The “regulatory affairs” section comprises over 200 tasks that need to be completed during the development and approval of medical devices.
Here, you will find an overview of the most essential content so that you can get your device approved quickly.
Content
On this page, you will find articles on the following topics:
Regulatory affairs comprises the processes and activities that ensure that medical devices meet the regulatory requirements of the countries where they are sold. This includes
The tasks of regulatory affairs also include monitoring changes to regulations and standards and communicating these changes to stakeholders within the company to ensure continuous compliance.
Regulatory affairs thus plays a crucial role in ensuring that medical devices are safe, effective, and comply with legal requirements.
Refer also to the article on regulatory affairs managers’ tasks, competencies, and earning potential. This includes the task of developing a regulatory strategy.
| Laws | Medical Devices Law (no longer valid)
Medical Devices Implementation Act MPDG |
| National regulations | Medical Device Operator Ordinance (Medizinprodukte-Betreiberverordnung – MPBetreibV)
Medical Device User Notification and Information Ordinance (Medizinprodukte-Anwendermelde- und Informationsverordnung – MPAMIV) |
| EU directives (only for existing devices) | Medical Device Directive (MDD, 93/42/EEC) and its essential requirements |
| EU regulations | Medical Device Regulation MDR
In-Vitro Diagnostics Regulation (IVDR) General Data Protection Regulation (GDPR) AI Regulation (planned) EU AI Act |
| EU guidelines | Overview of MDCG documents
Examples
|
| Harmonized standards | Overview of harmonized standards. You will find further articles on specific standards and their implementation (also) in these categories:
|
| Laws | Food, Drug & Cosmetic Act (FD&C)
Administrative Laws (21 CFR)
|
| General information | Request for Information: How the FDA helps with classification
FDA eCopy Program FDA Warning Letters and FDA Form 483 (Form 483) Software Change: What the FDA expects from you |
| Approval procedure | FDA updates “Refuse to Accept Policy” for 510(k)
The FDA Pre-Submission Program The FDA Software Precertification (Pre-Cert) Pilot Program FDA’s De Novo Program Level of Concern: What the FDA wants to achieve with this program Special 510(k): When the FDA will allow this “shortcut” Breakthrough Devices Program of the FDA |
| Requirements | FDA Human Factors Guidances
The FDA QSIT: Quality System Inspection Technique The FDA Benefit-Risk Guidance Recognized Consensus Standards of the FDA Guidance ‘Interoperable Medical Devices’ |
| see section 3.a) |
| Approval of medical devices (overview) Please also note the presentation describing the path to the CE mark as well as the articles “7 steps to a medical device” and “Approval of IVDs.“ |
| Conformity assessment procedure (assessing conformity with statutory requirements) |
| Approval in China |
| Approval China FDA / NMPA |
| Approval in Brazil |
| Approval in Japan |
| Approval Saudi Arabia (SFDA) |
| Approval South Korea |
Find more information on international approval
| Qualification as a medical device (medical device yes/no). This also includes the distinction between medicinal products and medical devices, as well as the special case of combination products. |
| Classification according to MDR Class I, IIa, IIb, III or IVDR Class A, B, C and D |
| Qualification and classification of software as a medical device |
| Classification of devices as accessories |
| Technical documentation (overview) |
| Intended purpose (the foundation document) |
| Instructions for use |
| Clinical evaluation of medical devices according to MEDDEV 2.7/1 rev. 4 |
| Risk management files: risk policy, risk management plan, risk analysis, risk management report |
| Usability file |
| Software file, e.g., software requirements specification, software architecture, software tests, software release. Please also note the special features of medical apps (mobile medical apps). |
| Verification and validation of medical devices |
| Unique Device Identification |
Quality management is not usually the responsibility of regulatory affairs. Nevertheless, we have listed some important articles for you.
