CE Marking for Medical Devices: The Complete EU MDR Guide (2026)

CE marking on a medical device is far more than a regulatory stamp or a logo affixed to packaging. It is a legal declaration by the manufacturer that the device conforms to all applicable requirements of the EU Medical Device Regulation (MDR) 2017/745, that the appropriate conformity assessment procedure has been carried out, and that the device is fit to be placed on the European market. The letters "CE" stand for "Conformite Europeenne," and the marking itself serves as the device's passport to the European Economic Area (EEA), which encompasses all 27 EU member states plus Norway, Iceland, and Liechtenstein. Switzerland, while not part of the EEA, historically recognized CE-marked devices through a Mutual Recognition Agreement (MRA), though the status of that agreement has evolved since Switzerland did not update its institutional framework agreement with the EU. Manufacturers must understand that CE marking signifies full regulatory compliance across the entire product lifecycle, from design and manufacturing through post-market surveillance. It carries legal weight: a manufacturer who affixes the CE mark to a device that does not comply with the MDR faces enforcement action, market withdrawal, and potential criminal liability under EU member state law. The CE marking is not a quality mark in the commercial sense, nor is it a certification of performance superiority. It is a regulatory conformity indicator that tells customs authorities, market surveillance authorities, healthcare professionals, and patients that the device meets European safety and performance standards. This distinction matters because manufacturers sometimes approach CE marking as a bureaucratic hurdle rather than what it truly represents: a comprehensive regulatory framework that governs every aspect of a device's existence on the EU market.

The legal basis for CE marking of medical devices in Europe underwent a fundamental transformation with the adoption of Regulation (EU) 2017/745, the Medical Device Regulation, commonly known as the EU MDR. This regulation replaced the Medical Device Directive (MDD) 93/42/EEC and the Active Implantable Medical Device Directive (AIMDD) 90/385/EEC, which had governed the European medical device market since the 1990s. The MDR entered into force on 25 May 2017 and became fully applicable on 26 May 2021, after a one-year postponement from the original May 2020 application date due to the COVID-19 pandemic. The transition from the directive-based framework to the MDR represents more than an incremental update. Directives required transposition into national law, leading to inconsistencies in interpretation and enforcement across member states. The MDR, as a regulation, is directly applicable in all EU member states without national transposition, ensuring uniform requirements across the single market. The substantive changes are equally significant. The MDR introduced strengthened requirements for clinical evidence, expanded post-market surveillance obligations, a new risk-based classification system with additional rules, more rigorous scrutiny of high-risk devices through the scrutiny procedure (Article 54), enhanced traceability through the Unique Device Identification (UDI) system, and the establishment of EUDAMED as the central European database for medical devices. The regulation also significantly increased the responsibilities and oversight of Notified Bodies, requiring them to conduct unannounced audits and employ sufficient qualified personnel to assess the growing volume of technical documentation. For manufacturers, the practical implication is that CE marking under the MDR demands a substantially greater investment in documentation, clinical evidence, and ongoing compliance compared to the former MDD framework. Technical files that were sufficient under the MDD are, in virtually all cases, insufficient under the MDR without significant revision and expansion.

