GUIDES: Medical Device Post-Market Safety Reporting
How to Report Medical Device Adverse Events
A Regional Compliance Guide: US, EU, Canada, Japan, and Australia
Adverse event reporting for medical devices is a mandatory post-market safety obligation in every major regulatory jurisdiction. The timelines, reporting pathways, required report contents, and responsible parties differ significantly across regions. This guide covers what must be reported, who must report it, by when, and through which channel in the United States, European Union, Canada, Japan, and Australia.
5
Major Jurisdictions Covered
US, EU, Canada, Japan, and Australia together represent the majority of the global medical device market. Each has distinct adverse event reporting obligations that manufacturers must satisfy simultaneously for devices distributed across these markets.
Global Medical Device Regulatory Framework
2
Day Fastest Deadline (EU)
Under EU MDR 2017/745 Article 87, a serious public health threat must be reported to the relevant national competent authority immediately and no later than two calendar days after the manufacturer becomes aware of the threat.
EU MDR 2017/745, Article 87
Jul 26
EUDAMED VGL Mandatory
The EUDAMED vigilance module (VGL) became mandatory for EU MDR vigilance reporting on July 1, 2026. Manufacturers who were submitting reports to national competent authorities by email or MIR form must now route submissions through EUDAMED.
EU Regulation 2024/1860
Before You Report: Understanding What Triggers Reporting Across All Regions
Adverse event reporting thresholds differ across jurisdictions, but the underlying concepts are consistent. Reporting is triggered when a device is implicated in death, serious injury, or a malfunction that could lead to either if it recurred. The key differences are in how each region defines “serious injury,” whether user facility reporting is required, and what timelines apply to which severity level.
The most common mistake in multi-market adverse event management is assuming that a report filed with one authority satisfies obligations in others. It does not. Each jurisdiction requires its own report, in its own format, through its own channel, within its own timeline. A single adverse event involving a device marketed in all five regions covered here may require up to five simultaneous and independent reporting processes.
This guide covers each region’s requirements in a consistent format so manufacturers can compare obligations across markets and build multi-jurisdictional reporting SOPs that address each one systematically.
Legal Disclaimer
This guide provides educational information about medical device adverse event reporting obligations in five major regulatory jurisdictions. It is not legal or regulatory advice and does not account for device-specific, product class, or jurisdiction-specific variations. Manufacturers should consult qualified regulatory affairs professionals and legal counsel before establishing adverse event reporting procedures. Requirements are subject to change through regulatory guidance, rulemaking, and national competent authority decisions.
1. United States: FDA Medical Device Reporting (21 CFR Part 803)
US Regulatory Framework
Primary Regulation
21 CFR Part 803 (Medical Device Reporting)
Regulatory Authority
FDA Center for Devices and Radiological Health (CDRH)
Reporting System
eMDR (Electronic Medical Device Reporting system)
Who Must Report (US)
Three categories of entities have mandatory MDR reporting obligations under 21 CFR Part 803: manufacturers, importers, and device user facilities. Each has distinct reporting obligations, timelines, and reporting pathways. Distributors who are not also importers do not have mandatory MDR reporting obligations but must maintain records of complaints they receive and make those records available to manufacturers and FDA upon request.
Reporter Type
What They Must Report
Timeline
Form
Manufacturer
Death or serious injury caused or contributed to by device. Malfunction that, if it recurred, could cause or contribute to death or serious injury.
30 calendar days (standard). 5 calendar days if FDA requires supplemental reports or if event requires remedial action to prevent unreasonable risk.
Form FDA 3500A via eMDR system
Importer
Death or serious injury caused or contributed to by device. Must also send copies of reports to the manufacturer.
30 calendar days
Form FDA 3500A via eMDR system
Device User Facility (hospitals, nursing homes, ambulatory surgical facilities)
Death: report to FDA and manufacturer. Serious injury: report to manufacturer (or to FDA if manufacturer unknown). Annual summary reports to FDA.
