CE Marking for Medical Devices: MDR 2017/745 Requirements Explained

Introduction

Medical devices are an essential part of modern healthcare. From simple products such as bandages, thermometers, and surgical instruments to advanced equipment such as pacemakers, ventilators, and diagnostic machines, these devices help healthcare professionals diagnose, monitor, and treat patients.

Since medical devices directly affect human health and safety, they must meet specific regulatory requirements before being introduced into international markets. In Europe, one of the most important regulatory requirements for medical device manufacturers is CE marking under the Medical Device Regulation (EU) 2017/745, commonly known as MDR.

CE Marking for Medical Devices demonstrates that a product meets the applicable European Union requirements for safety, performance, and regulatory compliance. It allows eligible medical devices to be placed on the European market after completing the required conformity assessment procedures.

The MDR framework has introduced stricter requirements for manufacturers, importers, distributors, and other economic operators. These requirements cover everything from product design and clinical evaluation to technical documentation and post-market surveillance.

Understanding these regulations is important for manufacturers planning to enter the European market and maintain long-term compliance.

What Is CE Marking for Medical Devices?

CE marking is a regulatory marking that indicates a product complies with the applicable European Union legislation.

For medical devices, CE marking is governed primarily by Regulation (EU) 2017/745, which establishes requirements for the safety and performance of medical devices placed on the European market.

It is important to understand that CE marking is not simply a quality certificate. It represents the manufacturer's declaration that the medical device meets all applicable legal requirements.

Depending on the device classification and conformity assessment route, a notified body may be required to assess the manufacturer's quality management system and technical documentation.

After successfully completing the applicable conformity assessment, the manufacturer prepares an EU Declaration of Conformity and affixes the CE marking to the device.

Understanding Medical Device Regulation (EU) 2017/745

The Medical Device Regulation (EU) 2017/745 replaced the earlier Medical Devices Directive (93/42/EEC) and Active Implantable Medical Devices Directive (90/385/EEC).

The MDR became applicable on 26 May 2021 and introduced a more comprehensive regulatory framework for medical devices in Europe.

The primary objectives of MDR include:

• Improving patient safety.

• Strengthening medical device performance requirements.

• Increasing transparency in the medical device industry.

• Improving product traceability.

• Strengthening clinical evaluation requirements.

• Improving post-market surveillance.

• Establishing clearer responsibilities for manufacturers and distributors.

One important change introduced by MDR is its focus on the complete lifecycle of medical devices. Manufacturers must demonstrate compliance before placing products on the market and continue monitoring their safety and performance afterward.

Medical Device Classification Under MDR 2017/745

Medical device classification is one of the first steps in obtaining CE marking.

Under Annex VIII of MDR, medical devices are classified according to their intended purpose and potential risks to patients and users.

Factors considered during classification include:

• Duration of device use.

• Whether the device is invasive or non-invasive.

• Whether it is implantable.

• Whether it is an active medical device.

• The body parts or systems affected.

• The intended medical purpose.

There are four main medical device classifications.

1. Class I Medical Devices

Class I devices generally represent the lowest-risk category.

Examples include:

• Non-invasive surgical instruments.

• Medical examination gloves.

• Basic medical dressings.

• Manual wheelchairs.

• Certain non-invasive examination equipment.

Ordinary Class I devices can generally follow a self-declaration conformity assessment route without notified body involvement.

However, certain Class I devices require notified body involvement:

• Class Is: Devices supplied in sterile condition.

• Class Im: Devices with a measuring function.

• Class Ir: Reusable surgical instruments.

2. Class IIa Medical Devices

Class IIa devices are considered medium-risk medical devices and require additional regulatory assessment.

Examples may include:

• Certain hearing aids.

• Dental filling materials.

• Certain infusion equipment.

• Some diagnostic and monitoring devices.

Manufacturers generally need notified body involvement to demonstrate compliance with the applicable MDR requirements.

3. Class IIb Medical Devices

Class IIb devices are associated with a higher level of risk and require more extensive conformity assessment.

Examples may include:

• Certain ventilators.

• Some infusion pumps.

• Certain intensive care monitoring equipment.

• Some long-term surgical devices.

Manufacturers must provide appropriate technical documentation and clinical evidence to demonstrate that the devices meet the applicable safety and performance requirements.

4. Class III Medical Devices

Class III represents the highest-risk category of medical devices.

Examples include:

• Pacemakers.

• Certain implantable devices.

• Heart valves.

