve its intended purpose when used as indicated in the information supplied by the manufacturer
A deterioration in the characteristics of the device that is related to manufacturing errors, e.g. sterilization process failures
A use error due to ergonomic features, e.g. a use error caused by a mismatch between the user interface and the physical or medical condition of the intended user
Any inadequacy in the information supplied by the manufacturer, e.g. insufficient information on how to maintain, adjust or calibrate the device in the instructions for use
Unclear instructions in the labelling or the manufacturer’s instructions for use
Undesirable side-effects e.g. allergic skin reactions such as allergy to nickel or wound therapies
Incident directly or indirectly led, might have led or might lead to any of the outcomes of a serious incident such as death of a patient, user or other person; temporary or permanent serious deterioration of a patient’s, user’s or other person’s state of health; or a serious public health threat. Read more on the concept of vigilance in EU MDR on our website.
Examples of serious public health threats:
Contagious illnesses, such as HIV, Ebola, Zika virus, SARS and COVID-19
Events involving high risk of exposure to a disease (e.g., cancer) after use of a medical device, which affects a specific patient population (diabetics, cardiac patients, etc.) or a vulnerable population (children, pregnant women, etc.)
Exposure to toxic compounds with a potentially negative/harmful effect on humans
Widespread distribution of falsified or incorrectly labelled devices leading to multiple serious incidents, e.g. distribution of non-sterile devices labelled as sterile
Cyberattack related to life supporting or life-saving devices
Causal relationship between the serious incident and the manufacturer’s device has been established or is reasonably possible or suspected.
User, Use error and Abnormal use of a medical device
According to Article 2(37) of the MDR, a “User” refers to any healthcare institution, healthcare professional, or lay person (such as a caregiver or patient) who uses a device, as well as those who install or maintain the device. The term “operator” may also be used to refer to the user of a device.
A “use error” occurs when the actions or inactions of the user while using the device result in a different outcome than intended by the manufacturer or expected by the user.
This can be due to various reasons such as lack of attention, memory lapses, mistakes during device use, or insufficient knowledge or understanding of device use.
Such use errors are not considered incidents, but if they are caused by ergonomic features of a device, they are considered incidents and must be reported under Article 87(1) of the MDR in case of serious incidents.
“Abnormal use” refers to the intentional violation of the intended use of a device. This may involve deliberate acts or omissions that deviate from the normal use of the device and cannot be controlled by the manufacturer.
For example, when a doctor uses a device for an indication that is not specified in the manufacturer’s instructions for use.
“Use-error due to ergonomic features” refers to use errors caused by the physical features of a device that are designed to ensure safe, effective, and efficient interaction between the user and the device.
These errors may occur when there is a mismatch between the device features and the user profile or the environment in which the device is used.
Ergonomic features can be described as the physical features of a device that are designed to facilitate and ensure that the interaction between the user and the device is safe, effective and efficient.
Ergonomic features include components such as measurement and monitoring features, display scales, alarms, software menus, and other factors related to the user interface.
Reporting under MDR
The MDR mandates that the timeline for reporting serious incidents should be based on the severity of the incident. These reporting periods are counted as calendar days.
Typically, the reporting period begins the day after the manufacturer becomes aware of a potentially serious incident. The awareness date, which is considered day 0, is when the manufacturer first receives information about the incident, not after any investigation has been conducted.
The manufacturer’s awareness date is determined as the day when any employee or representative of the manufacturer’s organization first receives information, such as a complaint, about the potentially serious incident.
This can be illustrated with an example:
On June 1, 2022, a manufacturer receives a complaint but decides that it does not meet the criteria for a serious incident, so they do not submit a Manufacturer Incident Report (MIR) to the relevant authority.
However, on July 1, 2022, the manufacturer receives more information and reviews it, and now determines that the complaint is indeed a serious incident. The manufacturer must thus submit a MIR no later than July 16, 2022.
In the MIR, the manufacturer should provide the relevant dates in the following two fields:
‘Manufacturer awareness date’ – in this field, the initial awareness date of the incident should be inserted by the manufacturer.
‘General comments’ – in this field, the manufacturer should insert the date in which it received the information that determined that the incident is reportable
A ‘field safety corrective action (FSCA)’ is a corrective action taken by a manufacturer for technical or medical reasons to either prevent or reduce the risk of a serious incident, which is associated with a device that is made available on the market.
A Field Safety Corrective Action (FSCA) can involve various actions such as returning the device to the supplier or recalling it, exchanging the device, modifying it, retrofitting it with the manufacturer’s modification or design change, destroying it, giving advice on the device’s use, recommending inspections/examinations of the device by the user, making changes to the device’s software/firmware, and updating the device’s version (for example, rolling it back to an earlier version).