Death: 10 working days. Serious injury: 10 working days.
Form FDA 3500A. Annual summary on Form FDA 3419.
Source: FDA | 21 CFR Part 803 | eMDR system at www.fda.gov/emdr
Key US Definitions
Serious Injury (US)
An injury or illness that is life-threatening; results in permanent impairment of a body function or permanent damage to body structure; or necessitates medical or surgical intervention to preclude permanent impairment or damage. Also includes events that require intervention to prevent permanent impairment, such as broken bones or burns requiring treatment.
21 CFR 803.3
Malfunction (US)
The failure of a device to meet its performance specifications or otherwise perform as intended. Malfunctions are reportable when the manufacturer reasonably concludes that the device would be likely to cause or contribute to a serious injury or death if the malfunction were to recur.
21 CFR 803.3 and 803.50(a)(2)
Baseline Reports and Annual Certifications (US)
Manufacturers who submit MDR reports must also submit baseline reports (Form FDA 3417) for each device model implicated in a reportable event for the first time, and annual certifications or reports (Form FDA 3381) summarizing MDR activity. These obligations exist separate from individual adverse event reports.
21 CFR 803.55 and 803.57
2. European Union: MDR Vigilance Reporting (Articles 87 to 92)
EU Regulatory Framework
Primary Regulation
EU MDR 2017/745, Articles 87 to 92 (medical devices); EU IVDR 2017/746, Articles 82 to 87 (IVDs)
Reporting to
EUDAMED (mandatory from July 1, 2026) and relevant National Competent Authorities
Interpretive Guidance
MDCG 2023-3 Rev.2 (January 2025): Q&A on vigilance terms and concepts
EU Vigilance Reporting Timelines
EU MDR Article 87 establishes three reporting timelines based on the severity of the incident. In all cases, an initial report may be submitted to the National Competent Authority even when full information is not yet available. The clock starts when the manufacturer becomes aware of the incident, not when investigation is complete.
Incident Type
Deadline
Notes
Serious public health threat
2 calendar days
Immediate notification required; formal report no later than 2 days after becoming aware of the threat. This is the most time-sensitive EU reporting obligation.
Death or unanticipated serious deterioration in state of health
10 calendar days
Report immediately and no later than 10 days after becoming aware of the incident. Covers deaths and unexpected serious deterioration in health linked to the device.
Other serious incident
15 calendar days
Report immediately and no later than 15 days after becoming aware of the incident. Covers serious incidents not meeting the higher-severity thresholds above.
Source: EU MDR 2017/745, Article 87 | MDCG 2023-3 Rev.2 (January 2025)
EU Key Definitions and EUDAMED Update
Serious Incident (EU MDR)
Any incident that directly or indirectly led, might have led, or might lead to the death of a patient, user, or other person; a temporary or permanent serious deterioration of a patient’s, user’s, or other person’s state of health; or a serious public health threat. MDCG 2023-3 Rev.2 provides detailed Q&A on the definition’s boundaries.
EU MDR 2017/745, Article 2(64)
Field Safety Corrective Action (FSCA)
Any corrective action taken by the manufacturer for technical or medical reasons to prevent or reduce the risk of a serious incident in relation to a device made available on the market. FSCAs include recalls, software updates, labeling changes, and instructions to users to modify device use. All FSCAs are notified to NCAs and accompanied by a Field Safety Notice (FSN) distributed to users.
EU MDR 2017/745, Article 87(9)
EUDAMED Vigilance Module (July 2026)
The EUDAMED vigilance (VGL) module became mandatory on July 1, 2026 under EU Regulation 2024/1860. Manufacturers who previously submitted serious incident reports (MIR) and FSCA notifications to national competent authorities by email or using national forms must now route all EU vigilance reports through EUDAMED. Manufacturers must have a Single Registration Number (SRN) and device UDI registered in EUDAMED before submitting vigilance reports.
