CE Marking for Medical Devices: MDR and IVDR Explained

CE marking on a phone charger and CE marking on a heart monitor look identical, but they mean very different things. For most hardware, a manufacturer tests the product, writes a file, and self-declares. For medical devices, that shortcut mostly disappears. The Medical Devices Regulation has applied since 26 May 2021, yet Notified Bodies had issued only 17,549 MDR certificates against 33,175 applications by late 2025, with average review times still running 13 to 18 months. If you make anything from a wound dressing to an infusion pump, understanding why that queue exists, and where your product sits in it, matters more than almost any other compliance decision you will make.

Is CE marking for a medical device different from CE marking anything else?

Yes, structurally so. General consumer electronics rely on a patchwork of directives (Low Voltage, EMC, RED, and so on), most of which allow the manufacturer to self-assess and sign a Declaration of Conformity without anyone else checking the file first. Medical devices work under two dedicated regulations instead: the Medical Device Regulation, (EU) 2017/745 (MDR), covering physical devices from plasters to pacemakers, and the In Vitro Diagnostic Medical Devices Regulation, (EU) 2017/746 (IVDR), covering tests that examine samples such as blood, urine or tissue outside the body. MDR has applied in full since 26 May 2021, with IVDR following a year later. Both replaced older directives (the MDD and the IVDD) and both raised the bar considerably, adding stricter clinical evidence requirements, a EU-wide device database called EUDAMED, and a much bigger role for independent third-party assessors.

That third-party role is the real difference. Under general product law, self-certification is the default and third-party checking is the exception. Under MDR and IVDR, third-party checking by a Notified Body is the default for anything above the lowest risk tier, and self-certification is the narrow exception. If you are used to CE marking requirements for gadgets, that reversal is the single biggest adjustment to make.

How the MDR risk classes actually work

MDR sorts devices into four classes, ranked by the harm a malfunction could cause: Class I is lowest risk, then IIa, then IIb, then Class III at the top. Classification depends on factors set out in Annex VIII of the regulation, chiefly how invasive the device is, how long it stays in contact with the body, whether it's active (needs a power source) and what it's actually for. A plaster is Class I. A dental filling is Class IIa. A ventilator is typically Class IIb. A hip implant or a cardiac stent is Class III.

The table below shows how that classification maps onto the route to market, since the practical difference between the classes is really about who signs off on the file, not just a label.

IVDR uses a different letter system rather than reusing MDR's numbers: Class A (lowest risk, such as general lab equipment) through B, C, and up to Class D (highest risk, such as tests for transmissible infections in donated blood). The underlying logic is the same, though: the more risk to the individual patient or to public health if a result is wrong, the more scrutiny the device gets before it can carry the CE mark.

Do I need a notified body for a medical device?

For almost every device above Class I, yes. This is the single fact that trips up manufacturers coming from consumer electronics, where a Notified Body is rarely required at all. Under MDR and IVDR, Class Ir (reusable surgical instruments), Is (sterile) and Im (measuring) devices, plus everything from IIa upward, need a Notified Body to assess either part or all of the technical documentation before a CE certificate can be issued. Our guide on what a notified body actually does covers the mechanics in more detail, but the short version for medical devices is: find one designated for your specific device type early, because capacity is the constraint, not willingness.

That capacity problem is real and well documented. Roughly 50 Notified Bodies are currently designated to assess MDR devices, a steep drop from the more than 80 that operated under the old directive, and demand has outstripped what they can process. Erik Vollebregt, a medical device regulatory attorney at Axon Lawyers who has tracked the MDR transition closely, put the underlying tension plainly when the last set of transition extensions was being debated: "if this amendment does not fully live up to expectations, I predict that a pretty radical revision of the EU medical devices approval system may be in the stars in the midterm future" (MedTech Dive). That prediction has aged well: the Commission published a further proposal in December 2025 aimed at easing the certification bottleneck, on top of the extensions already granted.

