MDR and IVDR Targeted Revision

What EU Manufacturers Need to Know in 2026

If you build, launch, or maintain medical devices or IVDs in the EU, the MDR/IVDR targeted revision is the most consequential regulatory update since 2017. On 16 December 2025, the European Commission unveiled a proposal to simplify and streamline MDR and IVDR, cutting administrative drag while keeping safety standards intact.

From our side, 40+ consultants supporting manufacturers across the UK, US, Spain, Belgium, Portugal and the wider EU, we’ve already mapped the practical impact by role, class, and portfolio. Our team of experts analyzed the revision and wrote this article, with action steps you can start this quarter.

The Big Picture: why the EU proposed a targeted revision

The Commission’s objective is simple: reduce burden, improve predictability, and protect innovation, without lowering safety or performance requirements. The move responds to structural bottlenecks (NB capacity, uneven practices, and certification timelines) that have strained SMEs and constrained product availability.

Team insight
In recent NB projects for UK and US manufacturers seeking EU CE, we’ve observed that early, structured NB engagement eliminates avoidable review loops and reduces time-to-decisionespecially for complex portfolios.

What actually changes (and what doesn’t)

The proposal retains MDR/IVDR safety foundations but changes how processes are applied, more proportionate and digital by default. Key areas:

PRRC, certificate validity and risk-based reviews

  • PRRC: Simplifies qualification requirements; SMEs using an external PRRC no longer need them “permanently and continuously” available—just available.
  • Certificate validity: The fixed 5-year cycle is removed. Expect risk-based periodic reviews rather than hard recertification clocks.

PSUR & SSCP/SSP: lighter, risk-driven reporting

  • PSUR: Class IIb/III (update in Year 1 and every 2 years after; Class IIa) only when necessary based on PMS. NB reviews PSURs for high-risk classes during surveillance.
  • SSCP/SSP: Scope limited to devices under systematic TD assessment; no separate NB validation.

Classification tweaks: software, reusable instruments & more

Expect targeted rule adjustments that lower risk class for certain categories (e.g., some reusable surgical instruments, accessories to active implantables, software) with proportional evidence expectations-details to crystallise via the legislative process.

IVDR Focus: In-house Devices, Studies and Class C/D Impacts

  • In-house devices (Article 5(5)): More flexibility, including the ability to transfer in-house devices where public health justifies it; removal of the “no equivalent on the market” condition; central labs for clinical trials fall under the in-house exemption.
  • Performance studies: Routine blood draws no longer need prior authorisation; leftover-specimen companion diagnostic studies drop notification requirements.

Faster, Clearer Market Access

Structured dialogue with Notified Bodies (and change control plans)

The proposal creates a formal legal basis for structured dialogue pre and post-submission, plus pre-agreed change control plans to reduce surprises. It also distinguishes changes needing notification, approval, or none.

Breakthrough & orphan devices: priority and rolling reviews

New articles define breakthrough and orphan criteria with priority/rolling conformity assessment and expert access; legacy orphan devices may continue beyond transition under conditions.

Regulatory sandboxes for emerging tech

EU or MS-level sandboxes will enable supervised testing and data-generation for novel tech—accelerating de-risking while maintaining safeguards.

Going Digital: EUDAMED, UDI and e-Labelling

The revision pushes digital-by-default:

  • Digital DoC, electronic submissions, NB-manufacturer digital TD, and eIFU for near-patient tests.
  • Online sales: essential ID and IFU must be available to users.
  • UDI: Basic UDI-DI reinforced (assign before NB submission where applicable), more public UDI data, proportionality for small volumes/individualised devices, and preferential conditions for SMEs.

Separately, the Commission has signalled the EUDAMED clock and mandatory use in 2026, which amplifies the value of getting your UDI and EUDAMED data house in order now.

The MDR/IVDR targeted revision is a course correction: proportionate requirements, predictable reviews, and a digital backbone—without compromising safety. Manufacturers that act early—codifying structured NB engagement, recalibrating PSURs, and industrialising UDI/EUDAMED—will convert complexity into speed and resilience. Start with the 90-day plan; the rest gets easier.

FAQ

Does this lower safety standards?

No. The proposal keeps safety intact while simplifying process steps and aligning evidence with risk.

What’s the new PSUR rhythm?

For IIb/III: update in Year 1 then every 2 years; IIa: update when necessary per PMS. NBs review PSURs for certain high-risk classes during surveillance.

What’s “structured dialogue” in practice?

A formal framework to engage NBs before/after submission, with change-control plans and clear differentiation of changes needing notification/approval/none.

What changes for in-house IVDs?

More flexibility, including transfer options and inclusion of central labs for clinical trials within the exemption; removal of the “no equivalent device” clause.

Where does EUDAMED/UDI fit?

Digital submissions, Basic UDI-DI before NB submission (where applicable), and broader public UDI data access; plan for 2026 EUDAMED milestones now.

Ready to transform regulatory complexity into competitive advantage?

Contact MDx today and let us support your journey through the next chapter of MDR and IVDR.

Written by:
Andre Moreira

Andre Moreira

Regulatory Director, Medtech

Senior quality & regulatory expert, ISO 13485/MDR/IVDR auditor with expertise in CE marking MDs/IVDs, incl. dental, implantables, drug delivery, genomic tests, & MDR/IVDR implementation.
Industry Insights & Regulatory Updates

Impact of the Health Services Pack on IVD manufacturers, labs/health institutions and sponsors of combined studies

In this article, we analyze the Health Services Pack IVDR impact and its role in shaping future health regulations.

On 16 December 2025, the European Commission published a proposal to amend the EU Medical Devices Regulation (MDR) and the In Vitro Diagnostic Regulation (IVDR) with targeted measures intended to reduce regulatory complexity, cost, and unpredictability while maintaining high safety standards.

This article focuses on IVDs under IVDR and the combined-study interface (drug–diagnostic and multi-legislation studies). It explains what the proposal says today, what it could change in practice, and how different stakeholders can prepare. It also recognizes that the text is still a proposal and may change during the ordinary legislative procedure in the European Parliament and Council.


Executive summary

What matters most for IVDR stakeholders.

If adopted largely as proposed, the package could materially affect how IVD stakeholders plan certification lifecycles, evidence generation, post-market obligations, in-house testing, and combined-study authorisations:

  • PRRC organisational burden would ease for SMEs relying on external PRRC support (availability requirement would soften; detailed qualification rules would be removed).
  • Certificate validity would shift from a fixed 5-year maximum to risk-based periodic reviews during the certificate lifecycle.
  • The proposal would support a broader evidence toolbox, including wider “clinical data” recognition and explicit promotion of New Approach Methodologies (including in silico testing).
  • Administrative burden would reduce via a narrower scope for summary documents and lower PSUR update frequency, plus longer timelines for certain vigilance reporting.
  • In-house testing under IVDR Article 5(5) would become more flexible, including (under IVDR) removing the “no equivalent device on the market” condition and explicitly bringing certain central laboratories supporting clinical trials into scope.
  • For combined studies, sponsors could submit a single application triggering a coordinated assessment aligned with the Clinical Trials Regulation framework.
  • Digitalisation would expand: digital EU Declarations of Conformity, more electronic submission, and electronic IFU for near-patient tests (among other measures).

The Commission frames these changes as a way to keep safety standards high while improving predictability, competitiveness, and innovation support; it cites €3–5 billion/year in cost savings at conservative estimates.

1) Context: why the Commission proposed a targeted IVDR/MDR revision

The Commission’s Q&A states that evaluation work identified shortcomings that negatively affect competitiveness, innovation, and patient care—pointing to inefficient coordinationdivergent application of requirements, and procedures that are overly complex and costly.

The Commission describes the reform’s core objectives as:

  • Reduced administrative burden and stronger coordination
  • More proportionate requirements, especially for lower/medium risk devices and small patient populations
  • Support for innovation, including early expert advice and regulatory sandboxes
  • Greater predictability and cost-efficiency of certification, including enabling real-world evidence
  • Increased digitalisation across compliance tools and conformity assessment procedures

For IVDR stakeholders, the significance is not only the “what” but also the “how”: the proposal aims to make the system more predictable and less duplicative while leveraging EU-level expertise (including expert panels and EMA support).

2) Understanding Health Services Pack IVDR Impact: what it means for IVD manufacturers 

2.1 PRRC: reduced organisational friction (especially for SMEs)

The proposal would:

Remove detailed qualification requirements for the Person Responsible for Regulatory Compliance (PRRC), and

Remove the requirement that SMEs using an external PRRC must have the PRRC “permanently and continuously” available; the PRRC would need to be available (without the “permanently and continuously” standard).

