--- title: 15 MDR Myths That Waste Startup Time and Money description: Fifteen MDR myths that show up in almost every first meeting with a MedTech founder — and the regulatory reality behind each one, with the article references. authors: Tibor Zechmeister, Felix Lenhard category: MDR Fundamentals & Regulatory Strategy primary_keyword: MDR myths canonical_url: https://zechmeister-solutions.com/en/blog/15-mdr-myths-that-waste-startup-time-and-money source: zechmeister-solutions.com license: All rights reserved. Content may be cited with attribution and a link to the canonical URL. --- # 15 MDR Myths That Waste Startup Time and Money *By Tibor Zechmeister (EU MDR Expert, Notified Body Lead Auditor) and Felix Lenhard.* > **The fifteen myths in this post show up in almost every first meeting with a MedTech founder: "CE means quality," "two months is enough," "we are wellness, not medical," "the MDR will be watered down soon," "nobody will notice if we skip this." Each one, left uncorrected, costs months of runway and hundreds of thousands of euros. Each one is demolished below with the specific MDR article or annex that makes it false.** **By Tibor Zechmeister and Felix Lenhard. Last updated 10 April 2026.** --- ## TL;DR - CE marking is a minimum legal requirement, not a quality seal. It means the device can be lawfully placed on the EU market. That is all. - Most founders underestimate MDR timeline and cost by a factor of 2 to 10. "Two months" is a fantasy budget. - Intended purpose determines everything. A few words on a website can move a product from "wellness" to "medical device" and back. - MDR enforcement is not only the authorities. Competitors sue. Patients complain. Distributors report. The system has many teeth. - The MDR is not going to be quietly watered down. Transitional provisions were extended by Regulation (EU) 2023/607, not removed. --- ## Why myths matter Every myth in this list has a body count measured in companies, not just wasted months. Felix and Tibor have both watched founders repeat these beliefs back to them with total confidence — and watched the same founders run out of money 18 months later because the belief was wrong. A correct regulatory strategy starts with removing the beliefs that are not true. The fifteen myths below are ordered by how often they show up in first meetings with startups. Each entry is the myth, the regulatory reality, and the specific MDR citation that makes the reality enforceable. --- ## Myth 1: "CE means high quality." **Reality:** CE marking is a minimum legal requirement to place a device on the EU market. Per MDR Article 5(1), no device may be placed on the market or put into service unless it complies with the Regulation. CE marking affixed under MDR Article 20 signals compliance with the applicable requirements — not superiority, not quality, not clinical effectiveness relative to competitors. The phrase we use with founders is: nobody cares about your CE. It is table stakes, not a differentiator. If your positioning leans on "we are CE-marked," your positioning is weak. ## Myth 2: "We can get CE marking in two or three months." **Reality:** For anything above Class I with no measurement and no sterile components, this is essentially impossible. Realistic timelines depend on class, conformity assessment route, Notified Body capacity, and the state of your QMS at the start. The fastest Class I certification Tibor has achieved from a standing start was about nine months. Class IIa and above routinely take 12–18 months or more, with Notified Body feedback windows alone averaging 7–10 months in current capacity conditions. Founders who budget two months for CE marking are not being optimistic. They are fantasizing. ## Myth 3: "We are a wellness product, so MDR does not apply." **Reality:** MDR Article 2(1) defines a medical device by its intended purpose, not by how it is marketed. If the intended purpose — as stated in labelling, IFU, promotional materials, or your own clinical evaluation — includes diagnosis, prevention, monitoring, prediction, prognosis, treatment, or alleviation of disease, injury, or disability, it is a medical device. The line between "wellness" and "medical device" is drawn by the intended purpose, not by a marketing decision made afterwards. Moving from wellness to medical device (or vice versa) is a legitimate strategic choice, but it requires changing the intended purpose itself — see [the beachhead strategy post](/blog/beachhead-strategy) — not just editing the About page. ## Myth 4: "The MDR will get watered down before it bites us." **Reality:** It will not. The