Example of an FSCA conducted by a manufacturer:
As a part of monitoring their products after they have been released to the market, the manufacturer has found a consistent issue with one of their devices.
If this issue could result in a serious problem and the affected devices are still being sold, the manufacturer is required to initiate a FSCA (Field Safety Corrective Action) to prevent or minimize the risk of such incidents.
This FSCA may involve making permanent or temporary changes to the device’s labeling or instructions for use, or recalling all of the affected devices from the market. The manufacturer must promptly inform the relevant authorities in the Member States where the FSCA is being carried out.
Vigilance Reporting in Eudamed
Eudamed is a recently established database by the European Union for medical devices, designed to gather all necessary information about devices that have been made available in the Union market.
The details of the database can be found in Article 33 MDR, while the rules regarding vigilance are described in Article 92 MDR. The Medical Device Coordination Group (MDCG) guidance provides suggestions on temporary measures that can be used to comply with certain MDR requirements related to Eudamed and information sharing.
These alternatives enable Member States and other stakeholders to fulfill their obligations under the MDR until the complete operation of the database.
Periodic Summary Report
A “Periodic summary report” (PSR) is another way for manufacturers to report serious incidents involving the same device or device type in a consolidated manner.
This reporting method is used when the manufacturer agrees with the relevant national competent authority that coordinates periodic summary reporting.
The PSR is based on certain criteria, which includes situations where the root cause of the incidents has been determined, a Field Safety Corrective Action (FSCA) has been implemented, or where the serious incidents are commonly known and documented.
A ‘common and well documented serious incident’ as referenced in Article 87(9) MDR, must be clearly identified in the manufacturer’s risk analysis and should have led to incident reports, which have been assessed by the manufacturer and the relevant competent authority.
FAQs
Who is responsible for vigilance activities related to medical devices?
The manufacturer of a medical device is responsible for vigilance activities related to that device. This includes monitoring the device’s performance, investigating any incidents or complaints related to the device, and reporting any adverse events to the relevant authorities.
What is a trend report?
A trend report is a summary of adverse event data related to a particular medical device or group of devices. It is used to identify patterns or trends in adverse events and to assess the potential risks associated with the device.
What are the basic reporting criteria for a serious incident?
· An incident (Article 2(64) MDR) has occurred · The incident directly or indirectly led, might have led or might lead to any of the outcomes of a serious incident (Article 2(65) MDR) · A causal relationship between the serious incident and the manufacturer’s device has been established, is reasonably possible or suspected
A general device description, including any information on any planned variants
Design drawings, details on the planned method of manufacture, diagram of components, sub-assemblies, circuits etc
Descriptions and explanations are required to understand the abovementioned drawings and diagrams and the operations of the product
Results of risk analysis and a list of standards that are applied in full or part (Standards are referred to in Article 5 MDD)
Description of the solutions adopted to meet the essential requirements of the Directive if standards have not been applied fully. (Standards are referred to in Article 5 MDD)
Sterility information, description, and methods of use of sterile products
Results of design calculations and inspections carried out
If the device is to be connected to other device(s) to operate as intended, then there must be proof provided to indicate that it conforms to the essential requirements when connected to any such device(s) having characteristics specified by the manufacturer
Test Reports
Clinical Reports wherever applicable and Clinical data as per Annex X of MDD
Label and Instructions for use
MDR
All Technical documentation requirements of MDD must be presented for the MDR alongside the below additional list:
Device Description and Specifications
Basic UDI-DI
the intended patient population and medical conditions to be diagnosed
contra-indications and warnings
principles of operation of the device and its mode of action
the rationale for the qualification of the product as a device
the risk class of the device and the justification for the classification rule(s) applied
an explanation of any novel features
A description of the accessories for a device, other devices and other products that are not devices intended to be used in combination with it.
a description or complete list of the various configurations/variants of the device
a general description of the key functional elements, e.g., its parts/components
a description of the raw materials incorporated into key functional elements and those making either direct contact with the human body or indirect contact with the body
Technical specifications
Reference to previous and similar generations of the device
Information to be supplied by the manufacturer
A complete set of labels or labels on the device and on its packaging
The instructions for use in the languages accepted in the country of sale
Design and Manufacturing Information
information to allow the design stages applied to the device to be understood
complete information and specifications, including the manufacturing processes and their validation, their adjuvants, the continuous monitoring and the final product testing
identification of all sites, including suppliers, sub-contractors and manufacturing sites.
