Regulatory Submissions

Conformity assessments for regulatory approvals

What is a conformity assessment

A conformity assessment for medical devices is a comprehensive evaluation process to ensure that a medical device meets the essential safety and performance requirements specified by relevant regulations.

Medical device manufacturers compile technical documentation and submit it for review by the relevant regulatory authority. Manufacturers must also establish and implement a Quality Management System (QMS), which is audited as part of the regulatory approval process.

The conformity assessment process differs depending on:

  • The geographic markets where the device will be placed on the market
  • The risk classification of the medical device based on its intended purpose

US FDA Regulatory Submissions

In the USA, the Food and Drug Administration (US FDA) provides different conformity assessment routes for medical devices based on their risk classification (Class I, II, or III), reflecting the risk level they pose. The primary routes include:

Exemptions and General Controls:

  • Applicable for: Most Class I devices and some Class II devices deemed to pose minimal risk.
  • Process: These devices are generally exempt from premarket notification (510(k)) but must comply with general controls such as good manufacturing practices, labelling, and record-keeping requirements.
  • Outcome: Devices can be marketed without prior FDA review, provided they meet all applicable regulatory requirements.

510(k) Premarket Notification:

  • Applicable for: Most Class II devices and some Class I devices.
  • Process: Manufacturers must demonstrate that their device is substantially equivalent to a legally marketed predicate device. This involves comparing the new device’s intended use, technological characteristics, and performance data with the predicate.
  • Outcome: The device can be marketed if the FDA agrees with the substantial equivalence claim.

De Novo Classification Request:

  • Applicable for: New or novel devices for which there is no legally marketed predicate but are determined to be low to moderate risk.
  • Process: Manufacturers submit a De Novo request to classify their device as Class I or II, providing robust evidence of safety and effectiveness.
  • Outcome: If granted, the device can be marketed and may serve as a predicate for future 510(k) submissions.

Premarket Approval (PMA):

  • Applicable for most Class III devices, which pose the highest risk and usually support or sustain life, are implanted, or present potential unreasonable risk of illness or injury.
  • Process: Manufacturers must provide extensive scientific evidence demonstrating the device’s safety and effectiveness through clinical trials and laboratory testing.
  • Outcome: If the FDA determines that the benefits outweigh the risks, the device receives PMA approval, allowing it to be marketed.

Humanitarian Device Exemption (HDE):

  • Applicable for: Devices intended to benefit patients with rare conditions (affecting fewer than 8,000 individuals annually in the USA).
  • Process: Manufacturers must demonstrate that the device does not pose an unreasonable or significant risk of illness or injury and that no comparable device is available.
  • Outcome: The device can be marketed if approved, but its use is restricted to specific conditions.

These routes ensure that medical devices introduced to the USA market are safe, effective, and appropriately classified based on their risk profiles.

EU CE Marking

The European Union (EU) Medical Device Regulation 2017/745 (MDR) process involves several key steps, including:

  1. Classification: Determining the risk class of the medical device, which dictates the conformity assessment route and level of assessment required.
  2. Technical Documentation: Compiling detailed information about the device, including design, manufacturing processes, clinical data, risk management, and labelling.
  3. Quality Management System (QMS): Implementing a QMS, such as ISO 13485, to ensure consistent manufacturing and quality control processes. The QMS is audited during the conformity assessment process but may be independently audited and certified before submitting technical documentation. One important step that is sometimes overlooked is establishing a physical location in an EU member state or appointing an EU-based authorised representative.
  4. Declaration of Conformity: A formal statement by the manufacturer declaring that the device complies with all relevant regulations.
  5. Notified Body Review: Engaging a Notified Body, an independent certification organisation, to review the technical documentation and QMS. The extent of the review depends on the device’s risk classification. Conducting necessary tests and inspections to verify that the device complies with applicable standards and regulations.
  6. CE Marking: The Notified Body reviews the submission and, if the device meets all regulatory requirements, issues a CE marking certification, enabling the device to be placed on the EU market. The manufacturer affixes the CE mark to the device, indicating it meets EU regulatory requirements.
  7. Post-Market Surveillance: Implementing ongoing monitoring of the device’s performance and safety after placing it on the market. Additionally, manufacturers must register their devices with the European Database on Medical Devices (EUDAMED).

The EU Medical Device Regulation (MDR) outlines several conformity assessment routes tailored to the risk classification and complexity of the medical device. These routes ensure that devices meet stringent safety and performance standards. The main conformity assessment routes under the MDR are:

Self-Certification (Class I Non-Sterile, Non-Measuring Devices):

  • Manufacturers of low-risk devices (Class I) that are not sterile, reprocessable or do not have a measuring function can perform a self-assessment.
  • They must compile technical documentation and a Declaration of Conformity but do not require Notified Body involvement.

