Selling in Both the US and EU? Here's How to Manage FDA and EU MDR Dual Compliance

The Reality of Selling Medical Devices in Both the US and EU

For medical device manufacturers pursuing both the US and European markets, the regulatory landscape has never been more complex. On one side, FDA is transitioning from Part 820 to the QMSR, aligning more closely with ISO 13485. On the other side, the EU Medical Device Regulation (MDR 2017/745) has fundamentally restructured European device regulation, replacing the Medical Device Directives with far more demanding requirements.

The challenge is not simply meeting two sets of requirements. It is managing the interactions, overlaps, and contradictions between two regulatory systems that share common goals but take meaningfully different approaches to achieving them.

Some manufacturers attempt to manage this by maintaining two separate regulatory systems — one for FDA and one for EU MDR. This approach is expensive, error-prone, and unsustainable. Every procedure exists in duplicate. Every change must be implemented twice. And the risk of divergence between the two systems grows with every update.

The smarter approach is to build a single, integrated quality and regulatory system that satisfies both FDA and EU MDR requirements simultaneously. This requires understanding where the requirements align, where they diverge, and how to architect your documentation and processes to accommodate both.

This is not a theoretical exercise. Manufacturers who get dual compliance right gain a significant competitive advantage: faster time to market in both regions, lower quality system maintenance costs, and reduced audit burden. Manufacturers who get it wrong spend years caught between two regulatory frameworks, delaying product launches and accumulating findings.

Key Differences Between FDA and EU MDR Requirements

Before you can build an integrated system, you need to understand where FDA and EU MDR requirements differ. Here are the most significant areas of divergence:

Classification systems. FDA and EU MDR use fundamentally different classification frameworks. FDA classifies devices into Class I, II, and III based primarily on risk and intended use, using product codes and classification panels. EU MDR uses Class I, IIa, IIb, and III, with classification rules based on device characteristics, duration of contact, invasiveness, and active vs. passive nature. A device that is Class II in the US might be Class IIb or Class III in the EU.

Premarket authorization pathways. FDA's 510(k), De Novo, and PMA pathways have no direct equivalents in the EU system. EU MDR requires a conformity assessment process involving a Notified Body (for Class IIa, IIb, and III devices), which evaluates both the device and the quality system. The scope and depth of a Notified Body technical file review differs significantly from an FDA premarket submission review.

Clinical evidence requirements. EU MDR has substantially increased clinical evidence requirements compared to the prior directives. The EU expects a clinical evaluation report for every device, regardless of classification. For many devices, especially implantables and Class III devices, EU MDR requirements for clinical investigations are more demanding than FDA's requirements. The EU MDR also requires Post-Market Clinical Follow-up (PMCF) plans and reports, which have no direct FDA equivalent.

Post-market surveillance (PMS). While both systems require post-market surveillance, EU MDR's PMS requirements are far more prescriptive than FDA's. EU MDR requires a PMS plan, PMS report (for Class I) or Periodic Safety Update Report (PSUR, for Class IIa and above), and integration with the clinical evaluation process. FDA's post-market surveillance requirements are generally less structured, though complaint handling and MDR reporting requirements are rigorous.

Unique Device Identification (UDI). Both FDA and EU MDR require UDI systems, but the implementation details differ. FDA uses the GUDID database; the EU uses EUDAMED (when fully functional). The UDI-DI and UDI-PI formatting requirements have differences that must be managed in your labeling and data systems.

Quality system standards. FDA is moving to the QMSR (incorporating ISO 13485 by reference). EU MDR requires compliance with Annex IX, X, or XI (depending on the conformity assessment route), which is built on ISO 13485 but adds EU-specific requirements. The common foundation of ISO 13485 is the key to building an integrated system.

Essential requirements vs. general safety and performance. EU MDR's General Safety and Performance Requirements (GSPR, Annex I) must be systematically addressed in your technical documentation. FDA does not have an exact equivalent, though many of the same topics are covered through specific FDA guidance documents and standards.

Building an Integrated Gap Analysis Framework

The foundation of dual compliance is a thorough gap analysis that maps your current quality system against both FDA and EU MDR requirements simultaneously. Here is a practical framework:

Step 1: Establish your baseline. Document your current quality system state. If you are ISO 13485 certified, use your ISO 13485 compliance matrix as the starting point. If you are transitioning to QMSR, use the QMSR requirements as your FDA baseline.

Step 2: Map EU MDR Annex I (GSPR) requirements. Create a systematic mapping of each EU MDR General Safety and Performance Requirement to your existing documentation. Identify which requirements are already covered, which are partially covered, and which have gaps. This mapping becomes part of your technical documentation.

