Change Order Review & Regulatory Impact Assessment

A sound regulatory change process starts with defining the proposed change and its scope, then reviewing affected design, manufacturing, labeling, software, risk, and quality records. Next comes regulatory impact assessment against applicable market rules, followed by a documented determination of required action such as notification, submission, variation, or no filing. Finally, supporting documents are updated, approvals are recorded, and implementation is controlled through change management.

Change control in regulatory affairs is the structured process used to evaluate whether a modification to a medical device, process, supplier, software, labeling, or intended use affects regulatory compliance or market authorization. It connects engineering and quality changes to regulatory obligations, ensuring each change is reviewed, justified, documented, and implemented only after the appropriate regulatory pathway has been determined.

A new submission may be required when a change could affect safety, performance, intended use, technological characteristics, manufacturing controls, software functionality, or labeling claims in a way that alters the basis of the existing authorization. The exact threshold depends on the market. FDA, EU MDR, TGA, and Health Canada each apply different criteria, so the change must be assessed against the specific framework governing that device.

Manufacturers should review design changes, material substitutions, supplier changes, process modifications, sterilization updates, software revisions, packaging changes, labeling edits, IFU revisions, manufacturing site transfers, and intended use updates. Even changes that seem administrative can affect registrations, technical documentation, or post-market obligations. Reviewing them before implementation helps prevent unauthorized product supply and avoids corrective action later.

A regulatory impact assessment is typically documented as a formal record that describes the proposed change, identifies affected products and markets, cites the applicable regulatory criteria, evaluates significance, and states the final determination. Strong assessments also include rationale, supporting references, required follow-up actions, and approval signatures. This creates an auditable trail showing the organization evaluated the change systematically before implementation.

Yes. The same device change may trigger different obligations in different jurisdictions because each authority applies its own rules and guidance. A software update, labeling revision, or manufacturing change might require a new 510(k) analysis in the US, a significant change review under EU MDR, and a separate variation or notification assessment for TGA or Health Canada. Multi-market review is essential for globally marketed devices.

Auditors and inspectors often examine whether companies assessed changes before implementation and whether the final decision was justified with evidence. Weak change review can lead to findings related to design control, document control, risk management, or unauthorized changes to marketed devices. A disciplined review process shows that regulatory, quality, and technical teams are aligned and that the organization maintains control over product lifecycle decisions.

Manufacturers should gather the change order or engineering change request, current device description, affected drawings or specifications, risk management records, validation or verification data, labeling or IFU revisions, and a list of impacted markets. It also helps to provide the current authorization basis, such as 510(k), PMA, CE marking, ARTG inclusion, or licence details. Complete inputs allow for faster, more defensible regulatory determinations.