EU MDR vs MDD: What Changed for Medical Device Manufacturers

The transition from the Medical Device Directive (MDD, 93/42/EEC) to the EU Medical Device Regulation (EU) 2017/745 (MDR) represents the most significant overhaul of European medical device regulation in over two decades. For manufacturers who built their quality systems, technical documentation, and market access strategies around the MDD, the MDR is not an incremental update — it is a fundamental shift in regulatory expectations.

This article examines the key differences between MDD and EU MDR, explains why the European Commission enacted these changes, and provides a clear-eyed assessment of what manufacturers must do to achieve and maintain compliance under the new framework.

Why the Transition Happened

The MDD was adopted in 1993 and was, by the time the MDR was drafted, showing its age. A series of high-profile device safety scandals — most notably the PIP breast implant fraud and metal-on-metal hip implant failures — exposed critical weaknesses:

• Insufficient clinical evidence requirements: Many devices reached the market under MDD with minimal clinical data, relying on literature reviews and equivalence arguments that were not rigorously scrutinized.
• Inconsistent Notified Body oversight: Manufacturers could "shop" for the most lenient Notified Body in the EU. Oversight quality varied enormously.
• Inadequate post-market surveillance: MDD post-market obligations were relatively light, and the feedback loop from post-market experience to pre-market requirements was weak.
• Limited transparency: There was no comprehensive public database of CE-marked devices, no requirement for public clinical summaries, and limited traceability.

The EU MDR was designed to address all of these structural weaknesses systematically.

Key Changes: MDD to EU MDR

1. Stricter Clinical Evidence Requirements

This is arguably the most impactful change for manufacturers transitioning from MDD to MDR.

Under MDD, clinical evaluation could rely heavily on literature reviews of similar (equivalent) devices. The equivalence standard was broadly interpreted, allowing manufacturers to claim equivalence to devices with different materials, designs, or intended uses without close scrutiny. Pre-clinical bench testing often substituted for actual clinical data.

Under EU MDR, the bar for clinical evaluation is substantially higher:

• Direct access requirement: For implantable and Class III devices, manufacturers must demonstrate that they have contractual access to the full technical documentation of any device claimed as equivalent. In practice, this means equivalence to a competitor's device is nearly impossible unless a formal data-sharing agreement exists.
• PMCF is now mandatory, not optional: All CE-marked devices above Class I must have an active Post-Market Clinical Follow-Up (PMCF) plan. PMCF is not merely surveillance — it must be a structured, scientifically valid clinical data collection program.
• Clinical evaluation reports (CERs) must be living documents: CERs must be regularly updated, with frequency proportional to device risk. Class III annual updates are now the norm.
• MEDDEV 2.7/1 rev. 4 compliance is required: The guidance document for clinical evaluation, MEDDEV 2.7/1 rev. 4, now defines the minimum acceptable standard for clinical evaluation methodology.

2. UDI System

MDD had no Unique Device Identification (UDI) requirement. EU MDR introduces a comprehensive UDI system:

• All devices must have a UDI assigned according to an accepted issuing agency (GS1, HIBCC, or ICCBBA).
• UDI must appear on the device label and, for implantable devices, must be identifiable on the device itself where possible.
• UDI data must be uploaded to EUDAMED (see below), creating a publicly queryable record of CE-marked devices.
• Phased implementation by device class: Class III and implantable Class IIb devices first, followed by other Class IIb and Class IIa, then Class I.

The UDI system dramatically improves device traceability — enabling faster, more targeted recall actions and better post-market surveillance data linkage.

3. EUDAMED — European Database on Medical Devices

MDD had no equivalent to EUDAMED. EU MDR establishes EUDAMED as a central, pan-European database with multiple modules:

EUDAMED Module	Contents
Actor Registration	Manufacturers, authorized representatives, importers
UDI/Device Registration	All CE-marked devices with UDI data
Notified Bodies	Designations, certificates, surveillance activities
Clinical Investigations	Registered clinical investigations
Vigilance	Serious Incidents, Field Safety Corrective Actions (FSCAs)
Market Surveillance	Competent authority market surveillance activities

The Summary of Safety and Clinical Performance (SSCP) — required for all Class III and implantable Class IIb devices — must be publicly available via EUDAMED. This is a major transparency shift: for the first time, patients, healthcare professionals, and the public can access standardized clinical performance summaries for high-risk devices.

Full EUDAMED functionality has been phased due to development delays, but the platform is progressively becoming operational.

4. Enhanced Post-Market Surveillance

MDD post-market surveillance was primarily reactive — manufacturers were required to report serious incidents and take corrective actions, but proactive surveillance was underemphasized.

EU MDR makes post-market surveillance a proactive, continuous obligation:

• Post-Market Surveillance Plan: Every device must have a documented PMS plan describing the methods, frequency, and indicators for systematic surveillance.
• Post-Market Surveillance Report (PMSR): Class I devices must produce a PMSR; Class IIa devices every 2 years; Class IIb and III devices annually (Periodic Safety Update Report — PSUR).
• PSUR: For Class IIb and III devices, the PSUR must include a full benefit-risk assessment updated with post-market data, conclusions from the PMCF, and assessment of SSCP accuracy.
• Trend Reporting: If adverse event rates exceed defined statistical thresholds, manufacturers must report these trends to competent authorities proactively — not just individual incidents.

5. Notified Body Designation Changes

Under MDD, the EU had over 80 designated Notified Bodies, and the designation process was managed by individual member states with inconsistent rigor. The result was that some Notified Bodies operated with insufficient technical expertise and oversight.