Why it matters: This could reduce structural overhead for smaller IVD manufacturers and for non-EU manufacturers using EU-based regulatory operating models. It may also reshape how manufacturers design PRRC coverage (internal vs external, shared services, outsourcing structures).

2.2 Certificates: from 5-year re-certification to risk-based periodic review

The proposal would remove the current maximum 5-year certificate validity and replace it with periodic reviews proportionate to device risk during the certificate’s validity period.

In addition, the proposal’s summary of certification changes includes:

  • Reduced systematic technical documentation assessment during surveillance activities (as summarised for certain IVD classes),
  • The ability for notified bodies to replace on-site audits with remote audits, and
  • Surveillance audits “only every two years” where justified by the absence of safety issues, plus unannounced audits “for-cause”.

Why it matters:
This is a structural shift in compliance planning—from a calendar-driven re-certification event to an ongoing lifecycle model that could be more data-driven. IVD manufacturers will likely need stronger “always audit-ready” systems and clearer change-control strategies.

Before and after comparison of IVDR requirements versus the Health Services Pack proposal, highlighting changes in PRRC availability, certificate validity, clinical evidence, PSUR, vigilance timelines, in-house testing, combined studies, and digitalisation.

2.3 Evidence toolbox: broader clinical data concepts and explicit support for in silico approaches

The proposal summarises multiple evidence-related changes, including:

  • A wider range of data qualifying as clinical data,
  • More flexible conditions for relying on clinical data from an equivalent device, and
  • Promotion of New Approach Methodologies such as in silico testing.

Why it matters for IVDs:
IVDR evidence expectations are often the pacing item for certification and market access—particularly for novel biomarkers, decentralised testing, and CDx. A broader toolbox could let manufacturers structure performance evaluation more efficiently, but it also puts more emphasis on robust justification: the proposal supports flexibility, not a “free pass.”

2.4 Summary documents and PSUR: targeted burden reduction

The proposal would:

  • Reduce the scope of devices that must have a summary of safety and (clinical) performance (SS(C)P) to those where the notified body must conduct technical documentation assessment—and remove the need for separate notified body validation of the draft summary.
  • Reduce the required PSUR update frequency, with notified body PSUR review integrated into surveillance.

For IVDR specifically, the proposal text also states that:

  • Manufacturers of class C and D devices would update the PSUR in the first year after the certificate is issued and every two years thereafter (or earlier in defined change situations).

Why it matters:
This change could reduce recurring workload—yet it will likely increase expectations that PSUR content is meaningful, well-argued, and operationally integrated into surveillance interactions.

2.5 Vigilance and cybersecurity: longer timelines for certain incidents, plus cyber reporting alignment

The proposal would extend the reporting timeline for certain serious incidents (those not linked to public health threats, death, or serious deterioration) to 30 days instead of 15.

It would also introduce a cybersecurity linkage:

  • Certain MDR/IVDR vigilance reports that also qualify as actively exploited vulnerabilities or severe incidents under the cyberresilience framework would be made available to national CSIRTs and ENISA; and
  • Manufacturers would have to report actively exploited vulnerabilities and severe incidents that do not qualify as “serious incidents” under MDR/IVDR to CSIRTs and ENISA through Eudamed;
  • Cybersecurity would be explicitly mentioned in Annex I general safety and performance requirements.

Why it matters for IVD manufacturers:
Cybersecurity is not only an “IT topic.” It increasingly affects performance, safety, vigilance, and field actions—especially for connected IVD instruments, software-driven diagnostics, and laboratory information system integration.

2.6 Digitalisation: eDoC, electronic submissions, eIFU for near-patient tests, and online sales information

The proposal includes:

  • Digital EU Declarations of Conformity,
  • More electronic submission of MDR/IVDR information,
  • Economic operators providing digital contacts in Eudamed,
  • Digital technical documentation and conformity assessment documentation, and
  • For IVDs, the ability for manufacturers of near-patient tests to provide electronic instructions for use.

It also introduces online-sales transparency requirements: essential device identification information and IFU information must be provided for online sales.

Why it matters:
This points toward a compliance ecosystem where document control, traceability, and market surveillance become more data-centric. Manufacturers will need disciplined digital governance to prevent inconsistency across channels.

3) What the proposal could change for labs and health institutions (IVDR Article 5(5) in-house)

The proposal would make in-house conditions more flexible, including:

  • Allowing the transfer of in-house devices when justified by patient safety or public health interests, and
  • Under IVDR, removing the condition that no equivalent device exists on the market.

It also explicitly adds central laboratories manufacturing and using tests exclusively for clinical trials into the scope of the in-house device exemption.

Why Health Services Pack IVDR matters
If adopted, this could significantly affect:

  • The role of hospital laboratories in innovation and continuity-of-care testing,
  • How health systems respond to unmet needs, niche populations, and rapidly evolving clinical practice, and
  • The operational models used to support clinical trials (including biomarker-driven trials and decentralised sample workflows).

What labs should plan
Recognising the proposal may change

  • Governance and documentation systems that can withstand scrutiny as “in-house” use expands in scope and visibility.
  • Contracting and quality interfaces between health institutions, trial sponsors, and central labs—especially where a lab’s “in-house” position interacts with trial requirements and sponsor expectations.

4) What the proposal could change for sponsors of combined studies (drug–diagnostic interface)

4.1 A single application with coordinated assessment (CTR-aligned pathway)

For combined studies involving medicinal products, medical devices, and/or IVDs, the proposal states that a sponsor may submit a single application triggering a coordinated assessment in accordance with the Clinical Trials Regulation (CTR), noting alignment with amendments anticipated via the Biotech Act.

Why it matters:
Sponsors running biomarker-driven programmes often experience friction at the interface between medicinal product trial authorisation processes and IVDR performance study requirements. A coordinated model—if implemented in a practical, predictable way—could materially improve planning across Member States.

4.2 Performance study burden reduction in defined scenarios

The proposal also states that:

  • Performance studies involving only routine blood draws would not require prior authorisation; and
  • Notification of performance studies on companion diagnostics using left-over specimens would be removed.

Why it matters:
This could affect study-start timelines, especially in multi-country settings where administrative sequencing often drives critical path. For sponsors, it may also change how they design sample strategies, feasibility, and site activation planning.

5) Practical implications of Health Services Pack IVDR Impact: how stakeholders can prepare while the text remains a proposal

Because the proposal may change during negotiations, stakeholders should avoid “over-implementing” assumptions. At the same time, most organisations can act now in ways that remain valuable under multiple legislative outcomes.

5.1 For IVD manufacturers (RA/QA and clinical/performance teams)

Focus now on “no-regret” preparedness:

  • Map your portfolio to where the proposal signals the biggest change: certificate lifecycle management, audit model (remote/on-site), and surveillance cadence.
  • Re-evaluate your evidence strategy so it can flex across clinical studies, literature, equivalence, and (where applicable) in silico methodologies—while keeping scientific validity and traceability strong.
  • Strengthen change control to align with the proposal’s intent to distinguish changes that require different levels of notified body interaction (including predetermined change control planning).
  • Upgrade vigilance and cybersecurity workflows so reporting pathways align with both vigilance obligations and the proposed cyber reporting linkages (CSIRTs/ENISA/Eudamed).
  • Digitise with discipline: ensure eDoC, digital IFU strategies, and online-sales content controls remain consistent and auditable.

5.2 For labs and health institutions

  • Review how in-house governance could evolve if the “no equivalent device” condition disappears and trial-supporting central labs fall clearly within scope.
  • Align in-house test lifecycle controls with quality expectations likely to increase as in-house scope expands in visibility and operational relevance.

5.3 For sponsors of combined studies

  • Build study-start strategies around the proposal’s direction of travel: a coordinated route for combined studies and reduced administrative hurdles for defined performance study scenarios.
  • Stress-test protocols for evidence coherence: regulators will still expect sponsor claims and IVD performance claims to align, even if administrative routes simplify.

6) Health Services Pack IVDR Impact and its potential global reach: what this could mean outside Europe

The Commission positions the EU as a global leader in medical device regulation and indicates the reform aims to make the sector more competitive globally.
It also explicitly links the proposal to reinforcing international cooperation, including participation in high-standard international cooperation and information-sharing mechanisms with reliable partners and strengthened uptake of international guidance.

For global manufacturers, that matters because EU compliance strategies often influence:

  • Global clinical evidence planning and dossier structuring, and
  • How manufacturers operationalise post-market surveillance and cybersecurity controls across regions.

(How much convergence happens in practice will depend on implementation and on how reliance mechanisms are used over time.)

