Regulatory readiness for medical devices in India (CDSCO)

Regulator: Central Drugs Standard Control Organisation (CDSCO), headed by the Drugs Controller General (India) (DCGI). CDSCO operates the SUGAM online portal for device licensing and submissions. Legal basis: Medical devices are regulated under the Medical Devices Rules, 2017 (MDR 2017), notified under the Drugs and Cosmetics Act, 1940. MDR 2017 took effect January 1, 2018 and has been amended multiple times via Gazette notifications to expand coverage and refine procedures; all remaining device categories were brought under regulation effective October 1, 2023. Authorities and remit: Licensing is risk- and activity-based. The Central Licensing Authority (CLA, at CDSCO HQ) handles imports for all classes and domestic Class C/D manufacturing. State Licensing Authorities (SLA) handle domestic Class A/B manufacturing and sale/distribution licensing in their jurisdictions. The Indian Pharmacopoeia Commission (IPC) hosts the Materiovigilance Programme of India (MvPI) for post-market vigilance. Core instruments: MDR 2017 includes schedules on classification, essential principles, QMS, labeling, and dossier content. Reference country evidence (e.g., US, EU, Australia, Canada, Japan) can streamline import evaluation but does not replace India’s licensing. Working links for teams: /industries/medical-devices, /glossary/iso-13485

India applies a risk-based model consistent with IMDRF principles. Under MDR 2017, devices are classified Class A (low), B (low–moderate), C (moderate–high), and D (high). Classification uses rules considering intended purpose, duration of contact, invasiveness, active/implantable status, biological effect, and special considerations for measuring/sterile devices. IVDs are also classified A–D based on public health risk and individual risk. Practical approach: Determine classification using the First Schedule rules and CDSCO’s published device-classification lists and Gazette notifications. Examples: non-invasive reusable surgical instruments (often Class A/B depending on criticality), infusion pumps (typically Class C), implantable pacemakers (Class D). Sterile or measuring functions may up-classify (e.g., a Class A non-sterile could become B if sterile/measuring). Borderline and combination products may require CDSCO consultation; align your justification with essential performance and risk (ISO 14971) and include precedent from CDSCO lists where available. Maintain a documented rationale and traceability in your technical file (/features/traceability, /glossary/iso-14971)

Domestic manufacturing: - Class A/B: Apply to the State Licensing Authority. Class A non-sterile/non-measuring may proceed via self-certification with subsequent Notified Body (NB) surveillance; Class A sterile/measuring and all Class B require NB QMS audit designated by CDSCO. Licences are issued after satisfactory audit and dossier review (forms and fees per MDR 2017). - Class C/D: Apply to the Central Licensing Authority (CDSCO HQ). These undergo deeper technical scrutiny and site assessment (by CDSCO and/or designated NB) before licence issuance. Imports (all classes): Foreign manufacturers must appoint an Indian Authorised Agent responsible for the application and vigilance. Submit Form MD-14 via SUGAM; the import licence is Form MD-15. Core dossier includes Device Master File (DMF) and Plant Master File (PMF) per MDR 2017 schedules, evidence of conformity to Essential Principles, ISO 13485 certificate, Free Sale/Market Authorization from the country of origin or reference countries (if applicable), test reports, and labeling/IFU. For novel/high-risk devices lacking reference-country approval, CDSCO may require additional clinical evidence under MDR 2017 before granting MD-15. Technical content anchors: Essential Principles of Safety and Performance, DMF/PMF structure, biocompatibility, sterilization validation, electrical safety/EMC (IEC 60601 series where applicable), software lifecycle evidence (IEC 62304 where applicable; see /glossary/iec-62304). Engage early with your Notified Body for Class A/B audits and with CDSCO for C/D issues. Maintain consistent device nomenclature and model variants across SUGAM, labels, and DMF

