Guide

Global medical-device regulatory readiness: the V5 Ultimate master hub

Entering multiple device markets requires a universal backbone plus precise regional execution. Globally, regulators converge on ISO 13485:2016 for QMS, demand market‑specific evidence for clearance or certification, and enforce post‑market surveillance with UDI, vigilance, and registries. This hub explains the three-layer stack (QMS spine → market clearances → post‑market), how MDSAP accelerates five jurisdictions, where regions diverge (clinical evidence, UDI databases, language, authorized representatives), and a practical 12–18‑month readiness roadmap. It also maps dominant regulatory pathways (FDA, EU MDR/IVDR, UKCA, NMPA, PMDA, MFDS, ANVISA, CDSCO, TGA, Health Canada, SFDA/MOHAP, Swissmedic) and links to country deep‑dives.

Start free trial Free trial, no credit card, onboard in days, not months.

The universal three-layer stack for medical devices

Successful global access follows a three-layer model: 1) QMS spine aligned to ISO 13485:2016 (process control, design and development, CAPA, production, supplier controls, traceability, validation), integrated with ISO 14971 risk management and, for software, IEC 62304 lifecycle. As of Feb 2, 2026, FDA’s 21 CFR Part 820 Quality Management System Regulation (QMSR) incorporates ISO 13485 with FDA-specific clarifications. 2) Country/region-specific regulatory clearance: e.g., FDA 510(k)/De Novo/PMA in the US; EU MDR 2017/745 and IVDR 2017/746 with Notified Bodies; UKCA via MHRA Approved Bodies; NMPA registration in China; PMDA/MHLW approvals in Japan; MFDS in Korea; ANVISA in Brazil; CDSCO licensing in India; TGA ARTG inclusion in Australia; Health Canada device licences; SFDA (Saudi Arabia) and MOHAP (UAE) in GCC; Swissmedic oversight in Switzerland. 3) Post‑market layer: global UDI assignment and submissions (e.g., GUDID, EUDAMED, NMPA UDI, Saudi-DI, AusUDID), vigilance/medical device reporting (MDR/MDV, FSCA/recalls), post‑market clinical follow‑up (PMCF/PMDA re-exams), periodic reports (e.g., PSUR, Health Canada problem reports), and, where applicable, registry participation (e.g., joint/implant registries).

ISO 13485:2016 — the universal QMS spine

ISO 13485:2016 remains the global foundation for device QMS. It is recognized or referenced by Health Canada (mandatory via MDSAP for Class II–IV manufacturers), incorporated into FDA’s QMSR (21 CFR Part 820 as of 2026), aligned with EU MDR Annex IX audits by Notified Bodies, mirrored in Japan’s QMS Ordinance (MHLW MO 169), Korea’s K-GMP, Brazil’s RDC 665/2022, Australia’s TGA QMS expectations, India’s MDR 2017 QMS provisions, Switzerland’s MDR-aligned oversight, and GCC regulators. Key pillars include documented design and development controls, risk management across the lifecycle (per ISO 14971), production and process validation, traceability (especially for implants), complaint handling and reporting, CAPA effectiveness checks, supplier evaluation, and staff competence management. Harmonizing procedures to ISO 13485 reduces rework during regional audits, while enabling consistent technical documentation and clinical evaluation evidence packaging for multiple submissions.

MDSAP — the multi-country audit shortcut

The Medical Device Single Audit Program (MDSAP) provides one audit against ISO 13485 with jurisdictional add-ons covering: FDA (US), Health Canada, TGA (Australia), ANVISA (Brazil), and MHLW/PMDA (Japan). Outcomes: a MDSAP certificate (3-year term) with annual surveillance and a re-certification audit. Acceptance nuances: Health Canada mandates MDSAP for Class II–IV device manufacturers; TGA, ANVISA, and PMDA accept MDSAP QMS evidence to streamline or substitute local QMS audits (subject to risk-based exceptions and device class); FDA participates and uses MDSAP reports to inform inspections, but MDSAP does not generally replace FDA inspections. Scope alignment matters: ensure your quality manual, procedures, and records cover country-specific requirements such as complaint file content (FDA), labeling controls (ANVISA, Canada bilingual), and vigilance timelines. Planning: build MDSAP into your audit cycle to pre-qualify QMS for five markets while device-level clearances proceed in parallel.