FAQs

Is the Health Services Pack already law?

No. The Commission published a proposal on 16 December 2025. The text must go through the ordinary legislative procedure in the European Parliament and Council before any final legal changes take effect.

Will the proposal change IVDR certificate validity?

The proposal would remove the maximum 5-year certificate validity and replace it with risk-based periodic reviews while the certificate remains valid.

Does the proposal reduce PSUR update frequency under IVDR?

Yes. The proposal would reduce PSUR update frequency and integrate notified body PSUR review into surveillance. It also states class C and D PSUR updates would occur in the first year after certification and every two years thereafter (or earlier in defined cases).

Does the proposal change serious incident reporting timelines under IVDR?

Yes. For serious incidents not related to public health threats, death, or serious deterioration, the proposal would extend reporting timelines to 30 days instead of 15.

Does the proposal change IVDR in-house testing rules?

Yes. The proposal would make in-house conditions more flexible and, under IVDR, would remove the condition requiring “no equivalent device on the market.” It would also add certain central laboratories supporting clinical trials into scope.

How would the proposal affect combined studies?

The proposal states that sponsors could submit a single application for combined studies, triggering a coordinated assessment aligned with the Clinical Trials Regulation framework.

How can MDx CRO help you navigate Health Services Pack IVDR Impact effectively?

If you manufacture IVDs, run laboratory services, or sponsor combined studies, you will likely need to translate the proposal into:

  • A portfolio-level impact assessment (technical documentation, evidence strategy, and certification lifecycle planning), and
  • An operational plan for performance studies and combined-study submissions that remains robust even if the final text changes.

MDx CRO supports IVD manufacturers and sponsors across IVDR technical documentationperformance evaluation strategy, and combined study operational delivery (clinical operations + RA/QA alignment). The most effective next step is usually a short, structured gap-and-opportunity review tied to your portfolio and pipeline.

Need support?

We can assist you translating the Health Services Pack proposal into practical IVDR actions for your portfolio, studies, or lab activities.

Written by:
Carlos Galamba

Carlos Galamba

CEO

Senior regulatory leader and former BSI IVDR reviewer with deep experience in CE marking high-risk IVDs, companion diagnostics, and IVDR implementation.
Industry Insights & Regulatory Updates

EUDAMED Mandatory Timelines for MDR and IVDR

What the 2026 Deadlines Mean for Medical Device and IVD Manufacturers

EUDAMED mandatory timelines for MDR and IVDR are no longer theoretical. On 27 November 2025, the European Commission published Commission Decision (EU) 2025/2371 in the Official Journal of the European Union. This Decision confirms that four EUDAMED modules are now functional: Actor registration, UDI/Device registration, Notified Bodies and Certificates, and Market Surveillance.

Under the amended transitional rules in Regulation (EU) 2024/1860, that publication starts a six-month transition. As the Commission’s EUDAMED overview explains, from 28 May 2026 these four modules become mandatory to use for both medical devices and IVDs.

For manufacturers, authorised representatives, importers and notified bodies, this creates fixed dates that must now sit inside MDR and IVDR compliance plans.

1. How the EUDAMED Gradual Roll-Out Works

Regulation (EU) 2024/1860 amends the MDR and IVDR so that EUDAMED can go live module by module. Instead of waiting for all six modules, the Commission can audit each module or group of modules, confirm functionality, and then publish a notice in the Official Journal.

Once that notice appears, the rules change in a clear way. According to the Commission’s Q&A on the gradual roll-out of EUDAMED, the obligations and requirements linked to a given module become applicable six months after the notice is published. Until that date, the relevant provisions of the old Directives and their national transposition measures still apply for registration duties.

The same Q&A explains that some modules also come with extra time:

  • For the UDI/Device module, manufacturers have up to 12 months from the Official Journal notice to register certain devices already on the market.
  • For the Notified Bodies and Certificates module, notified bodies have up to 18 months from the notice to upload information on existing MDR and IVDR certificates.

Because the notice for the four modules appeared on 27 November 2025, the six-month period runs to 28 May 2026. After that date, the four modules are no longer optional.

2. Module-by-Module Deadlines Under MDR and IVDR

2.1 Actor Registration: SRNs Before Placement on the Market

The Actor module covers registration of economic operators. It applies to manufacturers, authorised representatives and importers that fall under Article 31 MDR and Article 28 IVDR.

The Q&A makes one point very clear. These economic operators must register as Actors and obtain a Single Registration Number before a device is placed on the market. Registration in the Actor module also unlocks other actions in EUDAMED, such as device registration and vigilance reporting.

Because the Official Journal notice for the four modules was published on 27 November 2025, use of the Actor module becomes mandatory from 28 May 2026. Manufacturers and authorised representatives can already register voluntarily and the Commission strongly encourages early registration to avoid a last-minute rush.

2.2 UDI/Device Registration: New vs. Ongoing Devices

The UDI/Device (UDI/DEV) module holds device and system/procedure pack data at the level of the UDI-DI or EUDAMED ID. The Q&A describes how the timelines work for different device situations.

First, if a medical device or IVD under the MDR or IVDR has its first sales unit placed on the EU market on or after the date when UDI/DEV becomes mandatory, the manufacturer must register the device in EUDAMED before that first placement. In practice, this means that any new MDR or IVDR device with a first unit sold on or after 28 May 2026 requires registration in UDI/DEV in advance.

Second, if the first unit of a device entered the EU market before the mandatory date, but the manufacturer will place more units on the market after that date, the device must still appear in UDI/DEV. In this case, the Q&A gives manufacturers 12 months from the publication of the Official Journal notice to register those devices. Because the notice was published on 27 November 2025, this deadline falls on 27 November 2026.

Devices that will not be placed on the market anymore when UDI/DEV becomes mandatory generally do not need registration, unless a specific post-market surveillance or vigilance action for that device occurs.

2.3 Notified Bodies and Certificates: New and Legacy Certificates

The Notified Bodies and Certificates (NB/CRF) module contains MDR and IVDR certificates and related NB decisions. The Q&A again draws a line between future and past certificates.

Once NB/CRF becomes mandatory, notified bodies must register every MDR and IVDR certificate they issue from that date onward, together with updates and certain decisions that affect these certificates. For the four modules declared functional in November 2025, this obligation starts on 28 May 2026.

For certificates that notified bodies issued before that date, the Q&A gives them more time. They must upload information on existing MDR and IVDR certificates within 18 months of the Official Journal notice, provided the related devices need to be registered in UDI/DEV. With a notice date of 27 November 2025, that 18-month period ends on 27 May 2027. Only the latest version of a certificate and the latest relevant NB decision need to appear in EUDAMED.

2.4 Market Surveillance: A New Tool for Authorities

The Market Surveillance (MSU) module supports market-surveillance work by national competent authorities. Manufacturers do not directly enter data into this module. However, they will feel its effects because it strengthens coordination between authorities and gives them a harmonised IT tool for cross-border cases.

The Q&A applies the same six-month rule to the MSU module. As a result, competent authorities must use the MSU module from 28 May 2026.

3. Practical Impact of EUDAMED Mandatory Timelines for MDR and IVDR

3.1 What Changes for Manufacturers and Authorised Representatives

For manufacturers and authorised representatives, EUDAMED becomes a central part of regulatory operations rather than a future project. Several changes now follow from the fixed dates.

First, Actor registration turns into a gatekeeper. From 28 May 2026, manufacturers, authorised representatives and importers in scope of Article 31 MDR and Article 28 IVDR need their Actor registration and Single Registration Number in place before they place devices or IVDs on the EU market. Without this registration, they cannot complete device registration or use other EUDAMED functions.

Second, device master data becomes more strategic. New MDR and IVDR devices must have device records ready before first placement after 28 May 2026. Devices that are already on the market but will continue after that date require registration by 27 November 2026. Manufacturers now need structured UDI-DI hierarchies, clear product groupings and consistent trade names across their documentation.

Third, manufacturers must align device data with certificate data. For many products, public EUDAMED information will combine UDI/device data and NB certificate data. If these do not match, authorities and customers may question the status of a device. Coordination between regulatory, quality and IT teams becomes more important than ad-hoc, product-by-product corrections.

3.2 What Changes for Notified Bodies

Notified bodies also face a significant workload. They must register all MDR and IVDR certificates issued from 28 May 2026 and bring existing certificates onto the NB/CRF module by 27 May 2027.

Because many notified bodies hold large portfolios, they will need efficient tools to manage uploads. The Commission has provided documentation for manual, bulk and machine-to-machine data exchange with EUDAMED. However, each notified body still has to implement and validate its own approach. Manufacturers should talk to their notified bodies early to understand how and when certificate information will appear in EUDAMED and how that timing aligns with their own device registrations.