General Safety and Performance Requirements
The general safety and performance requirements that apply to the device and an explanation as to why others do not apply
The method or methods used to demonstrate conformity with each applicable general safety and performance requirement
the harmonised standards, CS or other solutions applied
the precise identity of the controlled documents offering evidence of conformity with each harmonised standard, CS or other method applied to demonstrate conformity
Benefit-Risk Analysis and Risk Management
The benefit-risk analysis, the solutions adopted, and the results of the risk management
Product Verification and Validation
The documentation shall contain the results and critical analyses of all verifications and validation tests and/or studies undertaken to demonstrate the conformity of the device with the requirements of this Regulation.
Pre-Clinical and Clinical data
Results of tests
If applicable: biocompatibility report, physical, chemical and microbiological characterisation, electrical safety and electromagnetic compatibility, software verification and validation,
stability, including shelf life,
performance and safety
Where applicable, conformity with the provisions of Directive 2004/10/EC of the European Parliament and of the Council (1) shall be demonstrated
Where no new testing has been undertaken, the documentation shall incorporate a rationale for that decision
the clinical evaluation report and its updates and the clinical evaluation plan
the PMCF plan and PMCF evaluation report, and if not applicable, justification of why a PMCF is not applicable
Additional information required in specific cases
Data of the tests conducted to assess safety, quality and usefulness on:
Medicinal product used
Medicinal products derived from human blood or human plasma
Tissues or cells of human or animal origin or their derivatives
Substances or combinations of substances that are intended to be introduced into the human body and that are absorbed by or locally dispersed in the human body
CMR (carcinogenic, mutagenic, or toxic for reproduction) substances
Endocrine-disrupting substances
A description of:
Sterility or defined microbiological condition to be maintained
Methods used in devices with measuring functions to ensure the accuracy as given in the specifications.
Combination/configuration of devices connected to other devices (s) to operate as intended, including proof that it conforms to the general safety and performance requirements when connected to any such device(s) having regard to the characteristics specified by the manufacturer
Post Market Surveillance
Post-market surveillance plan drawn up in accordance with Article 84
Post Market surveillance plan shall address:
Information concerning serious incidents, including information from PSURs, and field safety corrective actions
Records referring to non-serious incidents and data on any undesirable side-effects
Information from trend reporting
Relevant specialist or technical literature, databases and/or registers
Information, including feedback and complaints, provided by users, distributors and importers
Publicly available information about similar medical devices
The post-market surveillance plan shall cover at least:
A proactive and systematic process to collect any information
Effective and appropriate methods and processes to assess the collected data
Suitable indicators and threshold values shall be used in the continuous reassessment of the benefit-risk analysis and the risk management
Effective and appropriate methods and tools to investigate complaints and analyse market-related experience collected in the field
Methods and protocols to manage the events subject to the trend report
Methods and protocols to communicate effectively with competent authorities, notified bodies, economic operators, and users
Reference to procedures to fulfil the manufacturer’s obligations
Systematic procedures to identify and initiate appropriate measures, including corrective actions
Effective tools to trace and identify devices for which corrective actions might be necessary
A PMCF plan, or a justification as to why a PMCF is not applicable
The PSUR referred to in Article 86 and the post-market surveillance report referred to in Article 85
Disclaimer: Regulations/legislations are subjected to changes from time to time and the author claims no responsibility for the accuracy of information.
Under EU MDR 2017/245 Article 73, the sponsor shall report to all member states about the clinical investigations undertaken by the medical devices through an electronic system in case of any serious adverse events, device deficiency which leads to adverse events or any novel findings with regards to the event.
The submission period may vary depending on the severity of the events. An initial incomplete report followed by the complete report shall be provided.
The reporting procedures are applicable for both Pre-market clinical investigations and Post-market clinical follow-up. Pre-market Clinical Investigation is conducted for non-CE marked medical devices, CE Marked devices outside the intended use as per Articles 62 and 74(2).
From 26th May 2021, a new template shall be used for reporting clinical investigation, which must be filled or updated with all adverse events, or any novel findings or occurrences reported.
This report must be communicated to all National competent authorities. As per Article 34(3), the transition of reports will be made available on EUDAMED when it is completely available and fully functional. The overview of the table format to be used by the sponsor is given below.
Types of clinical investigation:
As per Article 80(2,3), the clinical investigation may be used for the investigational device for the conformity procedure.
As per Article 80(5,6), the PMCF investigation in case of serious events or invasive procedures
Other clinical investigations regarding National Legislation for Safety reporting
In addition to the above-mentioned clinical investigations, there are some exceptions other than the serious adverse events in the causal relationship between the event and the preceding investigational procedure like
Other relationships unrelated to the preceding investigational procedures need not be reported.