EU Regulation 2024/1860 | EUDAMED
EU Reporting Note: Under EU MDR, the obligation to report a serious incident falls on the manufacturer or, where the manufacturer is located outside the EU, on the authorized representative (AR). Importers and distributors do not have primary vigilance reporting obligations but must forward information about incidents to the manufacturer or AR immediately. The Notified Body must also be copied on serious incident reports for CE-marked devices.
3. Canada: Health Canada Mandatory Problem Reporting
Canada Regulatory Framework
Primary Regulation
Medical Devices Regulations (SOR/98-282), Sections 59 to 61.1
Regulatory Authority
Health Canada, Medical Devices Directorate
Reporting Method
Health Canada online Medical Device Problem Report form. Reports accepted in English or French.
Incident Type
Deadline
Who Must Report and What
Death or serious deterioration in health
10 calendar days
Manufacturers and importers must report incidents where a device has malfunctioned and the malfunction led or could have led to the death of a patient or user, or a serious deterioration in a patient’s or user’s state of health.
Other serious incidents or potential FSCA
30 calendar days
Serious incidents not involving death or serious deterioration, and any issue that might lead to a recall or Field Safety Corrective Action, must be reported within 30 calendar days.
Source: Health Canada | Medical Devices Regulations (SOR/98-282), Sections 59 to 61.1
Canada: Who Must Report
Manufacturers and importers have mandatory problem reporting obligations. Health Canada does not impose mandatory reporting obligations on distributors or healthcare facilities for adverse events (though voluntary reporting is encouraged). The reporting obligation falls on the party who holds the device licence for the Canadian market.
Canada: Report Language and Format
Reports must be submitted in English or French. Health Canada’s online Medical Device Problem Report form captures the required information. The report must include a description of the device problem, the incident circumstances, the patient and device information, and any actions taken or planned.
4. Japan: PMDA Adverse Event Reporting
Japan Regulatory Framework
Primary Regulation
Pharmaceutical and Medical Device Act (PMD Act), Article 68-10; GVP Ministerial Ordinance
Regulatory Authority
PMDA (Pharmaceuticals and Medical Devices Agency) and Ministry of Health, Labour and Welfare (MHLW)
Reporting Method
PMDA reporting portal; designated GVP forms and codes required. Foreign manufacturers typically report through their Japanese Marketing Authorization Holder (MAH).
Incident Type
Deadline
Notes
Death or serious injury, infections, or illness related to the device
15 calendar days
Events resulting in death, disability, infection requiring hospitalization, or other serious outcomes must be reported within 15 days. Overseas adverse events related to devices marketed in Japan are also reportable if they meet the serious threshold.
Malfunctions that could lead to death or serious injury
30 calendar days
Device malfunctions or defects that have not caused an adverse outcome but could lead to death or serious injury must be reported within 30 days. This includes defects discovered during manufacturing or post-market surveillance.
Source: PMDA | PMD Act Article 68-10 | GVP Ministerial Ordinance
Japan: MAH Reporting Structure
Japan requires that all adverse event reports be submitted by a Japanese Marketing Authorization Holder (MAH). Foreign manufacturers who do not hold their own MAH status in Japan must ensure their designated Japanese MAH has a robust system for receiving adverse event information from the manufacturer and submitting reports within the required timelines. This creates a mandatory information-sharing obligation between the manufacturer and the MAH.
Japan: GVP System
The Good Vigilance Practice (GVP) Ministerial Ordinance governs the overall post-market safety management system for medical devices in Japan. Adverse event reporting is one component of a broader GVP system that includes post-market surveillance, risk management, and periodic safety update reporting. GVP requires designated GVP officers at the MAH level responsible for the overall post-market safety program.
5. Australia: TGA Adverse Event Reporting
Australia Regulatory Framework
Primary Legislation
Therapeutic Goods Act 1989; Therapeutic Goods (Medical Devices) Regulations 2002
Regulatory Authority
Therapeutic Goods Administration (TGA)
Reporting Method
TGA Business Services (TBS) online portal. Sponsors registered in the Australian Register of Therapeutic Goods (ARTG) have reporting obligations.