Before a manufacturer can determine the appropriate conformity assessment route for CE marking, the device must be classified according to the rules set out in MDR Annex VIII. The MDR maintains the four-tier classification system from the MDD, with devices categorized as Class I (lowest risk), Class IIa, Class IIb, or Class III (highest risk). However, the MDR introduced 22 classification rules compared to the 18 rules under the MDD, and several existing rules were modified to be more restrictive. Classification under the MDR is determined by the intended purpose of the device and its inherent risks, taking into account factors such as the duration of contact with the body (transient, short-term, or long-term), the degree of invasiveness, whether the device is active, the body part affected, and whether the device incorporates a medicinal substance, tissues, or nanomaterials. Class I devices are generally non-invasive, non-active devices with low risk, such as examination gloves, wound dressings without medicinal substances, or corrective spectacle frames. Class IIa includes devices with moderate risk, such as hearing aids, urinary catheters for short-term use, or dental crowns. Class IIb covers higher-risk devices including ventilators, infusion pumps, and long-term implantable sutures. Class III, the highest risk class, includes cardiac pacemakers, hip prostheses, drug-eluting stents, and breast implants. Notably, the MDR reclassified several device categories upward. Software intended to provide diagnostic or therapeutic recommendations is now classified under Rule 11, which can result in Class IIa or higher classification depending on the severity of the clinical condition. Devices incorporating nanomaterials are classified as at least Class IIa under Rule 19. Devices intended to administer medicinal products by inhalation are classified as Class IIa under Rule 20. Manufacturers must document their classification rationale thoroughly, referencing the specific applicable rule or rules from Annex VIII, and should seek guidance from the MDCG classification guidance documents where uncertainty exists. An incorrect classification determination cascades through the entire regulatory strategy, potentially invalidating the conformity assessment approach and rendering any resulting CE marking legally deficient.

The conformity assessment procedure is the regulatory process through which a manufacturer demonstrates that their device conforms to the applicable requirements of the MDR before affixing the CE mark. The MDR provides several conformity assessment routes, set out primarily in Annexes IX, X, and XI, and the applicable route depends on the device classification. For Class I devices without measuring function, without sterile status, and that are not reusable surgical instruments, the manufacturer may self-certify. This means the manufacturer performs the conformity assessment internally, draws up the technical documentation per Annex II and III, issues a Declaration of Conformity, and affixes the CE mark without Notified Body involvement. This is the only category of medical device that permits self-certification under the MDR. For Class I devices with measuring function, provided in sterile condition, or reusable surgical instruments, a Notified Body must be involved, but only for the aspects relating to the measuring function, sterile barrier, or reprocessing validation respectively. For Class IIa, IIb, and III devices, Notified Body involvement is mandatory, and the manufacturer must select one of the applicable conformity assessment routes. Annex IX describes the full quality management system assessment combined with technical documentation assessment. Under this route, the Notified Body audits the manufacturer's QMS and assesses a representative sample of technical documentation (for Class IIa and IIb) or the full technical documentation for each device (for Class III). Annex X covers type examination, where the Notified Body examines a representative sample (the "type") of the device and issues an EU type-examination certificate. This must be combined with either Annex XI Part A (production quality assurance) or Annex XI Part B (product verification). The choice of conformity assessment route has significant practical implications for audit scope, timeline, cost, and ongoing obligations. Most manufacturers of Class IIa and above opt for the Annex IX route because it integrates QMS audit with documentation review in a single process, and because maintaining an approved QMS provides a framework for ongoing compliance and portfolio management.

Understanding when Notified Body involvement is mandatory versus when self-certification is permissible is one of the most fundamental questions a manufacturer must answer when planning their CE marking strategy. Under the MDR, only a narrow category of Class I devices may proceed without a Notified Body. Specifically, self-certification is available only for Class I devices that do not have a measuring function (Rule 16 devices), are not provided in a sterile condition, and are not reusable surgical instruments. For every other device classification, and for Class I devices with any of those three special characteristics, the manufacturer must engage a Notified Body designated under the MDR. The designation of Notified Bodies is itself a rigorous process. Under the MDR, organizations seeking Notified Body designation must undergo a joint assessment by the designating national authority and a joint assessment team that includes assessors from other member states and the European Commission. This process has been substantially more demanding than under the MDD, which is one reason why the number of designated MDR Notified Bodies grew slowly in the early years of MDR implementation. As of early 2026, approximately 40 Notified Bodies have been designated under the MDR, compared to over 80 that were active under the MDD. This capacity constraint means that manufacturers must plan their Notified Body engagement well in advance. Lead times for initial engagement can range from 6 to 18 months depending on the Notified Body, the device class, and the complexity of the product portfolio. Manufacturers should evaluate Notified Bodies based on their scope of designation (which device categories and conformity assessment procedures they are designated for), their experience with the relevant device technology, their geographic presence and audit logistics, and their responsiveness and communication approach. Switching Notified Bodies mid-process is possible but introduces delays and additional costs, so the initial selection warrants careful due diligence. For manufacturers who are new to the EU market, engaging a regulatory consultancy experienced in Notified Body interactions can significantly accelerate the process and reduce the risk of documentation deficiencies that trigger additional information requests.