Regulatory clearance dominance map + country deep-dives

Dominant pathways by region: US—FDA 510(k), De Novo, PMA; QMS by QMSR (ISO 13485 incorporated). EU—MDR/IVDR certification via Notified Bodies; technical documentation, clinical evaluation, PMS plans; EUDAMED modules rolling out. UK—UKCA with MHRA Approved Bodies; GB continues transitional acceptance of CE in defined periods; UK Responsible Person required for foreign manufacturers. China—NMPA registration under Order 739; local testing and UDI. Japan—PMDA/MHLW approvals (Shonin/Ninsho), MO 169 QMS. Korea—MFDS approval, K-GMP, UDI. Brazil—ANVISA RDC 751/2022 (classification/route), RDC 665/2022 (GMP), UDI RDC 591/2021. India—CDSCO MDR 2017 licensing, Indian Authorized Agent, emerging UDI. Australia—TGA ARTG via conformity assessment or comparable overseas evidence; AusUDID. Canada—CMDR device licences; MDSAP mandatory; UDI phasing. GCC—Saudi SFDA (MDMA) with Saudi-DI UDI; UAE MOHAP device registration. Switzerland—Swissmedic oversight, CH-REP; swissdamed UDI registry. Country deep-dives: United States (/guides/usa-medical-device-regulatory-readiness); European Union (EU MDR) (/guides/eu-medical-device-regulatory-readiness); United Kingdom (/guides/uk-medical-device-regulatory-readiness); Canada (/guides/canada-medical-device-regulatory-readiness); Australia (/guides/australia-medical-device-regulatory-readiness); Japan (/guides/japan-medical-device-regulatory-readiness); South Korea (/guides/south-korea-medical-device-regulatory-readiness); China (/guides/china-medical-device-regulatory-readiness); Brazil (/guides/brazil-medical-device-regulatory-readiness); India (/guides/india-medical-device-regulatory-readiness); Switzerland (/guides/switzerland-medical-device-regulatory-readiness); Gulf Cooperation Council—Saudi Arabia & UAE (/guides/gcc-medical-device-regulatory-rea.

Where regions diverge: clinical evidence, UDI, language, in-country reps

Clinical evidence: EU MDR demands clinical evaluation and, for many implants/class III, PMCF and potentially clinical investigations; FDA focuses on substantial equivalence for 510(k), with clinical data only when necessary; China and Japan often require local or bridging data; Australia and Canada may leverage foreign approvals with evidence mapping. UDI systems differ: US GUDID; EU EUDAMED UDI/device modules (becoming mandatory upon full functionality announcement); Switzerland’s swissdamed; China’s NMPA UDI; Brazil RDC 591; Saudi-DI; Australia AusUDID; Korea MFDS UDI; India’s UDI framework; Canada phasing UDI. Language/labeling: EU multi-language per Member State; Canada EN/FR; Brazil Portuguese; China Simplified Chinese; Japan Japanese; Korea Korean; GCC Arabic/English; India English with specific declarations (e.g., MRP). Authorized representatives: EU Authorized Representative (non-EU manufacturers); UK Responsible Person; Swiss CH-REP; China Legal Agent/MAH arrangements; Japan MAH or D-MAH; Korea Korea Authorized Representative; Brazil Brazilian Registration Holder; India Authorized Agent; Saudi and UAE require local authorized representatives/importers.

Cross-border strategy: audits that unlock markets and optimal sequencing

Single audits don’t grant device approvals, but they de-risk QMS reviews. ISO 13485 certification is the baseline; MDSAP extends QMS recognition to Canada (mandatory), Australia, Brazil, Japan, and informs FDA. Typical sequencing for new technologies: 1) Establish ISO 13485 QMS with ISO 14971 risk and IEC 62304 for software; align to FDA QMSR. 2) US market first via 510(k) or De Novo (90–180 days for 510(k), 9–12+ months for De Novo; PMA 1–2 years), leveraging earlier clinical evidence. 3) Pursue EU MDR/IVDR certification once clinical evaluation/PMCF strategy is mature (9–18+ months NB review). 4) Undergo MDSAP to open Canada (Class II–IV licence timelines ~15–75 review days plus tolling), Australia (ARTG leveraging CE/FDA where eligible), Brazil (ANVISA 6–12+ months; MDSAP may ease B-GMP), Japan (6–12+ months; some devices via third-party certification). 5) Expand to China (NMPA 9–24+ months with type testing), Korea (6–12 months), GCC (Saudi 3–6 months, UAE similar), India (3–9 months). Adjust order by clinical/regulatory risk, Notified Body capacity, and commercial priorities.

