
New UK MHRA Fees Starting April 2023
31 January 2023
Frequently Asked Questions
7 February 2023Page Last Reviewed: 15 January 2026
- What is Market Surveillance?
- What is Post-market Surveillance?
- What is a Post-market Surveillance Plan?
- What is a Post-market Surveillance Report?
- What is the Periodic Safety Update Report (PSUR)?
- What is Post-market Clinical Follow-up (PMCF) / Post-market Performance Follow-up (PMPF)?
- What is Trend Reporting?
- What is Vigilance?
What is Market Surveillance?
Market surveillance is the activity conducted by European Competent Authorities to ensure that medical device safety, quality, performance, and compliance requirements are met.
Market surveillance is defined in MDR article 93 and IVDR article 88, as “appropriate checks on the conformity characteristics and performance of devices including, where appropriate, a review of documentation and physical or laboratory checks on the basis of adequate samples.“
In particular, the competent authority reviews the safety and performance of medical devices and in vitro diagnostic devices (IVDs) against risk assessment and management, vigilance data, and complaints.
The competent authority’s market surveillance program includes:
- Reviewing manufacturer technical documentation
- Carrying out announced or unannounced inspections of economic operators (e.g., manufacturers, importers, distributors, authorized representatives) and suppliers / subcontractors
- Confiscating and destroying falsified or non-compliant devices
- Investigating vigilance and incident reports
- Coordinating activities with other competent authorities
What is Post-market Surveillance?
While market surveillance is conducted by the EU competent authorities, post-market surveillance is the process by which manufacturers ensure the continued safety and performance of a medical device or IVD.
A key starting point for post-market surveillance under the MDR (Article 83) and IVDR (Article 78), is that it should be proactive. i.e., the system should not only passively collect and react to feedback and market information as received; it should additionally actively seek out post-market data.
The resulting analysis of the gathered data should help the manufacturer identify any updates needed to the: device benefit-risk profile, design, manufacturing information, instructions for use & labeling, clinical evaluations, risk management documentation, and/or the summary of safety and clinical performance.
Further, the analysis should be used to help identify the need for any preventive or corrective actions. As well, any options to improve the usability, performance, or safety of the device. Data should also contribute to identifying opportunities to improve other devices, as well as detect and report trends in accordance with articles 88 (MDR) and 83 (IVDR). (More on trend reporting is provided below.)
The post-market surveillance program remains in place throughout the device’s lifetime. This is to ensure it remains compliant while it is on the market. The amount and range of data collected should be directly proportionate to the risk class of the device and its intended use. A sound post-market surveillance system also contemplates any shortcomings in the design and development of the device and makes sure to address them.
What is a Post-market Surveillance Plan?
The post-market surveillance plan is the protocol for the overall post-market surveillance system. It establishes the procedure to follow for all associated post-market surveillance processes.
Post-market surveillance plan requirements are outlined in Annex III of the MDR and IVDR and are similar for medical devices and IVDs.
The post-market surveillance plan should address the collection and utilization of the following:
- Information concerning serious incidents, including information from the Periodic Safety Update Report (PSUR) and field safety corrective actions, if applicable
- Records referring to non-serious incidents and data from any undesirable side-effects
- Information from trend reporting
- Relevant specialist or technical literature, databases and/or registrars
- Information, including feedbacks and complaints, provided by users, distributors and importers
- Publicly available information about similar devices
The plan should also address how it will proactively and systematically collect the above information.
Further, it should:
- Allow a comparison to be made between the device and similar products available on the market
- Include the methods and processes to assess the collected data
- Cover suitable indicators and threshold values to be used in the continuous reassessment of the benefit-risk analysis
- Include methods and tools to:
- Investigate complaints and analyze data collected in the field
- Manage the incidents subject to the trend report, including a protocol to establish any statistically significant increase in the frequency or severity of incidents
- Communicate effectively with Competent Authorities, Notified Bodies, Economic Operators and Users
- Reference procedures to:
- Fulfill obligations around post-market surveillance, the post-market surveillance plan, and the Periodic Safety Update Report (PSUR)
- Identify and initiate appropriate measures including corrective actions
- Include effective tools to trace and identify devices for which corrective actions may be necessary
- Cover the Post-market Clinical Follow-up (MDR) / Post-market Performance Follow-up (IVDR) – or a justification as to why a PMCF/PMPF is not applicable to the device.
