What are the manufacturer’s MDR obligations for legacy devices?
You are likely already aware that the following aspects of the MDR apply to legacy devices:
-
- Post-market surveillance
- Vigilance
- Market surveillance
- Registration of economic operators and of devices
The above is true whether the device has a Notified Body CE Marking certificate or is self-certified.
There is a helpful MDCG 2021-25 guidance document that outlines what aspects of the MDR apply to legacy devices. Particularly useful is the table starting page 9. It has an easy to understand ‘YES’ / ‘NO’ format regarding whether certain articles of the MDR apply.
What additional items will the Notified Body review during their audits?
Two main points:
- The above-mentioned aspects of the MDR apply to legacy devices. Therefore, the Notified Body will be auditing to ensure you comply with those relevant MDR sections. This includes Art. 85 – Post-market surveillance report (PMSR), applicable to Class I devices and Art. 86 – Periodic safety update report (PSUR), applicable to Class IIa, IIb and III devices. Manufacturers should update relevant procedures and generate their Post-market Surveillance (PMS) Plans and Post-market Surveillance (PMS) Reports, as well as the PMSR or PSUR, as applicable. This includes ensuring that your risk management and clinical data is considered in the PMS Plan.
- One of the requirements of Article 120(3) is that there “are no significant changes in the design and intended purpose” of the device. Otherwise, the device needs MDR CE Marking. Therefore, the Notified Body will assess that the scope has not changed and that the manufacturer has adjusted its quality system related to significant changes.
Regarding what to expect during the audit, MDCG 2022-4 recommends that the Notified Body audit “should be a continuation of the previous surveillance activities with a focus on the new provisions”.
Which MDR items will not be audited for legacy devices?
Outside of the above items, your MDD/AIMDD quality system should be maintained ‘as is’.
MDCG 2022-4 specifies that provisions outside of the above-mentioned, should not be included the scope of the surveillance audit. For example, the requirement for a Person Responsible for Regulatory Compliance (Art. 15) and UDI (Art. 27) are outside the scope.
Go to the Annex in MDCG 2022-4 to downloand an excel sheet comparing the QMS requirements under the MDD versus MDR.
Exceptions and Special Circumstances
Registration of economic operators and devices:
Per the MDR, this registration should occur in the EUDAMED
system. However, EUDAMED has been delayed and is not expected to be fully functional
until Q2 2024. Therefore, manufacturers must comply with the registration requirements as outlined under the MDD/AIMDD until EUDAMED is mandatory. It is likely you are already compliant, although it would be good practice to re-verify that you have met the registration obligations under the old Directives.
You have both MDD/AIMDD and MDR devices:
The Notified Body may perform the audit to the MDR, and may couple MDR audits with the legacy device audit of the Art. 120(3) transition requirements, with proper justification.
Final note regarding legacy devices with Notified Body issued CE Marking certificates
There are a lot of CE certificates on the market with an expiry date of 26 May 2024, which is the day the transition period ends. If you were scrambling to recertify to the MDD/AIMDD before the MDR date of application, so were many other manufacturers. Therefore, we recommend starting an MDR certification dialog with your Notified Body sooner rather than later. They will be inundated with work the year before the legacy transition period ends.