Say you're a small manufacturer in Manchester with a wearable ECG patch that flags possible atrial fibrillation, aiming to launch first in Germany and France. Because it's an active diagnostic device worn against the skin, it lands in Class IIa. Before you can ship a single unit, you need a Notified Body to review your quality management system and a sample of your technical file, not just a signed declaration. If you contact a Notified Body cold with no prior relationship, you could be looking at a six to twelve month intake queue before assessment even starts, and 13 to 18 months of actual review after that. For a small team planning a launch date, that timeline needs to be built into the roadmap eighteen months to two years out, not discovered halfway through a fundraising round.

MDR vs IVDR: what's the difference?

MDR and IVDR both use the same core mechanism, an EU regulation, a Notified Body system, a technical file, and a Declaration of Conformity, but they cover different kinds of products and became mandatory a year apart. MDR applies to physical devices used on or in the body: surgical instruments, implants, imaging equipment, wearables that diagnose or monitor. It became fully applicable on 26 May 2021. IVDR applies specifically to devices that test a sample taken from the body, such as a pregnancy test, a blood glucose test strip, or a genetic screening kit, and it became applicable a year later, on 26 May 2022.

The two also diverge sharply on Notified Body reach. Under the old IVD Directive, roughly 80% of in vitro diagnostics could be self-certified with no third party at all. Under IVDR, that flips: around 80% of IVDs now need Notified Body involvement, because the new classification rules (Class A to D) pull far more test types up out of the self-certification tier. If your product is a diagnostic test rather than a physical device, do not assume the lighter old regime still applies; check your IVDR class from scratch.

The EU authorised representative rule for non-EU manufacturers

If you manufacture outside the EU and want to place a medical device on the EU market, you need an EU-based authorised representative, full stop, with essentially no exceptions comparable to the ones that exist for general consumer goods. MDR Article 11 and IVDR Article 10 require this representative to hold a written mandate, keep your technical documentation and Declaration of Conformity available for inspection, and act as your point of contact for market surveillance authorities and for reporting serious incidents. This sits on top of, not instead of, your obligation to appoint a Person Responsible for Regulatory Compliance if you have no EU presence of your own.

This is stricter than the general product rules. Our broader piece on the EU authorised representative requirement explains how, for many ordinary consumer products, an EU-based importer can sometimes already cover this role by default. For medical devices, that shortcut mostly does not apply: MDR and IVDR expect a dedicated, named authorised representative with medical device-specific responsibilities, including supporting vigilance reporting and cooperating directly with competent authorities on safety issues, tasks that go well beyond what a general importer's contract typically covers.

What the extended transition deadlines mean for you now

The original MDR transition period turned out to be too short once Notified Body capacity became the bottleneck, so the Commission extended it through Regulation (EU) 2023/607. Devices still certified under the old directives (legacy devices) can now stay on the market longer, but only if the manufacturer applied for MDR certification by 26 May 2024 and has a signed agreement in place with an MDR-designated Notified Body. Class III devices and implantable Class IIb devices get the shortest extension, running to 31 December 2027. Other Class IIb devices, Class IIa devices, and Class I devices that need Notified Body involvement (sterile, measuring, or reusable surgical instruments) run to 31 December 2028.

Two things matter if you're planning around these dates. First, the extension is conditional, not automatic: miss the application deadline or fail to reach agreement with a Notified Body, and your legacy certificate protection can lapse regardless of the calendar date. Second, the "sell-off" deadline that used to force withdrawal of unsold stock after a device's certificate expired has been removed entirely, which reduces (but doesn't eliminate) the commercial risk of timing your transition slightly wrong. If your product currently relies on an MDD or IVDD certificate, check exactly which extension bracket it falls into and confirm your Notified Body relationship is documented, not assumed.

Where to start if you're new to this

Work out your device's risk class first, since everything else, your Notified Body strategy, your clinical evidence needs, and your timeline, flows from that one decision. Read up on what goes in a technical file so you know the shape of the documentation a Notified Body will actually be reviewing, and budget realistic time for the queue rather than the review itself. For most teams building a genuinely new medical device, the constraint isn't the science, it's finding and securing a Notified Body slot early enough that certification lands before you need to ship.

None of this makes medical device CE marking impossible, it just makes it a longer, more structured process than most consumer hardware ever requires. Start the classification conversation with a regulatory consultant or your target Notified Body as early as you can, and treat the 18-month-plus review window as a fixed cost of the category, not a risk to be managed away.