Medical device regulatory readiness in the United Kingdom (GB and NI)

Regulator: The Medicines and Healthcare products Regulatory Agency (MHRA) is the UK competent authority for medical devices. Legal basis in Great Britain (GB): the Medical Devices Regulations 2002 (UK MDR 2002; SI 2002/618) as amended by subsequent SIs (notably post‑EU exit). A 2024 Statutory Instrument strengthened post‑market surveillance, aligning timelines and content more closely to EU MDR PMS concepts. UKCA is the domestic conformity mark for GB; CE‑marked devices are recognized in GB through 30 June 2030 for most general medical devices, subject to conditions. UK Approved Bodies (for UKCA) include BSI Assurance UK Ltd, SGS United Kingdom Ltd, and UL International (UK) Ltd. Northern Ireland (NI): Under the Windsor Framework, NI follows EU MDR 2017/745 and IVDR 2017/746. CE is required in NI; if a UK Approved Body is used for EU conformity (notified for NI), the CE‑UKNI mark applies but is not valid in the EU. Registration and databases: Economic operators and devices must be registered with MHRA via DORS (Devices Online Registration System). MHRA plans to expand DORS to support UDI device registration under the future UK framework. Roadmap: MHRA’s 2024/2025 publications outline phased “core regulations” for 2025 onward, covering UDI, economic operator duties, and enhanced PMS, with transitional provisions extending into the later 2020s.

GB device classification in practice follows the legacy EU MDD/AIMDD model embedded in UK MDR 2002: Class I (including Is, Im, Ir), Class IIa, Class IIb, and Class III. Active implantable devices follow AIMDD‑derived provisions and are treated at the highest risk tier. While the legal text mirrors MDD rules, MHRA guidance for software/AI as a medical device anticipates higher risk for certain software; manufacturers should justify classification rigorously (e.g., clinical decision support vs monitoring), with traceable risk evaluation per ISO 14971. Classification drives the conformity route: most Class I (non‑sterile, non‑measuring, non‑reusable surgical) may self‑declare; higher classes require an Approved Body. NI applies EU MDR classification rules (including Rule 11 for software and reinforcement of implantable/active rules). If a product is placed on both GB and NI markets, plan for the stricter of the two schemes to minimize rework. Borderline/accessory determinations should align with MHRA guidance and EU MDCG documents for NI.

Great Britain (UKCA vs CE recognition): - Class I (non‑sterile, non‑measuring, non‑reusable surgical): Self‑declaration against UK MDR 2002 essential requirements; implement a suitable QMS; register manufacturer/UKRP and device(s) via DORS before placing on the GB market; affix UKCA (or CE through 30 June 2030) and include UKRP/importer details as required. - Class Is/Im/Ir, IIa, IIb, III: Involve a UK Approved Body (e.g., BSI UK, SGS UK, UL UK) for QMS and technical documentation assessment. Expect Stage 1/Stage 2 audits for ISO 13485 QMS certification and product‑specific reviews; surveillance annually, recertification typically on a 3‑year cycle. Clinical evaluation is required and must be proportionate to risk; for implantable/Class III, clinical investigations or robust equivalence may be needed. - CE route in GB (until 30 June 2030): CE‑marked devices complying with EU MDR/MDD may be placed on the GB market without UKCA during the recognition period, provided GB registration (DORS) and UKRP (if manufacturer is outside the UK) are in place. Northern Ireland: Conform to EU MDR (Notified Body certificates as applicable), use CE (or CE‑UKNI if a UK Approved Body assessed it); register with MHRA per NI rules. Technical documentation: Structure per Annex II/III (EU MDR) or MDD Annexes is acceptable in GB; include device description, manufacturing, design verification/validation (including software validation where applicable), risk management (ISO 14971), clinical evaluation, labeling/IFU, and PMS plan.

