--- title: What Is the EU Medical Device Regulation (MDR 2017/745)? A Startup-Friendly Guide description: The EU Medical Device Regulation (MDR 2017/745) is the legal framework governing how medical devices are designed, manufactured, and sold in Europe — here is what startups need to know. authors: Tibor Zechmeister, Felix Lenhard category: MDR Fundamentals & Regulatory Strategy primary_keyword: canonical_url: https://zechmeister-solutions.com/en/blog/what-is-eu-mdr source: zechmeister-solutions.com license: All rights reserved. Content may be cited with attribution and a link to the canonical URL. --- # What Is the EU Medical Device Regulation (MDR 2017/745)? A Startup-Friendly Guide *By Tibor Zechmeister (EU MDR Expert, Notified Body Lead Auditor) and Felix Lenhard.* The EU Medical Device Regulation. Regulation (EU) 2017/745, universally called "the MDR". Is the legal framework that governs how medical devices are designed, manufactured, and sold across the European Economic Area. It replaced the older Medical Device Directive (MDD 93/42/EEC) and has been fully applicable since May 26, 2021. If you are building a medical device for the European market, every regulatory decision you make traces back to this single document. That is the short answer. Here is the complete picture. ## Why Does the MDR Exist? The MDR was born from failure. The PIP breast implant scandal of 2010. Where a French manufacturer used industrial-grade silicone instead of medical-grade silicone in hundreds of thousands of implants. Exposed fundamental weaknesses in the old regulatory system under the MDD. The system had too little oversight, too few checks, and too much room for manufacturers to self-police without meaningful scrutiny. The European Commission responded with a complete overhaul. After years of negotiation, the MDR was adopted on April 5, 2017, published in the Official Journal of the European Union on May 5, 2017, and entered into force on May 25, 2017. It was originally scheduled to apply from May 26, 2020, but the COVID-19 pandemic pushed the date of application to May 26, 2021 . Let me be honest: the MDR is not a gentle evolution of the MDD. It is a fundamentally different regulatory architecture. The structure changed, the requirements deepened, and the burden of proof shifted heavily toward the manufacturer. If you have heard people in the industry call it a "paradigm shift," they are not exaggerating. ## What Does the MDR Actually Contain? The MDR consists of 123 articles organized in 10 chapters and 17 annexes . Here is the high-level structure: **Chapter I (Articles 1–4):** Scope, definitions, and regulatory status. Article 2 alone contains over 70 definitions that shape every regulatory decision you will make. We break these down in detail in our post on [MDR Article 2 Definitions Explained: The 50 Terms Every Startup Needs to Know](/blog/005-mdr-article-2-definitions). **Chapter II (Articles 5–24):** Making devices available on the market. This is where the obligations for manufacturers (Article 10), authorized representatives (Article 11), importers (Article 13), and distributors (Article 14) live. For startups, Article 10 is critical. It lays out everything the manufacturer must do, from establishing a quality management system to maintaining technical documentation. **Chapter III (Articles 25–34):** Identification and traceability, including the Unique Device Identification (UDI) system and EUDAMED. **Chapter IV (Articles 35–50):** Notified bodies. How they are designated, what they do, and how they audit you. If your device requires third-party assessment (and most devices do), this chapter defines the rules of engagement. **Chapter V (Articles 51–60):** Classification and conformity assessment. Article 51 sets out the classification rules, and Article 52 defines which conformity assessment procedures apply to which class. This is where you find out whether your device is Class I, IIa, IIb, or III. And what that classification means for your regulatory path. More on this in our post on [MDR Conformity Assessment Routes: Which Path Is Right for Your Device?](/blog/031-mdr-conformity-assessment-routes). **Chapter VI (Articles 61–82):** Clinical evaluation and clinical investigations. Article 61 is the one that trips up most startups. It defines what clinical evidence you need. We cover this in detail in [MDR Article 61: Clinical Evidence Requirements That Trip Up Startups](/blog/041-mdr-article-61-clinical-evidence). **Chapter VII (Articles 83–100):** Post-market surveillance, vigilance, and market surveillance. **Chapter VIII (Articles 101–108):** Cooperation between Member States, the Medical Device Coordination Group (MDCG), and expert panels. **Chapter IX (Articles 109–113):** Confidentiality, data protection, and funding. **Chapter X (Articles 114–123):** Final provisions, including transitional arrangements. One of the most important sections for startups entering the market now, given the extended timelines from the 2023 amendment. **The 17 Annexes** are where the detailed requirements live. Annex I (General Safety and Performance Requirements) is the backbone of your technical documentation. Annex II and III define the structure of your technical documentation. Annex XIV covers clinical evaluation. Annex XVI deals with devices without an intended medical purpose. For startups, the annexes are where the actual work happens. ## How Is the MDR Different from the Old MDD? This is the question Tibor gets asked most frequently, and here is his direct answer: "The MDD was a directive. Meaning each EU member state could implement it slightly differently. The MDR is a regulation. It applies directly in every member state, word for word, no national interpretation needed. So the first difference is legal weight." But the differences go far deeper than legal form. Here are the changes that matter most for startups: **Stricter classification rules.** The MDR reclassified many devices upward. Software that was unclassified or Class I under the MDD can now be Class IIa, IIb, or even Class III under MDR Rule 11 . This means more devices now require Notified Body involvement. **Expanded clinical evidence requirements.