Regulatory & Quality Compliance

MediPath Innovation Roadmap™

Within Stages 1 to 5 of the MediPath Innovation Roadmap™, and especially Stage 3 we considered many of the elements that will need to be included in the technical documentation such as the implementation of a quality management system, information of the design stages applied to the device, the identification of relevant General Safety and Performance Requirements (GSPRs) or Essential Requirements  (ERs) (specific to the GB market). Additionally, in Stage 3 we summarised the importance of using risk management  (ISO 14971) during product design, defining the product labelling that includes amongst others product description, indications, intended purpose, intended users, indications for use, intended populations, key claims and benefits along with any warning or contradictions.

Stage 4 discussed some of the key  preclinical validation and verification considerations that need to be addressed before the design freeze, including biocompatibility, electrical and electrical compatibility, stability to sterilisation and stability/ shelf life and if software as a medical device  (SaMD) or artificial intelligence as a medical device (AIaMD) that product development is in alignment with standards such as IEC62304. 

In Stage 5 we summarised all the considerations needed for clinical investigation and emphasised the need to collect data for both regulatory and procurement purposes (which includes health economic considerations). 

By the end of Stage 5, clinical and technical risks have been significantly reduced, and key evidence has been gathered.  

Stage 6 now focuses on translating this groundwork into formal regulatory and quality compliance, ensuring the device meets all requirements to be placed on the market. This stage brings together the remaining technical, clinical, and quality activities needed to demonstrate conformity with the UK Medical Devices Regulations (UK MDR) and the EU Medical Device Regulation (EU MDR), culminating in regulatory approval. The core elements of Stage 6 cover compiling the complete technical file (including a Post-Market Surveillance plan), finalising all verification and validation activities, preparing a comprehensive Clinical Evaluation Report (CER) or Performance Evaluation Report (PER), engaging a Notified Body/Approved Body for conformity assessment, and completing competent authority registration. Throughout this stage, an effective Quality Management System (QMS) (e.g. ISO 13485) underpins each process, ensuring that all documentation and procedures meet high standards of quality and traceability. 

Technical File Compilation 

At Stage 6, manufacturers compile and finalise the technical documentation (technical file) within the framework of an established Quality Management System (QMS). This documentation provides structured, objective evidence that the device complies with all applicable regulatory requirements across its lifecycle and forms the core submission for regulatory conformity assessment. 

For both UKCA and CE marking, the technical documentation is prepared in accordance with: 

• Annex II of the EU Medical Device Regulation (EU MDR 2017/745) or EU IVDR 2017/746, and 

• the equivalent requirements of the UK Medical Devices Regulations 2002 (as amended). 

The technical file brings together all relevant technical, clinical and quality evidence supporting the device, including design and development records, manufacturing information, risk management outputs, verification and validation evidence, labelling and Instructions for Use, and the Clinical Evaluation or Performance Evaluation Report. All documentation is maintained under formal document control through the QMS to ensure traceability, consistency and version control. Collectively, the technical file demonstrates conformity with the General Safety and Performance Requirements (GSPRs) or Essential Requirements (ERs, specific to the GB market) and is the primary focus of assessment by Notified Bodies or Approved Bodies. 

The technical documentation is structured into six key sections, each addressing a defined set of regulatory requirements. 

It is good practice to consider other jurisdictions  and dual purpose technical documentation for different markets, although for some markets such as the US, the MDR Technical file can be almost entirely reused but must be reorganised and reframed. 

Section 1: Device description and specification  

This section defines the device, its intended purpose and its scope. It includes information such as trade name(s), device variants and accessories, Basic UDI‑DI or UDI‑DI identifiers where applicable, intended users and patient populations, indications, contraindications, and key performance claims. The device risk classification is described and justified in relation to the applicable classification rules. 

Clear and accurate definition of the device and its intended purpose is critical, as this section underpins the regulatory strategy, clinical evaluation approach and the justification of claims. 

Section 2: Information to be supplied by the manufacturer 

This section covers all labelling and user information supplied with the device, including on‑device labels, packaging labels and the Instructions for Use (IFU). For software‑based devices, including Software as a Medical Device (SaMD), user information may be provided digitally or embedded within the software, provided regulatory requirements for accessibility and usability are met. 

Labelling must be consistent with the device’s intended purpose, risk management outputs and clinical evidence, and must clearly communicate instructions, warnings, precautions and limitations of use. 

Section 3: Design and manufacturing information 

This section describes the device design and manufacturing processes, including design and development activities, manufacturing methods, critical suppliers, materials and components, and process controls. It demonstrates that the device is manufactured reproducibly and in accordance with defined specifications. 