MHRA and UK Approved Bodies expect an ISO 13485:2016–compliant QMS for all but the simplest Class I self‑declared devices; even then, documented procedures are strongly recommended. Core elements include document and record control, design and development controls, purchasing/supplier control, production and process control (including software validation where applicable), complaint handling, vigilance, CAPA, internal audit, and management review. Risk management must follow ISO 14971 and be integrated across the lifecycle. For GB, the UK Responsible Person (UKRP) must have access to the technical documentation and ensure compliance tasks are performed; economic operators (importers/distributors) have defined obligations under UK MDR 2002. MDSAP: Several UK Approved Bodies leverage MDSAP audit reports to streamline QMS assessment, but they will still verify UK‑specific requirements (e.g., GB labeling, UKRP, DORS registration, PMS SI 2024 updates). Plan for interfaces between GB and NI if you market in both jurisdictions.

UDI: In GB, a comprehensive UDI system is planned but not yet fully in force. MHRA’s roadmap foresees phased UDI adoption aligned to IMDRF principles and expansion of DORS to collect UDI‑DI and related master data. Issuing agency recognition (e.g., GS1, HIBCC, ICCBBA) is anticipated; manufacturers should build UDI data now to ease transition. In NI, EU MDR/IVDR UDI rules apply (basic UDI‑DI, UDI‑DI/UDI‑PI; carrier on label/device; EUDAMED UDI/device registration per EU timelines). Labeling and language: GB requires English labeling. During CE recognition (to 30 June 2030), CE‑compliant labels are accepted in GB, but GB‑specific details still apply: include the UK Responsible Person name/address on the label or packaging and importer information where required. For UKCA, use the UKCA mark per MHRA sizing/visibility rules. Symbols per EN ISO 15223‑1 are accepted; software and online IFU must follow applicable MHRA guidance. NI labeling must comply fully with EU MDR; English is acceptable locally.

PMS framework: The 2024 GB Statutory Instrument strengthened PMS requirements, bringing GB closer to EU MDR: a PMS plan is mandatory; PSURs are required for Class IIa (at least every two years) and for Class IIb/III (annually); Class I maintains PMS reports. Trend reporting and signal detection expectations are explicit. Post‑market clinical follow‑up (PMCF) is expected for higher‑risk or innovative devices unless adequately justified. Vigilance: Manufacturers must report via MHRA’s Manufacturer’s Online Reporting Environment (MORE). GB timelines align with EU MDR practice: serious public health threat within 2 days, death or unanticipated serious deterioration within 10 days, and other serious incidents within 15 days. Field Safety Corrective Actions (FSCAs) and Field Safety Notices (FSNs) must be notified to MHRA and communicated to users. Northern Ireland: Follow EU MDR vigilance rules and timelines; MHRA acts as the competent authority for NI, and reporting routes are coordinated with MORE while EUDAMED vigilance modules progress. Maintain robust complaint handling, periodic aggregation, and CAPA integration to demonstrate effective PMS.

Days 0–30: - Scope and classify products for GB and NI; choose the stricter classification if dual‑marketing. Gap assess against UK MDR 2002, PMS SI 2024, and (for NI) EU MDR. Confirm economic operator model and appoint a UK Responsible Person (UKRP) if the legal manufacturer is outside the UK. - Open/verify a DORS account; compile device and economic operator registration data (including intended use, GMDN, basic UDI‑DI for NI/EU where applicable). Days 31–60: - Finalize technical documentation: device description, manufacturing, V&V (including software validation where used), risk management per ISO 14971, clinical evaluation, labeling, PMS/PMCF plans. - Tune the QMS to ISO 13485; schedule internal audit and management review; define vigilance and PSUR processes per GB timelines; train roles. - If UKCA is needed: select and contract with a UK Approved Body (BSI UK, SGS UK, or UL UK), submit application, and prepare for Stage 1. Days 61–120: - Execute Stage 1 (documentation) and Stage 2 (on‑site/remote) audits for UKCA; address nonconformities rapidly via CAPA. - Register devices/economic operators in DORS (GB) and, for NI, complete EU MDR registration steps; ensure UKRP/Importer details are on labels/packaging. - If leveraging CE in GB (until 30 June 2030), ensure CE certification scope matches GB placement, then complete DORS registration and UKRP appointment. Days 121–180: - Issue declarations (UKCA DoC or EU DoC for CE route in GB), release market‑specific labeling, and finalize vigilance/MORE access. - Launch with PMS controls active; generate first PMS report calendar and, if applicable, PSUR schedule.