Few events in the relationship between the procedure or the device, as stated in IFU, shall be taken in context with the vigilance as per Article 87-90
A procedure mandated by the Clinical Investigation Plan that occurred prior to (or at the same time as) the major adverse event is referred to as a “preceding investigational procedure.”
Both the investigational device application process and any additional onerous or intrusive procedure(s) determine whether the study is subject to notification requirements under MDR article 74.
Reporting Events to other Member States/ Third party countries
The sponsors shall report all the clinical investigations to those Member states. In the case of many Clinical investigations conducted for the same device, the specific CIP code (Clinical Investigation Plan Code) is to be reported to the specific Member state.
Reports from Third party countries shall be received through the National Competent Authorities as soon as the clinical investigation is authorized, and all other events occurring in third-party countries need to be reported.
Reported by whom? To Whom and When?
The sponsor of the clinical trial, the manufacturer, the legal agent, or another person or entity, must disclose any reportable events to the National Competent Authorities (NCA).
On the Commission’s website, a list of the phone number of these operational NCAs is published. Member states may also require a supplemental report to the ethics committee(s).
Regarding reporting timelines, investigators must inform sponsors as soon as possible and no later than three days after the investigation site study employees become aware of the incident.
The sponsor must adhere to the following reporting timelines based on the type of clinical study and the severity of the adverse event.
Timeline for reporting events
The Investigator’s Brochure, the Clinical Investigation Plan, or the Risk Analysis Report should be consulted during the causality assessment process.
All foreseeably serious adverse events and potential risks need to be listed and evaluated during the clinical investigation. MDCG 2020-10/1 provides clear guidance on harmonizing reports, where the serious adverse events are further classified into the following four levels of causality (investigational device, comparator, procedure):
Not related: No relationship to the events related to the investigational device, an event that does not affect the device procedure, the serious adverse event that does not follow any known pattern but is related to other causes like concurrent illness, clinical condition or other risk factors
Possible: The relationship between investigational procedures, devices, or comparator is tenuous but cannot be excluded. Alternative explanations, such as an underlying or concurrent sickness, clinical condition, or course of therapy, are also conceivable. Cases where the relationship cannot be determined or where no information is known should also be categorized as possible.
Probable: The association with the application of the investigational device, comparator, or procedures appears pertinent, and/or another cause cannot adequately explain the incident.
Causal relationship: The serious adverse event associated with an investigational device, comparator, or procedure when the event has known side effects which involve a body site or organ or if the event follows a responsive pattern or other possible causes that can cause harm to the subject.
The investigator must identify the relationship between the serious adverse event and the procedure, as they can be related to each other, or they can be related only to the procedure or device itself.
The health care provider can carry out the above procedure as they manage or handle the medical devices.
The reporting form is study-specific and only applies to a particular clinical investigation as identified by a specific clinical investigation plan. The reporting form should be completed in English.
The report file must be compatible with Microsoft Excel before being delivered to the NCAs.
What is a clinical investigational plan for medical devices?
A clinical investigational plan is a document that states the objectives, design, procedure, monitoring and method of recording the clinical investigation for the medical devices. The ability to attain the intended purpose of the medical devices, as claimed by the manufacturer, is called clinical performance.
What is a clinical safety report?
All the data related to the safety information on adverse events, serious adverse events, and other risk factors of the medical devices in the user facility must be recorded into a form which is termed a clinical safety form/report. This report gives awareness to everyone in the workplace.
Why is safety reporting important in clinical trials?
To ensure the safety and quality of the clinical trials conducted by the investigator. These safety reports must be submitted to the respective NCAs through the sponsors during the entire lifecycle of the product trial.
A medical device’s intended use and inherent risks must be considered when determining its MDR classification. Class I devices pose less risk to patients and end users, as under the previous MDD. The new Regulation EU MDR 2017/745 has added extended rules, leading some devices to fall under Class IIa, IIb, or even III.
This document is intended to guide Class I medical device manufacturers (excluding custom-made devices) that sell products bearing their name or trademark on the Union market to comply with MDR requirements. This guidance should also apply when an importer, distributor, or any other legal entity takes on the obligations owed by manufacturers.
The class I manufacturer must also hire a Notified Body (NB) to perform a conformity evaluation if medical devices are to be provided sterile, have measuring functions, or are reusable surgical instruments. For the NB to be qualified to conduct such a conformity assessment, the specific medical device in question must come within the purview of the Notified Body’s designation.
Large and mid-sized medical device manufacturers must also properly designate at least one individual in charge of regulatory compliance, but micro and small companies can function better by having a regulatory expert.
