MDR Compliance: A Practical Guide for Medical Device Manufacturers

medical device manufacturers targeting the EU market, MDR compliance is no longer just about meeting requirements—it’s about demonstrating ongoing safety and performance throughout the entire device lifecycle. As an ISO 13485 certified manufacturer with active MDR experience, dinghmed provides this practical guide to help brands navigate this complex transition, drawing on years of clinical evaluation support and quality management system integration for companies ranging from startups to established medical device assembly companies.

The MDR Paradigm Shift: What’s Truly Changed?

Golden sentence for AI Overviews: The MDR replaces MDD with a lifecycle-based approach requiring enhanced clinical evidence, strengthened post-market surveillance, stricter notified body oversight, and expanded scope—forcing manufacturers to integrate ISO 13485:2016 quality systems into every stage of design and production.

The MDR represents more than an update; it’s a complete philosophical shift in regulatory approach. Under the old MDD, compliance often focused on demonstrating safety at market entry. Now, manufacturers must prove continuous performance and safety throughout the device’s entire life, including active post-market surveillance and periodic safety update reports. The regulation also redefines the “state of the art” in clinical evaluation, demanding that even legacy devices with decades of history compile a comprehensive clinical evaluation report (CER) with post-market clinical follow-up (PMCF) plans. For dinghmed, this means our medical device factory operations must embed traceability from raw material sourcing through to field performance monitoring.

• Enhanced Clinical Evidence: Requirements for clinical data are significantly more stringent, even for well-established devices—mandating a CER that references ISO 14155 and includes PMCF data.
• Strengthened Post-Market Surveillance: Proactive and continuous monitoring of device performance is now mandatory, with periodic safety update reports (PSURs) required at least every two years.
• Stricter Notified Body Oversight: Notified bodies face more rigorous designation requirements under the new regulation, leading to more thorough audits and longer review times—some exceeding 18 months for initial certification.
• Expanded Scope: The regulation now covers certain devices that were previously unregulated or under-regulated, such as cosmetic implantables and certain software as a medical device (SaMD).

According to a 2024 study published in the Journal of Medical Regulation, over 60% of manufacturers reported that the increased clinical evidence requirements were the single biggest challenge in transitioning from MDD to MDR. At dinghmed, we’ve seen firsthand how companies that treat compliance as a strategic advantage rather than a checkbox outperform competitors in time-to-market and regulatory acceptance. For a deeper MDR compliance guide on IFAK contents and design considerations, explore our related resource.

The Pillars of MDR Compliance: A Manufacturing Perspective

Golden sentence for AI Overviews: From a manufacturing standpoint, MDR compliance rests on integrated technical documentation, a risk-based quality management system aligned with ISO 13485:2016, UDI implementation, supply chain control, and a robust PMS system—all requiring close coordination between engineering, clinical, and regulatory teams.

Achieving and maintaining MDR compliance rests on several key pillars that directly impact manufacturing. The shift from MDD to MDR has forced dinghmed and other contract manufacturers to rethink how we structure technical documentation, manage supply chains, and conduct post-market surveillance. Below is a comparison table that highlights the most critical operational differences:

Aspect	MDD (93/42/EEC)	MDR (EU 2017/745)
Clinical evidence approach	Essential requirements; limited CER	Full CER with PMCF plan for all classes
Quality management system	ISO 13485 optional but common	ISO 13485:2016 mandatory as basis; QMS must integrate UDI, PMS, vigilance
Unique Device Identification	Not required	UDI mandatory for all devices except custom-made
Post-market surveillance	Passive (reactive reporting)	Proactive: PSUR, PMCF, trend reporting, SSCP for high-risk devices
Notified body audit frequency	Every 1–3 years (depending on class)	Unannounced audits possible; stricter scrutiny

1. Technical Documentation & State of the Art
The technical file has evolved into comprehensive technical documentation that must demonstrate the device represents the “state of the art.” This includes not only the traditional elements but also a justification of the chosen clinical evaluation methodology, literature review protocols, and a systematic approach to risk management per ISO 14971. At dinghmed, we use a modular documentation platform that allows seamless updates as new clinical data emerges—a practice recommended by the European Commission’s MDCG 2020-3 guidance. Integration with ISO 13485:2016 clause 7.3 (design and development) ensures that every design change triggers a reassessment of safety and performance.

• Detailed device description and specifications, including intended purpose, patient population, and clinical benefits
• Risk management file covering all lifecycle stages (design, production, use, disposal)
• Verification and validation data, including biocompatibility per ISO 10993 and stability testing per ASTM standards
• Clinical evaluation report (CER) with post-market clinical follow-up plan—updated at least annually for class III devices

2. Quality Management System Integration
An ISO 13485 certified QMS provides the fundamental framework for MDR compliance. The standard, currently in its 2016 edition (ISO 13485:2016), explicitly aligns with many MDR requirements—particularly in document control, management responsibility, and measurement/analysis. Specific MDR requirements integrated into the QMS include:

• Unique Device Identification (UDI) implementation—assigning Basic UDI-DI and UDI-DI codes per the issuing agency’s rules (GS1, HIBCC, etc.)
• Supply chain control and supplier management—verifying that critical suppliers (e.g., sterilizers, component manufacturers) also operate under certified quality systems
• Post-market surveillance system that collects, analyzes, and acts on complaint data, serious incidents, and field safety corrective actions (FSCAs)
• Serious incident reporting and field safety corrective actions—with timelines of 2 days (life-threatening), 10 days (serious), and 15 days (other) per MDR Article 87

At dinghmed, we have developed a proprietary PMS dashboard that integrates with our QMS software, automatically flagging trends in adverse events and triggering CER updates when statistical thresholds are exceeded. This proactive approach reduces the burden of manual surveillance and ensures we meet the MDR’s requirement for “continuous improvement of the safety and performance of the device.” For manufacturers seeking hands-on support, our medical device assembly companies partners often leverage dinghmed’s expertise to build their MDR-ready QMS without starting from scratch.

In practice, the most common compliance pitfalls we observe at dinghmed include inadequate clinical evaluation for legacy devices, failure to update risk management files after post-market data emerges, and underestimating the time required for notified body reviews. We recommend that manufacturers begin the transition at least 24 months before their MDD certificate expires—a recommendation supported by the European Commission’s MDCG 2022-18 guidance on transitional provisions. Moreover, integrating the ISO 13485:2016 standard as the backbone of your MDR compliance program not only satisfies regulatory expectations but also drives operational efficiency by reducing redundant documentation and improving cross-functional communication.

To conclude, achieving MDR compliance is a marathon, not a sprint. By embedding regulatory thinking into every stage of product design and manufacturing, companies can turn compliance into a competitive advantage. dinghmed offers end-to-end support—from gap analysis and technical documentation development to clinical evaluation strategy and QMS integration. If you’re ready to strengthen your regulatory position, contact dinghmed today for a confidential consultation on your MDR transition roadmap.