| Steps to a certified QM system |
| Audits (especially of quality management systems) |
| Systems for Post-Market Surveillance and PMCF (Post-Market Clinical Follow-up) and vigilance |
| Federal Institute for Drugs and Medical Devices (BfArM – Bundesamt für Arzneimittel und Medizinprodukte) |
| German Institute for Medical Informatics (DIMDI – Deutsches Institut für medizinische Informatik); has since been integrated into the BfArM |
| DAkkS, the German accreditation body |
| State authorities: Regional councils, trade supervisory offices, governments |
| Notified bodies |
| NBOG: Notified Body Operations Group |
| MDCG: Medical Device Coordination Group |
| IMDRF: International Medical Device Regulators Forum |
Here, you will find an article on the tasks and competencies of regulatory affairs managers.
Note the advantages and disadvantages of Regulatory Information Management Systems (RIMS) and their role in manufacturers’ digital transformation.
Part of the tasks of regulatory affairs is regulatory intelligence.
Do you still have questions, for example, about the approval of your devices? Then, take advantage of our free micro-consulting service.
If you would like support in developing and “approving” your medical devices in compliance with the law, contact us right away. The Johner Institute team will be happy to help!
The MDR contains the Classification Rule 11. This rule is especially for software. The Rule 11 has serious implications: it bears the potential to further undermine Europe’s innovation capacity. Manufacturers should familiarize themselves with the MDCG‘s interpretation to avoid misclassifying software and to be able to follow the reasoning of notified bodies and authorities. This article…
DetailsThe Medical Device Coordination Group (MDCG) has drafted a guidance document that describes how manufacturers should place their class 1 medical devices on the market in order to comply with the MDR. The title of the document is “Guidance Notes for Manufacturers of Class I Medical Devices”. This article provides a summary of the document and gives…
DetailsThe Health Insurance Portability and Accountability Act (HIPAA) is a US law that establishes requirements for processing protected health data. Institutions that collect or process these data in the USA and their subcontractors must comply with HIPAA if they want to avoid sanctions. For European companies in particular, HIPAA is a regulation that is difficult to understand…
DetailsWe have known how vulnerable IT security is in the healthcare sector since February 2016, when the IT infrastructures of many clinics were brought to a standstill by a simple virus attack. As a result, the authorities are paying closer attention to ensuring that not only clinics but also manufacturers guarantee the IT security of…
DetailsThe MDR and IVDR require either a “Post-Market Surveillance Report” or a “Periodic Safety Update Report” from medical device manufacturers. The Periodic Safety Update Report is abbreviated as “PSUR”, the Post-Market Surveillance reports as “PMS report”. PSUR and PMS report: Regulatory background and objectives The European Commission has significantly increased the requirements for monitoring devices…
DetailsThe MDR requires medical device manufacturers to conduct Post-Market Surveillance (PMS) and thus collect PMS data. This article is intended to help clarify the regulatory requirements manufacturers must consider when collecting these PMS data. Notably, it is intended to highlight whether manufacturers need to consult an ethics committee in Europe if the data arise from…
DetailsThe digital transformation of notified bodies will transform the medical device ecosystem over the next few years. This article describes 1. Drivers of the digital transformation of notified bodies The period in which notified bodies, as an oligopoly, were allowed to pick and choose customers and determine prices and conditions is coming to an end.…
DetailsPractical guidance based on the experience of the Johner Institute, Oliver Hilgers, and Stefan Bolleininger The discussion about class I software continues to rage. This article provides guidance regarding the MDR rules for the classification of medical software. 1. Background a) Relevance of the issue Whether or not medical software counts as class I software is…
DetailsThe Medical Device Coordination Group (MDCG) is an expert panel required by the MDR and IVDR. The MDCG is sometimes confused with another coordination group or with expert panels. You can find out how these groups are differentiated here. Read this article to find out how you are affected by the output of the MDCG’s…
DetailsRegulators still publish laws and regulations as texts. Just as it has been for thousands of years. Regulation as Code represents a radical paradigm shift away from this practice. Is it possible to transform laws into algorithms? Why should anyone want to do this? How should you get ready for this as a regulator, manufacturer, authority, or…
Details