3.3 Portfolio Planning and Transitional Provisions

The EUDAMED roll-out also interacts with other MDR and IVDR changes. Regulation (EU) 2024/1860 extends some IVDR transitional timelines for certain IVDs, but EUDAMED obligations apply regardless of those extensions. A device might benefit from longer time to move from IVDD to IVDR certification and still require EUDAMED registration within the new deadlines.

At the same time, the amended Articles 123 MDR and 113 IVDR help to avoid double work. Until the EUDAMED deadline for each module, national systems based on the old Directives continue to apply. Once the EUDAMED obligations become mandatory, they replace those older mechanisms and remove the risk of duplicate registrations.

For global organisations, this means EUDAMED is now a core input into portfolio and lifecycle planning, not just a technical IT project.

4. How MDx CRO Can Support EUDAMED Readiness

MDx CRO specialises in supporting medical device and IVD companies through MDR and IVDR. The new EUDAMED mandatory timelines for MDR and IVDR increase the value of structured, data-driven support.

4.1 Strategy and Gap Assessment

MDx CRO can review your product and certificate portfolio and map it against the new deadlines. This includes checking which legal entities need Actor registration, which devices will still be placed on the EU market after May 2026, and where device and certificate data must align.

We can then build a practical roadmap that sequences Actor registration, device registration and interactions with notified bodies. This approach reduces the risk of late surprises when EUDAMED becomes mandatory.

4.2 Data Preparation for UDI/DEV and NB/CRF

We help teams design clear UDI-DI structures and basic device data sets. That work supports both UDI/DEV registration and internal quality systems.

MDx CRO can also support data cleansing and consistency checks so that the information you load into EUDAMED matches your technical documentation, declarations of conformity and certificates. This preparation lowers the chance of errors and reduces back-and-forth with authorities or notified bodies.

4.3 Integration Into Clinical and Regulatory Programmes

EUDAMED should sit alongside performance evaluation, clinical data generation and labelling work, not apart from it. MDx CRO can help you embed EUDAMED milestones into your MDR and IVDR programmes so that regulatory submissions, certificate planning and EUDAMED entries move together.

We also support communication with notified bodies on certificate upload planning and with national competent authorities where clarifications are needed.

5. The Bottom Line: The EUDAMED Clock Is Now Running

With Decision (EU) 2025/2371 published and the Commission confirming that the first four modules will be mandatory from 28 May 2026, the EUDAMED project has crossed a line. The remaining time to prepare is now measured in months, not years.

For medical device and IVD manufacturers, the message is straightforward. The EUDAMED mandatory timelines for MDR and IVDR fix near-term deadlines for Actor registration, device and UDI data, certificate uploads and market-surveillance tooling. Organisations that act now will spread the workload and reduce risk. Those that wait may face crowded registries, limited notified body bandwidth and internal bottlenecks.

If you want to test your EUDAMED readiness or build a structured plan to meet the 2026 and 2027 dates, MDx CRO can support you with strategy, data preparation and regulatory execution.

Read more about IVD clinical studies services.

Read more about regulatory documentation support.

Need help meeting your EUDAMED deadline?

Talk to our regulatory team.

Written by:
Alberto Bardají

Alberto Bardají

Head of Medical Devices

Senior med-tech expert & ex-Notified Body reviewer with deep experience in high-risk implants, orthopedics, dental & neurology.
Industry Insights & Regulatory Updates

Performance studies in gene therapy trials: from assay cut-offs to clinical impact

In gene therapy, your in-vitro diagnostic (IVD) doesn’t sit on the sidelines—it drives clinical decisions. If a result screens a participant in/out, times dosing, or informs safety management, you’re in IVDR performance study territory with ISO 20916 as the operational backbone. Treat the IVD like a product under evaluation, not a lab tool, and design a study that proves it’s fit for the exact decision your trial needs.

What actually triggers a performance study in gene therapy?

Use the simplest rule of thumb: does the assay influence patient management? If yes, plan for an IVDR Article 58 performance study in parallel with your clinical trial authorization. Typical triggers:

  • Eligibility/stratification: AAV neutralizing antibody (NAb) or total-antibody (ELISA) results that gate inclusion/exclusion or set a dosing window.
  • Patient monitoring: Assays that guide timing or continuation (e.g., changes in humoral markers relevant to vector readiness).
  • CDx trajectory: When the test is essential for safe and effective use, your evidence should be built to scale toward CDx—even if you’re not filing as CDx yet.

Treat these as combined trials (IMP + IVD). Align the performance study application with the drug CTA so approvals move together.

Build the right “assay stack” for AAV programs

Design your assay plan around the decisions your trial must make. In combined trials (IMP + IVD), that usually means separating screening, decision-making, and context/supporting activities—and documenting exactly which assay output drives which action in the CPSP and APR.

1) Screening assays

  • Purpose: Identify participants who may be eligible for dosing or further evaluation.
  • Typical methods: Total antibody (ELISA) and/or neutralizing antibody (NAb) assays.
  • Predefine: intended purpose, the output used for screening, cut-off, QC/controls, and invalid/repeat handling.
  • Regulatory note: If screening impacts enrollment/timing, it’s within IVDR performance study scope—reflect this in the protocol and dossier.

2) Decision-making assays

  • Purpose: Provide the result that directly guides patient management (e.g., eligibility for AAV dosing or readiness after a waiting/intervention period).
  • Typical method: Cell-based NAb assay when the decision depends on functional inhibition of transduction.
  • Predefine: a validated cut-off and how it’s applied at the decision point; acceptance criteria (controls/repeats), handling of invalid/borderline results, and any repeat-testing logic.

3) Context/supporting assays

  • Purpose: Provide supporting information (e.g., PCR/NGS for inclusion criteria or other exploratory markers) without driving patient management unless explicitly pre-specified.
  • Governance: These may be exploratory assays; do not let them influence decisions unless pre-declared.

Designing the CPSP: endpoints that matter (and survive small-N)

Tie endpoints to the decision you must defend. In rare diseases, power is constrained—precision and transparency carry weight.

Primary, decision-linked endpoints (illustrative):

  • Proportion below cut-off at the dosing/decision point.
  • Time-to-negativity (post-intervention or natural decline).
  • Duration of sustained negativity.
  • Change from baseline in NAb titers.

Key secondaries (analytical + feasibility + safety):

  • Analytical performance in operations: run-level QC pass rate, invalid/repeat rate, assay deficiencies/deviations.
  • Feasibility: turnaround time from collection to result, pre-analytical robustness (freeze–thaw, transport windows, matrix effects), stability.
  • Safety: AEs from sample collection/device use as per IVDR performance study reporting.

Correlative (pre-specified, descriptive):
Relate NAb kinetics to other humoral markers (e.g., total IgG, capsid-specific antibodies) where it clarifies the biology without over-claiming.

When your IVD sample size is constrained by the gene therapy protocol, say so. Set precision targets for agreement or proportions and specify how you’ll treat indeterminates/missing—regulators prefer realistic clarity over decorative p-values.

From LDT to IVDR: documentation that actually wins

Many gene therapy assays start as lab-developed tests or adapted RUO methods. Under IVDR you need an Analytical Performance Report (APR), not just a conventional validation report. The APR:

  • Maps analytics to intended purpose and clinical decision.
  • Uses a structured narrative per characteristic: Purpose → Study design → Statistics → Acceptance criteria → Results → Conclusion.
  • References applicable frameworks (IVDR, ISO, MDCG) and integrates ICH Q2(R2)/Q14 principles within the IVDR lens.
  • Justifies non-applicable GSPR requirements explicitly instead of hiding them.

What reviewers expect to “see on the page”

  • Analytical sensitivity: LoD/LoQ with methods, not just point estimates.
  • Analytical specificity: cross-reactivity, interference, matrix effects—demonstrated, not assumed.
  • Accuracy (trueness/bias): vs. reference materials/known concentrations across the measuring range.
  • Precision: repeatability, reproducibility and intermediate precision (operators, days, instruments).
  • Measuring interval/reportable range: tied to clinical decisions.
  • Robustness & stability: small-parameter changes; specimen/reagent stability across the actual logistics.
  • Traceability: metrological traceability to reference materials or SI units wherever feasible.

Bridging without back-tracking

If you migrate platforms or laboratories, pre-declare equivalence boundaries, commutable panels, and the statistical approach before you switch. Link the APR to the Design History File and ultimately to the Performance Evaluation Report to keep evidence audit-ready.

Operational blueprint: lab-centric, ISO 20916–aligned execution

Programs that run smoothly accept a basic truth: lab operations are clinical operations when an assay drives decisions.