MDR has been in force since 26 May 2021. Transitional provisions were extended — not removed — by Regulation (EU) 2023/607, giving some legacy devices additional time under specific conditions but preserving the substantive requirements. The European Commission has reaffirmed the direction of travel repeatedly. Betting your company on a future deregulation that is not coming is a losing strategy. ## Myth 5: "If we self-certify as Class I, we do not have to do much." **Reality:** Class I self-certification under MDR Article 52(7) and Annex IV still requires a complete technical file per Annex II, a functioning QMS, GSPR compliance per Annex I, a clinical evaluation per Article 61 and Annex XIV, a PMS system per Article 83, vigilance reporting per Articles 87–92, and the manufacturer obligations in Article 10. Self-certification removes the Notified Body from the loop. It does not remove the obligations. Class I is the lightest path — it is not a free pass. ## Myth 6: "Nobody will notice if we skip MDR and just start selling." **Reality:** The MDR enforcement system has many channels. Competent Authorities in each Member State conduct market surveillance under Articles 93–100. Competitors can and do sue for unfair competition on the basis of non-compliance. Distributors and importers have their own obligations under Articles 13 and 14 and can refuse to carry non-compliant devices. Patients and healthcare professionals can report to Competent Authorities. Tibor has seen competitor lawsuits end companies that believed they had flown under the radar. The most common trigger for enforcement is not an authority inspection — it is a competitor. ## Myth 7: "We can write our QMS from online templates." **Reality:** Templates are starting points, not solutions. A QMS must reflect the specific company — its processes, products, team, risk landscape. We have watched a Berlin company buy templates online, replace the placeholder company name with their own, and submit the result. Their QMS was assessed as roughly 0.1 percent complete, because they had done exactly one thing: replaced the placeholder. Templates save hours of layout. They do not produce compliance. EN ISO 13485:2016+A11:2021 requires that QMS documentation represent real processes, not aspirational ones. ## Myth 8: "Our intended purpose is whatever we decide later." **Reality:** The intended purpose is the single most consequential decision in the entire regulatory process. Under MDR Article 2(12), it is the use for which a device is intended according to the data supplied by the manufacturer on the label, in the instructions for use, or in promotional or sales materials or statements, and as specified by the manufacturer in the clinical evaluation. Under Article 51 and Annex VIII, it drives classification. Under Article 61, it drives clinical evidence requirements. Changing it later is not free — it triggers re-classification, re-evaluation of conformity, and often substantial rework of the technical file. Get the intended purpose right early, with expert input, before the rest of the work locks in. ## Myth 9: "A regulatory consultant costs too much — we will do it ourselves." **Reality:** The cost of doing the early strategic decisions yourself — intended purpose, classification, conformity assessment route, Notified Body selection — is usually not the consultant fee. It is the months of rework when a decision made without expertise turns out to be wrong. Every euro you try to save in the beginning will cost you hundreds or thousands later. There is also a legitimate DIY path for founders with real regulatory literacy, usually people who have done this before. If this is your first medical device, it is almost never you. See [DIY vs hiring a regulatory consultant](/blog/diy-vs-mdr-consultant) for the honest decision framework. ## Myth 10: "Once we have CE marking, we are done." **Reality:** CE marking is not a finish line. It is the starting gun for a second set of obligations: post-market surveillance under Articles 83–86 (including PMS plan, PMS report for Class I, and the PSUR for Class IIa and above), vigilance reporting under Articles 87–92, periodic technical documentation updates, and PMCF activities per Annex XIV Part B. Surveillance audits continue annually. MDCG 2025-10 (December 2025) describes the PMS system in detail. Startups that budget for "CE and then we ship" are surprised by the cost and obligations of the post-market phase. ## Myth 11: "We are software-only, so the rules are lighter." **Reality:** Software that qualifies as a medical device under MDR Article 2(1) is