The technical documentation for a medical device under the MDR must meet the requirements set out in Annex II (technical documentation) and Annex III (post-market surveillance documentation). Together, these two annexes define what is arguably the most comprehensive device documentation framework in any global regulatory jurisdiction. Annex II requires the technical documentation to include a device description and specification (including all variants, accessories, and configurations), information supplied with the device (labeling, instructions for use), design and manufacturing information, the general safety and performance requirements checklist (GSPR) with references to the evidence demonstrating compliance with each applicable requirement, the benefit-risk analysis and risk management documentation, product verification and validation data (including bench testing, biocompatibility, electrical safety, software validation, usability, and sterilization validation where applicable), and the complete clinical evaluation with its underlying clinical data. The GSPR checklist, corresponding to the requirements of Annex I, is the structural backbone of the technical documentation. There are 23 general requirements and additional specific requirements organized by device type, and the manufacturer must demonstrate compliance with each applicable requirement by referencing the specific evidence within the documentation. This traceability requirement means that a reviewer, whether a Notified Body auditor or a competent authority inspector, should be able to follow a clear chain from each GSPR through the identified hazards and risk controls to the specific test reports, clinical data, or design rationale that demonstrates the requirement is met. Annex III requires the manufacturer to maintain post-market surveillance documentation, including the PMS plan, PMS reports or Periodic Safety Update Reports (PSURs depending on device class), the post-market clinical follow-up (PMCF) plan, and PMCF evaluation reports. The technical documentation is a living system, not a one-time deliverable. The MDR requires manufacturers to keep the documentation current throughout the device lifecycle. This means updating it when design changes occur, when new clinical evidence becomes available, when post-market data reveals new risks or trends, and when harmonised standards or common specifications are revised. Manufacturers who treat technical documentation as a static filing exercise will inevitably encounter compliance gaps during Notified Body surveillance audits or competent authority inspections.

A quality management system (QMS) that conforms to EN ISO 13485:2016 is, for all practical purposes, a prerequisite for CE marking of medical devices under the MDR. While the MDR does not explicitly mandate ISO 13485 certification, the requirements for the quality management system set out in Annex IX Section 2 are closely aligned with ISO 13485, and Notified Bodies universally use this standard as the benchmark for QMS assessment. The QMS must cover the organizational structure and responsibilities, the processes for design and development (including design controls with design inputs, outputs, review, verification, and validation), supplier and subcontractor management, production and process controls, equipment maintenance and monitoring, purchasing controls and incoming inspection, corrective and preventive actions (CAPA), document and record control, management review, internal audits, training and competence management, and feedback and complaint handling. Under the MDR, the QMS assessment also specifically examines the manufacturer's processes for post-market surveillance, vigilance reporting, and the management of field safety corrective actions. This reflects the MDR's emphasis on lifecycle management and the expectation that the QMS is not merely a quality assurance framework but a regulatory compliance management system. For manufacturers pursuing the Annex IX conformity assessment route, the Notified Body will conduct an initial QMS audit (typically a two-stage process similar to ISO 13485 certification audits), followed by surveillance audits at least annually and unannounced audits at least every five years. The scope of these audits extends beyond process compliance to include sampling of technical documentation and verification that the QMS effectively supports regulatory compliance. Manufacturers should not underestimate the effort required to build a QMS from scratch or to upgrade an existing ISO 13485-compliant QMS to meet the additional MDR-specific requirements. Areas that frequently require enhancement include CAPA effectiveness analysis, supplier management for critical components, traceability of design changes to regulatory impact assessments, and integration of post-market surveillance data into the risk management process and clinical evaluation.