  • Risk-based monitoring (ISO 20916): Prioritize calibration records, control runs, instrument logs, sample accountability, LIMS audit trails, and lab-critical SDV.
  • Clear RACI across stakeholders: pharma sponsor, diagnostic partner, central lab, CRO(s). Assign a single “owner of truth” for eligibility calls and a documented adjudication path for gray-zone results.
  • Sample governance: pre-analytical controls (shipping, temperature, freeze–thaw limits), redraw/retest SLAs, and chain-of-custody that survives inspection.
  • Safety integration: define device-side AE/device-deficiency flows and their handshakes with the IMP SAE process—who reports what, where, when—and hold joint drills before FPI.

Common pitfalls (and the fix)

Copy-pasting a validation report into IVDR—without showing how analytics support the clinical decision.

  • Fix: Rewrite into an APR aligned to the intended purpose; connect every analytic claim to the use case.

Pretending power exists in tiny cohorts.

  • Fix: Pre-specify precision not power; make QC-forward primary endpoints; keep clinical associations descriptive.

Letting exploratory assays creep into decision-making ad hoc.

  • Fix: Lock the assay stack and decision logic in the CPSP; label everything else exploratory.

Underplaying pre-analytical risk.

  • Fix: Measure it (transport windows, freeze–thaw), set acceptance criteria, and track at run-level.

Ambiguity in roles and safety.

  • Fix: Publish a RACI and an integrated safety matrix early; rehearse escalations.

Sponsor checklist

  • Decide early if the assay changes patient management → if yes, plan an IVDR performance study.
  • Lock claims, cut-offs, and gray zones; write the CPSP to those decisions.
  • Choose your study model (prospective/retrospective/bridging) to match real sample access and clinical trial needs.
  • Produce an APR with complete traceability and justified non-applicable requirements.
  • Stand up lab-centric monitoring (ISO 20916), eTMF rigor, and LIMS auditability.
  • Align device and drug safety reporting—on paper and in practice.
  • Embrace small-N: set precision goals, prioritize QC endpoints, and keep associations descriptive.
  • Think CDx-ready: structure today’s evidence so tomorrow’s filing doesn’t start from zero.

How MDx CRO accelerates combined gene therapy studies

We run the device side of your combined trial end-to-end: strategy, CPSP/APR/PER authorship, submissions, ISO 20916-aligned operations, lab-centric monitoring and SDV, data/biostats, and inspection-ready traceability. We design performance studies that mirror real clinical decisions, so approvals and operations move in lockstep.

Let’s co-design your performance study

Speak with our IVD & gene therapy team

Industry Insights & Regulatory Updates

Spanish IVD Regulation 2025 – New Royal Decree Updates for IVD Manufacturers, Sponsors, and Labs

On 21 October 2025, the Council of Ministers approved Spain’s new Royal Decree for in vitro diagnostic devices. AEMPS confirmed the approval and explained that the decree complements IVDR (EU) 2017/746, strengthens patient protection, and adds national rules on language, in-house manufacturing, performance studies, and vigilance. This development anchors the Spanish IVD Regulation 2025 and sets clear obligations for manufacturers, sponsors, and laboratories. (Official announcement: AEMPS)

Spanish IVD Regulation 2025: What Changed and Why It Matters

The Spanish IVD Regulation 2025 replaces Royal Decree 1662/2000. It clarifies how IVDR applies in Spain and fills Member-State choices, including competent authority, language regime, Article 5(5) in-house devices, genetic testing and counseling, a national marketing register, performance study authorization, and vigilance and market control.

The regulation aims to raise quality, ensure traceability, and speed up corrective actions. It also improves access to certain self-tests through pharmacy channels.

Quick Guide for Busy Teams (Manufacturers, Sponsors, Labs)

  • Confirm what the Spanish IVD Regulation 2025 changes for your role.
  • Map licensing, registration, language, Article 5(5), ISO 15189, performance studies, and vigilance to owners and deadlines.
  • Prepare Spanish-language materials and set up traceability and incident reporting workflows.
  • Labs should plan ISO 15189 and Article 5(5) notifications to AEMPS.

Competent Authority and Language Rules under the Spanish IVD Regulation 2025

AEMPS is the competent authority for IVDs in Spain. Under the Spanish IVD Regulation 2025, user-facing materials for devices marketed in Spain must appear in Spanish. That includes labels, IFU, and safety notices. Regulatory submissions to AEMPS should include Spanish content. Co-official languages may be added, but Spanish is mandatory.

Facility Licensing: Manufacturers, Sterilizers, and Importers

The Spanish IVD Regulation 2025 requires operating licenses for manufacturers, sterilizers, and importers before they place devices on the market. AEMPS evaluates facilities, personnel, and quality systems.

Each site must appoint a Technical Responsible Person (national role) and meet IVDR oversight led by a PRRC. One qualified person can cover both if they meet the criteria.

Transitional rule: Existing third-party manufacturers get up to one year from entry into force to secure the new license. Existing licenses remain valid until renewal or change, which then follow the new procedure.

Marketing Register and Traceability

The decree creates a Spanish marketing register for devices placed on the market. Manufacturers, authorized representatives, and importers must notify product information to support traceability and market surveillance. The register complements EUDAMED and UDI.

Transitional rule: Spain will activate notifications when the register is operational. Until then, use existing national channels.

In-House Devices (Article 5(5) IVDR): What Labs Must Do Now

Scope and intent

The Spanish IVD Regulation 2025 regulates in-house IVDs made and used within the same health institution. Labs must justify need: a commercial CE-marked device cannot meet the specific clinical need. No industrial-scale production. No commercial supply to third parties.

Quality and documentation

In-house devices must meet IVDR GSPRs. Labs should keep a technical file (intended purpose, risk management, analytical and clinical performance, V&V, SOPs, and labeling for internal use).

ISO 15189 accreditation

Labs that manufacture in-house devices must obtain ISO 15189 accreditation for the manufacturing scope. Spain ties this to the transitional schedule.

Notification to AEMPS

Before starting in-house manufacture, labs must notify AEMPS and submit the Article 5(5) declaration. They must designate a responsible person for the in-house manufacturing process.

Genetic Testing: Information and Counseling

The Spanish IVD Regulation 2025 requires clear information and appropriate counseling for genetic testing. Health professionals must explain limits, implications, and result interpretation. This duty applies before and after testing.

Health professionals and centers must obtain explicit informed consent from individuals before performing a genetic test. The patient must be made aware of the nature and purpose of the test and consent in writing (except where law may exempt certain public health screening). This goes beyond standard consent, recognizing the personal and familial implications of genetic data.

Before the test, patients should be informed about what the test can and cannot tell them, and after the test, a qualified professional should explain the results and any recommended follow-up. This requirement ensures genetic tests (such as those for hereditary disease risk) are not delivered without context or support, helping patients make informed decisions.

These obligations apply to genetic IVDs regardless of whether they are done in-house or as commercial tests. For example, a direct-to-consumer genetic test kit (if allowed on the market) would need to be accompanied by processes that ensure the purchaser gets necessary information and counseling. However, most genetic tests are administered in clinical settings; the decree effectively standardizes the practice of genetic counseling as part of testing.

Performance Studies in Spain

All performance studies in Spain must first obtain a favorable opinion from an accredited Research Ethics Committee (REC) and authorization from the health center’s management where the study will be conducted. This applies to any study using human specimens or data for evaluating an IVD’s performance, ensuring ethical considerations (informed consent, data protection, etc.) are addressed early.

When you need authorization

Interventional clinical performance studies and other studies involving risks require AEMPS authorization before first participant. Ethics approval remains mandatory.

What sponsors must prepare

  • Spanish protocol (CPSP), Investigator’s Brochure, and informed consent.
  • Insurance/indemnity for participants and a clear liability framework. The decree explicitly requires compensation for damages and defines the liability regime for sponsors. Sponsors should budget for a clinical trial insurance policy and follow the decree’s rules on coverage minimums and conditions (similar to drug trial insurance requirements in Spain).
  • Monitoring, data management, and safety reporting plans aligned with IVDR. Upon study completion, results (whether positive, negative, or inconclusive) should be documented and may need to be reported in the public database or to AEMPS.

Studies with CE-marked devices

If the study adds invasive or burdensome procedures or goes outside intended use, sponsors should request authorization and notify AEMPS.

Vigilance and Market Control

The Spanish IVD Regulation 2025 reinforces vigilance. Manufacturers must report serious incidents and FSCAs to AEMPS. Healthcare professionals and institutions should also report incidents. Authorities will coordinate inspections and market control actions.