The post-market surveillance plans should be established before placing the device on the market and be updated throughout the lifetime of the device as needed.
What is a Post-market Surveillance Report?
A Post-market Surveillance Report is only required for manufacturers of Class I medical devices and Class A and B IVDs.
It is intended to:
- Summarize the results and conclusions made after analyzing the data from the Post-market Surveillance Plan, and
- Provide the rationale and description of any preventative and corrective actions taken.
The post-market surveillance report should be updated when necessary and made available to the competent authority upon request. It is generally recommended to update the post-market surveillance report every three years, whether the competent authority requests to review it or not.
| Table 1: Requirements for PMS reports under the MDR and IVDR | ||||
| Type of device | MDR / IVDR Classification | Type of report | Submission | Updates required |
| Medical Device | Class I | PMS | Upon request | When necessary, best practice is at least every three years |
| IVD | Class A, B | PMS | Upon request | When necessary, best practice is at least every three years |
What is the Periodic Safety Update Report (PSUR)?
A Periodic Safety Update Report (PSUR) is required for manufacturers of Class IIa, IIb, and III medical devices and Class C and D IVDs.
Those manufacturers must generate a robust report that:
- Summarizes the findings and conclusions obtained after executing the post-market surveillance plan, including rationales around, and descriptions of, any preventative and corrective actions taken.
- Conclusions about the benefit-risk profile’s continued acceptability.
- The post-market clinical or performance follow-up findings.
- Volume of sales of the device.
- An evaluation of the size and characteristics of the population using the device and its usage frequency, if practicable.

Periodic Safety Update Report (PSUR) Template
Free. Editable Word Format.
The periodic safety update report should be available upon request from the competent authority or notified body. The exception is for Class III and Class IIa/IIb implantable devices and Class D IVDs, for which the PSUR should be submitted to the notified body.
Manufacturers of Class IIa medical devices and Class C IVDs must update the PSUR when necessary, but at least every two years. In contrast, manufacturers of Class IIb and Class III medical devices and Class D IVDs must update the PSUR at least annually.
| Table 2: Requirements for PSUR under the MDR and IVDR | ||||
| Type of devices | MDR / IVDR Classification | Type of report | Submission | Updates required |
| Medical Device | Class IIa (Non-implantable) | PSUR | Only upon request | At minimum every two years |
| Class IIa (Implantable) | PSUR | To the Notified Body | At minimum every two years | |
| Class IIb (Non-implantable) | PSUR | Only upon request | At minimum every year | |
| Class IIb (Implantable) | PSUR | To the Notified Body | At minimum every year | |
| Class III (all) | PSUR | To the Notified Body | At minimum every year | |
| IVD | Class C | PSUR | Only upon request | At minimum every two years |
| Class D | PSUR | To the Notified Body | At minimum every year | |
What is Post-market Clinical Follow-up (PMCF) / Post-market Performance Follow-up (PMPF)?
Post-market Clinical Follow-up (PMCF) is the continuous process of updating the clinical evaluation of a medical device. The corresponding process for IVDs is Post-market Performance Follow-up (PMPF), which aims to update the performance evaluation. These processes are described in Part B of Annex XIV and Part B of Annex III in the MDR and IVDR, respectively.
For this overview, we will refer to both processes as post-market clinical follow-up (PMCF) as they fulfill a similar purpose.
PMCF is addressed in the post-market surveillance plan as an integral part of the overall post-market surveillance program. Like post-market surveillance, PMCF aims to confirm the safety and performance throughout the device’s lifetime and to ensure the continued acceptability of the benefit-risk profile. However, while post-market surveillance is focused on all aspects of safety and performance, PMCF is focused on the clinical aspects of performance and safety. It consists of collecting clinical data to confirm and update the information described in the clinical evaluation for medical devices and the performance evaluation for IVDs. This could include identifying previously unknown side effects, monitoring already identified side effects, or identifying and analyzing emergent risks.
A PMCF Plan should include the following (non-exhaustive):
- Describe the different procedures which will be used as part of the PMCF, including:
- Screening of scientific literature
- Post-market studies
- Collection of registry data
- Surveys
- Review of case reports for misuse or off-label use
- Justification for sample size, timescales, and endpoints
- Justification for the comparator, on the basis of intended purpose and state of the art
- Statistical justification for the expected quality of outcomes and justification for why this is satisfactory in light of the residual risks.