The General Safety and Performance Requirements (GSPR) set out in MDR Annex I form the substantive safety and performance standards that every medical device must meet to bear the CE mark. The GSPR replaced the Essential Requirements of the MDD and are more detailed and prescriptive than their predecessor. Annex I is organized into three chapters. Chapter I contains the general requirements (Sections 1 through 9), which apply to all devices and address fundamental principles including overall safety, risk minimization according to the state of the art, benefit-risk acceptability, performance under intended conditions of use, and the requirement that safety and performance must not be adversely affected during the device's expected lifetime under normal conditions of use, transport, and storage. Chapter II sets out requirements regarding design and manufacture (Sections 10 through 22), covering chemical, physical, and biological properties; infection and microbial contamination; devices incorporating substances considered medicinal products or composed of substances absorbed by the body; devices with measuring function; protection against radiation; electronic programmable systems and software; active devices; specific requirements for particular device groups; and requirements for devices connected to or equipped with an energy source. Chapter III addresses requirements regarding the information supplied with the device (Section 23), including labeling requirements, instructions for use content, and the specific circumstances under which instructions for use may be omitted. Demonstrating GSPR compliance requires the manufacturer to map each applicable requirement to the corresponding evidence within the technical documentation. This is typically accomplished through a GSPR checklist, which is a structured document or matrix that lists each requirement, indicates whether it is applicable to the device in question, identifies the applicable harmonised standard or common specification used to demonstrate compliance, and references the specific document, test report, or clinical data that provides the evidence of conformity. The GSPR checklist is one of the first documents a Notified Body reviewer will examine, and its completeness and traceability are strong indicators of the overall quality of the technical documentation. Manufacturers should use the harmonised standards published in the Official Journal of the European Union as the primary means of demonstrating GSPR compliance, as conformity with a harmonised standard creates a presumption of conformity with the corresponding GSPR. Where no harmonised standard exists for a particular requirement, manufacturers must use common specifications, international standards, or other appropriate evidence to demonstrate compliance.

Risk management is the central organizing principle of the MDR's approach to device safety, and ISO 14971:2019 (Medical devices -- Application of risk management to medical devices) is the internationally recognized standard for implementing a risk management process. Under the MDR, risk management is not a standalone documentation exercise but a thread that runs through every element of the technical documentation, from design inputs through clinical evaluation to post-market surveillance. The risk management process per ISO 14971 encompasses risk analysis (identification of intended use and reasonably foreseeable misuse, identification of hazards, estimation of risk for each hazardous situation), risk evaluation (determining whether each identified risk is acceptable using the manufacturer's risk acceptability criteria), risk control (implementing measures to reduce risks that are not acceptable, verifying the effectiveness of risk control measures, and assessing whether new hazards or risks are introduced by the controls), evaluation of overall residual risk (determining whether the totality of residual risks is acceptable in light of the clinical benefits), and risk management review and production and post-production information. The MDR strengthens the connection between risk management and clinical evidence by requiring that the benefit-risk determination in the clinical evaluation be consistent with the risk management file. This means that clinical data must inform the estimation of clinical risks, and that the benefits demonstrated through clinical evidence must be weighed against the residual risks documented in the risk management file. Furthermore, the MDR requires that post-market surveillance data feed back into the risk management process, creating a continuous improvement loop. When post-market data reveals new hazards, changes in risk estimation, or inadequacies in existing risk controls, the risk management file must be updated and the implications for the benefit-risk analysis and GSPR compliance must be reassessed. Manufacturers should also be aware of ISO/TR 24971:2020, the technical report that provides guidance on the application of ISO 14971. This companion document offers practical advice on topics such as risk acceptability criteria, risk analysis techniques (FMEA, fault tree analysis, hazard and operability studies), and the evaluation of overall residual risk. Common deficiencies that Notified Bodies identify in risk management files include risk acceptability matrices that do not align with the state of the art for the device category, failure to consider all reasonably foreseeable hazardous situations, insufficient verification of risk control effectiveness, and a benefit-risk analysis that is disconnected from the clinical evaluation findings.

