CECheck The reference for CE marking

Medical Devices Regulation (EU) 2017/745

Last reviewed: May 2026 · Legal status verified against EUR-Lex.

Regulation (EU) 2017/745 of the European Parliament and of the Council of 5 April 2017 on medical devices — commonly the "MDR" — is the EU framework for the placing on the market and putting into service of medical devices and their accessories. It replaced Directives 93/42/EEC (medical devices) and 90/385/EEC (active implantable medical devices). The MDR was published in the OJEU as OJ L 117, 5.5.2017, p. 1 and has applied from 26 May 2021. The application date was deferred by one year from the original 26 May 2020 by Regulation (EU) 2020/561 in response to COVID-19. Subsequent amendments extended transitional periods for legacy devices certified under the predecessor directives.

Legal status and timeline

Scope: products covered

Article 1 and Annex XVI of the MDR apply to:

Software as a medical device

Software intended for medical purposes is a medical device under MDR Article 2(1). The classification rules in Annex VIII apply, including specific Rule 11 which has placed much medical software into Class IIa, IIb, or III depending on the seriousness of the decision the software supports. Rule 11 has been one of the principal sources of difficulty in MDR transition for software developers, as it pushed many products previously self-certified under the MDD into Notified-Body-required classes.

Borderline products

The Commission's Manual on borderline and classification under the MDR (most recent edition published in 2024) addresses contested cases — software with general wellness purposes vs. medical purposes, accessories vs. consumables, the boundary with cosmetics under Regulation (EC) 1223/2009, with biocides under Regulation (EU) 528/2012, and with personal protective equipment under PPE Regulation 2016/425.

Device classification (Annex VIII)

MDR Annex VIII contains 22 rules dividing devices into four classes by risk:

Essential requirements: general safety and performance

MDR Annex I sets out the general safety and performance requirements (GSPRs), structured into three chapters:

Conformity assessment procedures

Articles 52–53 and Annexes IX, X, XI set the routes:

See conformity assessment modules and Notified Bodies. MDR-designated Notified Bodies number around 50 in May 2026, down from approximately 80 under the predecessor directives.

Technical documentation

Annexes II and III set the technical documentation requirements:

The documentation must be retained for 10 years after the last device was placed on the market, or 15 years for implantable devices (Article 10(8)).

EU Declaration of Conformity

Article 19 and Annex IV require the Declaration to include the Basic UDI-DI of the device, manufacturer's Single Registration Number (SRN), references to the Notified Body certificates, address where the technical documentation is kept, and conditions of validity. See EU Declaration of Conformity. The Declaration must be made available in all languages required by the Member States where the device is made available.

Marking and labelling

Article 20 requires the CE marking; the four-digit Notified Body identification number appears next to the mark for all devices except Class I (non-sterile, non-measuring, non-reusable). Beyond the CE mark, the label must include (Annex I, Section 23):

UDI and EUDAMED

The Unique Device Identification system (Articles 27–30) requires each device to have a UDI consisting of a Device Identifier (DI) and a Production Identifier (PI). The UDI is registered in EUDAMED — the European Database on Medical Devices established under Article 33. EUDAMED has six modules: Actor Registration, UDI/Device Registration, Notified Bodies and Certificates, Clinical Investigations and Performance Studies, Vigilance and Post-Market Surveillance, and Market Surveillance. As of May 2026, the Actor and UDI/Device modules are mandatory; the remaining modules are operating on a voluntary basis pending the Commission's publication of the EUDAMED full functionality notice.

Person Responsible for Regulatory Compliance (PRRC)

Article 15 requires each manufacturer (and each Authorised Representative, by Article 11) to have at least one person responsible for regulatory compliance with specified qualifications: a diploma in a relevant field (law, medicine, pharmacy, engineering) plus one year's professional experience, or four years' professional experience. Micro and small enterprises are not required to have the PRRC within the organisation but must have a person continuously and permanently at their disposal.

Recent and upcoming changes

Related legislation

Common errors

Sources