CE Self Certification For Medical Devices In The Eu
When can a medical-device manufacturer self-declare CE conformity?
Under Article 52(7) of Regulation (EU) 2017/745 (MDR), the manufacturer of an ordinary Class I medical device (not custom-made or investigational) may issue its own EU declaration of conformity and affix the CE marking without a notified body. This is commonly called “self-certification”, but it is a manufacturer’s legally accountable conformity assessment, not an EU certificate or a waiver of technical, clinical or quality-system duties.
A device labelled “low risk” is not automatically eligible. The answer depends on its documented intended purpose, the classification rules in MDR Annex VIII and whether it is supplied sterile, performs a measuring function or is a reusable surgical instrument. Resolve those facts before signing anything.
Self-declaration decision matrix: six outcomes
| Device outcome | Notified-body position | Safe route |
|---|---|---|
| Ordinary MDR Class I; no special feature | No notified body for conformity assessment | Complete MDR evidence, issue manufacturer’s EU declaration and apply CE. |
| Class Is: placed on the market sterile | Required for sterility-related aspects | Obtain the limited notified-body assessment before declaration/CE. |
| Class Im: Class I with measuring function | Required for metrological aspects | Identify measured quantity and accuracy evidence; obtain the limited assessment. |
| Class Ir: reusable surgical instrument | Required for aspects of reuse | Validate reprocessing and related instructions; obtain the limited assessment. |
| Class IIa, IIb or III under Annex VIII | Not eligible for Class I self-declaration route | Follow the applicable notified-body conformity assessment. |
| Custom-made / investigational / in-vitro diagnostic (IVD) | Different route: no ordinary MDR Class I shortcut | Assess MDR special-purpose rules or the IVDR separately; do not extrapolate. |
Prove the classification, not merely the claimed risk level
As a recommended internal release control (not a separately mandated MDR form), document and internally approve the Annex VIII classification rationale against a version-controlled intended-purpose statement. Check the MDR definition first; then apply all relevant Annex VIII rules and record why the controlling rule applies. Use the Commission-published MDCG 2021-24 rev.1 (April 2026) as interpretive guidance, not as legislation.
- Capture indications, target patient, intended user, duration, site of contact, invasiveness, whether the device is active, software functionality, and how outputs influence clinical decisions.
- Examine sterile supply, measurement claims and reusability separately; each can trigger the Class I notified-body exception even when the basic class stays I.
- For software, assess Rule 11 by intended use and clinical decision consequence. “It is only an app” does not establish Class I.
- Keep an alternative-route note: which fact, intended-purpose change or rule interpretation would move the product to a different class?
Self-declaration evidence pack: what must exist before signature
The declaration is the last output of a documented assessment, not the document that creates conformity. Prepare an auditable file reflecting MDR Annexes I, II and III, Article 10 and Article 61. Its depth depends on the device, risks and available evidence.
- Regulatory identity: manufacturer identity, exact model/variants, intended purpose, scope rationale, classification rule and Basic UDI-DI.
- GSPR traceability: Annex I requirement-by-requirement applicability, evidence references, risk controls and any justified non-applicability.
- Design/performance proof: drawings, specifications, manufacturing controls, relevant verification/validation and test reports; justify standards used. A test report alone is not MDR approval.
- Clinical evaluation: clinical evaluation plan/report under Article 61 and Annex XIV, with relevant clinical data and defensible gaps; Class I is not automatically exempt.
- Operations: proportionate Article 10(9) QMS, Article 15 regulatory-compliance responsibility, supplier controls, labelling and user information in relevant national languages.
- Lifecycle: Annex III post-market surveillance (PMS) plan, Class I PMS report under Article 85, incident/escalation route, complaint handling, change control, and PMCF plan or documented justification where appropriate.
Release gate: five checks that should block an unsafe signature
| Release gate | Evidence of PASS | STOP if… |
|---|---|---|
| Scope & claims | Intended purpose matches labels, website and clinical evaluation. | Marketing makes additional diagnostic/therapeutic promises. |
| Class & exceptions | Written Annex VIII rationale; Is/Im/Ir screening recorded. | Software rule or sterility/measurement/reuse is unresolved. |
| Technical & clinical file | GSPR matrix, risk controls, validation and clinical evaluation support each claim. | Critical evidence is missing or an unaddressed risk remains. |
| Actors & traceability | Manufacturer/PRRC/if necessary EU representative identified; UDI and registrations planned. | No accountable manufacturer or required representative exists, or mandatory EUDAMED registration is missing for a new device. |
| Formal release | Annex IV declaration signed, version controlled; CE artwork and label checked. | The document is unsigned or a required notified-body step is incomplete. |
Who signs, and what does an EU representative do?
The legal manufacturer makes and maintains the declaration under Article 19, bears conformity responsibility and controls the technical file; a consultant or testing laboratory does not replace that responsibility. Article 15 requires a person responsible for regulatory compliance (PRRC), subject to the arrangements provided for micro and small enterprises.