Clinical evaluation is a mandatory requirement for all medical device classes under the MDR and is governed by Article 61 and the detailed requirements of Annex XIV Part A. The clinical evaluation is a systematic and planned process to continuously generate, collect, analyze, and assess clinical data pertaining to a device in order to verify the safety and performance of the device, including the clinical benefits, when used as intended by the manufacturer. The output of this process is the Clinical Evaluation Report (CER), which must be part of the technical documentation for every device. The MDR provides three sources of clinical data for the clinical evaluation: clinical investigations conducted by or on behalf of the manufacturer (pre-market or post-market), clinical investigations or other studies reported in scientific literature relating to a device for which equivalence to the manufacturer's device can be demonstrated, and published or unpublished reports on clinical experience relating to the device in question or an equivalent device. Establishing equivalence under the MDR is substantially more restrictive than under the MDD. Article 61(5) requires that equivalence be demonstrated on the basis of clinical, technical, and biological characteristics, and that the manufacturer have sufficient levels of access to the data relating to the equivalent device. For devices from another manufacturer, this practically requires a contractual agreement granting access to the equivalent device's technical documentation, which is rarely obtainable from a competitor. This has meant that many manufacturers who previously relied on equivalence claims under the MDD must now generate their own clinical data through clinical investigations. For Class III devices and Class IIb active devices intended to administer or remove medicinal products, clinical investigations are generally required unless certain exemptions apply. The CER must follow a defined clinical evaluation plan (CEP), include a systematic literature search and appraisal methodology, critically analyze the available clinical data for relevance and quality, assess the clinical benefits and risks, confirm that the device meets the relevant GSPR, and identify any gaps in the clinical evidence that need to be addressed through the post-market clinical follow-up (PMCF) plan. MDCG guidance document 2020-13 (Clinical Evaluation Assessment Report Template) and the legacy MEDDEV 2.7/1 Rev. 4 provide detailed methodology guidance. The CER is not a static document; it must be updated throughout the device lifecycle as new clinical data becomes available from post-market sources, PMCF activities, and published literature.

The Unique Device Identification (UDI) system is an integral component of the CE marking framework under the MDR and represents one of the most significant operational changes for manufacturers transitioning from the MDD. UDI is governed by Article 27 and the implementing rules in Annex VI Part C. The UDI system requires manufacturers to assign a unique identifier to each device model, which consists of two components: the UDI Device Identifier (UDI-DI), a fixed code specific to the device model and manufacturer, and the UDI Production Identifier (UDI-PI), a variable code that identifies the specific unit or batch of production and may include the lot or batch number, serial number, manufacturing date, or expiry date. The UDI must be placed on the device label and all higher levels of packaging. For reusable devices that require cleaning and sterilization between uses, the UDI must be placed directly on the device itself (a requirement known as Direct Part Marking or UDI carrier on the device). The UDI data must be submitted to EUDAMED's UDI/device registration module, which serves as the central reference database for device identification and traceability in the EU. The UDI system is being phased in according to device class, with Class III and implantable devices required to have UDI assignments first, followed by Class IIa and IIb, and finally Class I devices. Manufacturers must obtain their UDI-DIs from an issuing entity designated by the European Commission, which currently includes GS1, HIBCC, ICCBBA, and IFA. The practical implementation of UDI requires changes across multiple functions within the manufacturer's organization, including product labeling, packaging, IT systems (for storing and transmitting UDI data), supply chain documentation, and customer communication. Manufacturers should not underestimate the cross-functional coordination required for UDI implementation or the IT system changes needed to support UDI data management and EUDAMED submission. While UDI is sometimes perceived as a labeling and logistics requirement, it is fundamentally a traceability system that supports post-market surveillance, vigilance, field safety corrective actions, and market surveillance by competent authorities. Non-compliance with UDI requirements can result in market surveillance actions and is considered a conformity deficiency during Notified Body audits.