classified under Annex VIII Rule 11, which in most cases pushes medical device software to Class IIa or higher — specifically, software intended to provide information used to make decisions for diagnostic or therapeutic purposes is Class IIa, or IIb/III depending on the severity of the decision and the possibility of harm. MDCG 2019-11 Rev.1 (June 2025) is the definitive guidance. The perception that "software is lighter" is left over from the MDD era. Under MDR, standalone medical device software is rarely Class I. Plan accordingly. ## Myth 12: "A Notified Body is a Notified Body — they are all the same." **Reality:** They are not. The difference between six months and eighteen months at a Notified Body is not the Regulation — it is the Notified Body you chose. Capacity varies. Scope designations vary (some NBs are not designated for certain device categories at all). Communication speed varies. The breath sample device case we described in [the post on preparing for your first NB audit](/blog/prepare-for-first-notified-body-audit) got feedback in 2.5 months against an industry average of 7–10 months — because the NB fit the scope and had capacity. Wrong NB selection can add a year to your timeline without any change to the underlying work. ## Myth 13: "We can skip the Person Responsible for Regulatory Compliance." **Reality:** Per MDR Article 15, the manufacturer must have permanently and continuously available within its organization at least one Person Responsible for Regulatory Compliance (PRRC) who possesses the required expertise. Article 15(2) allows micro and small enterprises to have the person permanently and continuously available through arrangements other than employment — an external PRRC is acceptable for small companies — but the role itself is not optional. Skipping it is non-compliance. See [the post on PRRC options for startups](/blog/prrc-options-startups) for how small companies can meet the requirement without a full-time hire. ## Myth 14: "Our device is low risk, so the risk management file can be short." **Reality:** EN ISO 14971:2019+A11:2021 requires the risk management file to be complete and connected to design, verification, validation, and post-market activities — regardless of the risk class of the device. A low-risk device can have a short risk file in terms of volume, but not in terms of completeness. Every identified hazard must have an identified harm, an estimated risk, a risk control, verification of the control, and a post-market feedback loop. Skipping steps because "the device is low risk" is the kind of shortcut that turns into an audit finding every time. ## Myth 15: "We will write the technical documentation at the end." **Reality:** Technical documentation written at the end is technical documentation that does not match reality. MDR Annex II sets out the structure: device description, design and manufacturing, GSPR checklist, benefit-risk analysis, risk file, verification and validation evidence, clinical evaluation, and more. Most of these sections must be built as the device is built, not reconstructed from memory at submission time. Founders who plan to write the tech file at the end end up either missing evidence they cannot recreate or inventing it in ways the auditor will spot. Build the documentation as you build the device, or live with the consequences. --- ## The Subtract to Ship take on myth removal The shortest path to a working regulatory strategy is usually not adding knowledge — it is removing wrong beliefs. The fifteen myths above are the fastest removal targets. Each one, once removed, changes the decisions a founder makes in the next week. If you are a founder reading this and you winced at two or three of the entries, good. That is the useful outcome. Fix those two or three beliefs, and your next regulatory decisions will be measurably better than your last ones. ## Reality Check — Where do you stand? 1. How many of the fifteen myths were you quietly holding before reading this? 2. For each one you held, what decision were you about to make based on it? 3. Are any of those decisions already made and hard to reverse? 4. Who on your team would benefit from reading this list? (If the answer is "nobody," the myths are probably still live in the organization — they just have not surfaced.) 5. What is one decision in your next 30 days that you would now make differently? ## Frequently Asked Questions **Which myth is the most expensive?