EU MDR introduced significantly stricter Notified Body designation requirements:

• Notified Bodies must demonstrate technical competence for each product category they assess.
• Joint Assessment teams including European Commission representatives participate in Notified Body designation audits.
• The number of designated Notified Bodies under MDR has dropped to approximately 40 — less than half the MDD-era number.

This reduction in Notified Body capacity has been a major practical challenge for manufacturers. With fewer Notified Bodies available and each handling a heavier workload, many manufacturers have experienced significant delays in securing Notified Body contracts and review timelines.

6. Reclassification of Certain Devices

EU MDR introduced new and revised classification rules that changed the class of several device categories:

• Software as a Medical Device (SaMD): EU MDR applies stricter classification rules to medical software. Software previously classified as Class I under MDD may now be Class IIa or IIb under MDR, requiring Notified Body involvement for the first time.
• Reusable surgical instruments: Some instruments previously self-declared under MDD now require Notified Body assessment under MDR.
• Certain active implantable devices: Previously regulated under the AIMD Directive, now brought under EU MDR.
• Devices incorporating non-viable biological materials: Classification rules updated to reflect higher risk.
• Devices containing nanomaterials: Specific classification rules applied.

The practical impact is that manufacturers who previously had CE certificates without Notified Body involvement may now require one — triggering full technical documentation reviews and significantly extending compliance timelines.

7. General Safety and Performance Requirements (GSPR)

MDD required devices to meet "Essential Requirements" set out in Annex I of the directive. EU MDR replaces this with "General Safety and Performance Requirements" (GSPR) in Annex I, which are more detailed, risk-based, and explicitly incorporate software, cybersecurity, and usability engineering requirements.

Key additions in GSPR vs. MDD Essential Requirements:

• Cybersecurity: Explicit requirements for devices with electronic programmable systems or connectivity.
• Usability engineering: Human factors and usability must be demonstrated throughout the design process.
• Clinical benefit: Device labeling must now include a positive benefit-risk assessment based on clinical evidence.

Compliance Timeline and Grace Periods

The MDD-to-MDR transition has been complicated by repeated extensions of transition periods, largely due to Notified Body capacity constraints.

Current status (as of 2026):

• EU MDR was fully applicable from May 26, 2021 for new applications.
• Devices with valid MDD certificates could continue to be placed on the market until December 31, 2027 for Class III and implantable Class IIb devices, and December 31, 2028 for Class IIa and other Class IIb devices — subject to the device not undergoing significant changes and the manufacturer being MDR-compliant in other respects.
• Sell-off of MDD stock: Devices manufactured and placed on the EU market before the expiry of transition periods can be sold until they reach the end user.

Manufacturers should not interpret these extensions as permission to delay MDR compliance work. Notified Body capacity is constrained, and early engagement is essential to secure assessment slots before deadline pressure intensifies.

Comparison Table: MDD vs EU MDR

Aspect	MDD (93/42/EEC)	EU MDR (2017/745)
Legal instrument	Directive (implemented nationally)	Regulation (directly applicable)
Clinical evidence	Literature-based, equivalence broad	Device-specific, PMCF mandatory
Equivalence claims	Broadly permitted	Highly restricted for Cl. III/implantables
UDI	Not required	Mandatory for all device classes
Transparency database	None (national registries only)	EUDAMED (pan-European, public)
SSCP / public summary	Not required	Mandatory for Cl. III + implantable IIb
Post-market surveillance	Mainly reactive	Proactive — PMSR/PSUR mandatory
Notified Body count (EU)	~80	~40
Software classification	Limited SaMD guidance	Stricter rules; many SaMD reclassified
GSPR / Essential Requirements	Annex I Essential Requirements	Annex I GSPR (more detailed, cybersecurity)

What Manufacturers Must Do

If you have products currently certified under MDD, or are beginning MDR compliance work:

1. Gap analysis first: Compare your existing Technical Documentation against MDR Annex II (technical documentation requirements) and Annex III (post-market surveillance) to identify gaps. Clinical evaluation gaps are typically the most significant.
2. Update your Clinical Evaluation Report: Assess whether your current CER meets the MEDDEV 2.7/1 rev. 4 standard. If your CER relies primarily on literature review and equivalence claims, significant additional clinical data may be required.
3. Develop a PMCF plan: Even if your device has long post-market history, you need a documented, scientifically valid PMCF plan that specifies how you will continue collecting clinical evidence.
4. Implement UDI: Assign UDIs, update packaging, and register in EUDAMED.
5. Update your GSPR checklist: Ensure cybersecurity, usability, and benefit-risk assessment are addressed in your technical file.
6. Engage your Notified Body early: Given capacity constraints, early engagement is not optional if you intend to maintain market access through the transition deadlines.

Conclusion

The EU MDR transition is not simply an administrative update — it reflects a fundamental philosophical shift from minimum-standard compliance to evidence-based assurance of device safety and performance. The manufacturers who will navigate this transition most successfully are those who treat MDR as an opportunity to build robust clinical and post-market surveillance infrastructure, not merely a compliance checkbox exercise.

---

The EU MDR regulatory landscape continues to evolve, with EUDAMED modules going live, guidance documents being updated, and Notified Body capacity shifting. MedFlux monitors 27 regulators in real time, providing your team with immediate intelligence on every EU MDR update, EUDAMED development, and Notified Body designation change that could affect your product portfolio.