If you are transitioning from the Old Medical Device Directive MDD to EU MDR you probably heard people warning that ISO 13485 is no longer enough. ISO 13485 is still the main framework for your quality system but EU MDR says what content has to be inside it. The regulation moves your EU MDR quality management system away from being just a manufacturing control system and turns it into a dynamic lifecycle ecosystem. This guide explains how your QMS satisfies the obligations in Article 10 and the conformity assessment steps.
What a QMS Does For Medical Device Regulatory Compliance
under the old MDD the quality requirements were scattered but MDR puts everything in Article 10(9). This section is like the constitution for your EU MDR quality management system. It says your QMS must be proportionate to the risk class and device type. It lists specific areas you must address to maintain total regulatory compliance. If your current quality manual does not point to procedures for these items you are non-compliant.
The main things you need to cover:
Regulatory strategy: you need a procedure to make sure you stay updated on conformity assessment steps and device changes.
GSPRs: these replace the old Essential Requirements from the Medical Device Directive and your QMS must identify which requirements apply from Annex I.
Management responsibility: this requires specific procedures for selecting and controlling your suppliers and subcontractors.
Quick tip: do not just reference the MDR in your manual. you should create a traceability matrix that links every sub-point of Article 10(9) directly to a specific SOP in your system regulatory compliance.
The New Must-Have SOPs for Regulatory Compliance
To close the gap between ISO 13485 and MDR you need to update or create a few specific procedures within your EU MDR quality management system.
Person Responsible for Regulatory Compliance (PRRC)
you cannot just assign regulatory duties to a generic quality manager anymore. For medical device regulatory compliance, your QMS must designate a PRRC with specific qualifications like a university degree plus a year of experience or four years of experience. They are personally responsible for making sure technical documentation is drawn up and post-market surveillance obligations are met.
QMS action: create a dedicated job description or appointment letter inside your QMS that references these requirements directly.
Economic Operators and Supply Chain Control
The MDR treats the supply chain as a critical safety valve so your EU MDR quality management system has to look beyond your own factory walls. When dealing with importers and distributors you must verify they meet their own regulatory compliance requirements. You need to update your supplier evaluation and purchasing procedures with specific checklists for this because you cannot legally ship products to a distributor who is non-compliant.
Post-Market Surveillance (PMS)
This is the biggest change because PMS is no longer just a reactive complaint handling process it is a proactive system. you need a formal PMS plan that defines how and when you gather data. For reporting Class I devices require a Post-Market Surveillance Report (PMSR) and Class IIa, IIb, and III devices require a Periodic Safety Update Report (PSUR). your QMS must link this data directly back to risk management and clinical evaluation so if PMS data shows a new side effect your risk assessment needs an immediate update.
Clinical Evaluation and PMCF
Clinical evaluation is now a continuous process and Post-Market Clinical Follow-up (PMCF) is mandatory unless you can justify why you do not need it. Your QMS needs a clear procedure for designing and running these PMCF studies to ensure continuous medical device regulatory compliance. you must make sure design and development procedures do not just stop at product launch. They have to cycle back into Clinical Evaluation Reports (CERs) which must be updated annually for high-risk devices.
Vigilance and Timeline Changes
The timelines for reporting serious incidents are much tighter now and your SOPs must reflect this exactly to avoid audit findings.
serious incidents: must be reported within 15 days instead of the old 30 days previously allowed under the medical device directive.
public health threats: must be reported within 2 days.
death or unexpected deterioration: must be reported within 10 days.
Audit warning: auditors will check your vigilance SOP for these exact timelines. if your documents still say 30 days you will get a non-conformity.
EUDAMED Integration
EUDAMED is the digital backbone of the MDR and your EU MDR quality management system needs a clear procedure to handle it. This includes assigning and managing Unique Device Identifiers (UDI), obtaining your Single Registration Number (SRN), uploading data correctly, and keeping everything synchronized when internal changes happen.
Summary Checklist For The Quality Manager
if you are getting ready for a Notified Body audit you can use this quick checklist to see if you are EU MDR quality management system is prepared:
Have we mapped the Article 10(9) requirements directly to our ISO 13485 clauses to guarantee overall medical device regulatory compliance?
Is the Person Responsible for Regulatory Compliance (PRRC) officially appointed in writing?
Do we have a proactive PMS plan ready for every device family?
Are the tighter 15, 10, and 2 day vigilance reporting windows defined in our SOPs?
have we checked our critical suppliers and economic operators against the MDR rules?
Conclusion
The EU MDR does not just ask you for a standard quality management system, it expects a total lifecycle management system. The goal is no longer just consistency which was the traditional ISO focus but safety and performance. by integrating these regulatory requirements into your QMS now you protect your market access for the future.
How Morulaa can help : Quality Management System Consulting
At Morulaa, we specialize in regulatory compliance consulting to help medical device manufacturers navigate end-to-end EU MDR compliance. Through our specialized quality management system consulting, we can help you build or adapt your QMS to align perfectly with Article 10 and Annex IX requirements.
We provide expert regulatory compliance consulting, tailored documentation templates, and comprehensive support for audit readiness. Whether you are starting fresh or upgrading your system from the legacy medical device directive to the current MDR, our quality management system consulting ensures your system is fully compliant, optimized, and running effectively.