QMS baseline: MDR 2017 requires a quality system aligned to ISO 13485:2016 and detailed in Schedule III, including documented processes for design/development, purchasing and supplier control, production and process control, validation (including sterilization and software used in production/QMS), traceability, complaint handling, vigilance, CAPA, and internal audits. For Class A/B manufacturers, CDSCO-designated Notified Bodies audit against MDR 2017 and ISO 13485. For Class C/D, CDSCO/CLA may perform inspections in addition to any NB audits. Import applicants must show the foreign manufacturer maintains an ISO 13485 QMS; CDSCO may request audit reports. India-specific dossiers: Maintain a Plant Master File (PMF) and Device Master File (DMF) structured per MDR 2017 schedules, covering QMS scope, site layout, equipment, environmental controls, personnel competency, process validations, and device-level technical details. Ensure linkage between DMR and India-specific variants, accessories, and labeling. Document software lifecycle controls (IEC 62304 where applicable), usability (IEC 62366-1 where applicable), and risk–benefit justifications consistent with Essential Principles. Keep training matrices current and records retrievable during SLA/CLA or NB audits

Labeling: MDR 2017 prescribes labeling content in its labeling schedule, including device name/model, intended use, manufacturer name/address, importer name/address (for imports), lot/batch or serial number, manufacturing/expiry dates where applicable, storage/handling, sterile status and method, single-use/warnings, and instructions for use. Labels and IFU must be in English; for consumer-facing home-use devices, consider supplementary regional-language materials to support correct use. Hospital/clinic-use professional devices are typically acceptable in English. Pricing/retail: For retail packs, declare Maximum Retail Price (MRP) per Legal Metrology (Packaged Commodities) Rules; specific device categories under National Pharmaceutical Pricing Authority (NPPA) price control must follow NPPA orders. Ensure consistency between licensed particulars and artwork. Many tenders request GTIN barcodes; while a national UDI database is not yet mandated, CDSCO has signaled alignment with IMDRF principles and encourages standardized identification. Voluntary UDI (e.g., GS1) improves traceability and procurement acceptance; maintain internal UDI/GTIN master data aligned to India SKUs. Keep importer details synchronized with the MD-15 licence holder on all India-facing labels and IFUs

Manufacturers and importers must implement post-market surveillance proportionate to device risk. India’s Materiovigilance Programme of India (MvPI), coordinated by the Indian Pharmacopoeia Commission (IPC), collects and evaluates adverse event reports from manufacturers, healthcare institutions, and users. Report serious adverse events associated with a marketed device to IPC/Central/State authorities without delay; for significant events, submit within 15 calendar days along with follow-up investigations and corrective actions. Implement field safety corrective actions (FSCA) and recalls per CDSCO guidance; notify CDSCO/SLA and communicate risk to users with field safety notices. Trend analysis, complaint files, CAPA, and periodic summary reports should be maintained and made available during inspections. Licences under MDR 2017 are perpetual subject to payment of retention fee every five years and continued compliance; surveillance audits/inspections (NB for Class A/B; CDSCO for C/D/importers) may review PMS effectiveness, stability of manufacturing controls, and vigilance responsiveness

Days 0–30: - Appoint/contract an Indian Authorised Agent; verify licences, premises, and vigilance capability. Open/validate SUGAM accounts (manufacturer and agent). Confirm device classification (A–D) and licensing authority (SLA vs CLA). Initiate India gap assessment against MDR 2017 Essential Principles and Schedule III QMS. Freeze India-specific SKUs and intended uses; align nomenclature across labels, DMF, and SUGAM. Days 31–60: - Compile Device Master File and Plant Master File in India format. Collect ISO 13485 certificate(s), reference-country approvals, and test/validation reports (biocompatibility, sterilization, electrical/EMC, software lifecycle as applicable). Draft India labeling/IFU and MRP strategy; plan voluntary GTIN/UDI if useful for tenders. Engage a CDSCO-designated Notified Body for Class A/B audits; schedule site readiness checks. Days 61–90: - Execute internal audits against Schedule III; close CAPAs. Finalize MD-14 (imports) or domestic manufacturing applications with forms/fees; pre-validate SUGAM dossier. Train the Authorised Agent on complaint intake and MvPI workflows. Prepare recall/FSCA SOPs and templates. Days 91–180: - Undergo NB audit (A/B) or prepare for CDSCO inspection (C/D/importers). Address clarifications from CDSCO/NB rapidly; keep technical consistency across submissions, labels, and DMF. Build post-market plan (signal detection, periodic summaries) and India-specific training. Plan for licence retention obligations and surveillance. Useful references during execution: /features/quality, /features/documents, /features/traceability, /glossary/mdsap