A CE mark is no longer simply a market access milestone achieved at the end of development. Under EU MDR 2017/745, it is the visible outcome of an ongoing compliance system: clinical evidence, technical documentation, quality controls and post-market oversight must continue to support the device throughout its life cycle. For Australian manufacturers planning European expansion, the commercial consequence is clear. Regulatory planning needs to begin well before a distributor is appointed or a launch date is announced.
What EU MDR 2017/745 regulates
Regulation (EU) 2017/745, commonly called the EU Medical Device Regulation or EU MDR, governs medical devices placed on the European Union market. It replaced the former Medical Device Directive framework and introduced more detailed requirements intended to strengthen patient safety, traceability and regulatory scrutiny.
The regulation applies to a broad range of products, from software and instruments through to implantable devices and accessories. Some products without an intended medical purpose can also fall within its scope where they are specifically listed in the regulation. Classification, intended purpose, claims, technology and duration of use all affect the regulatory pathway.
For an Australian business, EU MDR compliance is separate from Therapeutic Goods Administration requirements. A TGA inclusion, Australian clinical experience or an ISO 13485 certificate may provide useful evidence, but none automatically establishes conformity for Europe. The underlying principles often overlap, yet the EU submission, economic operator and post-market obligations must be assessed on their own terms.
The shift from a submission to a life-cycle obligation
The defining feature of the EU MDR is its emphasis on evidence and control across the entire product life cycle. Manufacturers need to show not only that a device was appropriately designed, but that it remains safe and performs as intended once supplied to users.
This means regulatory work cannot sit separately from product development, quality, clinical, commercial and service teams. Changes to labelling, software, suppliers, intended users or promotional claims can affect the technical documentation and, in some cases, the validity of the conformity assessment. A practical governance process is needed to identify those changes early and determine whether notified body involvement is required.
The requirements are demanding, but they are not identical for every device. A low-risk, well-understood product may follow a more proportionate route than a novel implantable device. The right strategy depends on classification, risk profile, available clinical data, the maturity of the quality management system and whether the product is already on the market.
Technical documentation must tell a coherent story
EU MDR technical documentation is more than a collection of test reports. It should present a consistent, traceable rationale showing that the device meets the applicable General Safety and Performance Requirements.
In practice, the file needs to connect the intended purpose and classification with the device description, design and manufacturing information, risk management records, verification and validation evidence, clinical evaluation, labelling and post-market plans. If a claim appears in an instruction for use or sales presentation, the manufacturer should be able to locate the evidence that supports it.
Common gaps arise where documentation has been built over several product generations. Risk files may not fully reflect current cyber security or usability risks. Clinical evaluation reports may rely too heavily on equivalence. Supplier controls may not match the criticality of outsourced processes. Software documentation may not clearly demonstrate that all released configurations were validated.
A focused gap analysis can identify these issues before they become a notified body finding or delay a commercial launch. It also helps teams sequence remediation work realistically. Not every document needs to be rewritten, but the complete file needs to be current, internally aligned and defensible.
Clinical evaluation is central, not an afterthought
Clinical evaluation has become one of the most closely examined areas of EU MDR compliance. Manufacturers must evaluate and continuously assess clinical data to demonstrate that the device achieves its intended performance and that its benefits outweigh residual risks.
The appropriate evidence base depends on the device and its claims. For some established technologies, a structured literature review, post-market data and relevant clinical experience may be sufficient. For higher-risk, innovative or implantable devices, clinical investigation data may be necessary. Equivalence remains possible in limited circumstances, but it requires a high standard of technical, biological and clinical justification, as well as adequate access to information about the equivalent device.
The commercial lesson is to avoid treating clinical evidence as a late-stage regulatory document. Product claims, indication selection and study planning should be considered together. Narrowing an intended purpose may reduce the immediate evidence burden, while also limiting market opportunity. That trade-off should be a deliberate business decision, not an accidental result of incomplete data.
Quality systems and accountable economic operators
Manufacturers must operate a quality management system proportionate to the device risk class and type. ISO 13485 certification is widely used to demonstrate a suitable foundation, but certification alone does not guarantee that every EU MDR requirement has been addressed. The system must cover areas such as regulatory strategy, design controls, supplier management, production controls, complaint handling, vigilance, corrective action and change management.
For manufacturers outside the EU, appointing an authorised representative is mandatory before placing devices on the EU market. The authorised representative has defined legal responsibilities and must have access to the relevant technical documentation. Importers and distributors also have verification and cooperation duties, including obligations relating to labelling, storage, complaints and suspected incidents.
These roles should not be selected as an administrative formality. Contracts, responsibilities and information flows need to be clear. A distributor that makes changes to packaging or creates local promotional materials, for example, can create regulatory consequences if those activities are not controlled. The manufacturer remains accountable for the device and must be able to obtain information quickly when a complaint, field action or competent authority request arises.
Notified body planning can determine launch timing
With limited exceptions, manufacturers of Class IIa, IIb and III devices require a notified body to assess conformity. Certain Class I devices with sterile, measuring or reusable surgical instrument characteristics also require notified body involvement for relevant aspects of assessment.
Notified body capacity, scope and review expectations can materially affect a launch programme. Engaging one late may result in avoidable delays, particularly where technical documentation needs substantial remediation or the device includes software, novel materials, implantable components or complex clinical claims.
A strong application package does not eliminate questions, but it makes review more efficient. Manufacturers should plan for iterative feedback, allocate knowledgeable internal owners and keep the evidence base stable during assessment where possible. Frequent design changes can be commercially necessary, yet they need disciplined evaluation to avoid restarting parts of the conformity assessment.
UDI, registration and post-market surveillance
EU MDR requires a more structured approach to device identification and traceability through the Unique Device Identification system. Manufacturers need to assign and maintain UDI information, apply UDI carriers where required, and manage device and economic operator data through the relevant European registration systems as modules become available and obligations apply.
Post-market surveillance is equally significant. A post-market surveillance plan should explain how the manufacturer will collect, analyse and act on information from complaints, distributor feedback, service data, literature, trends, registries and other relevant sources. The outputs may include a Periodic Safety Update Report for higher-risk devices or a Post-Market Surveillance Report for other applicable devices.
Vigilance processes must also be operational, not merely documented. Teams need clear criteria for assessing serious incidents, field safety corrective actions and reportability timeframes. Australian manufacturers managing both TGA and EU obligations should establish a global complaint and vigilance framework, then map each jurisdiction’s specific reporting rules. Maintaining separate spreadsheets and informal handovers is rarely sustainable as product volumes grow.
A practical route for Australian manufacturers
The most effective EU MDR programmes begin with a realistic regulatory and commercial assessment. Confirm the intended purpose, classification and target countries first. Then compare existing evidence, quality systems and product documentation against the requirements that apply to the specific device.
From there, build a plan that combines technical remediation with operational readiness. This includes clinical evaluation, risk management, labelling, authorised representative arrangements, notified body engagement, UDI preparation and post-market processes. If European entry is being considered alongside Australian supply, align global documentation where appropriate, but do not force different jurisdictions into a single process where their requirements genuinely diverge.
Compliance Management Solutions (C|M|S) supports manufacturers in turning this work into a clear regulatory programme, with attention to both submission readiness and the controls required after market entry. The objective is not simply to obtain a certificate. It is to create a defensible pathway that supports product growth without exposing the business to avoidable regulatory disruption.
A well-planned EU MDR strategy gives decision-makers something more valuable than a checklist: confidence that the evidence, responsibilities and commercial timeline can withstand scrutiny when the product reaches the market.