--- title: MDR Regulatory Outlook 2027: What Founders Should Prepare For description: What is coming in the MDR landscape in 2027: the end of transitional provisions, the MDR review cycle, pending MDCG guidance, and how founders should prepare now. authors: Tibor Zechmeister, Felix Lenhard category: MDR Fundamentals & Regulatory Strategy primary_keyword: MDR outlook 2027 canonical_url: https://zechmeister-solutions.com/en/blog/mdr-regulatory-outlook-2027 source: zechmeister-solutions.com license: All rights reserved. Content may be cited with attribution and a link to the canonical URL. --- # MDR Regulatory Outlook 2027: What Founders Should Prepare For *By Tibor Zechmeister (EU MDR Expert, Notified Body Lead Auditor) and Felix Lenhard.* > **As of early 2026, the MDR landscape heading into 2027 is dominated by four things: the end of the extended transitional provisions under Regulation (EU) 2023/607 for a significant set of legacy devices, the continued rollout of EUDAMED modules toward full mandatory use, a pipeline of MDCG guidance on topics like software, cybersecurity, and clinical evaluation, and the periodic MDR review mechanism that reports to the European Parliament and Council. Nothing else about 2027 is certain. Founders should prepare for the things that are known and stay alert for the things that are expected.** **By Felix Lenhard and Tibor Zechmeister. Last updated 10 April 2026.** --- ## TL;DR - The extended transitional provisions under Regulation (EU) 2023/607 are time-limited. A meaningful share of legacy devices will need to have MDR certification in hand before the transition window closes, with hard stops falling in 2027 and 2028 depending on device class and conditions. Founders who rely on legacy-certified components or partners should treat this as a planning constraint, not a future problem. - The MDR contains provisions for periodic review and reporting to the European Parliament and Council. These reviews feed into possible legislative adjustments, but the direction and timing of any changes are not predetermined. - The MDCG guidance pipeline continues to produce documents on topics including software, AI-enabled medical devices, cybersecurity, clinical evaluation, and PMS. New or revised guidance in 2027 is expected, but specific publication dates and document numbers are not confirmed. - EUDAMED is progressing module by module toward mandatory use. The exact dates depend on official declarations of functionality, which are outside any single actor's control. - Notified Body capacity remains the operational bottleneck that shapes every startup's realistic timeline. This is likely to continue into 2027. --- ## Why an outlook post, and how to read it This post is forward-looking. That means parts of it are uncertain, and we will say so explicitly where that is the case. The rule we apply to every post on this blog applies here too: nothing gets stated as fact unless it can be traced to the current MDR text, a current MDCG document, or a published official source. Where we are speculating, we use words like "expected," "likely," or "subject to confirmation." If you see one of those words, read the sentence as informed forecast, not fact. The reason founders need an outlook at all is that MDR timelines are long. A Class IIa or IIb certification pathway for a startup is measured in years, not quarters. Decisions made in early 2026 about intended purpose, classification, Notified Body selection, and evidence strategy will be playing out in 2027 and beyond. Ignoring the 2027 horizon because it is "still far away" is one of the most expensive mistakes in the space. ## The transition cliff in 2027 and 2028 The biggest known item on the 2027 horizon is the tail end of the extended transitional provisions introduced by Regulation (EU) 2023/607, which amended Article 120 of the MDR. These extensions gave legacy devices — devices certified under the old Directives 93/42/EEC and 90/385/EEC — more time to transition to full MDR certification, subject to specific conditions including that the manufacturer had lodged a formal application with a Notified Body by the required date and had an agreement in place within the required timeframe. The extended dates are not open-ended. They are hard stops, differentiated by risk class, and once they pass, non-MDR-certified legacy devices in scope can no longer be placed on the market. For the higher-risk classes, the cliff falls earlier; for lower-risk classes, later. We are deliberately not restating specific dates in this post, because the exact cut-offs depend on device class and the specific conditions that were met — founders must read the current consolidated Article 120 directly, or ask a competent advisor to confirm their specific case. What this means for startups in practical terms: - If your device depends on a legacy-certified component or platform — an electronics module, a sensor, a software library, a contract manufacturing partner — that dependency has an expiration date. If the supplier has not transitioned, your supply chain has a regulatory cliff hiding in it. - If you partnered with an established manufacturer whose product is still on a legacy certificate, you are exposed to their transition timeline, not your own. - If you acquired IP, tooling, or a product line from an existing manufacturer, the legacy certificate did not come with the deal in any useful sense. You need your own MDR path. The subtraction move here is to map every dependency on legacy certification in your project and treat each one as a deadline you do not control. If you cannot confirm the partner's MDR path, that is a risk you carry. ## The MDR review cycle The MDR contains provisions for periodic review and reporting to the European Parliament