For instance, if an IVD test yields false results that lead to patient harm, the manufacturer has to notify AEMPS and submit a Spanish-language safety notice so that users in Spain can be adequately informed. This ensures critical safety information is effectively communicated and mitigated in the local context.

The decree emphasizes that healthcare professionals, health institutions, and even patients/users have a responsibility to report any suspected serious incidents to AEMPS. Spain is thus bolstering a culture of vigilance: a lab that encounters a device malfunction or a clinician who notices a pattern of erroneous results should alert the authorities. The more comprehensive the reporting, the better AEMPS can intervene to prevent harm.

Self-Test Access and Pharmacy Channels

Notably, the new rules remove the prescription requirement for at-home self-testing kits (e.g. self-tests for glucose, pregnancy, COVID-19, etc.), making them more accessible. However, even without needing a prescription, these self-diagnostic products can only be sold through pharmacies (in-store or via an official pharmacy website) to ensure proper guidance on use. High-risk tests or those used for critical decisions may still require a prescription or professional administration.

Transitional Timelines You Should Track

  • Entry into force: The decree takes effect after BOE publication.
  • Licensing: Existing third-party manufacturers have up to one year to obtain the new operating license.
  • Marketing register: Notification duties start when the register goes live.
  • In-house devices: Spain applies the IVDR timelines. Labs must meet Article 5(5) conditions and ISO 15189 by the dates set in the transitional provisions and related guidance.
  • Legacy devices: Spain honors the IVDR transition for legacy IVDs and preserves specific old-rule processes until systems fully switch over.

Implications by Stakeholder

IVD manufacturers

  • Secure or update operating licenses.
  • Localize labels/IFU into Spanish.
  • Prepare marketing register data.
  • Strengthen PMS and vigilance interfaces with AEMPS.

Sponsors

  • Plan authorization for risk-involving performance studies.
  • Build Spain-ready dossiers and insurance.
  • Prepare Spanish IB, consent forms, and patient materials. Note: AEMPS may allow an english version of the IB if no objection is raised by the Ethics Committee.

Hospital and private labs

  • Confirm Article 5(5) eligibility and prepare technical documentation for the in-house test.
  • Achieve ISO 15189 for manufacturing scope.
  • Notify AEMPS and assign the in-house responsible person.
  • Update genetic testing consent and counseling SOPs.

How MDx CRO Helps You Execute

Regulatory strategy and submissions

We align IVDR with the Spanish IVD Regulation 2025 and prepare AEMPS submissions (licenses, notifications, marketing register onboarding when live).

ISO 15189 and Article 5(5)

We run gap assessments, build SOPs, and guide labs to ISO 15189 accreditation for in-house manufacture. We prepare the Article 5(5) declaration and AEMPS notification package.

Performance studies

We plan and manage interventional and risk-involving performance studies in Spain. We handle AEMPS authorization, ethics submissions, monitoring, and safety reporting. MDx can also act your IVD performance study legal representative in the EU.

Vigilance and PMS

We design Spanish-compliant PMS frameworks, incident workflows, and FSNs. We help you interface with AEMPS and prepare for inspections.

Written by:
David Tomé

David Tomé

President

Clinical research leader and MedTech entrepreneur with deep expertise in medical devices, IVDs & precision medicine, with global study experience.
Industry Insights & Regulatory Updates

MDx CRO at ESMO 2025 (Berlin): Advancing IVDR Transitions & Combined Clinical Trials

MDx CRO presented new evidence and hands‑on learnings at ESMO 2025 that reinforce our position as the partner of choice for IVDR transitions and combined clinical trials involving investigational IVDs. We were first author on a poster with Fulgent Genetics and contributors to a Servier poster—both centered on the operational and regulatory realities of bringing high‑impact oncology diagnostics into clinical practice under the EU IVDR.

Highlights from our ESMO 2025 posters

Title: IVDR Compliance Challenges in Certifying a Large‑Scale NGS Panel for Hereditary Cancer

What it covers:

  • Practical blueprint for transitioning a comprehensive, service‑based NGS hereditary cancer panel under IVDR.
  • Defining intended use and scientific validity across a large gene set; end‑to‑end technical documentation; bioinformatics validation aligned to IEC 62304/82304; and notified‑body engagement strategy.
  • Lessons on right‑sizing verification/validation and building a living evidence package to support CE‑marking.

Why it matters: Sponsors and lab developers gain an actionable path for moving complex NGS services to IVDR compliance—without slowing clinical programs.

Title: Navigating Regulatory Complexity in Combined Studies under CTR and IVDR (CHONQUER)

What it covers:

  • How combined trials (drug + investigational IVD) trigger dual oversight under CTR and IVDR and the knock‑on effects for timelines, submissions, and site activation across EU member states.
  • Operational patterns that accelerate approvals: early CPS planning, consolidated documentation, and aligned ethics/competent authority strategies.

Why it matters: Oncology sponsors can de‑risk global programs by anticipating IVDR‑specific requirements—and partnering with an IVD CRO that has worked both sides of the fence.

Key takeaways for sponsors

  • IVDR transitions—end to end. MDx CRO supports dossier strategy, clinical performance studies (ISO 20916), scientific validity, and notified‑body engagement for CE‑marking.
  • Combined trials, simplified. We design and run CPS and combined CTR + IVDR studies, harmonizing submissions across multi‑country portfolios.
  • Oncology‑ready operations. Deep experience with molecular prescreening, NGS workflows, and drug–device coordination for precision oncology.

Need a quick debrief? Contact our IVD CRO team for a walkthrough of how these findings translate to your IVDR transition or combined study plan.

FAQs

What does MDx CRO do for IVDR transitions?

We provide end‑to‑end support—from intended‑use definition and scientific validity to clinical performance studies, technical documentation, and notified‑body engagement.

How does MDx CRO support combined CTR + IVDR studies?

We plan and execute CPS and combined trials, consolidating submissions and aligning ethics/competent authority requirements to reduce delays.

Can MDx CRO help with NGS panel validation under IVDR?

Yes. We design right‑sized verification/validation programs and bioinformatics validation aligned with IEC 62304/82304.

Where can I get the ESMO 2025 posters?

Both PDFs are available at the ESMO platform; contact us for a guided readout.

Industry Insights & Regulatory Updates

TGA guidance (Oct 2025): IVD Companion Diagnostics (CDx) Requirements in Australia

What’s new

TGA IVD companion diagnostics requirements are now clearly explained in the Therapeutic Goods Administration’s guidance on IVD companion diagnostics (CDx) in Australia (updated 16 October 2025). Their revised companion diagnostics framework, adds process diagrams, a companion testing plan concept for medicine/biological sponsors, clearer clinical performance expectations, and case studies showing how the pathway works in practice.

This blog post summarises the definition of a CDx, Class 3 IVD classification, ARTG inclusion, companion testing plans, and the TGA CDx List.

What is a CDx under Australian law?

A companion diagnostic is an IVD (commercial or in‑house) that provides information essential for the safe and effective use of a corresponding medicine or biological—for patient selection, risk of serious adverse reactions, or treatment monitoring. To qualify, the test must be referenced in the Product Information (PI) for the medicine or in the Instructions for Use (IFU) of the biological. Tests used only for cell/tissue compatibility are excluded from the CDx definition.

This definition underpins the TGA IVD companion diagnostics requirements for medicines and biologicals that rely on patient selection testing.

Note: The term “a particular medicine or biological” can also cover a class of products with a similar mechanism of action, not only a single named product.

When does an indication require CDx testing?

An indication requires CDx testing when both:

  1. the medicine’s PI (or biological IFU) states that CDx testing is essential, and
  2. the CDx claims it is intended for that testing to enable use of the medicine/biological.
    This may apply to some (not all) indications of a medicine.

To aid transparency, the TGA recommends a PI “flag phrase” indicating that testing is essential and that clinical practice testing should be adequately comparable to the pivotal trial testing; the TGA also publishes a CDx List of approved tests.

How the TGA applies CDx requirements: Class 3 IVDs and ARTG inclusion

  • Classification: Under TGA IVD companion diagnostics requirements, all CDx—commercial and in-house—are Class 3 IVDs (including in‑house CDx).
  • Separate ARTG entries: Each CDx requires its own ARTG inclusion with a Unique Product Identifier (UPI) defined by the manufacturer.
  • Application audit: CDx applications are subject to a mandatory application audit unless supported by specified comparable overseas regulator documentation (e.g., EU IVDR, FDA PMA, PMDA, HSA, Health Canada).
  • Concurrent submissions: While encouraged, concurrent medicine/CDx submissions are not mandatory; however, a CDx application should only be submitted if the corresponding indication is approved or under concurrent review.