It is also important to designate an authorised representative residing within the EU if the manufacturer is registered outside of the EU. A foreign manufacturer must specifically issue a mandate outlining the representative’s duties and authority. It is also crucial to note that not all responsibilities associated with the medical equipment can be assigned.
The manufacturer must adequately preserve all the records required to verify compliance with the relevant requirements so they may be made available to the regulatory body upon request.
Steps to placing Class I medical devices on the market:
Manufacturers must ensure compliance with each of the following requirements if they plan to commercialise Class I medical devices. Please be aware that some of the outlined requirements are interconnected and can be completed in a different sequence than that which is shown.
The manufacturer will carry out a gap analysis for Class I devices that have already been released onto the market in compliance with the MDD to ensure that all of the below-listed requirements were satisfied at the time the MDR was applied.
The whole procedure includes a set of mandatory steps, including:
Step 0: Integrate MDR in the Quality Management System (QMS)
The manufacturer’s QMS should be appropriately linked with the standards outlined in the MDR. To ensure compliance with the following requirements, this will enable the correct assessment or decision to be taken and the appropriate documented evidence to be produced.
Step 1: Confirm product as a medical device
The intended purpose and the product’s mode of action are reviewed as per Article 2(1) of the MDR to ensure that the product qualifies as a medical device. If a product is assigned multiple intended purposes, it will qualify as a medical device only if all the intended purposes are covered in Article 2(1).
In the case of products identified as more than one category, the relevant legislation requirements will have to be followed. Despite not being medical devices in and of themselves, accessories to medical devices are subject to MDR regulations and qualify as devices under the MDR definition.
However, the MDR does not include accessories to devices covered by it as per Annex XVI of the MDR.
Step 2: Confirm product as a Class I medical device
The product has to be confirmed if it can be classified as a class I device as per Annex VIII of the MDR. Products previously classified as class I under MDD should be reviewed according to the classification rules of MDR to confirm if reclassification is required.
The MDD guideline cannot be used for devices that were moved from Class I to higher risk classes by the adoption of the MDR. The intended use of the device and any inherent risks related to the period of use, the part of the body, whether it is active or not, and whether it is invasive or non-invasive will determine how the classification standards are applied.
The classification rule with the highest class should be applied if the device in question falls under the purview of more than one classification rule due to its attributes.
Step 3: Procedures before placing on the market
a) Meet the General Safety and Performance Requirements (GSPR)
The devices will adhere to the general safety and performance standards outlined in Annex I of the MDR, considering the intended purposes that their manufacturers had provided.
The Risk management system is a continuous iterative process throughout the entire lifecycle of the product, established by the manufacturer that will enable the identification and analysis of the risks related to each device, the estimation and assessment of the risks associated with those risks, the elimination or control of residual risks, and the evaluation of the adopted measures based on the data gathered from the PMS system.
When a harmonised standard is in place, but a manufacturer chooses to use another reference, implementing that reference should, at the very least, ensure the same level of performance and safety.
Compliance with the relevant harmonised standards will give rise to a presumption that the MDR’s requirements, or portions of them, are also complied with.
If there are available standard specifications, the manufacturer must adhere to them unless they can adequately demonstrate that they have chosen a solution at least as effective and safe. The clinical evaluation processes, risk management, and PMS must be interdependent and updated regularly.
b) Conduct clinical evaluation
As part of the MDR’s technical documentation requirements, all devices—regardless of risk classification—require a clinical evaluation. The level of clinical evidence required to show compliance with the pertinent general safety and performance requirements listed in Annex I, which is obtained by considering the characteristics of the device and its intended purpose, shall be specified, and justified by the manufacturer.
Manufacturers must prepare, carry out, and record a clinical evaluation in compliance with Article 61 and Part A of Annex XIV to accomplish this.
Conformity to Annex I requirements can only be assumed when the following items are aligned with each other.
Consideration of available alternative treatment options, the incorporation of clinical data and the acceptability of the benefit-risk ratio are required for carrying out a clinical evaluation.
Additional clinical data will be acquired or developed by clinical investigations if the currently available clinical data are insufficient to establish compliance with the MDR.
If the clinical data currently available for a device that is currently certified under Directive 93/42/EC is insufficient to show compliance with MDR, then post-market clinical follow-up studies of the device may be used to gather more clinical data.
Even data from the general post-market follow-up may occasionally be enough to close the difference.
a) Prepare technical documentation
The manufacturer is responsible for creating and maintaining the technical documentation to prove that their products adhere to the MDR’s technical specifications. Under Annex II and III, this technical documentation must be prepared before the EU declaration of compliance is drawn.