Information included here supports the link between design outputs, manufacturing controls and final product consistency, and provides evidence that design transfer has been appropriately managed within the QMS. 

Section 4: General Safety and Performance Requirements (GSPRs) 

This section documents how the device complies with each applicable General Safety and Performance Requirement. Compliance is demonstrated through a structured GSPR checklist, referencing supporting evidence throughout the technical file, such as risk management documentation, test reports, standards applied, and clinical evidence. For devices placed on the Great Britain (UK) market, this approach should also demonstrate alignment with the corresponding Essential Requirements under the UK Medical Devices Regulations 2002 (as amended), recognising differences in regulatory terminology while maintaining consistency in the underlying safety and performance principles. 

Where GSPRs are not applicable, a clear justification is required. 

Section 5: Risk management and benefit–risk analysis 

This section summarises the application of risk management in accordance with ISO 14971, documenting hazard identification, risk estimation and evaluation, risk control measures and assessment of residual risks. Outputs from preclinical testing, verification and validation activities and clinical evidence feed into the overall benefit–risk analysis. 

The documented benefit–risk conclusion must demonstrate that residual risks are acceptable when weighed against the clinical benefits of the device for the intended population. 

The risk management documentation is closely related to the clinical evaluation process and risks must be cross referenced  and depending on the clinical data the residual risk can be upgraded or downgraded according to the data. 

Section 6: Verification, validation and clinical evaluation 

This section brings together evidence demonstrating that the device meets its design requirements and performs as intended. It includes verification and validation outputs, references to applicable test methods and standards, and the Clinical Evaluation Report (CER) or Performance Evaluation Report (PER), which consolidates clinical evidence supporting safety, performance and clinical benefit. 

The diagram below introduces the concept of verification and validation and also shows how the design process aligns with the quality management system. 

Verification and Validation 

Finalising verification and validation (V&V) activities to confirm that the device’s design outputs meet the predefined requirements and that the device fulfils its intended medical purpose safely and effectively. While much of the V&V testing is initiated in earlier stages, by Stage 6 all required tests should be completed and documented, with results demonstrating compliance to relevant standards and regulatory expectations. These may include final design verification tests (for example, bench tests to confirm product specifications) and design validation studies (such as usability evaluations or clinical simulations to ensure the device performs as intended in real-world conditions). All test protocols, reports, and resulting data are managed under the design control procedures of the QMS to ensure integrity and traceability of results.  

In practice, verification activities provide objective evidence that each design output meets its corresponding design input (for instance, if a catheter is specified to withstand a certain pressure, verification testing should prove that it does). Validation activities confirm that the final engineered device meets user needs and clinical requirements in the intended use environment – essentially answering the question, “Have we built the right device for its intended purpose?” Together, these V&V activities support a final design freeze (locking in the design for production) and give regulators confidence that the device is backed by robust safety and performance data. All V&V outputs are included in the technical file and referenced in the CER, providing crucial evidence that the product fulfils its claims and regulatory requirements.  

Clinical Evaluation / Performance Evaluation Report (CER/PER) 

The Clinical Evaluation Report (CER) or Performance Evaluation Report (PER) for in vitro diagnostics, is a cornerstone of the regulatory submission, consolidating all the clinical evidence to demonstrate the device’s safety, performance and clinical benefits. Under UK and EU regulations, every medical device must have an up-to-date clinical evaluation report. The CER/PER draws on multiple sources of evidence: results from any clinical investigations performed (e.g. clinical trial data from Stage 5), relevant published literature on the device or comparable technologies, data from preclinical studies (in some cases, especially to show the scientific principles of actions or to demonstrate performance or claims that are difficult to demonstrate clinically).    

It is important to define the clinical evaluation strategy with it being possible  to use a different hierarchy of clinical data for legacy devices  and  equivalent devices can be used if certain technical, biological and clinical criteria are met. 

The goal is to establish an overall benefit–risk ratio for the device that is favourable, meaning that the clinical benefits outweigh the risks for patients and users. Notably, a draft clinical evaluation plan and developmental CER are often started during Stage 5 to guide data collection.  In Stage 6, this document is refined into a submission-ready CER/PER that will form part of the technical file and regulatory application. 

Importantly, any gaps in clinical evidence are not a show-stopper – but they must be acknowledged in the CER and addressed via plans for post-market clinical follow-up (PMCF) or other PMS activities. For instance, if long-term performance or rare side effects cannot be fully assessed pre-market, the CER would specify how the manufacturer will continue to gather that information after the device is on the market (as part of the PMS plan described above). By the end of Stage 6, the final CER/PER – alongside a summary of safety and clinical performance (SSCP) for certain high-risk devices – is complete, providing a compelling, evidence-backed demonstration of the device’s clinical safety and efficacy. This document will be scrutinised by the Notified/Approved Body and is central to obtaining regulatory approval.  