- Inclusion/exclusion criteria
Once the PMCF plan has been executed, the findings of the PMCF should be included in a PMCF report. That report then forms part of the clinical evaluation report. The PMCF Plan should be part of the Post-market Surveillance Plan.
A PMCF/PMPF is required unless the manufacturer can justify its non-applicability.
What is Trend Reporting?
With the MDR and IVDR, trend reporting became a vital part of post-market surveillance procedures in the EU. The two regulations are the first in the world to require trend analysis and the reporting of increases in the frequency or severity of certain types of incidents that are:
- Not serious incidents, or
- Expected undesirable side-effects that could have a significant impact on the benefit-risk analysis and which have led or may lead to risks to the health or safety of patients, users or other persons that are unacceptable when weighed against the intended benefits
Typically the manufacturer is aware of the potential for the above non-serious incidents or expected undesirable side-effects, identified during product design and/or risk analsyis.
Trend reporting is a way for the manufacturer and competent authority to catch trends in:
- Incidents that are individually not serious enough to be reported directly to the authority, or
- Increases in expected undesirable side-effects or erroneous results which may significantly impact the benefit-risk profile
Any emerging trends should be analyzed through the statistical methods established in the post-market surveillance plan. They should be compared to the expected frequency or severity of incidents and weighed against the intended benefit.
For trend reporting to be used accurately, the manufacturer must gather the basic trend parameters: number of events, time period, and the number of used devices. Other parameters, such as the age and gender of the patient, or the age of the device, can be relevant for some devices, depending on the intended use and application.
Determining trends includes establishing baseline and threshold values against which the frequency and severity of incidents can be compared. While there is very little guidance on a “significant increase” in a trend, it is generally considered to be a rapid and continuous increase for high-volume products or a slow and continuous increase for low-volume products.
Additionally, ideally trend reporting would be performed on similar devices on the market. This is to obtain a baseline and panoramic image of post-market behavior for the device, which the manufacturer can use to evaluate the benefit-risk profile.
What is Vigilance?
Medical device and IVD vigilance is the process of reporting serious incidents and field safety corrective actions (e.g., recalls) to Competent Authorities.
Adverse Events vs Incidents vs Field Safety Corrective Actions
Under the MDR and IVDR:
- Adverse events are defined as events occurring during clinical/performance studies
- Incidents are events occurring after the device has been made available on the market
- Field Safety Corrective Action (FSCA) is an action taken by a manufacturer to reduce risk of death or serious deterioration in the state of health associated with the use of a medical device that is already placed on the market. Examples of FSCAs include:
- Return of the device to the supplier (recalls)
- Destruction of the device
- Advice given by the manufacturer regarding use of the device, where the device is no longer on the market but could still possibly be in use
Vigilance Reporting Requirements
The vigilance obligations for medical and in vitro diagnostic devices are the same for all intents and purposes. There are no differences in reporting processes or deadlines between the two regulations.
Any serious incidents involving a device available in the European Union must be reported. When EUDAMED is fully functional, incident reports shall be entered into the Vigilance and Market Surveillance module. In the meantime, incidents shall be reported directly to the relevant competent authorities.
FSCAs involving a device made available on the European Union must also be reported. An additional requirement is that any FSCA undertaken in a third (i.e., non-EU) country for a device on the EU market must also be reported in the EU unless that FSCA is limited to the device made available in the third country. Most competent authorities publish FSCA information on their websites for public awareness. For example, Ireland’s Health Products Regulatory Authority (HPRA) website: Safety Notices/Communications
Reporting timeline depends on the severity of the incident and its potential repercussions.
| Table 3: Timeframes to report incidents under the MDR and IVDR | |
| Type of Incident | Timeframe to Report |
| Serious public health threat | No later than 2 days after the manufacturer becomes aware of the threat |
| Serious incident involving death or serious deterioration in a person’s health | No later than 10 days after the manufacturer becomes aware of the incident |
| Serious incident | No later than 15 days after the manufacturer becomes aware of the incident |
Since the reporting timelines are relatively short, the initial report can be incomplete and lacking information until a proper investigation has been performed, after which the full report can be submitted.