The EU Declaration of Conformity (DoC) is the formal document by which the manufacturer declares that the device conforms to the provisions of the MDR. It is a legal document, and its preparation and maintenance are the manufacturer's responsibility. Article 19 of the MDR establishes the requirement for the DoC, and Annex IV specifies the information it must contain. The DoC must include the name and address of the manufacturer and, where applicable, the authorized representative; a statement that the Declaration of Conformity is issued under the sole responsibility of the manufacturer; the Basic UDI-DI and the product and trade name, product code, catalogue number, or other reference for the device, along with the device's intended purpose; the device risk class and the applicable classification rule or rules from Annex VIII; a statement that the device conforms to the MDR and, where applicable, to any other relevant Union legislation; references to any harmonised standards, common specifications, or other technical standards used to demonstrate conformity, including the version numbers; where applicable, the name, address, and identification number of the Notified Body, a description of the conformity assessment procedure performed, and the identification of the certificate or certificates issued; additional information required by applicable Union or national legislation; the date of issue of the DoC, the name and function of the signatory, and indication of on behalf of whom the person signed; and the signature of the authorized signatory. The DoC must be kept up to date and available for a period of at least 10 years after the last device covered by the declaration has been placed on the market (15 years for implantable devices). The DoC must be made available to the competent authority upon request. A common error is treating the DoC as a formality prepared at the last minute. In practice, the DoC should be drafted as part of the conformity assessment process, verified for accuracy against the technical documentation and any Notified Body certificates, and maintained as a controlled document within the QMS. Any change to the device, its classification, the applicable standards, or the Notified Body certificate must trigger a review and potential update of the DoC.

The rules for affixing the CE mark to medical devices are set out in Article 20 of the MDR, supplemented by the general provisions in Regulation (EC) No 765/2008. The CE marking must be affixed visibly, legibly, and indelibly to the device or its sterile packaging. Where this is not possible or warranted given the nature of the device, the CE marking must be affixed to the packaging and to the instructions for use. The CE marking must have a height of at least 5 mm, unless a smaller size is justified by the device's dimensions. The proportions of the CE marking must be maintained according to the standardized graphical representation in Annex V of the MDR, which specifies the geometric dimensions and ratios of the letters. The CE mark must not be affixed until the conformity assessment procedure has been successfully completed and the Declaration of Conformity has been drawn up. For devices requiring Notified Body involvement, the identification number of the Notified Body must be affixed alongside the CE marking. The Notified Body number must be affixed by the manufacturer or the Notified Body (or under their respective instructions). It is a violation of the MDR to affix marks, signs, or inscriptions that are likely to mislead third parties regarding the meaning or graphic form of the CE marking. Other marks may be affixed to the device, its packaging, or instructions for use provided they do not reduce the visibility, legibility, or meaning of the CE marking. Competent authorities oversee the correct application of the CE marking through market surveillance activities. Misuse of the CE marking, including affixing it to a non-compliant device, omitting the Notified Body number where required, or using an incorrect graphical representation, constitutes a regulatory infringement that can result in enforcement action. For devices that are subject to more than one Union act requiring CE marking (for example, a device that also falls under the Radio Equipment Directive or the Machinery Directive), the CE marking indicates conformity to all applicable acts, and the DoC must reference each applicable regulation.