• Coronary stents.

• Certain high-risk implants.

These devices are subject to the most demanding regulatory requirements, including extensive clinical evidence and notified body assessment.

Correct classification is essential because it determines the applicable conformity assessment route and documentation requirements.

Key MDR 2017/745 Requirements for CE Marking

To obtain CE marking, manufacturers must demonstrate that their medical devices meet the applicable requirements of MDR.

The following are some of the most important requirements.

1. General Safety and Performance Requirements (GSPR)

Annex I of MDR establishes the General Safety and Performance Requirements (GSPR).

These requirements ensure that medical devices are designed and manufactured to protect patients, users, and other individuals from unacceptable risks.

Manufacturers must demonstrate that their devices:

• Perform according to their intended purpose.

• Do not compromise patient or user safety.

• Have an acceptable benefit-risk profile.

• Meet relevant chemical, physical, and biological safety requirements.

• Include appropriate warnings and instructions.

• Reduce foreseeable risks through suitable design and manufacturing controls.

A GSPR checklist is generally included in the technical documentation to demonstrate how applicable requirements have been fulfilled.

2. Technical Documentation

Technical documentation is an essential part of the MDR conformity assessment process.

Manufacturers must maintain sufficient evidence to demonstrate that their products comply with applicable regulatory requirements.

According to Annexes II and III, technical documentation generally includes:

• Device description and specifications.

• Intended purpose and indications.

• Device classification and classification rationale.

• Design and manufacturing information.

• Risk management documentation.

• GSPR compliance checklist.

• Verification and validation reports.

• Clinical evaluation documentation.

• Product labelling and instructions for use.

• Post-market surveillance documentation.

The documentation must be updated whenever relevant changes occur in the device design, manufacturing process, or regulatory status.

3. Clinical Evaluation

Clinical evaluation is another important requirement under MDR.

Manufacturers must assess clinical data to demonstrate that their devices achieve their intended clinical benefits and meet the applicable safety and performance requirements.

Clinical evaluation may involve:

• Reviewing relevant scientific literature.

• Evaluating clinical investigation results.

• Assessing clinical data from equivalent devices where legally justified.

• Reviewing post-market clinical information.

• Evaluating undesirable side effects.

• Demonstrating an acceptable benefit-risk profile.

The findings are documented in a Clinical Evaluation Report (CER).

For certain devices, additional clinical investigations may be required to generate sufficient clinical evidence.

Clinical evaluation must also be reviewed and updated throughout the device lifecycle.

4. Quality Management System (QMS)

A Quality Management System helps medical device manufacturers maintain consistent product quality and regulatory compliance.

Under MDR, manufacturers must establish, implement, document, and maintain a quality management system appropriate to their devices and activities.

The QMS generally covers:

• Regulatory compliance responsibilities.

• Design and development controls.

• Supplier management.

• Production and process controls.

• Risk management.

• Product testing and verification.

• Corrective and preventive actions.

• Complaint handling.

• Post-market surveillance.

• Documentation control.

ISO 13485 is a widely recognised quality management standard for medical device manufacturers. Although MDR does not universally require a separate ISO 13485 certificate, the standard provides a useful framework for establishing an effective medical device quality management system.

5. Risk Management

Risk management is an essential part of medical device development and regulatory compliance.

Manufacturers must identify, evaluate, control, and monitor potential risks associated with their products.

The risk management process generally includes:

1. Identifying potential hazards.

2. Estimating and evaluating associated risks.

3. Implementing appropriate risk control measures.

4. Assessing residual risks.

5. Evaluating the overall benefit-risk relationship.

6. Monitoring risks throughout the product lifecycle.

ISO 14971 is commonly used as the framework for medical device risk management.

Manufacturers should maintain documented evidence demonstrating how identified risks have been evaluated and controlled.

6. Unique Device Identification (UDI)

The MDR introduced a Unique Device Identification system to improve the identification and traceability of medical devices.

UDI helps identify individual medical devices throughout the supply chain.

It generally includes two components:

UDI-DI (Device Identifier): Identifies the device model or version.

UDI-PI (Production Identifier): Identifies production-related information, such as batch number, serial number, or expiry date, where applicable.

Manufacturers must assign and maintain UDI information according to the applicable MDR requirements and implementation timelines.

7. Post-Market Surveillance (PMS)

Regulatory compliance does not end when a medical device receives CE marking.

Manufacturers must continuously monitor their products after they are placed on the European market.