and the Council. These mechanisms produce reports on how the Regulation is functioning, on specific topics (for example, rare diseases, orphan devices, and other areas identified in the text), and on whether adjustments are warranted. Review is built into the law; adjustment is not automatic. What this means for 2027: expect reports and possibly proposals to emerge from the review process. Do not expect a specific, pre-announced amendment package on a specific date. The legislative cycle in the EU is long, and even if a review concludes that changes are needed, the path from review output to adopted legislation is typically measured in years. Founders should stay aware that the review cycle exists, read official communications when they are published, and avoid being surprised — but they should not build a business strategy around an anticipated amendment that has not happened. The honest answer to "will MDR change in 2027?" is: the Regulation as a whole is unlikely to be rewritten, but targeted adjustments, interpretations, and implementing acts are always possible. Plan for the law as it stands, and monitor for changes as they are announced. ## The MDCG guidance pipeline The Medical Device Coordination Group continues to publish guidance documents that translate MDR requirements into practical interpretation. Topics under ongoing work across the MDCG ecosystem include software qualification and classification, AI-enabled medical devices, cybersecurity, clinical evaluation and clinical investigation, post-market surveillance, and vigilance. New MDCG documents in 2027 are expected. Specific document numbers, titles, and publication dates are not confirmed as of early 2026. What we can say with confidence: - Existing MDCG guidance on software (MDCG 2019-11, with its Rev.1 from June 2025) and on cybersecurity (MDCG 2019-16 Rev.1) will likely be supplemented as AI and security topics evolve. - PMS guidance (MDCG 2025-10, December 2025) is the current reference point and will likely remain so unless superseded. - Classification guidance (MDCG 2021-24) is likely to see practical clarifications as borderline cases accumulate. For founders, the practical rule is to check the MDCG guidance catalog on the Commission site before every major regulatory decision. Guidance versions change. A document you read in 2025 may have been revised in 2026. Treat MDCG as a living set of references, not a one-time reading list. ## EUDAMED trajectory EUDAMED — the European Database on Medical Devices established under Article 33 of the MDR — is being rolled out module by module. The modules include actor registration, UDI/device registration, Notified Bodies and certificates, clinical investigations, vigilance, and market surveillance. Full mandatory use of all modules depends on official declarations that the relevant modules are functional. As of early 2026, EUDAMED is partially operational and the path to full mandatory use continues. Specific dates for full mandatory use are subject to official announcement. What founders should do is straightforward: register actors when required, use the modules that are already mandatory or available, and stay alert to announcements about further modules going live. The subtraction move here is to avoid building bespoke internal tooling for things EUDAMED will eventually cover. Light-touch, auditable processes that can be migrated into EUDAMED as modules mature are better than heavyweight custom systems that will need to be replaced. ## Notified Body capacity outlook Notified Body capacity has been the single biggest operational constraint on MDR certification since the Regulation became applicable. As of early 2026, the situation has improved from the worst points of the transition, but it remains a real constraint, particularly for startups competing for attention with established manufacturers pushing legacy products through transition. The expected 2027 picture: capacity is likely to remain tight for certain device types and classes, and the end of the transitional windows will put concentrated pressure on NBs in the run-up to the cliff dates. Startups should assume that NB engagement timelines are long, that early engagement is rewarded, and that the choice of Notified Body matters for practical reasons beyond strict regulatory equivalence — some NBs have specific expertise, specific throughput, and specific preferences on documentation. Specific capacity numbers, designation changes, or market share shifts for 2027 are not things we will predict in this post. What we will say is: plan as if capacity will be tight, because planning for abundance and being wrong is catastrophic, and planning for scarcity and being wrong is merely prudent. ## What founders should do now The practical response to the 2027 outlook is not dramatic. It is disciplined. 1. **Map your legacy dependencies.** Every supplier, partner, platform, and acquired asset that touches a legacy certificate is on a clock. Get the dates in writing from the supplier, not from assumptions. 2. **Confirm your own MDR timeline.** If your certification target is 2027 or 2028, work backward from the NB engagement timeline, not from your internal project plan. NB calendars are the binding constraint, not yours. 3. **Subscribe to MDCG updates.** Check the Commission guidance page on a set cadence — monthly is reasonable — and log new or revised documents against your technical file. 4. **Follow EUDAMED announcements.** Know which modules are mandatory, which are optional, and what your obligations are in each. 5. **Build PMS and vigilance processes that scale.