Achieving CE marking is not the end of the regulatory journey; it is the beginning of a continuous compliance obligation. The MDR's post-market framework is substantially more demanding than the MDD's and is structured around three interconnected systems: post-market surveillance (PMS), vigilance, and post-market clinical follow-up (PMCF). Post-market surveillance, governed by Article 83 to 86 and detailed in Annex III, requires the manufacturer to proactively and systematically gather, record, and analyze relevant data on the quality, performance, and safety of the device throughout its lifetime. This includes data from complaints, distributor and user feedback, field safety corrective actions, trend analysis, published literature, registries, and data from similar devices on the market. The PMS plan must describe how these data are collected, analyzed, and used to update the benefit-risk determination, the clinical evaluation, and the risk management file. For Class I devices, the manufacturer must produce a PMS report summarizing the results and conclusions of PMS activities. For Class IIa, IIb, and III devices, the manufacturer must produce a Periodic Safety Update Report (PSUR) at defined intervals: at least every two years for Class IIa devices and at least annually for Class IIb and Class III devices. PSURs must be submitted to the Notified Body, which reviews them as part of its ongoing surveillance. The vigilance system requires manufacturers to report serious incidents (events that directly or indirectly led or might have led to death, serious deterioration in health, or a serious public health threat) through the manufacturer incident report process. Field safety corrective actions (FSCAs), including recalls, modifications, and field safety notices, must be reported and documented. PMCF, governed by Annex XIV Part B, requires the manufacturer to proactively collect and evaluate clinical data from devices already on the market. The PMCF plan must be part of the clinical evaluation and is subject to Notified Body review. The overall post-market framework creates a feedback loop: post-market data informs the risk management file, the clinical evaluation, and the technical documentation, which in turn may necessitate design changes, labeling updates, or field safety actions. Manufacturers who do not invest in robust post-market surveillance systems risk non-conformities during Notified Body surveillance audits and enforcement action from competent authorities.

Based on our experience supporting manufacturers through hundreds of conformity assessment processes, certain recurring mistakes consistently delay CE marking timelines. The most common of these is submitting incomplete or poorly structured technical documentation to the Notified Body. Documentation that lacks clear traceability between the GSPR, risk management outputs, and supporting evidence will invariably trigger additional information requests, adding months to the review cycle. A closely related issue is an inadequate clinical evaluation. Manufacturers frequently underestimate the depth and rigor required for the Clinical Evaluation Report under the MDR, particularly the restrictions on equivalence claims under Article 61(5). Clinical evaluations that rely heavily on literature data without a robust systematic search methodology, or that claim equivalence to a competitor's device without a contractual access agreement, are consistently rejected. Another frequent pitfall is insufficient risk management documentation. Risk management files that present a superficial hazard analysis, that use risk acceptability criteria inconsistent with the state of the art, or that fail to verify the effectiveness of risk controls will be flagged by the Notified Body. Manufacturers also frequently stumble on the integration between risk management and clinical evaluation, where the benefit-risk analysis in the CER must be consistent with the risk management file. Classification errors represent another source of delay. If a manufacturer classifies a device incorrectly, the entire conformity assessment strategy may need to be revised, including potentially engaging a Notified Body that was not previously involved. UDI implementation is often treated as a last-minute labeling task rather than a cross-functional project requiring IT system changes, supplier coordination, and EUDAMED data entry. Post-market surveillance planning that is generic or template-based rather than device-specific will not satisfy Notified Body expectations. Finally, underestimating the importance of German-language documentation for the DACH market (labeling, instructions for use, and certain regulatory submissions) can cause last-minute delays. Manufacturers can mitigate these risks by conducting a thorough gap analysis of their documentation against MDR requirements before Notified Body engagement, ideally with the support of regulatory professionals who understand the expectations of the specific Notified Body being approached.

Realistic timeline expectations are essential for effective CE marking planning, and they vary substantially by device class. For Class I devices eligible for self-certification, the timeline is primarily driven by the manufacturer's own capacity to prepare compliant technical documentation. A well-prepared manufacturer with a straightforward Class I device can complete the documentation, draw up the Declaration of Conformity, and affix the CE mark within 3 to 6 months from the start of documentation preparation. However, this assumes that the device design is mature, that biocompatibility and other testing are complete, and that the QMS is in place. For devices in Class I with measuring function, sterile, or reusable surgical instruments, add 6 to 12 months for the limited Notified Body assessment of the relevant aspects. For Class IIa devices, manufacturers should plan for a total timeline of 12 to 18 months from the start of documentation preparation to CE marking, assuming the technical documentation is substantially complete when the Notified Body engagement begins. This includes the Notified Body's QMS audit, documentation sampling review, and certificate issuance process. For Class IIb devices, the timeline typically extends to 18 to 24 months, reflecting more extensive documentation review and the potential for additional information requests on higher-risk aspects. For Class III devices, manufacturers should plan for 24 to 36 months, and in some cases longer, particularly if clinical investigations are required. The scrutiny procedure under Article 54, which applies to certain Class III devices including implantable devices and Class IIb active devices intended to administer medicinal products, adds an additional step in which the Notified Body submits a clinical evaluation assessment report to a panel of expert reviewers, who then provide a scientific opinion. This procedure can add 3 to 6 months to the timeline. These timelines assume that the manufacturer responds promptly and comprehensively to Notified Body queries. In practice, the most significant timeline variable is the quality and completeness of the technical documentation at the time of submission. Manufacturers who submit incomplete documentation and then spend months iterating on additional information requests can see their timelines double. Early investment in documentation quality, including pre-submission gap analysis and mock reviews, is the single most effective strategy for compressing CE marking timelines.