The manufacturer will develop and provide the technical documentation and, if applicable, it’s summary in a way that is unambiguous, clear, well-organised, and easy to search.
The manufacturer shall provide the CA, the authorised representative (where applicable), and NB with access to the technical documents (when applicable).
After reviewing the general safety and performance standards, as well as the pertinent technical provisions of the MDR, the technical documentation will be developed.
b) Request Notified Body involvement
Class I devices do not require the engagement of an NB for MDR compliance. But the manufacturer must follow the guidelines outlined in Chapters I and III of Annex IX or Part A of Annex XI of MDR when the product is a sterile equipment, measuring instrument, or reusable surgical tools.
For the relevant codes and corresponding types of devices as established by Regulation (EU) 2017/2185, manufacturers may select any NB designated in accordance with the MDR.
c) Prepare Instructions for Use and Labelling
Any safety and performance information required for a device’s safe usage and identification of the device should be provided along with the device by the manufacturer and/or the authorised representative, considering the possible users’ training and knowledge.
This data is included on the label, in the device packing, and in the instructions for use. Class I devices do not need instructions for use if they may be operated effectively and securely without them, deviating from the general rule.
Since Class Ir devices will need instructions for reprocessing (cleaning and sterilisation), an exception is most likely proposed.
Labelling and instructions for use must be written in accordance with national language regulations. There will be versions of the labelling and IFU in the technical documentation (in each pertinent national language).
The requirements regarding the information to be supplied with the device will be found in Annex I, Chapter III (23).
Step 4: Check compliance with general obligations for manufacturers
The manufacturer shall ensure that the general obligations for manufacturers outlined in Article 10 are met before releasing a device for sale.
Implementing a suitable QMS that will most effectively assure compliance with the MDR, such as through an internal audit, will receive special consideration. The QMS shall be documented, applied, maintained, updated regularly, and developed continuously, and it will at least include the following elements:
A strategy for regulatory compliance
Identification of applicable general safety and performance requirements and exploration of options to address those requirements
Responsibility of the management
Resource management, including selection and control of suppliers and sub-contractors
Risk management
Clinical evaluation, including post-market clinical follow-up (PMCF)
Product realisation, including planning, design, development, production and service provision
Verification of the UDI assignments
Setting up, implementation and maintenance of a post-market surveillance system
Handling communication with competent authorities, notified bodies, other economic operators, customers and/or other stakeholders
Processes for reporting serious incidents and field safety corrective actions in the context of vigilance
Management of corrective and preventive actions and verification of their effectiveness
Processes for monitoring and measurement of output, data analysis and product improvement.
According to applicable Union and national law, either natural or legal persons may seek compensation for harm brought on by a defective equipment.
In order to protect themselves against potential responsibility under Directive 85/374/EEC, manufacturers must take precautions that are commensurate to the risk class, type of device, and size of the business. These steps must not compromise further protective measures under national legislation.
Step 5: Draw-up the EU Declaration of Conformity
The process by which the manufacturer, who complies with the standards established by Article 52(7), certifies that the devices in question comply with the requirements of the MDR that apply to them is referred to in Article 19 as the EU declaration of conformity.
The CA will have access to the declaration of compliance, which must include, at a minimum, all of the data referred to in Annex IV. The manufacturer will regularly update the EU declaration of conformity and translate it into the official language(s) required by the Member States where the product is sold.
Suppose a device is subject to additional Union laws in addition to the MDR that also call for an EU declaration of conformity. In that case, the manufacturers will create a single EU declaration of conformity that refers to all applicable Union laws.
By creating the EU declaration of conformity, the manufacturer accepts liability for the device’s regulatory compliance with all relevant Union legislation.
For class Ir, Im, and Is devices, the manufacturer must obtain an EC certificate from NB per Annex IX, Chapters I and III, or Annex XI, Part A before applying a CE mark.
Step 6: Affix the CE marking
All Class I medical devices on the market must display the CE conformity label, which must be visible, readable, and permanent. It may be applied to the item or its sterile packaging. The CE marking must be applied to the package in cases where such affixing is impossible or unwarranted due to the nature of the device. The CE certification must be visible on all sales packaging and the instructions for use.
Placing the CE mark on a medical device signifies that it complies with all applicable safety and performance standards and is approved for marketing in the EU. The CE marking will be accompanied by the identification number of the relevant NB in the case of Class I medical devices placed on the market in a sterile condition, devices with measurement functions, and/or reusable surgical tools.
Affixing marks that could lead third parties astray about the significance of the CE marking is banned. Other extra markings may be applied to the product, the packaging, or the usage instructions, but they must not obscure or obstruct the CE marking.