A manufacturer established outside the Union must designate an EU authorised representative by written mandate under Article 11. That representative is not a substitute manufacturer and does not convert an ineligible product into Class I. Importers and distributors retain their own MDR duties. If a retailer markets the device under its own name, Article 16 may shift manufacturer obligations; verify that role before signature.
From internally approved evidence to EU placing on the market
- Freeze the intended purpose, device variant boundaries and justified class; escalate ambiguous classifications before making commercial commitments.
- Complete and approve risk, GSPR, test and clinical evidence; implement the appropriate QMS and PMS process.
- If Is, Im or Ir, involve a properly designated notified body for the scope specified in Article 52(7); do not treat the exception as unrestricted self-declaration.
- Assign applicable UDI/Basic UDI-DI, verify actor and device registration in EUDAMED, and prepare information for users. Four EUDAMED modules became mandatory on 28 May 2026; transitional registration rules can depend on when a device was first placed on the market.
- Issue and maintain the Annex IV EU declaration, then affix the CE marking correctly under Article 20 and Annex V. Include a notified-body number next to CE only where its relevant conformity assessment involvement requires it.
- After launch, monitor complaints and field performance; update the technical documentation, clinical evaluation, PMS report and declaration when relevant. Escalate serious incidents and field safety corrective actions under MDR vigilance provisions.
EUDAMED registration gate (October 2026): Article 31 actor registration is a separate pre-market duty for relevant manufacturers, authorised representatives and importers. For each non-custom-made MDR device, first establish when the first EU sales unit bearing the relevant UDI-DI was placed on the market; the company’s first sale of a different model is not the test.
- First unit on or after 28 May 2026: complete UDI/Device registration before placing that first unit on the EU market.
- First unit before 28 May 2026, with additional units of the same UDI-DI placed from that date: the transitional registration deadline shown by the Commission is 28 November 2026.
- No units placed from 28 May 2026: the ordinary UDI/Device registration obligation does not arise for the discontinued device unless a relevant post-market surveillance or vigilance action occurs. A new UDI-DI must be assessed as a new registration case.
Cases that should not be waved through as “self-certified”
Custom-made is not a shortcut: qualifying individually prescribed devices follow Article 52(8) and Annex XIII rather than the ordinary Class I CE declaration route; investigational devices also have special rules. Patient-matched or configurable mass-produced products are not necessarily custom-made.
IVDs use Regulation (EU) 2017/746: the IVDR Class A rules are different from MDR Class I; even Class A sterile has notified-body involvement for sterility. Do not use this medical-device matrix to release an IVD.
Standards are not the law: ISO 13485 certification is not itself the CE declaration, while MDR Article 10(9) QMS duties still apply to ordinary Class I. Standards may supply useful conformity evidence, subject to their applicability and harmonisation status.
Reopen the decision if intended use, software clinical logic, sterilisation, measurement, reusable-surgery claims, critical suppliers or risk evidence changes. Do not reclassify by copying a competitor label.
Questions manufacturers ask before self-declaring
Can an ordinary Class I device carry CE with no notified-body certificate?
Yes, where the MDR Class I classification is justified and none of the Article 52(7) Is/Im/Ir exceptions applies. The manufacturer must still document conformity, issue the EU declaration and fulfil other MDR obligations.
Does a sterile Class I device become Class IIa?
Not just because it is supplied sterile. It may remain Class Is, but the notified body must assess sterility-related aspects. Classification rules may independently require a higher class.
Does ISO 13485 certification replace the technical documentation?
No. The MDR requires an appropriate QMS and device-specific Annex II/III evidence. A third-party ISO 13485 certificate alone does not satisfy the Annex IV declaration or the device’s clinical and safety evidence.
Can a non-EU manufacturer sign its own declaration?
The legal manufacturer remains responsible for issuing its declaration, but must appoint an authorised representative in the Union under Article 11 and meet importer, registration and other applicable requirements.
Must I register before using CE in October 2026?
Not necessarily before physically printing CE: the decisive EUDAMED deadline concerns placing on the EU market. Register a new device UDI-DI first marketed from 28 May 2026 before its first unit is placed. A device already first marketed before that date but still supplied under the same UDI-DI benefits from the stated 28 November 2026 device-registration transition; actor registration is a separate obligation. Neither registration nor a CE logo substitutes for a valid declaration and evidence.
Official legal and regulatory sources
- MDR Regulation (EU) 2017/745, consolidated 19 July 2026
- MDCG 2019-15 rev.1: Class I manufacturers (non-binding guidance)
- MDCG 2021-24 rev.1: Classification (April 2026)
- European Commission: EUDAMED mandatory modules
- EU UDI Helpdesk: Declaration of Conformity
- European Commission: Custom-made devices
- IVDR Regulation (EU) 2017/746, Article 48(10)
- European Commission: EUDAMED phased-rollout Q&A, questions 3, 7 and 8 (interpretive, non-binding)
- European Commission: 28 November 2026 UDI/Device transition diagram