Post-Market Surveillance (PMS) 

A key component of the technical file is the Post-Market Surveillance (PMS) plan, which defines how the manufacturer will continuously monitor the device’s safety and performance once it is on the market. Both UK and EU regulations make PMS an ongoing obligation for the manufacturer. The PMS plan outlines methods for gathering post-market data – for example, user feedback, incident reporting, and periodic literature reviews – and for analysing that data to ensure that risks remain controlled and benefits continue to outweigh risks throughout the device’s lifetime. This plan, along with procedures for vigilance reporting and periodic safety updates if required, is part of the technical documentation. In essence, even as the device reaches regulatory approval in Stage 6, a feedback loop is established: real-world evidence will feed back into risk management and clinical evaluation, informing updates to the technical file and maintaining compliance over time.

Notified Body / Approved Body Submission and Product Registration 

Depending on the regulatory strategy and intended market, devices may require certification under UKCA, CE marking, or both. It is important to note that UKCA marking alone does not permit market access in Northern Ireland, where devices must be certified under UKNI + CE, or CE marking alone under the EU MDR or IVDR. The applicable conformity assessment route is determined by device classification and the markets targeted, which should have been defined earlier through the innovation and regulatory strategy activities in Stages 1 and 3. 

For devices requiring third‑party conformity assessment, typically medium‑ and high‑risk devices (Class IIa or Class B and above), the manufacturer submits the completed technical documentation to a Notified Body (for CE marking in the EU) or an Approved Body (for UKCA marking in Great Britain). As part of this process, the conformity assessment body reviews the technical file, Clinical or Performance Evaluation Report (CER/PER), and the manufacturer’s Quality Management System to confirm compliance with applicable regulatory requirements. 

The assessment process may involve one or more rounds of questions, during which additional clarification or supporting evidence may be requested. A well‑structured technical file with clear traceability between regulatory requirements and supporting evidence can significantly streamline this stage. Once the conformity assessment body is satisfied, a certificate of conformity is issued, enabling the manufacturer to apply the CE or UKCA mark to the device. 

For low‑risk devices not requiring third‑party assessment, the manufacturer may proceed via self‑declaration of conformity, provided that the full technical documentation has been compiled. In all cases, devices must be registered with the relevant Authority prior to being placed on the market. In Great Britain this involves registration with the MHRA, while in the EU it includes registration through EUDAMED, resulting in allocation of a Single Registration Number (SRN) and fulfilment of applicable UDI requirements. 

Completion of conformity assessment and registration formally authorises the device for market placement. Stage 6 therefore concludes with regulatory and quality requirements met, enabling commercial launch and transition into ongoing post‑market activities supported by the Quality Management System.  

International Markets (Non-UK/EU) 

While this stage focuses on UK and EU regulatory processes, the underlying principles of conformity assessment, technical documentation review and quality system oversight are broadly consistent across other highly regulated markets. For example, submissions such as 510(k) or Premarket Approval (PMA) applications to the US FDA similarly rely on robust technical documentation and supporting clinical evidence.

When determining the regulatory market access route for entry into international MedTech markets, manufacturers must consider factors such as the regulatory model, the device’s risk classification and clinical‑evidence requirements, review timelines and capacity, post‑market obligations, and the extent to which an approval can be leveraged through regulatory reliance in other markets (e.g., by the National Medical Products Administration (NMPA), Pharmaceuticals and Medical Devices Agency (PMDA), Therapeutic Goods Administration (TGA), Health Sciences Authority (HSA), or Saudi Food and Drug Authority (SFDA)). The ideal approach especially for SMEs is often the route that not only enables access to an initial priority market but also acts as a strong reference approval to reduce duplication, cost and time for subsequent international expansion. These international and market‑specific pathways, including opportunities for regulatory reliance, are explored in more detail in the final section of MediPath, Stage 7: International Market Access.

Tailor your roadmap to your device – free consultation

The Specialist Consultancy Team offer innovation, commercialisation, regulatory and international market access services, covering the full MediPath journey, with end-to-end support, helping to de-risk and fast-track innovation and increase the probability of commercial success.

If you would like to discuss any of these stages or to understand how the roadmap can de-risk your innovation and accelerate the speed to market, we are offering a free 30-minute consultation. Contact us on [email protected]

Patrick Trotter PhD MBA (TechMgmt), Stefanie Read MSc, Rashmi Raju PhD