Source: EC 18th Notified Bodies Survey, March 2026
Source: MedTech Europe survey / MedTech Dive
Source: EUR-Lex: Regulation (EU) 2017/745
Insight Summary
What the Data Shows
Article 1: Scope - Broader Than Its Predecessor in Three Significant Ways
The compliance challenges the data reveals are traceable to specific structural decisions made in Articles 1 and 2 of EU MDR 2017/745. Understanding why these provisions generate so much complexity requires reading what they actually say.
Annex XVI products without a medical purpose
Software as a Medical Device formalised
Accessories treated as devices in their own right
Regulation, not Directive: direct enforceability in all member states
Article 2: 71 Definitions - Three That Generate the Most Compliance Risk
“Manufacturer” now includes reprocessors and substantial modifiers
“Intended purpose” now governed by labelling and marketing, not manufacturer intent alone
“Placing on the market” extends to digital distribution channels
Six Compliance Areas Triggered by Articles 1 and 2
Scope Determination
Article 1 scope analysis must be documented at the product level before any other compliance work begins. Undocumented scope determinations are not a compliance position.
Manufacturer Status
Article 2(30) manufacturer definition analysis must cover all organisations that reprocess, repackage, relabel, or substantially modify CE-marked devices.
Software Classification
MDCG 2019-11 software qualification and classification guidance applies to any software product that may fall within EU MDR scope under Article 1 and Article 2(1).
Marketing Review
Article 2(12) intended purpose definition makes promotional materials a classification risk factor. Regulatory affairs must review all external communications for scope-triggering language.
Non-EU Manufacturer Obligations
Article 2(28) placing on market definition means non-EU manufacturers distributing via digital channels to EU users are in scope and must appoint an Authorised Representative under Article 11.
Transition Deadline Mapping
December 2027 and December 2028 transition deadlines require backwards planning from Notified Body expected review completion dates, not from the deadline date itself.
What This Means for Compliance Leaders
The scope question must be answered before the QMS question
The Notified Body timeline must drive the programme plan, not the deadline date
Marketing and labelling are compliance documents, not sales materials
Healthcare institutions reprocessing single-use devices are manufacturers under MDR
10 Important EU MDR 2017/745 Facts for Compliance Leaders
Ten data points from EU Commission surveys, MedTech Europe research, and the EU MDR text that compliance and regulatory leaders need to know.
33,175 applications submitted to EU Notified Bodies through October 2025. Only 17,549 MDR certificates issued, a gap of 15,626 applications. Certificate volume grew 18% from the prior snapshot.
51 Notified Bodies designated for EU MDR as of the 18th survey. Notified Body capacity, not regulatory complexity, is the primary constraint on certification throughput.
Article 2 of EU MDR introduces 71 regulatory definitions. Three generate the most compliance risk: manufacturer (including reprocessors), intended purpose (governed by labelling and marketing), and placing on the market (including digital channels).
More than half of MDD-certified manufacturers reported portfolio reductions as a direct result of MDR implementation. Low-volume, niche, and legacy products face the highest risk of permanent EU market withdrawal.
December 31, 2027 is the transition deadline for Class III devices and certain Class IIb implantables under Regulation 2024/1860. Devices without a valid MDR certificate by this date cannot be legally placed on the EU market.
Applications submitted today realistically complete review in mid-to-late 2027 at the earliest. For December 2027 deadlines, there is virtually no margin for incomplete submissions or additional information requests.
The European Commission’s December 2025 Staff Working Document identified four systemic MDR implementation failures: Notified Body capacity, SME costs, duplicated reporting, and EUDAMED uptake.
December 31, 2028 is the final transition deadline for all remaining Class IIb, Class IIa, and Class Im/Is/Ir devices as amended by Regulation 2024/1860.
Regulation (EU) 2017/745 entered into force May 2017 and became fully applicable May 26, 2021, following a one-year COVID-19 extension from the original May 2020 date.
= ALL SUBSEQUENT MDR OBLIGATIONS FLOW FROM THESE TWO Scope and Definitions Are Not Administrative Introductions
Article 1 determines whether the regulation applies to a given product at all. Article 2 determines who bears manufacturer liability. Every subsequent obligation in EU MDR’s 123 articles and 17 annexes applies only to the extent that Articles 1 and 2 establish scope and role. Getting either wrong is not a procedural error: it is a foundational compliance failure. Source: Regulation (EU) 2017/745, EUR-Lex
5 Myths About EU MDR 2017/745 Articles 1 and 2
If a product has no medical purpose, it cannot be in EU MDR scope.