** Usually Myth 6 — "nobody will notice if we skip MDR." The Vienna bankruptcy pattern we have described in other posts is the result of this specific myth held to the end. A competitor sues, the court orders the device off the market, and the company runs out of money before compliance can be achieved. **Are there MDR myths not on this list?** Yes — dozens. This list is the top 15 in frequency, not the top 15 in severity. Myths about clinical evaluation shortcuts, usability being "just user training," and cybersecurity being "someone else's problem" are also common and dangerous. They each deserve their own posts. **Where do these myths come from?** Some come from the MDD era, when requirements were lighter. Some come from informal founder-to-founder advice that was never accurate. Some come from regulatory consultants who oversold simplicity to win business. Some come from misreading the MDR itself, which is a dense document. **What if I still believe one of the myths after reading this?** Read the cited MDR article directly. The Regulation is available in full on EUR-Lex. Form your own view from the source text. If you still disagree after reading the source, bring the disagreement to a sparring partner who can walk through the reasoning with you. **Is the MDR actually as strict as this post makes it sound?** Yes. And it is also navigable by small teams who engage with it honestly. Strictness and impossibility are not the same thing. Tibor has guided three-person companies through certification with zero nonconformities. The Regulation is a system. The system is learnable. The myths are the obstacle, not the Regulation itself. ## Related reading - [What Is the EU Medical Device Regulation? A Startup-Friendly Guide](/blog/what-is-eu-mdr) — the foundational overview. - [CE Marking Under MDR: The Step-by-Step Process for Startups](/blog/ce-marking-under-mdr-step-by-step-process) — what CE marking actually means and how you get it. - [How Long Does It Really Take to Get a CE Mark?](/blog/how-long-does-ce-mark-take-honest-timelines) — the honest timeline view. - [What Does CE Marking Actually Cost a Startup?](/blog/ce-marking-cost-startup-transparent-breakdown) — the honest cost view. - [How to Choose the Right Notified Body for Your MedTech Startup](/blog/choose-right-notified-body) — how to avoid Myth 12. - [Harmonized Standards Under MDR: The Complete List for 2026](/blog/harmonized-standards-under-mdr-complete-list-2026) — the standards that give you presumption of conformity. - [MDR Penalties and Market Surveillance Actions](/blog/mdr-penalties-market-surveillance) — what happens when Myth 6 meets reality. ## Sources 1. Regulation (EU) 2017/745 of the European Parliament and of the Council of 5 April 2017 on medical devices, Article 2(1) (definition), Article 2(12) (intended purpose), Article 5 (placing on the market), Article 10 (manufacturer obligations), Article 13 (importers), Article 14 (distributors), Article 15 (PRRC), Article 20 (CE marking), Article 51 (classification), Article 52 (conformity assessment), Article 61 (clinical evaluation), Articles 83–86 (PMS), Articles 87–92 (vigilance), Articles 93–100 (market surveillance), Annex I (GSPR), Annex II (technical documentation), Annex IV (EU declaration of conformity), Annex VIII (classification rules), Annex XIV (clinical evaluation). Official Journal L 117, 5.5.2017. 2. Regulation (EU) 2023/607 amending Regulations (EU) 2017/745 and (EU) 2017/746 as regards the transitional provisions for certain medical devices and in vitro diagnostic medical devices. 3. MDCG 2019-11 Rev.1 (June 2025) — Guidance on Qualification and Classification of Software in Regulation (EU) 2017/745 — MDR and Regulation (EU) 2017/746 — IVDR. 4. MDCG 2021-24 — Guidance on classification of medical devices, October 2021. 5. MDCG 2025-10 — Guidance on post-market surveillance of medical devices and in vitro diagnostic medical devices, December 2025. 6. EN ISO 13485:2016 + A11:2021 — Medical devices — Quality management systems — Requirements for regulatory purposes. 7. EN ISO 14971:2019 + A11:2021 — Medical devices — Application of risk management to medical devices. --- *This post is part of the MDR Fundamentals & Regulatory Strategy series in the Subtract to Ship: MDR blog. Authored by Felix Lenhard and Tibor Zechmeister. Every myth in this list was collected from real conversations with real founders over hundreds of certification projects.* --- *This post is part of the [MDR Fundamentals & Regulatory Strategy](https://zechmeister-solutions.com/en/blog/category/mdr-fundamentals) cluster in the [Subtract to Ship: MDR Blog](https://zechmeister-solutions.com/en/blog). For EU MDR certification consulting, see [zechmeister-solutions.com](https://zechmeister-solutions.com).*