From companion testing plans to ARTG submissions, MDx CRO streamlines the end-to-end CDx pathway in Australia, aligning clinical, regulatory, and quality workstreams to the TGA’s expectations.

The companion testing plan (for medicine/biological sponsors)

Every new indication that requires CDx testing must include a companion testing plan (dated and version‑controlled) describing how Australian patients will access at least one adequate test. This is central to meeting TGA IVD companion diagnostics requirements. Four options are available:

  1. Option 1: A commercial CDx ARTG application is planned/underway (provide device submission details and sponsor contact).
  2. Option 2: An in‑house IVD CDx will be accredited under the National Pathology Accreditation Scheme (provide lab details, accreditation timeline, and quality/access reassurances).
  3. Option 3: Standard Australian testing is expected to deliver comparable clinical outcomes to the pivotal trials (provide detailed justification).
  4. Option 4: None of the above—TGA reviews full device data within the medicine dossier (appropriate when no onshore testing is expected).

If Option 4 is used, TGA may add a condition of registration requiring the sponsor to maintain and update the plan (e.g., in case of supply interruption, regulatory action, or material changes to test methodology). Approval of an indication can proceed even when no ARTG‑listed or accredited CDx is available, provided an adequate plan exists; however, a commercial CDx must be in the ARTG (or an in‑house CDx accredited) before supply in Australia.

Clinical trial assay evaluation & comparability

When an indication requires CDx testing, TGA evaluates the clinical trial assay used in the pivotal studies—reviewing scientific validity, analytical performance, clinical performance, and clinical utility. Subsequent CDx must show clinical comparability to the trial assay, typically via concordance and/or bridging studies (or other appropriate evidence) aligned to the trial assay’s core characteristics.

Responsibilities at a glance

Medicine/Biological sponsors must:

  • Use the TGA CDx identification guide to determine if CDx testing is essential.
  • Consider consequences of false positives/negatives, test failures or no result.
  • Include: (a) evidence to support evaluation of the clinical trial assay, and (b) a companion testing plan nominating at least one adequate test.
  • Note: The framework does not require a one‑to‑one link between an indication and a single proprietary CDx; it focuses on the core characteristics of testing.

Device sponsors must:

  • Submit an IVD medical device application for ARTG inclusion of the CDx (indicating the application is for a CDx and providing the UPI).
  • Demonstrate comparability to pivotal trial testing and meet Essential Principles; applications may undergo audit as above.
  • Ensure the corresponding indication is approved or under concurrent review.

In-house IVD CDx, NATA accreditation and NPAAC obligations

Pathology laboratories may develop/modify in‑house tests for use as CDx. Class 1–3 in‑house IVDs are not included in the ARTG, but require NATA accreditation, identification of CDx in the TGA notification test list, and compliance with the NPAAC standard. Under a NATA–TGA MoU, NATA can request TGA technical assistance during evaluation of in‑house CDx performance; TGA is not otherwise involved in the accreditation decision.

TGA CDx List

The TGA publishes a CDx List showing approved commercial CDx linked to corresponding indications (with in‑house CDx to be added). The list is informational (not a regulatory instrument) and may lag recent approvals by up to one month.

Transitional arrangements and change control

  • Transition: CDx previously included in the ARTG as Class 2 or 3 before 1 Feb 2020 (and certain in‑house IVDs) may continue supply until 31 Dec 2028; a new compliant application is required to continue supply thereafter.
  • Changes: Sponsors manage post‑market device changes via the TGA Device Change Request process.

Key takeaways (quick reference)

  • All CDx are Class 3 IVDs and require separate ARTG inclusion (commercial) or NATA accreditation (in‑house).
  • Every relevant medicine/biological indication must include a companion testing plan (Options 1–4).
  • TGA assesses the clinical trial assay and expects comparability evidence for subsequent CDx.
  • Approval can proceed without on‑shore CDx if a robust plan exists, but supply requires ARTG inclusion or in‑house accreditation.

FAQs

Are all CDx Class 3 IVDs in Australia?

Yes. The regulations specify all CDx (commercial and in‑house) are Class 3 IVDs.

Can an indication be approved if no Australian CDx is available yet?

Yes—if a suitable companion testing plan is in place; however, a commercial CDx must be in the ARTG (or an in‑house CDx accredited) before legal supply.

What goes into a companion testing plan?

Identify at least one adequate test and choose Option 1–4 with supporting details (e.g., ARTG application in progress, in‑house accreditation, justification that standard testing is adequate, or full device data reviewed within the medicine dossier).

Will the PI show that CDx testing is essential?

The TGA recommends a PI “flag phrase” indicating testing is essential and should be comparable to trial testing; approved tests appear on the TGA CDx List.

Written by:
Carlos Galamba

Carlos Galamba

CEO

Senior regulatory leader and advisor to top 10 global precision medicine companies with deep experience in high-risk IVDs including companion diagnostics.
Industry Insights & Regulatory Updates

MDx to Present ESMO 2025 Poster on IVDR CE Marking for Large Germline NGS Panels

Announcement

MDx will present a peer-reviewed poster at the ESMO Congress 2025 in Berlin detailing how our team helped secure IVDR CE marking for a large, service-based germline NGS solution that integrates wet-lab workflows with a validated bioinformatics pipeline. The poster distills a practical, audit-proven pathway that labs and IVD developers can apply when scaling evidence, validating software, and navigating notified-body reviews for complex NGS offerings.

What the poster covers

  • Regulatory strategy and intended use: How to right-size scope for very large panels while planning for future expansion.
  • Technical documentation: Building Annex II/III files that stand up to Stage I/II audits, including labeling/IFU for service-based models.
  • Software validation: Applying IEC 62304/82304 rigor to a bioinformatics pipeline (architecture, V&V, cybersecurity, change control).
  • Evidence at scale: A tiered approach to scientific validity and clinical performance, plus a pragmatic PMPF plan to mature low-prevalence evidence.
  • Operationalization: Supplier controls, change management, and QMS integration to sustain post-market scalability.
Fulgent and MDx ESMO 2025 poster about Certifying Large-Scale NGS panels for hereditary cancer

Why this matters

Large NGS panels pose unique IVDR hurdles: non-uniform clinical evidence across thousands of genes, evolving variant knowledge, third-party components without CE marking, and the need to validate bioinformatics as SaMD. By sharing a repeatable pathway and the pitfalls we overcame, this poster offers concrete guidance to shorten timelines without compromising quality or compliance.

When and where to find us

ESMO Congress 2025 takes place 17–21 October in Berlin, Germany. We will publish our poster board number and presentation time here as soon as the session logistics are confirmed by the organizers. If you’re attending, we’d love to meet to discuss your IVDR roadmap.

Read the background

For context on the underlying program and its market impact, explore the public write-ups:

Ready to talk IVDR CE marking for your NGS product?

Use our contact form to request a 30-minute slot with our regulatory and bioinformatics leads during ESMO 2025, or schedule a virtual follow-up the week after the congress.

Industry Insights & Regulatory Updates

IVDR CE marking NGS: MDx Case Study with Fulgent

IVDR CE marking NGS at a glance

  • Outcome: CE mark granted by TÜV SÜD for an end-to-end Class C germline NGS solution (wet lab + bioinformatics).
  • Scope: Furthermore, panel covering 4,600+ clinically relevant genes with a validated PLM (Pipeline Manager) software component; later expanded to >7,000 genes using a new probe set.
  • What we did: Specifically, we built an ISO 13485 QMS from the ground up, prepared full Annex II + III technical documentation, validated bioinformatics under IEC 62304/82304, split documentation into two Basic UDI-DIs (wet lab vs. software), and guided Stage I/II audits.
  • Why it matters: Ultimately, this demonstrates a repeatable pathway to IVDR certification for large NGS services and software, something that hadno clear precedent.

Read the announcements: For details, read the Fulgent press release and Citeline case study.

0+

Genes Certified

Class C

IVDR Classification

0 mo

To CE Mark

0+

Post-Cert Scale

The challenge: certifying a service-based, large-scale NGS system under IVDR

To begin with, FulgentExome is a service-based NGS solution that integrates wet-lab workflows with the Fulgent PLM bioinformatics pipeline. As a result, pursuing IVDR certification meant converting a mature CLIA/CAP testing service into a CE-marked IVD system with robust evidence across scientific validity, analytical performance, and clinical performance, for thousands of genes. In particular, key hurdles included: defining intended use at scale; validating third-party components; proving scientific validity across 4,600+ genes; above all fully validating the bioinformatics pipeline under medical device software standards.