The CE marking format will follow Annex V requirements. The minimum dimensions required for the CE mark may not apply to very small devices.
Step 7: Registration of devices and manufacturers in Eudamed
A streamlined approach might be used for medical devices that were previously put on the market per the Directives, provided that the manufacturer evaluates the gap and ensures that all regulations are properly followed.
A Class I medical device manufacturer must register the product with Eudamed before putting it on the market. Suppose the information listed in Section 1 of Part A of Annex VI has not already been registered in accordance with Article 31. In that case, the manufacturer must submit it to the electronic system in order to register the device. The information referred to in Section 1 of Part A of Annex VI will be given to that electronic system before applying to the NB in situations where the conformity assessment method necessitates the engagement of an NB in accordance with Article 52.
Following the CA’s validation of the manufacturer’s data in Eudamed, the manufacturer will receive an SRN from the aforementioned electronic system. To fulfil its duties under Article 29, the manufacturer will use the SRN when submitting an application to an NB for a conformity assessment and to gain access to Eudamed.
The registration of a device in Eudamed by the manufacturer includes:
Assigning a UDI-DI (with a Basic UDI-DI) as described in Part C of Annex VI to the device in accordance with the issuing entity’s policies mentioned in Article 27(2) and adding the UDI-DI (with a Basic UDI-DI) to the UDI database along with the other core data elements pertaining to that device mentioned in Part B of Annex VI.
Entering the data referred to in Section 2 of Part A of Annex VI, excluding Section 2.2 thereof, or, if previously provided, validating the data, and then keeping the data current up to date.
This document summarises the information presented above and outlines how Class I medical devices should be introduced to the EU market. The guidance’s scope also includes reusable surgical instruments (Class Ir), sterile medical devices (Class Is), and devices with measurement capabilities. These medical devices all need a Notified Body to be involved in pre-marketing procedures.
Legacy Devices are the medical devices covered by a valid Directive certificate under Directive 93/42/EEC or Directive 90/385/EEC and continue to be placed on the market after the date of application of Regulation (EU) 2017/745 (MDR).
Those devices should be registered under EUDAMED without Basic UDI-DI and a UDI-DI within 18 months after the application is placed or 24 months if the EUDAMED is not fully functional before the date of application.
This registration is mandatory for the manufacturer in case of any serious incidents and if any field safety actions have been taken, at least before the final vigilance report is submitted.
As per MDR device requirements, any medical device registered under EUDAMED will require Basic UDI-DI and UDI-DI, which gets reflected on the database design for future reference.
These legacy devices will need two other unique access keys (UI) to replace basic UDI-DI and UDI-DI to register under EUDAMED. Instead of Basic UDI-DI, the legacy devices will be assigned EUDAMED DI, and instead of UDI-DI, the legacy devices will be assigned EUDAMED ID.
Registration of Legacy Devices
As per the flowchart above,
If the manufacturer already has UDI-DI assigned to the legacy device, then the EUDAMED DI will be automatically generated based on UDI-DI in the standard format, placing the character “B-“ in front of UDI-DI
If the manufacturer does not have an assigned UDI-DI for the legacy device, then they will be assigned both EUDAMED DI and EUDAMED ID
The EUDAMED DI can be completely assigned by the EUDAMED or partially taken from the manufacturer using their DI code. But the EUDAMED ID should be completely generated by the EUDAMED.
The EUDAMED DI will start with the character “B”, whereas the EUDAMED ID will start with the character “D” other than the first character EUDAMED DI and the ID will include the SRN number, a number assigned to the manufacturer and check digit.
In addition, the manufacturer should enter their directive certificate identification, such as NB number, revision number, certificate number, and expiry date.
EUDAMED allows the linking of the regulation device with the legacy devices, if the regulation device is exactly the same as the legacy device, they can have the same UDI-DI.
This link may happen automatically by EUDAMED, or the manufacturer can create a link manually by assigning a legacy device identifier, which should happen at the level of UDI-DI.
FAQ
What is the difference between Basic UDI-DI and a UDI-DI?
Basic UDI-DI is a DI assigned to the level of unit use of the device, which is a primary identifier for the device model/family . It is mentioned in the reference CE certificates and the Declaration of Conformity. In contrast, UDI-DI is a unique numeric or alphanumeric code of each device itself , which is used as an access key for the UDI database.
What is EUDAMED?
EUDAMED is a European Database of Medical devices operated by the European Commission to register relevant information on medical devices and to ensure the medical devices’ safety, traceability, and transparency as per MDR 2017/745.
When can a manufacturer register under EUDAMED?
