Quality Management for Medical Device Manufacturers

Ensuring Compliance and Patient Safety through Structured Systems

An effective quality management system is essential for the manufacture of medical devices and dental products. In this sensitive field, it is of the utmost importance that products meet the highest quality standards to ensure patient safety and the effectiveness of medical treatments.

Companies that manufacture and distribute medical devices are legally required to implement, operate, and maintain a quality management system (QMS) in accordance with Article 10 of the MDR (EU) 2017/745.

The quality management system must effectively and appropriately ensure compliance with the requirements of the MDR. One of the purposes of the MDR is to establish a legal framework that regulates compliance with high quality and safety standards.

The Quality Management System must ensure conformity with the requirements of the European MDR in an effective and appropriate manner. The reasons for the introduction of the MDR are manifold, including the creation of a legal framework that regulates compliance with high quality and safety standards.

Who needs which QMS? Does my product require a Notified Body for the QMS?

For manufacturers of medical devices, the implementation of a QMS is mandatory, regardless of the risk class. What differs is the role of the Notified Body.

Manufacturers of Class I products implement a QMS and are themselves responsible for its MDR compliance. Certification by a Notified Body is not required in this case.

For higher-classified products (Is, Im, Ir, IIa, IIb, III), implementation alone is not sufficient. These manufacturers undergo a conformity assessment procedure involving a Notified Body, including regular surveillance audits and formal certification of the QMS, typically according to the ISO 13485 standard.

Class I

Is a QMS required? Yes
Is a Notified Body required? No
ISO 13485? Recommended but not required

Class Is, Im, Ir, IIa, IIb, III

Is a QMS required? Yes
Is a Notified Body required? Yes
ISO 13485? Standard practise

Core Elements of a Medical Device Quality Management System

According to Article 10(9) of the MDR, the quality management system shall include at least the following elements:

  • Conformity assessment procedures
  • Identification of the applicable essential safety and performance requirements and the determination of ways to comply with these requirements
  • Management responsibility
  • Resource management, including the selection and control of suppliers and subcontractors
  • Risk management in accordance with Annex I, Section 3
  • Clinical Evaluation in accordance with Article 61 and Annex XIV, including post-market clinical follow-up (PMCF)
  • Product realization: planning, design, development, manufacturing, and provision of services
  • Verification of UDI assignment in accordance with Article 27(3) and consistency of information in accordance with Article 29
  • Establishment, implementation, and maintenance of a post-market surveillance system in accordance with Article 83
  • Communication with competent authorities, Notified Bodies, other economic operators, customers, and/or other interested parties
  • Vigilance: Reporting of serious incidents and field safety corrective actions
  • Management of corrective and preventive actions (CAPA), including verification of effectiveness
  • Monitoring and measuring results, data analysis, and product improvement

In addition, there are further obligations: the Post-Market Observation Surveillance, product labeling, the reporting system, and the ongoing updating of the Technical Documentation for Medical Devices (Annexes II and III of the MDR).

Is ISO 13485 certification mandatory under the MDR?

The quality management system does not necessarily have to be certified according to EN ISO 13485. However, certification by a Notified Body or a certification body simplifies subsequent procedures and serves as evidence in the conformity assessment process.

However, the minimum requirements set forth in Article 10 of the MDR are not entirely identical to those of EN ISO 13485. The standard provides a proven framework, but it does not automatically cover regulatory MDR obligations such as the Post-Market Surveillance (PMS) under Article 83 or UDI assignment.

WQS Services in Quality Management

Since 1993, WQS has been supporting medical device manufacturers in establishing an MDR-compliant system in accordance with Article 10, aligning with DIN EN ISO 13485, and providing ongoing maintenance as requirements change and the system must evolve accordingly. We review existing QM systems, from gap analysis to preparation for the conformity assessment procedure. This is not about a manual that looks good, but about evidence that holds up during an audit.

Quality Management System • MDR

Get your QMS checked for audit readiness

WWQS has been supporting medical device manufacturers since 1993 by establishing, maintaining, and certifying quality management systems. We keep the system up to date as regulations evolve and the QMS needs to adapt accordingly.

Frequently Asked Questions

A QMS ensures that Medical Devices consistently meet safety, performance, and regulatory requirements. It is legally required under the European MDR and helps protect patients, users, and healthcare providers. Learn more about the QMS ISO 13485 Compliance.

No, Class I Medical Devices generally do not require Notified Body involvement, but the manufacturer must still implement and maintain a QMS in accordance with MDR requirements.

The QMS must cover Regulatory Compliance, Risk Management, Product Realization, Clinical Evaluation, Post-Market Surveillance, UDI Assignment, Vigilance Reporting and Continuous Improvement.

No, ISO 13485 certification is not legally required for CE Marking under the MDR. However, it is strongly recommended and widely used by Notified Bodies as supporting evidence in the conformity assessment process.

References

  • European Parliament & Council of the EU: Regulation (EU) 2017/745 on Medical Devices (MDR), Official Journal of the European Union, May 5, 2017 – eur-lex.europa.eu
  • DIN Media: DIN EN ISO 13485 (standard available for a fee)dinmedia.de