For manufacturers with devices currently on the EU market under MDD certificates, the transition to MDR CE marking requires careful planning. Regulation (EU) 2023/607 amended the MDR's transitional provisions, extending the deadlines for legacy devices to remain on the market under their MDD certificates. Class III and Class IIb implantable devices with valid MDD certificates may continue to be placed on the market until 31 December 2027, while devices in other classes may remain until 31 December 2028. However, these extended timelines are subject to conditions: the manufacturer must have submitted an MDR application to a Notified Body before the relevant deadline, a written agreement with the Notified Body must be in place for the conformity assessment, the devices must continue to comply with the MDD, no significant changes may be made to the design or intended purpose that would require a new conformity assessment, and the manufacturer must comply with MDR requirements for post-market surveillance, market surveillance, and vigilance (including serious incident reporting and trend reporting). Manufacturers should not interpret these extended deadlines as an invitation to defer MDR preparation. The conditions for maintaining MDD certificates are stringent, and the Notified Body capacity constraints mean that securing a Notified Body agreement and application slot requires early action. Furthermore, the concept of "no significant changes" under the transitional provisions has been interpreted narrowly by regulators and Notified Bodies. Any change to the device's intended purpose, design modifications that could affect safety or performance, or changes in manufacturing processes that affect device characteristics may be considered significant, requiring an MDR conformity assessment rather than an MDD amendment. For manufacturers planning the transition, the recommended approach is to conduct a comprehensive MDR gap analysis of each device in the portfolio, prioritize devices based on their transition deadline and commercial importance, engage the Notified Body early with a clear portfolio transition plan, and systematically upgrade the technical documentation, clinical evaluation, and post-market surveillance system to MDR requirements. Many manufacturers find that starting with lower-risk devices (Class IIa) builds internal capability and familiarity with MDR expectations before tackling the more demanding Class IIb and Class III transitions.

Navigating the CE marking process under the EU MDR requires deep regulatory expertise, meticulous documentation, and a strategic approach that anticipates Notified Body expectations. At Swiss MPC, our senior consultants have supported manufacturers across all device classes in achieving and maintaining CE marking, from first-time market entrants to Fortune 500 medical device companies managing complex portfolio transitions from MDD to MDR. Our technical documentation service is structured around the principle that documentation quality is the primary determinant of CE marking timeline and cost. We build technical files that are comprehensive, traceable, and audit-ready from the first submission, minimizing the additional information request cycles that cause the most significant delays. Our team brings direct experience with the major European Notified Bodies, which means we understand the specific expectations, review patterns, and common deficiency findings of each organization. Whether you need a complete technical documentation package for a new device, a gap analysis of your existing MDD documentation against MDR requirements, clinical evaluation support, or strategic advice on your conformity assessment route, we can provide the senior consultant oversight and regulatory precision that complex CE marking projects demand. Our approach is defined by three principles: Swiss quality in every deliverable, a single senior point of contact who owns your project, and a three-day onboarding process that gets your project moving without unnecessary delays. We operate from our offices in Cham, Switzerland and Galway, Ireland, serving clients across Europe and globally. If you are planning a CE marking project or facing challenges with your MDR transition, we invite you to contact us for a confidential discussion of your regulatory strategy. Reach us at info@swissmpc.com or call +41 44 586 72 67.