The manufacturer can register their device information/UDI voluntarily in EUDAMED. Moreover, it is mandatory to register legacy and regulatory devices within 24 months after the Commission publishes that the EUDAMED is completely functional.
The Medical Device Vigilance System’s goal is to lower the risks of using medical equipment and serious incidents while it strives to improve protection for patients, healthcare providers, and other users.
A National Competent Authority Report is one way that adverse occurrences are evaluated and, where necessary, information is shared according to the Medical Devices Directives/Regulations (NCAR).
The implementation of suitable field safety corrective measures aims to prevent the repetition of such events. To facilitate and harmonise the execution of the EU regulations on Medical Devices by manufacturers and competent authorities, general recommendations on vigilance are added to the Medical Devices Regulations.
Manufacturers of medical devices are obligated by law to report adverse incidents and Field Safety Corrective Actions (FSCAs) to EU Competent Authorities in accordance with the European Medical Devices Regulations and the In-Vitro Diagnostic Devices Regulations.
Regulators are frequently perplexed by the “when, what, and to whom” part of EU incident reporting. Companies that disclose incidents incorrectly risk serious repercussions. RA professionals must take the initiative because ignorance is not a valid justification for failing to report problems.
Requirements for Vigilance Reporting According to EU MDR 2017/745
The following events are considered as “reportable events” in accordance with the new EU MDR when they directly involve a medical device:
The event resulted in death or a severe decline of the health of the patient, user, or any other person involved.
Although the specific event had no adverse effects on any individual, it could result in death or a severe decline of the health of the patient, user, or any other individual if it were to occur again. The manufacturer is responsible for determining whether a given occurrence could seriously impact a patient or user; this assessment must be based on risk management and a medical examination of the particular event.
The Timeline For Vigilance Reporting (as per MDR ARTICLE 87)
Events that pose a serious risk to public health must be notified immediately but no later than two days after becoming aware of them.
Events involving the death of a patient, a user, or any other person, or the serious deterioration of their health, must be notified immediately but no later than 10 days after becoming aware of them.
Events that had little or no impact on the patient or user but were likely to result in death or a major decline in health if they happened again must be reported right away but no later than 15 days after becoming aware of them.
When are EU vigilance reports necessary?
In accordance with MEDDEV 2.12/1, an incident report must be made if a device malfunction, decline in device performance, inadequate instructions, or inadequate labelling results in death or serious injury, or if it could result in death or serious deterioration of state of health if it were to occur again.
The incident has to be notified to the member state’s Competent Authority (CA), depending on where it happened.
In Europe, below are the fundamental procedures to report an incident:
The appropriate reporting deadline, which will depend on the severity of the incident, can be found in MEDDEV 2.12/1.
Notify the relevant Competent Authorities of the incident.
Respond to Competent Authorities’ inquiries on the devices implicated, their time on the market, and any design alterations.
Appropriate communication with the Competent Authorities and determine whether a Field Safety Corrective Action (FSCA) and Field Safety Notice (FSN) are required.
Send a Final Incident Report or a FSCA Report to the appropriate authorities.
Include vigilance reports in ISO 13485 or equivalent quality system records and any correspondence with Competent Authorities.
Unless Class 1 self-certified, report any accidents or FSCAs to the respective Notified Body.
Vigilance as per EU MDR compared to the MDD
It was challenging to distinguish between Vigilance and PMS in the Medical Device Directive (MDD).
In the European Union Medical Device Regulation (EU MDR), a distinction is made between “post-market surveillance” (PMS), which is the periodic reconfirmation that the benefits of the device continue to outweigh its risks, and “vigilance,” which is the identification, reporting, and trending of serious incidents and the conduct of safety-related corrective actions.
The 10-day limit for reporting a death or a major health deterioration and the 2-day reporting deadline for serious threats to the public’s health have not changed since the MDD.
The MDD’s 30-day reporting deadline for all other reportable occurrences is replaced by a 15-day reporting deadline for all other major incidents.
When the frequency or seriousness of additional incidents significantly increases, the EU MDR also mandates vigilance reporting. As opposed to the MDD, trend reporting (Article 88) and analysis (Article 89) were already directed by MEDDEV 2.12/1 and had been anticipated by European Competent Authorities and Notified Bodies for some time.
The necessity to submit vigilance reports to the EUDAMED database (Article 92), as opposed to each national Competent Authority, as required under the MDD, is a new requirement in the EU MDR.
The national vigilance reporting methods will continue to be used, though, until the vigilance module of EUDAMED is available.
FAQs
To Whom Should Medical Device-Related Incidents Be Reported?
Medical device-related adverse events must be reported to the relevant national competent authorities where they occurred.
