The development and manufacture of devices are significantly influenced by legal and normative requirements. In Europe, the MDR (EU) 2017/745 is the central framework. Among other things, it defines requirements for safety and performance, classification rules, conformity assessment procedures, clinical evaluation, technical documentation, UDI (Unique Device Identification) systems and post-market surveillance, vigilance. In addition, standards that are considered “state of the art” and support verification are also relevant. ISO 13485, which describes requirements for quality management systems, plays a key role. In practice, ISO 13485 is often the basis for processes such as design controls, supplier management, document control, CAPA (Corrective and Preventive Actions), risk management, and internal audits.
The international regulatory market is more heterogeneous. Companies that operate globally must take regulatory differences into account and align their strategies accordingly. In addition to Europe, the most important markets include the US, China, Japan, Canada, Australia, and, increasingly, markets in the Middle East and Southeast Asia. In the US, the US Food and Drug Administration (FDA) is responsible. In many regions, regulations for software as a medical device (SaMD) and cybersecurity requirements are also gaining in importance. While legal requirements vary from market to market, ISO 13485 is a key reference point in many countries: it is recognized in numerous approval and audit processes or used as a basis, even if additional national requirements apply.
A look at Europe shows that, in addition to the MDR, guidelines from the Medical Device Coordination Group (MDCG), harmonized standards, the role of notified bodies, and clinical evidence requirements have a particular impact on the handling. Companies must provide verifiable evidence that the technology meets the essential safety and performance requirements. This includes systematic risk management, evaluation based on appropriate data, robust technical documentation, and a functioning quality management.
A fundamental understanding of the MDR and relevant standards is important for all market participants because regulation affects many areas of value creation: from product concept and design to the supply chain and market surveillance. Those who take requirements into account at an early stage can reduce development risks, avoid rework, and make approval processes more efficient. Conversely, knowledge gaps often lead to delays, for example, when documentation is incomplete, data is insufficient, or quality management processes are not documented in an audit-proof manner.
The requirements and quality management are key elements for safety, verification, and market access. A QMS in accordance with ISO 13485 creates the organizational basis for systematically implementing regulations: responsibilities are defined and documented, changes are controlled, deviations are processed, and corrective measures are tracked. This increases consistency in development and production and supports compliance with legal requirements. At the same time, robust quality management enables clear communication with notified bodies, authorities, partners, and customers. For healthcare companies, this is not only a formal obligation, but also a factor that strengthens trust and can reduce costs in the long term.