Requirements Tool
JUMP TO VIGILANCE REQUIREMENTS
Manufacturers are responsible for assessing any incidents that occur with their products on the market and determining if the incidents require reporting to a Competent Authority.
Until EUDAMED (the EU medical device database) is fully functional, manufacturers are responsible for notifying the relevant Competent Authorities directly of serious incidents that occur, and any related Field Safety Corrective Actions (FSCA) taken. Similar notification requirements also exist for the United Kingdom and Switzerland.
Our tool helps you keep track of the contacts for these vigilance notifications, and the general process to report, in 33 markets.
What’s Included in the Vigilance Requirements Tool?
- Provides vigilance contacts for the European Single Market, the United Kingdom (UK) and Switzerland
- Outlines the process to notify each Competent Authority of reportable incidents and FSCAs
- Confirms if there is a public Field Safety Notice (FSN) database available in each market and if so, the link
- Provides helpful links and citations to each Competent Authority (CA) website and any applicable forms
Where to report Serious Incidents & FSCAs
- EU Incidents:
- Manufacturers are responsible for assessing if an incident is considered serious per MDR Article 2(65)/IVDR Article 2(68) and is therefore reportable. Where an incident is determined to be reportable, it must be reported to the Competent Authority (CA) in the market where the incident occurred.
- If there is a question of whether an event is reportable or not, manufacturers should err on the side of reporting
- EU FSCAs:
- For FSCAs, the manufacturer must notify the CAs in all member states where the FSCA is being conducted. This means, all countries where the devices/device lots affected by the FSCA are on the market.
- Further, the Competent Authority in the market where the manufacturer or its Authorized Manufacturer is based must also be informed.
- If an FSCA is being undertaken in a third country, and it affects devices on the market within the European Single Market, it must also be reported to the applicable CAs in these markets.
- MDCG Guidance 2023-3 (Revision 2; January 2025) provides an example of when this would be necessary: “A recall of a device has taken place in a third country due to a malfunction with certain lots. If the lots affected by this recall have also been made available on the Union market, then all relevant competent authorities must be notified of the FSCA.“
- Manufacturers must also communicate the FSCA to device users through a Field Safety Notice (FSN). Many Competent Authorities have public vigilance databases that detail the FSCAs that occur in their markets. Where available, these databases are linked below.
- FSNs must be translated into the official language or languages determined by the Competent Authority in each market. The official languages can be found in our Language Requirement Tool. As FSNs may still be targeted to a layperson end-user, even for professional use devices, many CAs impose similar requirements for both professional use and layperson use devices.
- Switzerland
- Switzerland generally follows the same reporting requirements noted above for the EU. The main difference is for non-Swiss manufacturers. In this case, the Swiss Authorized Representative (CH REP) is responsible for ensuring incidents and FSCAs are reported to Swissmedic. Manufacturers may report directly; however, they must copy the CH REP into communications, at a minimum.
- The Swissmedic vigilance database is linked in the tool.
- United Kingdom
- The MHRA’s new post-market surveillance (PMS) and vigilance reporting regulations took effect on 16 June 2025. Although there are some minor differences, the requirements are generally similar to the EU MDR/IVDR. Documentation, links, and guidance are available on the MHRA webpage Medical devices: post-market surveillance collection. It contains guidance on when an incident may or may not be reportable, links to a Field Safety Notice template, and more.
- From a regulatory standpoint, the UK is made up of two territories: 1) Great Britain (England, Scotland, Wales) is subject to the UK MDR 2002 requirements. 2) Northern Ireland, the fourth UK country, does not, and will not, recognize UKCA Marking. Due to Brexit negotiations, Northern Ireland will continue to be part of the European Single Market and require CE Marking. Therefore, the above PMS and vigilance regulation is only applicable to devices placed on the market in Great Britain.
- Almost all reports must be submitted via the MHRA’s Manufacturer’s Online Reporting Environment (MORE). More information on this is provided in the tool.
- While it can be, it is not required that the UK Responsible Person report vigilance.
- The MHRA vigilance database is linked in the tool.
Vigilance Contacts
The European Commission (EC) maintains a list of vigilance contacts for all the EU-27, Iceland, Liechtenstein, Norway and Turkey. Most Competent Authority websites further specify which of these contacts should be used when emailing vigilance reports, which may not always be all contacts listed on the EC Vigilance contact list.
Our tool includes all the email addresses for vigilance contacts on the EC’s list; plus, we highlight the specific contact that the Competent Authority states should be used for medical device vigilance reporting.
The Switzerland and UK contacts included in the below tool are based on the contacts listed on Swissmedic’s and the MHRA’s respective websites.
EU and Swiss Incident and FSCA Forms
The Manufacturer Incident Report, Field Safety Correction Action Report, and Field Safety Notice Template are available using the links below.
The MHRA forms applicable for Great Britain are embedded in its Manufacturer’s Online Reporting Environment (MORE).
Reporting Timelines for Incidents & FSCAs
| Type | EU, UK, and Switzerland |
|---|---|
| Serious Incidents: | |
| Serious public health threat | No later than 2 calendar days after the manufacturer becomes aware |
| Death or unanticipated serious deterioration in state of health | No later than 10 calendar days after the manufacturer becomes aware |
| All other | No later than 15 calendar days after the manufacturer became aware |
| FSCAs: | |
| All FSCAs | Without undue delay/immediately, defined as without any delay that is intentionally or negligently caused by the manufacturer. NOTE for Great Britain (England, Scotland, Wales) only: If the manufacturer is undertaking FSCA outside Great Britain (excluding Northern Ireland) and the same type of devices are supplied in Great Britain but are not affected, they should notify the MHRA within 3 UK working days of the FSN being circulated. |
Disclaimer
The vigilance requirements provided below are for reference only. Casus Consulting does not take responsibility for the accuracy of this information. Casus Consulting has taken due care in preparing the vigilance requirements tool, but we do not guarantee, nor do we assume legal liability or responsibility for, the accuracy or completeness of the information contained in these materials.
The vigilance requirements are publicly available on each Competent Authority website. Links are provided in the tool and individuals should verify the information as published by the Competent Authority before taking any action. Further, if there is a question on a specific requirement, Casus suggests reaching out to the Competent Authority directly to confirm.