MDx approach: a playbook for complex NGS + software

1) Build the right QMS, fast

First, we performed an IVDR GAP assessment. Next, we designed and implemented an ISO 13485-compliant QMS with risk management, supplier control, document control, internal audits, and management review—migrating from a CLIA/CAP model to IVDR-ready operations.

2) Engineer a defensible intended use

Meanwhile, the intended-use statement evolved iteratively, from an initial ~300-gene scope to whole-exome, finally landing on 4,600+ genes aligned to available clinical and analytical evidence. In the end, the final language was future-proofed to support rapid updates as evidence expands.

3) Split wet lab and software into two regulated products

Afterward, following round 1 review feedback, we separated the documentation into two Basic UDI-DIs, FulgentExome (wet lab) and Fulgent PLM (software) to align with IVDR expectations for traceability and lifecycle control. Consequently, this restructuring sharpened conformity assessment and accelerated subsequent approvals.

4) Validate the informatics stack like a medical device

In parallel, we validated PLM under IEC 62304/82304, including architecture, version control, cybersecurity, verification/validation, and integration with external databases. Therefore, the result was a fully evidence-backed bioinformatics pipeline capable of reproducible, high-confidence variant calling and reporting.

5) Make “evidence at scale” practical

  • First, Scientific validity: Three-tier strategy combining validation of exome sequencing as an approach, reliance on curated public databases, and deep exemplars for a large subset of genes.
  • Second, Clinical performance: Leveraged routine testing experience (thousands of positives) to focus clinical evidence on high-prevalence genes, and instituted a robust PMPF strategy to continuously strengthen low-prevalence areas.

6) Orchestrate TÜV SÜD audits to success

  • Initially, Stage I confirmed documentation readiness, scope, Basic UDI-DIs and integration of IVDR processes into daily practice.
  • Subsequently, Stage II verified on-the-floor implementation of SOPs, training, competence, CAPA and change control—closing findings on short cycles to hit NB timelines.

Results that move the market

  • CE mark granted for FulgentExome & Fulgent PLM, among the first end-to-end Class C germline NGS solutions under IVDR.
  • Certified scope covers 4,600+ genes, positioning Fulgent as a reference lab for comprehensive hereditary disease testing serving European patients.
  • Post-certification, the platform scaled to >7,000 genes using a new probe set, demonstrating the inherent scalability built into the certified system (process, documentation, and change control).
  • Strengthened competitive standing in the EU diagnostics market; public communications highlight the magnitude of this achievement for large NGS panels.

Read more in the Fulgent press release and Citeline’s in-depth article.

What this means for labs and IVD developers planning large NGS submissions

If you operate an LDT today: you’ll need to translate CLIA/15189 practices into an ISO 13485 framework, document design controls, and produce a full PER (PEP/PER), APR, SVR, PMS/PMPF, SSP, and labeling/IFU aligned to GSPR. Expect to validate any bioinformatics pipeline as SaMD with IEC 62304/82304 and cybersecurity controls.

If your panel is “large”: you likely won’t have uniform clinical data across every gene. A structured tiered evidence model + PMPF can satisfy Notified Bodies while keeping your roadmap scalable.

If you combine wet lab + software: plan for separate Basic UDI-DIs and documentation sets. Treat the pipeline as a product with its own requirements, verification, and risk controls.

Why MDx

  • End-to-end IVDR expertise: From regulatory strategy & classification to Annex II/III technical files, PER/SVR/APR, training, and mock NB reviews. Read more about our NGS regulatory services.
  • Clinical performance studies: We design, run, and report ISO 20916 studies (protocols, eTMF, monitoring, biostats, PER alignment), and we can act as delegated sponsor for multi-country submissions—100% submission success rate to date.
  • Operational scale: ISO 9001 clinical QMS, EU/US partner network, multilingual CRAs, and a repeatable process honed on 60+ performance study submissions for top IVD and pharma clients.

Project timeline

Our joint project with Fulgent spanned July 2023–July 2025, with overlapping tracks for QMS creation, technical documentation, NB review, and Stage I/II audits, a coordinated plan that allowed rapid closure of findings and post-certification scaling.

Client perspective

The program demanded evening/weekend execution across regulatory, documentation, and project management to meet Notified Body timelines, effort that, in the client’s words, made all the difference in achieving what initially “seemed almost impossible.

Planning IVDR for your NGS panel? Here’s a quick readiness checklist

  • Intended use aligned to evidence (and future updates)
  • ISO 13485 QMS with software lifecycle integration
  • PER (PEP/PER), SVR, APR mapped to gene-level strategy
  • PLM/DR pipeline validated per IEC 62304/82304 (+cybersecurity)
  • Separate documentation/UDI for wet lab vs. software (if applicable)
  • PMS/PMPF plan to mature low-prevalence evidence post-market
  • Mock NB review + Stage I/II audit readiness

(Our team can lead or co-author each artifact above.)

Talk to us

Whether you’re certifying a focused oncology panel or pushing the limits with exome-scale content, MDx brings the cross-functional regulatory, clinical, quality, and software depth to make it possible—on a timeline that keeps your business competitive.

How long does IVDR CE marking take for an NGS panel?

For a large, complex NGS panel (thousands of genes, wet lab + bioinformatics software), expect 18 to 24 months from project kickoff to CE mark, assuming you need to build a QMS from scratch. If you already have an ISO 13485-certified QMS and partial technical documentation, the timeline can shorten to 12 to 16 months. The main variables are: the scope of the panel (more genes = more validation work), whether the bioinformatics pipeline needs IEC 62304 validation from zero, Notified Body capacity and review cycles, and the maturity of your clinical evidence. In the Fulgent case, the full project spanned 24 months (July 2023 to July 2025), including QMS creation, full Annex II/III technical documentation, and TÜV SÜD Stage I and Stage II audits.

What IVDR class are NGS diagnostic panels?

Most NGS-based IVDs classify as IVDR Class C under Annex VIII classification rules, because they typically provide information used to determine patient predisposition or individual risk for serious conditions (e.g., hereditary cancer panels, germline disease testing). NGS panels intended for infectious disease detection with high public health risk (e.g., HIV, hepatitis) may classify as Class D. Companion diagnostic NGS panels co-developed with a therapeutic product also typically fall under Class C. Classification depends on the specific intended use and clinical claims, not the technology itself. All Class C and D IVDs require Notified Body conformity assessment.

Do you need separate UDI identifiers for NGS software under IVDR?

Yes, when the bioinformatics pipeline qualifies as standalone software (SaMD) or is a distinct regulated component, IVDR requires a separate Basic UDI-DI. In the Fulgent case, MDx split the documentation into two Basic UDI-DIs: one for FulgentExome (the wet-lab component) and one for Fulgent PLM (the bioinformatics pipeline). This separation aligns with IVDR expectations for traceability, lifecycle control, and independent conformity assessment. Each Basic UDI-DI has its own technical documentation, risk management file, and performance evaluation. This approach also makes post-market updates easier, a software update does not trigger re-review of the entire wet-lab documentation.

Can a CLIA/CAP-accredited laboratory use its existing QMS for IVDR CE marking?

No, CLIA/CAP accreditation and ISO 15189 certification are not equivalent to ISO 13485, which is the QMS standard required for IVDR CE marking. While CLIA/CAP provides a strong operational foundation (proficiency testing, personnel qualifications, quality control), it does not cover medical device design controls, supplier management, CAPA, post-market surveillance, or the device lifecycle documentation that IVDR demands. Laboratories transitioning from CLIA/CAP to IVDR must implement an ISO 13485-compliant QMS and document design inputs, outputs, verification, validation, and change control for each IVD product.

What is the tiered evidence strategy for scientific validity of large NGS panels?

For panels targeting thousands of genes, it is typically not feasible to generate individual clinical evidence for every gene-disease association. A tiered approach addresses this: Tier 1 validates the underlying sequencing technology (e.g., exome sequencing as a methodology) with evidence from published literature and peer-reviewed validation studies. Tier 2 relies on curated public databases such as ClinVar, OMIM, and HGMD to establish gene-disease associations at scale. Tier 3 provides deep exemplar evidence (including analytical and clinical performance data) for a representative subset of high-prevalence genes. Genes with limited data are supported through a Post-Market Performance Follow-up (PMPF) plan that progressively strengthens evidence after CE marking. This strategy was accepted by TÜV SÜD in the Fulgent certification.

Written by:
Carlos Galamba

Carlos Galamba

CEO

Senior regulatory leader and former BSI IVDR reviewer with deep experience in CE marking high-risk IVDs, companion diagnostics, and IVDR implementation.
Industry Insights & Regulatory Updates