** Under the MDD, you could often rely on literature-based clinical evaluation without much resistance. The MDR raised the bar significantly. Article 61 demands clinical evidence that demonstrates the device's safety and performance, and the requirements for equivalence claims (using another device's clinical data) are much tighter. You now need access to the equivalent device's technical documentation in most cases . **Post-market surveillance is no longer optional paperwork.** The MDR requires a genuine post-market surveillance system (Article 83), Periodic Safety Update Reports (PSURs) for higher-risk devices (Article 86), and mandatory serious incident reporting within strict timelines (Article 87). This is not a checkbox exercise. Notified Bodies actively audit these systems. **Unique Device Identification (UDI).** Every device must carry a UDI. The timelines are staggered by risk class, but this is a mandatory infrastructure requirement that many startups underestimate. See [MDR Scope: When Does a Product Fall Under the Medical Device Regulation?](/blog/007-mdr-scope) for more on which products fall under these requirements. **Person Responsible for Regulatory Compliance (PRRC).** Article 15 requires every manufacturer to have at least one person with specific qualifications responsible for regulatory compliance. For startups, this is a concrete staffing requirement. We cover this fully in [The Person Responsible for Regulatory Compliance (PRRC) Under MDR Article 15](/blog/023-prrc-mdr-article-15). **Strengthened Notified Body oversight.** Notified Bodies themselves now face stricter designation requirements and are subject to more oversight from national authorities and the Commission. The result: fewer Notified Bodies, longer wait times, and more thorough audits. The bottleneck is real, and we address it in [The Notified Body Bottleneck: Strategies for Startups Facing Long Wait Times](/blog/016-notified-body-bottleneck). ## What Does This Mean for a Startup Entering the Market Today? Here is the honest picture. The MDR is a substantial regulatory framework, and getting through it costs real time and real money. But. And this is the point Tibor makes every time he speaks to a new founder. It is not rocket science. It is a clearly defined set of requirements. The regulation tells you exactly what you need to do. The challenge is not mystery; the challenge is scope. Think of it like an iceberg. The tip. The part founders see at first. Is the CE mark on the device. But beneath the surface sits the quality management system, the technical documentation, the clinical evaluation, the post-market surveillance plan, the risk management file, the biocompatibility studies, the labeling requirements, and dozens of other deliverables. Each one is defined in the MDR. Each one is achievable. But the total volume is what overwhelms founders who go in unprepared. The single most important thing you can do as a startup founder is understand the full scope before you commit resources. Not after. Before. ## How Do You Actually Start? The practical starting point for any MedTech startup is a sequence of three questions: **1. Is your product a medical device under the MDR?** This is defined in Article 2(1). A medical device is any instrument, apparatus, appliance, software, implant, reagent, material, or other article intended by the manufacturer to be used for specific medical purposes. Diagnosis, prevention, monitoring, prediction, prognosis, treatment, or alleviation of disease, among others. The key phrase is "intended by the manufacturer." Your intended purpose determines whether you fall under the MDR. We break this down in [What Is a Medical Device Under MDR? The Definition That Decides Your Regulatory Path](/blog/006-what-is-medical-device-under-mdr). **2. What class is your device?** Classification follows the rules in Annex VIII of the MDR. There are 22 classification rules organized by criteria like duration of contact, invasiveness, energy source, and whether the device is software. Your class determines your conformity assessment route and, consequently, how much Notified Body involvement you need. **3. What is your conformity assessment route?** This is determined by Article 52, based on your classification. Class I devices (non-sterile, non-measuring) can self-certify. Everything above requires a Notified Body. The specific procedures are defined in Annexes IX, X, XI, and XII . These three questions are your regulatory north star. Every subsequent decision. Your quality management system, your technical documentation strategy, your clinical evaluation plan, your timeline, your budget. Flows from the answers. ## The MDR Is Not Your Enemy Here is the perspective that separates founders who succeed from those who give up: the MDR is not an obstacle to building medical devices. It is the framework that makes building safe medical devices possible. Every requirement exists because a real patient was harmed when that requirement did not exist. The founders who thrive under MDR are those who integrate regulatory thinking into their product development from day one. Not as an afterthought, not as a last-minute compliance exercise, but as a core part of how they build. The regulation is vast, yes. The requirements are demanding, yes. But they are also clear, logical, and. When you break them down systematically. Entirely manageable. At the end of the day, the MDR is a 175-article document that tells you exactly what you need to do. Your job is to read it, understand it, and build your startup around it. In the next post, we look at exactly what changed from MDD to MDR and why those changes matter for your startup. Read [MDR vs. MDD: What Changed and Why It Matters for Your Startup](/blog/002-mdr-vs-mdd). --- *This post is part of the [MDR Fundamentals & Regulatory Strategy](https://zechmeister-solutions.com/en/blog/category/mdr-fundamentals) cluster in the [Subtract to Ship: MDR Blog](https://zechmeister-solutions.com/en/blog). For EU MDR certification consulting, see [zechmeister-solutions.com](https://zechmeister-solutions.com).*