Incident Type
Deadline
Notes
Death or serious injury where device may have contributed
2 calendar days (initial notification)
An initial report must be submitted within 2 calendar days where death or serious injury may have been caused by the device. A full report must follow within 30 calendar days.
Malfunction or deterioration that could lead to serious injury or death if it recurred
10 calendar days
Malfunctions or deteriorations in device characteristics that could cause serious injury or death if they recurred must be reported within 10 calendar days.
Other reportable adverse events and near-serious incidents
30 calendar days
Less severe reportable events and near-serious incidents where no harm occurred but could have must be reported within 30 calendar days.
Source: TGA | Therapeutic Goods Act 1989 | Therapeutic Goods (Medical Devices) Regulations 2002
Australia: Sponsor Reporting Obligation
In Australia, the reporting obligation falls primarily on the sponsor (the entity listed in the ARTG, typically the Australian importer or distributor rather than the overseas manufacturer). Sponsors must have information-sharing agreements with manufacturers that ensure adverse event information flows to the sponsor in time to meet TGA reporting deadlines.
Australia: ARTG Registration Requirement
Devices must be registered in the Australian Register of Therapeutic Goods (ARTG) before they may be supplied in Australia. Sponsors with ARTG entries must notify TGA of adverse events and undertake Field Safety Corrective Actions when required. TGA publishes hazard alerts and recall notices publicly on its website.
Multi-Region Quick Reference Comparison
Element
US (FDA)
EU (MDR)
Canada
Japan
Australia
Death/serious injury timeline
30 calendar days (mfr)
10 calendar days
10 calendar days
15 calendar days
2 days (initial); 30 days (full)
Fastest deadline trigger
5-day report
2 days (public health threat)
10 calendar days
15 calendar days
2 calendar days
Reporting authority
FDA / CDRH
EUDAMED + NCAs
Health Canada
PMDA / MHLW
TGA
Primary reporter
Mfr, importer, user facility
Mfr / authorized rep
Mfr and importer
Japanese MAH
ARTG sponsor
Reporting system
eMDR / Form 3500A
EUDAMED (MIR form)
Online problem report form
PMDA portal / GVP forms
TGA Business Services portal
Key regulatory reference
21 CFR Part 803
MDR 2017/745 Art. 87-92
SOR/98-282, Sec. 59-61.1
PMD Act Art. 68-10; GVP
TGA 1989; MDR Regs 2002
Note: All timelines run from the date the manufacturer (or responsible party) becomes aware of the event, not from the date the event occurred. Timelines are subject to regulatory updates. Verify current requirements with regional regulatory counsel before filing.
Building a Multi-Region Adverse Event Reporting Program
Manufacturers distributing devices in multiple markets need a reporting program that handles all regional obligations systematically, not one that addresses each jurisdiction in isolation as events arise. A multi-region adverse event reporting SOP should address at minimum the following elements.
Define which channels can receive adverse event information (customer service, sales, technical support, social media, distributor networks) and how information from all of those channels reaches the regulatory reporting function with timestamps. The reporting clock starts at awareness, not at formal receipt.
2
Reportability Assessment
A documented evaluation of whether the event meets the reporting threshold in each market where the device is distributed. The assessment must be completed within a timeframe that allows reports to be filed before the fastest applicable deadline. Document the assessment even when the conclusion is that no report is required.
File reports in all applicable jurisdictions simultaneously, not sequentially. Waiting to see what one authority says before filing with another is not compliant. Each jurisdiction’s clock runs independently from the moment of awareness.
Most jurisdictions require follow-up or final reports after the initial submission once the investigation is complete. Track open reports and their follow-up obligations. A filed initial report with no follow-up is a compliance gap in most regions.
