EU MDR Change Impact Assessment for Medical Devices

The purpose of a change impact assessment is to determine whether a proposed or implemented device change affects the product's regulatory status, safety, performance, or conformity assessment basis. Under EU MDR, it helps manufacturers decide whether the change is significant, whether Notified Body involvement is needed, and what documentation updates are required. It also creates an auditable rationale for change control decisions.

A significant change under MDR is a modification that may affect the device's intended purpose, design, performance, safety, or the conditions under which conformity was originally assessed. Examples can include major software changes, material changes, manufacturing process changes, or labeling revisions that alter claims. The determination must be made against EU MDR requirements and relevant MDCG guidance, not by assumption alone.

Manufacturers should assess changes to design, raw materials, components, software, sterilization methods, manufacturing processes, suppliers, labeling, IFU content, packaging, and intended purpose. Even changes that seem operational or administrative can affect compliance if they alter safety, performance, traceability, or the basis of the original CE marking. A structured assessment helps separate low-risk updates from changes requiring deeper regulatory action.

No, not every change requires Notified Body involvement. Many updates can be managed within the manufacturer's quality system if they do not materially affect safety, performance, intended purpose, or the conformity assessment basis. The key is documenting why the change is or is not significant under EU MDR and MDCG guidance. A formal assessment helps avoid both under-reporting and unnecessary escalation.

Typical inputs include the change request, design documentation, risk management file, clinical evaluation materials, technical documentation, labeling and IFU content, verification and validation records, PMS data, and prior conformity assessment records. Reviewing these together allows the assessor to understand the full regulatory effect of the change and identify any linked updates needed across the technical file.

A documented assessment shows auditors and Notified Bodies that your organization evaluates changes systematically before implementation. It demonstrates that decisions were based on regulatory criteria, supported by evidence, and integrated into change control. This reduces the risk of findings related to undocumented rationale, incomplete technical documentation updates, or changes introduced without proper review of safety, performance, and conformity implications.

Yes, software changes can trigger a significant change determination, especially when they affect functionality, intended use, clinical performance, cybersecurity posture, algorithms, user interface logic tied to safety, or interoperability. Even updates presented as maintenance releases may require review if they influence risk controls or performance claims. Software modifications should always be assessed against the device's approved configuration and supporting evidence.

A manufacturer should expect a structured, written assessment that defines the change, identifies the applicable regulatory framework, evaluates impact on safety and performance, and states whether the change is considered significant under EU MDR. Strong deliverables also include the rationale, referenced guidance, affected documentation, and recommended next steps such as technical file updates, remediation actions, or Notified Body engagement.