** Whatever you put in place in 2026 will have to run in 2027 under whatever the guidance looks like then. Minimal, robust, and documented beats elaborate and fragile. ## The Subtract to Ship angle The outlook-heavy posts are where founders are most tempted to add scope out of anxiety. Read the 2027 outlook carefully, and the instinct is to add more documentation, more processes, more consultants, more audits, more everything — a defensive crouch against an uncertain future. This is precisely the wrong move. The 2027 outlook does not require more work. It requires better alignment of the work you are already doing with the MDR obligations that actually apply to your device. Subtract to Ship for the 2027 outlook means: cut every activity that is hedging against a speculative future change. Keep every activity that serves the MDR as it stands today. When the guidance or the rules actually change, adjust. Do not pre-emptively bloat the project against changes that may never happen. ## Reality Check — Where do you stand? 1. Do you know the specific transitional cut-off date that applies to every legacy-certified dependency in your project? 2. If a key supplier lost their legacy certificate tomorrow, do you have a documented contingency? 3. Have you read the current consolidated version of MDR Article 120 directly, or are you relying on second-hand summaries? 4. Is your Notified Body engagement scheduled against a realistic capacity picture, or against wishful thinking? 5. Do you have a defined cadence for checking MDCG guidance updates, or does it happen ad hoc? 6. Are you tracking which EUDAMED modules are mandatory for your actor type and device class? 7. If the MDR review cycle produced a proposed amendment in 2027, would you know where to read it? ## Frequently Asked Questions **Will the MDR be rewritten in 2027?** As of early 2026, there is no announced rewrite of the MDR for 2027. The Regulation contains provisions for periodic review and reporting, which can lead to targeted adjustments over time, but a wholesale rewrite is not something founders should assume. Plan for the law as it stands. **What happens to legacy devices after the transitional provisions end?** Once the extended transitional provisions end for a given device class under the specific conditions set out in the amended Article 120, the legacy certificate no longer serves as a basis for placing the device on the market under the old Directives. From that point, only MDR certification suffices. The exact dates depend on class and conditions — founders must check the current consolidated text or confirm with a competent advisor. **Should I wait for new MDCG guidance before starting my technical file?** No. Waiting for guidance is one of the most expensive mistakes in the space. MDCG documents clarify and interpret requirements that already exist in the Regulation — the underlying obligations are in force now. Start the work with the current text and the current guidance, and update when new guidance ships. **Will Notified Body capacity improve by 2027?** Capacity has improved since the early transition years and is likely to continue improving incrementally. However, the end of the transitional provisions will concentrate demand on NBs in the run-up to the cut-off dates, which is likely to keep capacity tight for certain device types. Plan accordingly. **How should I monitor the MDR regulatory calendar in 2026 and 2027?** Subscribe to updates from the European Commission's medical devices pages, the MDCG guidance catalog, and your Notified Body's communications. Set a monthly cadence to check for new or revised documents. Log every change against your technical file and your PMS plan. ## Related reading - [MDR Regulatory Updates in 2026](/blog/mdr-regulatory-updates-2026) — the companion post covering what changed in the year preceding this outlook. - [MDR Transition Periods Explained](/blog/mdr-transition-periods) — the detailed guide to the transitional provisions and how to read them. - [Regulation (EU) 2023/607: The Extended Transition Periods](/blog/mdr-amendment-2023-607-extended-transition-periods) — the specific amendment that drives the 2027 and 2028 cliffs. - [How to Build a Regulatory Roadmap for Your MedTech Startup](/blog/mdr-regulatory-roadmap-startup) — placing the 2027 horizon inside a full project timeline. - [What Is the EU MDR?](/blog/what-is-eu-mdr) — the hub post for the MDR Fundamentals cluster. ## Sources 1. Regulation (EU) 2017/745 of the European Parliament and of the Council of 5 April 2017 on medical devices, consolidated text (including Article 33 on Eudamed, Article 120 on transitional provisions as amended, and the review and reporting provisions). Official Journal L 117, 5.5.2017. Available on EUR-Lex. 2. Regulation (EU) 2023/607 amending Regulations (EU) 2017/745 and (EU) 2017/746 as regards the transitional provisions for certain medical devices and in vitro diagnostic medical devices. Official Journal L 80, 20.3.2023. 3. MDCG guidance documents catalog, European Commission — the full set of published Medical Device Coordination Group documents, consulted as a living reference. 4. EUDAMED — European Database on Medical Devices, European Commission, module status and announcements. --- *This post is part of the MDR Fundamentals & Regulatory Strategy series in the Subtract to Ship: MDR blog. Authored by Felix Lenhard and Tibor Zechmeister. For startup-specific regulatory support on the 2027 horizon, Zechmeister Strategic Solutions works with founders on transition planning, NB engagement, and scope discipline.* --- *This post is part of the [MDR Fundamentals & Regulatory Strategy](https://zechmeister-solutions.com/en/blog/category/mdr-fundamentals) cluster in the [Subtract to Ship: MDR Blog](https://zechmeister-solutions.com/en/blog). For EU MDR certification consulting, see [zechmeister-solutions.com](https://zechmeister-solutions.com).*