Each jurisdiction has its own record retention obligation for adverse event files. The US MDR regulation (21 CFR 803.18) requires manufacturers to retain MDR records for 2 years from the date of the event or the date a report was required, whichever is later. EU MDR requires documentation to be retained for the lifetime of the device plus at least 10 years.
6
Distributor and Importer Agreements
In markets where reporting obligations fall primarily on a local entity (Japan MAH, Australia sponsor, EU authorized representative), contractual obligations must require that party to notify the manufacturer of all adverse events immediately, and that the manufacturer’s own safety database receives and records those reports regardless of who files them.
Key Takeaways
One Report Does Not Satisfy Multiple Markets
Filing an MDR with FDA does not satisfy EU, Canadian, Japanese, or Australian reporting obligations. Each jurisdiction requires its own report, in its own format, submitted through its own channel, within its own timeline. Multi-market manufacturers need parallel reporting processes, not sequential ones.
The Clock Starts at Awareness
In every jurisdiction covered, the reporting deadline runs from the date the responsible party becomes aware of the event, not from the date the investigation is complete or the date the event occurred. Initial reports can and in many cases must be submitted before the investigation is finished.
EUDAMED VGL Is Now Mandatory in the EU
The EUDAMED vigilance module became mandatory on July 1, 2026. Manufacturers who were submitting EU serious incident reports and FSCA notifications to national competent authorities by email or using the MIR form must now route all submissions through EUDAMED. SRN registration and UDI in EUDAMED are prerequisites.
Local Representatives Have Reporting Obligations You Share
In Japan and Australia, local entities (MAH, ARTG sponsor) carry the primary reporting obligation. But the manufacturer must ensure those parties have the information they need within the time available. Information-sharing agreements with defined notification timelines are not optional: they are the mechanism that makes regulatory compliance possible in these markets.
Frequently Asked Questions
Does a complaint automatically trigger an adverse event report?
Not automatically, but every complaint must be evaluated for reportability. A complaint is a signal that may or may not indicate a reportable adverse event. The evaluation must be documented, and if the complaint meets any reporting threshold in any market where the device is distributed, a report must be filed in that jurisdiction. A complaint that is determined not to require a report still needs a documented non-reportability determination in most jurisdictions.
What if we are still investigating the event when the reporting deadline arrives?
Most jurisdictions explicitly permit, and some require, the submission of an initial report before the investigation is complete. The initial report captures what is known at the time of submission. A follow-up or final report is then submitted once the investigation is complete. Do not delay filing an initial report because investigation is ongoing. Filing late because of an incomplete investigation is not a justification regulators accept.
We distribute through a local distributor in Australia. Are we still responsible for TGA reporting?
If your Australian distributor is also the ARTG sponsor, the primary TGA reporting obligation falls on them. However, your manufacturing agreement should require them to notify you of all adverse events immediately and to share all regulatory correspondence. If they fail to file required reports, the TGA may take action against the ARTG entry, which affects your market access. Audit your Australian sponsor’s adverse event reporting procedures regularly.
Do we need to report overseas adverse events to all regional authorities?
Rules vary. In Japan, the GVP Ministerial Ordinance requires that overseas adverse events related to devices marketed in Japan be reported to PMDA if they meet Japanese reporting thresholds. In the EU, under MDR Article 87, reports must be made regardless of where the incident occurred if the device is marketed in the EU. FDA MDR generally applies to events in the US market but manufacturers should consult regulatory counsel on event origin and reporting scope for each jurisdiction.
Government and Regulatory Sources
Related VelSafe Articles
Know Your Deadlines Before an Event Forces the Question
The fastest adverse event reporting deadline across these five markets is two calendar days. In a real event involving a serious outcome on a device distributed in multiple markets, regulatory timelines run simultaneously from the moment of awareness. Manufacturers who build their reporting processes after an event occurs are already late. Map your obligations, define your intake channels, establish your reportability assessment criteria, and verify your local representative agreements before the next event makes those gaps visible to regulators. Find more medical device compliance resources at velsafe.com.
