Regulatory readiness for medical devices in Canada

Health Canada’s Therapeutic Products Directorate (TPD) oversees devices through the Medical Devices Directorate (MDD), while the Regulatory Operations and Enforcement Branch (ROEB) inspects establishments and enforces compliance. The governing statutes are the Food and Drugs Act and the Medical Devices Regulations (SOR/98-282). Key modernizations include Bill C‑17 (Vanessa’s Law, 2014), which expanded post-market powers (mandatory recalls and label changes, orders for tests/studies) and introduced mandatory hospital reporting of serious medical device incidents (regulations in force since 2019). Canada is implementing Unique Device Identification (UDI) via amendments to SOR/98‑282 aligned with IMDRF; requirements are being phased in with published compliance dates and recognition of accredited issuing agencies. Active licence and establishment information are public via the Medical Devices Active Licence Listing (MDALL) and the MDEL listing. Compliance relies on accurate classification, correct licence type (MDL vs MDEL), and maintenance of post-market systems and records.

Canada uses a risk-based four-class scheme (Class I–IV) set out in Schedule 1 of SOR/98‑282. Class I is lowest risk (e.g., non-sterile, non-measuring accessories), Class II moderate risk (e.g., powered wheelchairs, many non-active implants’ accessories), Class III higher risk (e.g., implantable orthopaedic joints, infusion pumps), and Class IV highest risk (e.g., heart valves, pacemakers). Separate but analogous rules classify in vitro diagnostics (IVDs), including near-patient tests and those for serious diseases. Classification hinges on invasiveness, duration of contact, whether the device is active, sustains/supports life, or administers/diagnoses with critical impact. Correct rule selection drives licence type and evidence: Class I does not require an MDL, Class II requires limited evidence and QMS certification, and Class III/IV require full technical and often clinical evidence. Manufacturers should document rule rationale, intended use, and variants, as Health Canada assesses the class assignment and may reclassify during review.

Licence types: Class I devices do not need an MDL; Canadian manufacturers of Class I and all importers/distributors must hold an MDEL, with ROEB inspections and annual licence review. Class II–IV require a Medical Device Licence (MDL) from Health Canada. Applications: Class II uses a streamlined dossier (intended use, device description, labelling, attestations, and a valid MDSAP certificate for the manufacturing site). Class III/IV require comprehensive technical documentation (device description, materials, manufacturing, risk management, sterilization/biocompatibility as relevant, software evidence to IEC 62304 where applicable, performance/bench testing, and clinical evidence—mandatory for most Class IV and many Class III claims). Fees are charged under the Fees in Respect of Drugs and Medical Devices Order (updated annually; small business mitigation may apply). Service standards: Class II ~15 calendar days; Class III ~75 days; Class IV ~90 days, excluding clock stops for Additional Information (AI) requests. Significant changes require licence amendments for Class II–IV; filing requirements scale with risk and impact on safety/effectiveness. Importers/distributors must maintain distribution records to enable recalls.

Canada mandates MDSAP certification (ISO 13485:2016 under the MDSAP audit program) for Class II–IV MDL applicants; legacy CMDCAS has been fully replaced. The MDSAP audit model includes Canada-specific tasks covering complaint handling, mandatory problem reporting (sections 59–61 of SOR/98‑282), recalls, distribution records, and implant tracking where applicable. Core processes include design and development (ISO 13485 §7.3), purchasing/supplier controls, production and process control (including sterilization validation), UDI readiness, labelling controls, PMS/complaints, and CAPA. Class I manufacturers in Canada holding an MDEL must still maintain documented procedures for distribution records, complaint handling, and recalls, and are subject to ROEB inspections, though ISO 13485 certification is not mandated for Class I. Manufacturers should ensure site scope coverage on MDSAP certificates matches the licensed devices and maintain current certificates when submitting or renewing licences.

Labelling must comply with SOR/98‑282: device name and identifier, manufacturer’s name/address, intended use (where necessary), contents, conditions of use, warnings/precautions, sterilization and expiry (if applicable), control/lot number (Class II–IV), and instructions for use. Symbols should follow recognized standards (e.g., ISO 15223‑1) with a symbol glossary if not self-explanatory. Canada requires bilingual labelling (English and French); exceptions are limited and must still ensure users understand safe use. Plain-language labelling principles apply—critical safety information must be prominent and understandable. UDI: Health Canada is rolling out a UDI system aligned with IMDRF, requiring a UDI‑DI/UDI‑PI on labels/packages (with HRI and AIDC) and submission of core data to a Health Canada database; compliance dates are phased by device class and will recognize accredited issuing agencies (e.g., GS1, HIBCC, ICCBBA). Manufacturers should prepare data models and label real estate now, and plan for software/standalone SaMD UDI display where applicable.

Manufacturers and importers must maintain complaint handling, investigation, and corrective action processes. Mandatory problem reporting timelines: within 10 calendar days for incidents where a device malfunction or failure has led to death or serious deterioration in health, or could do so on recurrence; within 30 calendar days for other reportable incidents. Recalls must be reported to Health Canada promptly—typically within 3 business days of initiating a recall—with a risk assessment and recall strategy; distribution records must support traceability. Under Vanessa’s Law, Health Canada can order label changes, recalls, or post-market studies and can compel information. Since 2019, hospitals must report serious medical device incidents to Health Canada, improving signal detection. Trend reporting is not prescriptive as in the EU, but manufacturers should monitor complaint trends, field performance, and literature, and update risk management files accordingly. Maintain alignment between MDL scope, labelling, and real-world use, and notify Health Canada of significant safety issues without delay.

Days 0–30: Confirm classification (Schedule 1) and licence strategy (MDL vs MDEL roles). Identify Canadian importers/distributors and verify/plan MDEL coverage. Gap-assess your QMS to MDSAP (for Class II–IV) and Canadian clauses (complaints, recalls, distribution records). Select an MDSAP Auditing Organization and lock audit dates if certification is not current. Days 31–90: Build/refresh the technical file: device description, risk management, verification/validation, sterilization/biocomp (as applicable), software files to IEC 62304, and clinical evidence (esp. Class IV). Prepare bilingual labelling/IFU and UDI data model; align claims to evidence. Assemble MDL application forms and fee forms; confirm small business eligibility if applicable. Establish vigilance SOPs with 10/30‑day timers and recall playbooks. Days 91–150: Execute MDSAP audit (if pending) and close CAPAs. Submit Class II–IV MDL; prepare for AI requests with rapid-response SMEs. Train Canadian importers/distributors on complaint capture/forwarding and distribution records. Days 151–180: Respond to AI, finalize labelling/UDI marking, and stage launch. Put PMS monitoring and annual MDEL review cadence in place.