Post-market surveillance helps identify unexpected performance problems, safety concerns, and other issues that may not have been detected during pre-market assessment.

A PMS system generally includes:

• Collecting customer and user feedback.

• Reviewing product complaints.

• Monitoring adverse incidents.

• Analysing safety and performance trends.

• Updating risk management documentation.

• Implementing corrective actions.

• Preparing required regulatory reports.

Depending on the device classification, manufacturers may also need to prepare a Periodic Safety Update Report (PSUR) or a Post-Market Surveillance Report.

What Is the Role of a Notified Body Under MDR?

A notified body is an independent organisation designated by an EU Member State to perform conformity assessment activities for specific medical device categories under MDR.

Notified bodies play an important role in assessing whether manufacturers meet applicable regulatory requirements.

Their responsibilities may include:

• Reviewing technical documentation.

• Auditing the manufacturer's quality management system.

• Evaluating clinical and safety evidence.

• Assessing manufacturing controls.

• Conducting surveillance audits.

• Reviewing relevant changes to approved devices and systems.

Not every medical device requires notified body involvement.

Ordinary Class I devices can generally follow a self-declaration route if all applicable conditions are fulfilled.

However, notified body involvement is generally required for Class IIa, Class IIb, and Class III devices, as well as relevant special Class I categories.

Manufacturers should verify that their selected notified body has the appropriate designation and scope for the device being assessed.

Step-by-Step Process for CE Marking of Medical Devices

Obtaining CE marking involves several regulatory and technical activities. The exact process depends on the device classification and applicable conformity assessment route.

The general process includes the following steps.

Step 1: Identify the Intended Purpose

The manufacturer must clearly define what the medical device is designed to do, who will use it, and its intended medical purpose.

This information influences device classification, clinical evaluation, and applicable regulatory requirements.

Step 2: Determine Medical Device Classification

The device must be classified according to MDR Annex VIII.

The manufacturer should identify the applicable classification rule and document the reasoning behind the selected classification.

Step 3: Identify Applicable MDR Requirements

The manufacturer must review Annex I and identify the General Safety and Performance Requirements relevant to the product.

A GSPR compliance checklist helps organise the required evidence.

Step 4: Prepare Technical Documentation

Technical documentation must cover device design, manufacturing, risk management, clinical evaluation, verification, validation, and post-market surveillance.

The documentation should be complete, consistent, and suitable for regulatory review.

Step 5: Implement a Quality Management System

An appropriate quality management system must be established and maintained.

For manufacturers requiring notified body assessment, the QMS forms an important part of the conformity assessment process.

Step 6: Conduct Clinical Evaluation

The manufacturer evaluates relevant clinical evidence to establish the safety, performance, and clinical benefits of the device.

Additional clinical investigations may be necessary depending on the device and available evidence.

Step 7: Select the Conformity Assessment Route

The manufacturer selects the applicable conformity assessment procedure according to Article 52 and the relevant MDR annexes.

Where required, an application is submitted to a suitably designated notified body.

Step 8: Complete Conformity Assessment

The notified body evaluates the relevant documentation and quality management arrangements.

It may request additional information, clarification, testing, or corrective actions before completing its assessment.

Step 9: Prepare the EU Declaration of Conformity

After fulfilling all applicable conformity requirements, the manufacturer prepares and signs the EU Declaration of Conformity.

This document formally declares that the medical device complies with the relevant EU legislation.

Step 10: Affix the CE Marking

The CE marking is affixed according to MDR requirements.

Where a notified body has been involved in the applicable conformity assessment procedure, its identification number must accompany the CE marking as required.

The medical device can then be placed on the European market, subject to the remaining applicable obligations.

Documents Required for CE Marking of Medical Devices

The documentation requirements depend on the device classification, intended purpose, and conformity assessment route.

Some commonly required documents include:

1. Device description and specifications.

2. Intended purpose statement.

3. Medical device classification report.

4. General Safety and Performance Requirements checklist.

5. Risk management file.

6. Design and manufacturing information.

7. Clinical Evaluation Report.

8. Verification and validation reports.

9. Biological evaluation, where applicable.

10. Quality Management System documentation.

11. Product labelling and Instructions for Use.

12. Post-Market Surveillance Plan.

13. Post-Market Clinical Follow-up Plan, where applicable.

14. UDI information, where applicable.

15. EU Declaration of Conformity.

Manufacturers should also consider their obligations relating to authorised representatives, importers, distributors, and device registration, depending on their location and role in the supply chain.