Class I Sterile, Class I Measuring, and Class I Reusable Surgical Instruments:

  • These devices require a Notified Body to assess the aspects related to sterility, measuring function, or reusability.
  • The Notified Body reviews the technical documentation and manufacturing processes related to these aspects.

Class IIa Devices:

  • A Notified Body reviews the technical documentation and the QMS.
  • The Notified Body issues a certificate of conformity if the device meets regulatory requirements.

Class IIb Devices

  • A more rigorous assessment than Class IIa.
  • Involves a comprehensive review of the QMS and complete technical documentation by a Notified Body.
  • The Notified Body also inspects the manufacturer’s facilities and production processes.

Class III Devices:

  • The highest risk class requires the most stringent assessment.
  • A Notified Body must review full technical documentation and clinical evaluation.
  • The Notified Body performs detailed manufacturing process inspections and conducts batch verification if applicable.
  • Additional scrutiny is applied for implantable Class III devices, including a possible expert panel consultation.

Custom-Made Devices:

  • Custom-made devices (tailored to individual patients) follow a specific assessment route.
  • Manufacturers must prepare technical documentation and issue a statement that the device complies with the general safety and performance requirements.
  • A Notified Body may assess certain aspects depending on the device’s risk classification.

Each conformity assessment route ensures that medical devices are rigorously evaluated for safety and performance, with the involvement of Notified Bodies increasing with the device’s risk classification. This structured approach helps maintain high standards for medical devices in the EU market.

Resources

Clinical Evaluation: A methodologically sound ongoing procedure to collect, appraise, and analyse clinical data about a medical device and to verify its safety and performance, including its clinical benefits. Also see Clinical Investigation.

Conformity Assessment: A process used to determine whether a product, service, system, or entity meets specified standards, regulations, or requirements.

Design Control: A systematic process that ensures a device is designed to meet user needs and intended uses.

Design and Development Plan: A comprehensive document outlining the systematic process and stages, including timelines, responsibilities, and resources, required to bring a medical device from concept to market-ready product, ensuring compliance with regulatory standards.

Design Freeze: The point in the medical device development process where the design is finalised and no further changes are allowed, ensuring a stable basis for validation, regulatory submission, and production.

Design Inputs: The physical and performance requirements of a device that are used as a basis for device design. Also known as Technical Specifications.

Design Outputs: The results of a design effort at each design phase and at the end of the total design effort used to evaluate conformance to design input requirements.

Design Review: A formal evaluation process to assess the completeness, feasibility, and compliance of a device’s design with specified requirements (design inputs).

Design Transfer: The process of transitioning a product’s design from development and manufacturing into production while ensuring all specifications and requirements are met.

Design Verification: The process of ensuring that design outputs meet design inputs.

Design Validation: The process of ensuring that devices conform to defined user needs and intended uses.

ISO 13485: An international standard that specifies requirements for a quality management system (QMS) specific to the medical devices industry.

Manufacturer: A legal entity that designs, produces, assembles, or labels a medical device with the intention of placing it on the market.

Post-Market Surveillance (PMS): The proactive collection and review of experiences and data related to a device after it has been released onto the market to ensure continued safety and performance.

Quality Assurance (QA): The systematic activities implemented to ensure that devices consistently meet regulatory requirements and standards while meeting user needs and expectations.

Quality Management System (QMS): A formalised system that documents the structure, responsibilities, and procedures required to achieve effective quality management.

Regulation: The rules, laws, standards, and requirements set by regulatory authorities to ensure the safety, efficacy, and quality of devices intended for medical use.

Regulatory Authority: An official body overseeing and enforcing laws, regulations, and standards within a specific industry or sector to ensure compliance and protect public interests. Also known as a Regulatory Authority. Also see Competent Authority and Notified Body.

Regulatory Submission: The formal process of submitting documentation and data to regulatory authorities for review and approval to market or sell the device within a specific jurisdiction.

Risk Management (RM): The systematic application of management policies, procedures, and practices to the tasks of analysing, evaluating, controlling, and monitoring risk.

Safety: The condition of being protected from or unlikely to cause danger, risk, or injury.

Standard: A document that provides guidance, requirements, or specifications established by regulatory bodies, industry organisations, or international consensus groups.

Technical Documentation: All documents that demonstrate the design, manufacture, and performance of the device, essential for ensuring compliance with regulatory requirements. This is also known as the Technical File.

Technical Specifications: Detailed descriptions of the requirements, characteristics, and standards that a product, service, or system must meet or adhere to, ensuring clarity and consistency in its design, production, or implementation. Also see Design Inputs.

User Requirements: The requirements and preferences of the intended users, which must be considered and addressed in the device design. Also known as User Needs or Customer Specifications.