What EU MDR is and why it replaced the MDD
EU MDR is short for the European Union Medical Device Regulation, formally Regulation (EU) 2017/745. It sets the legal requirements for medical devices sold in the EU. It applies across the bloc directly, which means the same core rules apply in every member state without each country rewriting them into national law. For manufacturers, that matters because classification, conformity assessment, technical documentation, clinical evidence, and post-market obligations now sit under one stronger framework.
It replaced the older Medical Devices Directive, often called the MDD. The MDD had been in place for years, but lawmakers concluded it no longer matched the complexity of modern devices, software, connected products, and higher expectations around clinical evidence and traceability. Public controversies over device failures also increased pressure for tighter oversight. The MDR was designed to close gaps, improve patient safety, raise the quality of evidence, and make manufacturers more accountable for what happens after a device reaches the market.
In practice, the change from directive to regulation also signalled a change in tone. Under the MDR, documentation must be more structured, more current, and more defensible. Manufacturers cannot treat compliance as a one-off submission exercise. They are expected to maintain a living body of evidence that supports the device throughout its lifecycle.
Who the MDR applies to
The MDR applies first and foremost to manufacturers placing medical devices on the EU market, whether they are based inside or outside the EU. But the regulation also reaches other economic operators. Authorised representatives, importers, and distributors all have defined responsibilities, and those responsibilities are more explicit than they were under the MDD.
The rules cover a wide range of products, from low-risk consumables to implantable devices and many types of medical software. Software has become especially important under the MDR because classification rules can push products into a higher risk class than manufacturers expect. Accessories, procedure packs, and certain products without an intended medical purpose can also fall within the framework. The right starting point is always intended purpose: what the manufacturer claims the product is for, who it is for, and how it is supposed to be used.
For smaller companies, this broad scope means the MDR is not just a regulatory team issue. Product, quality, clinical, post-market, and engineering teams all influence compliance, because the required evidence spans the entire product lifecycle.
The key requirements manufacturers need to understand
The MDR is a large regulation, but several obligations shape daily compliance work more than any others. Technical documentation must describe the device, its design, intended purpose, risk classification, manufacturing information, safety and performance requirements, verification and validation evidence, labelling, and post-market arrangements. This is not a single report; it is a structured file that must stay internally consistent.
Clinical evaluation is another central requirement. Manufacturers need a methodical assessment of clinical data showing that the device achieves its intended purpose and that benefits outweigh risks. Post-market surveillance then takes over once the device is on the market. Instead of waiting for issues to emerge informally, manufacturers must proactively collect and assess complaints, trends, literature, vigilance information, and other relevant data.
The MDR also strengthened traceability through UDI, or Unique Device Identification. Devices must be identified in a consistent way so they can be tracked through distribution and into market surveillance systems. On top of that, manufacturers must appoint a PRRC, the Person Responsible for Regulatory Compliance. That role is meant to ensure someone with the right expertise is formally accountable for release, documentation, vigilance, and reporting obligations.
- Technical documentation that follows Annex II and Annex III
- Clinical evaluation supported by adequate clinical evidence
- A documented post-market surveillance system
- UDI and stronger traceability obligations
- A designated PRRC with sufficient regulatory competence
The transition timeline and the 2023 and 2024 amendments
The MDR entered into force in 2017, but its date of application was delayed and phased because many manufacturers and Notified Bodies were not ready. The transition has since been adjusted more than once. In 2023, the EU adopted a major extension that gave certain legacy devices more time to remain on the market, provided manufacturers met specific conditions such as having a quality management system in place and moving toward MDR certification. This was a practical response to the risk of device shortages if too many products lost market access at once.
In 2024, further amendments addressed the practical implementation of transitional measures, including timelines linked to EUDAMED obligations and some requirements around legacy device administration. The key message for manufacturers is that deadlines have moved, but the destination has not changed. The expectation is still full MDR compliance. Extensions create breathing room, not a reason to postpone system changes indefinitely.
That is especially important for SMEs. Waiting for the last possible deadline often makes the project more expensive, because scarce Notified Body capacity, consultant availability, and internal resource constraints all become more severe as deadlines approach. Companies that treat the transition as an operational redesign effort, not just a certificate-renewal problem, are usually in a stronger position.
What the MDR means in practice for SME manufacturers
For small and mid-sized manufacturers, the hardest part of MDR is not understanding individual clauses. It is building a system that keeps everything aligned over time. The same core data appears in classification rationales, risk files, clinical evaluation, PMS records, IFUs, declarations, and submissions. If each document is managed separately, every change becomes a manual project and consistency starts to break down.
That is why the MDR feels heavier than the MDD. It demands stronger evidence, tighter traceability, clearer accountability, and better lifecycle control. SMEs often feel this most sharply because they may have only one regulatory specialist, limited clinical support, and an external consultant handling part of the file. The documentation burden per device can still resemble that of a much larger company.
The practical response is to organise around a single source of truth: define intended purpose carefully, confirm classification early, build structured technical documentation, maintain a credible clinical evaluation process, and make PMS a live feedback loop instead of a yearly scramble. Companies that do this well are not necessarily doing less work. They are doing it in a more connected and repeatable way.