Common Challenges in MDR Compliance

Although CE marking provides access to the European medical device market, manufacturers may face several challenges during the compliance process.

Incorrect Device Classification

Applying the wrong classification rule can result in an unsuitable conformity assessment route and regulatory delays.

Incomplete Technical Documentation

Missing test reports, unclear intended purpose statements, or insufficient risk management evidence can create difficulties during regulatory assessment.

Insufficient Clinical Evidence

Manufacturers may find it challenging to demonstrate clinical safety and performance, particularly when dealing with innovative or high-risk medical devices.

Notified Body Availability

Finding a notified body with the appropriate designation and available capacity can affect project timelines.

Changing Regulatory Requirements

Manufacturers must monitor applicable MDR requirements and relevant guidance documents to maintain regulatory compliance.

Post-Market Obligations

Maintaining surveillance systems, handling complaints, reporting incidents, and updating documentation require ongoing resources.

A structured regulatory strategy, early planning, and proper documentation can help manufacturers manage these challenges.

Conclusion

CE marking under MDR 2017/745 is an important regulatory requirement for manufacturers intending to place medical devices on the European market.

The regulation establishes detailed requirements for product safety, clinical performance, technical documentation, risk management, quality management systems, and post-market surveillance.

The process begins with understanding the device's intended purpose and classification. Manufacturers must then demonstrate compliance with applicable General Safety and Performance Requirements, prepare technical documentation, complete clinical evaluation, and follow the appropriate conformity assessment procedure.

Regulatory compliance should not be treated as a one-time activity. Manufacturers must continue monitoring product performance, maintaining documentation, and addressing safety concerns even after CE marking has been obtained.

For manufacturers, importers, and businesses involved in medical device development, understanding Regulation (EU) 2017/745 is essential for planning a successful and compliant entry into the European medical device market. Regulatory guidance from organisations such as TRACC Global can also help businesses understand the documentation and compliance activities involved in this process.

Frequently Asked Questions (FAQs)

1. What is CE marking for medical devices?

CE marking indicates that a medical device complies with the applicable European Union regulatory requirements, including safety and performance requirements under MDR 2017/745. It allows eligible devices to be placed on the European market after completing the required conformity assessment.

2. Is MDR 2017/745 mandatory for medical devices in Europe?

Yes. MDR 2017/745 is the primary regulatory framework for medical devices placed on the EU market, subject to its scope and applicable exemptions. Manufacturers must fulfil relevant requirements before marketing their devices.

3. What are the four medical device classes under MDR?

MDR classifies medical devices into four categories:

• Class I – Low risk.

• Class IIa – Medium risk.

• Class IIb – Medium to high risk.

• Class III – High risk.

Classification depends on the device's intended purpose and the applicable rules in Annex VIII.

4. Is a notified body required for CE marking?

Not every device requires a notified body. Ordinary Class I devices can generally follow a self-declaration conformity assessment route. However, notified body involvement is generally required for Class IIa, IIb, and III devices and certain special Class I devices.

5. What is the difference between MDR and MDD?

MDD (Medical Devices Directive 93/42/EEC) was the earlier European regulatory framework for medical devices. MDR 2017/745 replaced it with more comprehensive requirements covering clinical evidence, device traceability, technical documentation, risk management, and post-market surveillance.

6. How long does it take to obtain CE marking for medical devices?

There is no fixed timeline for all medical devices. The duration depends on device classification, documentation readiness, clinical evidence, testing requirements, and notified body availability. Higher-risk devices generally involve more extensive assessments.

7. What is an EU Declaration of Conformity?

An EU Declaration of Conformity is a legal document prepared and signed by the manufacturer. It declares that the medical device meets the applicable EU regulatory requirements and identifies the relevant legislation and device.

8. Is ISO 13485 mandatory for MDR compliance?

MDR requires manufacturers to establish and maintain an appropriate quality management system. ISO 13485 is a widely recognised standard that supports medical device quality management, but MDR does not universally require a separate ISO 13485 certificate.

9. What is UDI in medical devices?

UDI stands for Unique Device Identification. It is a system used to identify and trace medical devices throughout the supply chain. It includes device identification and production identification information.

10. Can a manufacturer outside Europe obtain CE marking?

Yes. Manufacturers located outside the European Union can obtain CE marking for eligible medical devices. They must fulfil applicable MDR requirements and, where required, appoint an authorised representative established within the EU.