EU Medical Devices Regulation (EU) 2017/745 (MDR)

Brief type: Shared compliance brief (Biomedical flagship record; the EU market-access regime for medical devices) Record ID: biomedical-reg-004 (Biomedical · regulation · license) Issuing body / enforcer: European Commission (regulation); enforcement by EU member-state competent authorities and Notified Bodies; clinical/scientific oversight coordinated via the Medical Device Coordination Group (MDCG) Jurisdiction: European Union / European Economic Area

1. What it is

The MDR is the EU's directly applicable regulation (i.e., it is law in every member state without national transposition) governing medical devices. It replaced the old Medical Device Directive (93/42/EEC) and Active Implantable Medical Device Directive (90/385/EEC) with a far more stringent regime: stronger clinical-evidence requirements, mandatory Notified Body oversight for most device classes, lifecycle post-market surveillance, and a central device database (EUDAMED).

MDR became fully applicable on 26 May 2021. Its transition has been repeatedly extended because Notified Body capacity could not absorb the recertification workload — this history matters because the transition deadlines are still live as of September 2026 and are the dominant compliance calendar item for device firms selling into Europe.

2. Scope and who it applies to

Applies to medical devices as defined in Article 2 — a definition broader than the U.S. one in some respects (it includes certain products without a medical purpose listed in Annex XVI, e.g., certain aesthetic implants).
Covers all risk classes: Class I (including sterile/measuring/reusable subcategories), IIa, IIb, III.
Applies to manufacturers, authorized representatives, importers, and distributors ("economic operators"), each with defined obligations — the MDR is explicit that importers and distributors have their own compliance duties (verification of CE marking, complaint handling, cooperation with authorities).
Triggers: Placing a device on the EU/EEA market or putting it into service. "Placing on the market" is the first making-available; each unit thereafter is "made available."

3. Key requirements and compliance obligations

In plain technical terms, an engineer supporting MDR compliance must understand:

Conformity assessment by class: Class I (non-sterile, non-measuring, non-reusable) can be self-certified with a technical file and EU declaration of conformity. Everything above — Class I sterile/measuring/reusable, IIa, IIb, III — requires a Notified Body (a private conformity-assessment organization designated by a member state) to audit the QMS and assess the technical documentation, issuing an EU certificate and the right to affix the CE mark.
General Safety and Performance Requirements (GSPRs, Annex I): The design-input baseline. Every device must meet applicable GSPRs, demonstrated in the technical documentation.
Clinical evaluation (Article 61, Annex XIV): Continuous, planned, documented clinical evaluation with a Clinical Evaluation Plan and Clinical Evaluation Report. Equivalence claims to other devices are tightly constrained — the manufacturer must have sufficient access to the equivalent device's technical data, which in practice killed many legacy equivalence routes.
Technical documentation (Annexes II–III): Device description, GSPR checklist, benefit-risk analysis, risk management per EN ISO 14971, verification/validation, clinical evaluation, PMS plan.
Post-market surveillance (Article 83+) and vigilance: A PMS system proportionate to risk class, Periodic Safety Update Reports (PSURs) for Class IIa and above (reviewed by the Notified Body for IIb/III), serious-incident reporting to competent authorities, field safety corrective actions.
UDI (Unique Device Identification): Device and packaging marking plus EUDAMED registration; timelines phased by class.
EUDAMED: The EU device database. Modules have been going mandatory module-by-module since 28 May 2026 — actor registration, UDI/device registration, and Notified Body/certificate modules. Engineers should confirm the current mandatory-module list at ec.europa.eu before planning registrations.
QMS: An MDR-compliant QMS (effectively ISO 13485, EN ISO 13485:2016+A11:2021) is required. For legacy-device transition, having it in place by 26 May 2024 was a condition of the extended deadlines.

4. Penalties and consequences of non-compliance

Enforcement is national: each member state's competent authority handles market surveillance, and penalties (fines, product withdrawal, prohibition of marketing) are set by national law — amounts and procedures vary by member state, so cite the specific country's transposition when advising.
Notified Bodies can suspend or withdraw CE certificates on finding nonconformities — which immediately removes market access.
Serious non-compliance triggers field safety corrective actions, recalls, and public safety notices coordinated across member states.
Economic operators face liability exposure under the EU Product Liability Directive framework for defective devices, in addition to regulatory sanctions.

5. Version and transition status — VERIFIED (September 2026)

MDR (EU) 2017/745 entered into force 25 May 2017, date of application 26 May 2021.
Transition extension — Regulation (EU) 2023/607 (verified via MDCG 2021-25 rev.1 and September 2026 industry sources): legacy devices (MDD/AIMDD CE-marked before 26 May 2021) may remain on the market until:
- 31 December 2027 — Class III and implantable Class IIb (except sutures, staples, dental fillings/braces, tooth crowns, screws, wedges, plates, wires, pins, clips, connectors);
- 31 December 2028 — other Class IIb, Class IIa, Class I sterile/measuring, and up-classified devices newly requiring Notified Body involvement.
- Custom-made Class III implantables had a 26 May 2026 deadline (already passed as of this writing — any such device still on legacy status is non-compliant; verify with the competent authority).
Conditions for the extended dates (all must hold): no significant changes to design/intended purpose (MDCG 2020-3 guidance), continued MDD/AIMDD compliance, no unacceptable risk, MDR-compliant QMS in place by 26 May 2024, and a signed written agreement with a Notified Body by 26 September 2024 following a formal application. Miss any condition and the extension is lost.
The old "sell-off" deadline was removed — qualifying legacy devices already on the market can continue to be made available without a fixed stock-clearance date.
EUDAMED mandatory use rolling out module-by-module from 28 May 2026.
Watch item: A European Commission simplification proposal (December 2025) is progressing through the legislative process and could adjust MDR/IVDR obligations. It is not yet law as of September 2026 — do not plan compliance around it; monitor the EC health portal.

From the catalogue (record_type=certification, importance=license/flagship, Biomedical):

RAC-Devices (RAPS) — directly tests MDR conformity-assessment routes, GSPRs, clinical evaluation, and vigilance; the core credential for EU regulatory strategy.
CCE — clinical-engineering relevance for devices in healthcare delivery.
PE — no biomedical PE exam; not MDR-tested.

7. Honest flags

Transition deadlines verified against MDCG 2021-25 rev.1 (Oct 2024), the mavenprofserv/MDlaw transition summaries, and a September 2026 Oxford Global Resources update — consistent across sources.
Penalty specifics are member-state-dependent and deliberately described in general terms here; pull the national statute for the market in question.
EUDAMED mandatory-module status and the EC simplification proposal are moving targets — confirm both before project planning.
Consolidated MDR text: use EUR-Lex CELEX 32017R0745 (the catalogue's stored URL points to an EC explanatory memorandum, not the regulation text).

Original ETS reference writing, verified against public sources on 2026-09-30. Thin sourcing is flagged inline. Not legal advice — confirm current editions with the issuing body.

EU Medical Devices Regulation (EU) 2017/745 (MDR)