A practical 12–18 month readiness roadmap

Months 0–3: Stand up ISO 13485 QMS; define quality manual and procedures; establish risk management per ISO 14971; initiate DHF with design planning and user needs; software teams align to IEC 62304 (/glossary/iec-62304). Map FDA QMSR gaps and Part 11 controls. Months 3–6: Complete design inputs, risk analyses (FMEA/FTA), verification planning; supplier qualification; process validation strategy; labeling strategy and language matrix; define UDI issuing agency. Begin 510(k)/De Novo pre-sub strategy (Q-Sub). Months 6–9: Execute verification/validation, usability, cybersecurity; compile 510(k)/De Novo or PMA modules (/glossary/fda-510k). Draft EU MDR GSPRs checklist (/glossary/eu-mdr) and clinical evaluation plan; choose Notified Body; contract UK Responsible Person/EU AR/CH-REP as needed. Months 9–12: File FDA submission; prepare MDSAP readiness; build EUDAMED/GUDID master data; prepare Health Canada and TGA evidence mapping; plan NMPA type testing. Months 12–18: Undergo FDA review; kick off NB conformity assessment; schedule MDSAP audit; submit to Health Canada and TGA; start ANVISA/PMDA dossiers; stand up vigilance and PMS/PSUR processes; configure registry reporting for implants. Continuously: training, internal audits, CAPA, and management reviews.

Frequently asked

How does FDA’s QMSR (2026) change my global QMS approach?

FDA’s 21 CFR Part 820 QMSR incorporates ISO 13485:2016 with FDA-specific clarifications, effective Feb 2, 2026. If you already operate an ISO 13485 QMS, focus on FDA deltas (e.g., definitions, complaint file specifics, records retention, and device history expectations). This alignment reduces duplication with MDSAP and Notified Body audits but does not eliminate FDA inspections.

Is MDSAP enough to sell in Canada, Australia, Brazil, and Japan?

MDSAP covers QMS audits only. Canada mandates MDSAP for Class II–IV manufacturers, but you still need device licences. Australia, Brazil, and Japan accept MDSAP as QMS evidence (often reducing or substituting local audits), yet device approvals/registrations and local requirements (labeling, vigilance, UDI) still apply.

Which UDI databases must we plan for first in a multi-region launch?

Prioritize the US GUDID for FDA launches, EUDAMED UDI/device modules for the EU (as they become fully mandatory), NMPA’s UDI database for China, Saudi-DI for Saudi Arabia, and AusUDID for Australia. Prepare data models flexible enough to map to Brazil RDC 591 and Korea MFDS UDI, and track Canada’s phased UDI implementation.

Do we need local authorized representatives in every non-domestic market?

Often yes. EU requires an EU Authorized Representative; UK requires a UK Responsible Person; Switzerland a CH-REP; Saudi/UAE require local authorized reps/importers; Brazil requires a Brazilian Registration Holder; India requires an Authorized Agent; China requires a Legal Agent/MAH arrangement; Korea and Japan require local entities (Korea AR; Japan MAH/D‑MAH). Plan contracts early due to submission dependencies.

What realistic timelines should we expect for first approvals?

Typical ranges: FDA 510(k) 90–180 days (often 6–9 months including interactions); De Novo 9–12+ months; PMA 1–2 years. EU MDR Notified Body review 9–18+ months. Canada Class II ~15 days, Class III/IV 60–75 days plus tolling. Australia ARTG 2–6 months with suitable evidence. Japan 6–12+ months. China 9–24+ months with type testing. Korea 6–12 months. Brazil 6–12+ months. India 3–9 months. Build buffer for queries and testing.

See it on your shop floor.

Free trial, no credit card, onboard in days, not months.

Start free trial See pricing →Browse all resources →