Article 1(2) and Annex XVI of EU MDR explicitly bring products without a medical purpose into the full MDR regulatory framework. Coloured contact lenses, high-intensity aesthetic laser equipment, liposuction equipment, and other aesthetic devices listed in Annex XVI now require conformity assessment, clinical evaluation, and in most cases Notified Body involvement, the same pathway as a Class IIa or IIb medical device. The absence of a medical purpose is no longer a basis for exclusion from EU MDR. Source: EU MDR Article 1(2), Annex XVI
A hospital that reprocesses a single-use device is just a user, not a manufacturer.
Under Article 2(30) and Article 17 of EU MDR, a health institution that reprocesses a single-use device for reuse within the institution is subject to manufacturer-equivalent obligations. Article 17(2) provides specific derogations: health institutions reprocessing for internal use are not required to appoint an Authorised Representative or apply CE marking, but they must comply with equivalent standards for quality management, technical documentation, clinical evaluation, and device traceability. The legal position of ‘just a user’ no longer applies to any institution reprocessing single-use devices. Source: EU MDR Article 2(30), Article 17
The intended purpose of a software product is determined by its technical design, not its marketing.
Article 2(12) of EU MDR defines intended purpose based on what the manufacturer’s labelling, instructions for use, promotional materials, and sales materials state. A software product that is engineered as a general analytics platform but described in app store listings or marketing materials as supporting clinical diagnosis is in EU MDR scope based on the marketing language, regardless of the technical design. Regulatory affairs review of all external communications is a classification risk management activity under EU MDR, not merely a legal review of advertising. Source: EU MDR Article 2(12)
A non-EU manufacturer distributing a health app through an app store is not placing a device on the EU market.
Article 2(28) of EU MDR defines placing on the market to include making a device available to users in the EU through any channel, including digital distribution platforms such as app stores directed at EU users. A non-EU company with no EU legal entity and no EU distributor that makes a health application downloadable by EU users is placing a device on the EU market under this definition. The obligation to appoint an Authorised Representative under Article 11 applies as a consequence. The digital delivery mechanism does not create an exemption from EU MDR scope. Source: EU MDR Articles 2(28), 11
Once a compliance programme is built to EU MDR 2017/745, it can be maintained without active monitoring of new guidance.
The EU Commission’s December 2025 Staff Working Document acknowledged systemic implementation failures and identified areas likely to be subject to further regulatory reform, including PSUR frequency and EUDAMED obligations. The MDCG guidance library has been updated continuously since 2021, with MDCG 2021-24 revised in April 2026 and MDCG 2025-10 on post-market surveillance published in 2025. Each MDCG publication can affect classification, clinical evaluation, UDI, or PSUR obligations without amending the base regulation. A compliance function not tracking MDCG publications is working from an incomplete version of EU MDR requirements even if it is current on the regulation text. Source: EC SWD(2025) 1050
Impact on Medical Device Manufacturers and Compliance Teams
Certification Timeline Risk Is Acute for December 2027 Devices
With 15,626 applications pending and 13 to 18 month review times, manufacturers without an active Notified Body review for December 2027 deadline devices are at significant risk of missing the transition date. The arithmetic of the current backlog does not support a scenario where late submissions can be processed in time. This risk requires escalation to board level, not management of it within the regulatory affairs function.
Portfolio Reduction Is a Direct Financial Consequence of Scope Decisions
More than half of manufacturers have reduced their EU device portfolios as a result of MDR implementation. The portfolio decisions that determine which products to pursue through MDR certification and which to withdraw from the EU market are fundamentally scope and classification decisions under Articles 1 and 2. Undocumented or incorrect scope analyses at the product level are directly generating market withdrawal decisions that reduce revenue and patient access.
Software and Digital Health Products Face a New Regulatory Reality
AI-assisted diagnostic tools, clinical decision support software, and health applications that previously operated outside EU medical device regulation are now in scope under Article 1 and MDCG 2019-11. For software companies that have not previously operated in a regulated environment, the Article 2 definitions create manufacturer obligations including technical documentation, post-market surveillance, and vigilance reporting that require building new compliance infrastructure from scratch.
Healthcare Institutions Face Manufacturer Obligations They Did Not Previously Have
Hospitals and healthcare institutions that reprocess single-use devices are now subject to manufacturer-equivalent obligations under Article 2(30) and Article 17. Many institutions have compliance programmes built around purchasing and using CE-marked devices. These programmes do not cover the technical documentation, clinical evaluation, and traceability obligations that apply to reprocessing. A compliance gap assessment specifically against Article 17 obligations is required for any institution that reprocesses single-use devices.
Practical Implications: What the Evidence Requires
Document Article 1 Scope for Every Product
Every product in or near MDR scope requires a written scope determination signed off by regulatory affairs. Undocumented scope determinations are not a compliance position. For borderline products, the MDCG Manual on Borderline and Classification (updated April 2026) is the authoritative reference.
Apply Article 2 Manufacturer Analysis to All Downstream Organisations
Any organisation that repackages, relabels, reprocesses, or substantially modifies a CE-marked device must assess whether those activities trigger manufacturer status under Article 2(30). Legal counsel and regulatory affairs must assess this jointly for distributors, hospitals, and downstream entities.
Integrate Regulatory Affairs into Marketing Review
Article 2(12) intended purpose definition means all external communications, including app store descriptions, website product pages, and sales presentations, are classification-risk documents. Regulatory affairs sign-off on marketing content for in-scope products is not optional under EU MDR.
Contact Notified Body This Quarter for December 2027 Devices
If any product requiring certification by December 2027 does not yet have a signed application with a Notified Body, the timeline risk is acute. Submission today targets mid-to-late 2027 at the earliest. Engage a designated Notified Body this quarter, not this year.
Build MDCG Guidance Monitoring into the Compliance Calendar
MDCG guidance is updated continuously. MDCG 2021-24 was revised April 2026. MDCG 2025-10 was published 2025. Each update can affect classification, clinical evaluation, or PMS obligations without amending the base regulation. Monitoring is a standing compliance function.
Plan for Continuing Regulatory Change
The EC December 2025 SWD signals PSUR frequency and EUDAMED obligations are candidates for reform. Compliance programmes should be designed to absorb regulatory changes, not built as static implementations of the 2017 text.
Executive Takeaway
Frequently Asked Questions
What does EU MDR 2017/745 Article 1 actually cover?
What types of products are in MDR scope that were not under the MDD?
When does a hospital or healthcare institution become a manufacturer under EU MDR?
How does EU MDR define intended purpose and why does it matter for classification?
What are the current MDR transition deadlines?
What does the Notified Body capacity gap mean for a manufacturer applying for certification today?
Where can manufacturers find the official EU MDR text and MDCG guidance?
Sources
Government and Regulatory Sources
- Regulation (EU) 2017/745 of the European Parliament and of the Council on medical devices (EUR-Lex): primary legislative text. Articles 1 (scope), 2 (definitions including manufacturer, intended purpose, placing on market), 11 (authorised representative), 17 (reprocessing single-use devices), and Annex XVI (products without medical purpose) cited throughout.
- European Commission SWD(2025) 1050 final, December 2025: Commission Staff Working Document identifying four systemic MDR implementation failures: Notified Body capacity bottlenecks, SME compliance costs, duplicated reporting obligations (PSUR frequency), and uneven EUDAMED uptake.
- European Commission: MDR/IVDR Implementation, MDCG Guidance and Notified Bodies Surveys: source for EC 18th Notified Bodies Survey (published March 2026, data through October 2025), 33,175 applications and 17,549 certificates issued.
- Regulation (EU) 2023/607 and Regulation (EU) 2024/1860: amending regulations extending MDR/IVDR transitional provisions and establishing December 2027 and December 2028 transition deadlines.
Research and Industry Sources
- MedDeviceGuide: EU MDR Notified Body Capacity Crisis 2026-2027 (May 2026): analysis of EC 18th Notified Bodies Survey data; 33,175 applications, 17,549 certificates, 15,626 gap; 18% certificate growth; 13 to 18 month review timeline.
- MedTech Dive: Notified Bodies Have Not Yet Issued MDR Certificates for 85% of Legacy Devices (2022): MedTech Europe survey data covering 60 to 70% of EU market by revenue; 30% of smaller businesses without access to MDR-designated Notified Bodies; 13 to 18 month certification timeline.
- PA Consulting: We’re Heading Toward a Bottleneck for EU MDR Approvals (2024): MedTech Europe portfolio reduction data; over half of manufacturers reporting portfolio reductions; 25,034 MDD-certificate devices in April 2022.
- Pure Global: EU Commission 2025 Economic Operator Survey on Medical Device Availability: survey findings on certification delays, niche device withdrawal risks, and supply continuity concerns for specialised and rare-condition devices.
Related VelSafe Articles
VelSafe Insights: Regulatory and Compliance Analysis
Evidence-led analysis of regulatory trends, enforcement patterns, and compliance implications across healthcare, safety, and regulated industry sectors.
FDA 483 Enforcement Statistics: Trends and What They Mean
FDA 483 citation data analysis covering enforcement patterns, most-cited observations, and what the inspection record shows for regulated manufacturers.
FDA Jurisdictions and Enforcement Data: Insights
FDA jurisdiction scope, enforcement actions by jurisdiction, inspection trends, and what the enforcement record means for regulated manufacturers and importers.