Step 3: Cross-reference regulatory requirements. Build a cross-reference matrix that maps each quality system process to both FDA and EU MDR requirements. For each process (design control, production, CAPA, complaints, etc.), identify the specific requirements from both systems and note where they align, where they differ, and where one system has requirements the other does not.

Step 4: Identify integration opportunities. For each area of divergence, determine whether a single procedure can satisfy both requirements or whether you need supplementary procedures for one system. The goal is to minimize the number of separate procedures while ensuring full compliance with both systems.

Step 5: Prioritize and plan. Based on the gap analysis, create a prioritized implementation plan. Focus first on areas with the highest regulatory risk — typically clinical evaluation, post-market surveillance, and technical documentation.

Document Control for Dual Compliance

Document control is where dual compliance either works smoothly or creates ongoing headaches. Here are the key strategies for managing documentation across both systems:

Unified quality manual. Maintain a single quality manual that addresses both FDA QMSR and EU MDR requirements. Use a cross-reference appendix to show how each section maps to specific requirements in both systems.

Integrated procedures with market-specific appendices. For processes that are largely the same across both systems (design control, CAPA, internal audit), maintain a single procedure with appendices that address market-specific variations. For example, your complaint handling procedure should have a core process that applies globally, with appendices covering FDA MDR reporting criteria and EU MDR vigilance reporting criteria.

Technical documentation architecture. EU MDR requires a structured technical file (per Annex II and III). FDA requires specific submission formats (510(k), De Novo, PMA). Rather than maintaining completely separate technical files, build a master technical documentation set that contains all the information needed for both systems. Extract market-specific submissions from this master set.

Labeling management. Maintain a labeling management system that handles the different requirements for each market. UDI formats, language requirements, regulatory symbols, and required content all differ between markets. A structured labeling matrix helps ensure that market-specific labeling requirements are tracked and implemented correctly.

Change control with dual impact assessment. Your change control process must evaluate the regulatory impact of every change in both the US and EU contexts. A design change that does not require a new 510(k) in the US might require a Notified Body review and GSPR update in the EU. Your change control form should include checkboxes or assessment fields for both regulatory systems.

Clinical Evidence Strategy for Both Markets

Clinical evidence is the area where FDA and EU MDR diverge most significantly, and where an integrated strategy provides the greatest value:

Clinical evaluation as the foundation. EU MDR requires a clinical evaluation for every device. FDA may or may not require clinical data depending on the device classification and submission type. Build your clinical evidence strategy around the EU MDR clinical evaluation process (which is more comprehensive), and then extract the elements needed for FDA submissions.

Literature-based clinical evidence. For devices where clinical investigations are not required, build a literature review that satisfies both systems. EU MDR's clinical evaluation requirements are more prescriptive about literature search methodology, so following the EU MDR approach will generally satisfy FDA expectations as well.

Clinical investigation planning. If clinical data is needed, design your clinical investigation to satisfy both FDA and EU MDR requirements. This requires careful planning because the study endpoints, statistical approaches, and regulatory submission requirements differ. A well-designed study can satisfy both systems, but this must be planned from the outset.

Post-market clinical follow-up (PMCF). EU MDR requires PMCF for most devices. While FDA does not have a direct PMCF requirement, the data gathered through PMCF activities can support FDA post-market obligations. Integrating PMCF with your overall post-market surveillance program avoids duplication.

Real-world evidence. Both FDA and EU MDR are increasingly interested in real-world evidence. Building real-world evidence collection into your post-market surveillance system can support regulatory obligations in both markets and provide data for label expansion or new indications.

Timeline for Achieving Dual Compliance

The timeline for achieving dual compliance depends heavily on your starting point. Here are typical scenarios:

Already ISO 13485 certified with FDA clearance. If you have an existing ISO 13485 system and FDA-cleared devices, the primary gaps are typically in EU MDR-specific areas: clinical evaluation, GSPR mapping, post-market surveillance structure, and technical documentation format. Expect 12 to 18 months to close these gaps and achieve EU MDR compliance.

FDA-compliant only, seeking EU market entry. This is the most common scenario for US manufacturers expanding to Europe. You need ISO 13485 certification (often required by Notified Bodies), a complete EU MDR technical file, clinical evaluation, GSPR demonstration, EU Authorized Representative appointment, and Notified Body engagement. Expect 18 to 24 months minimum.

EU MDR-compliant, seeking FDA clearance. European manufacturers entering the US market typically need to adapt their quality system to address FDA-specific requirements (design history files, CAPA expectations, MDR reporting), prepare 510(k) or other submissions, and register with FDA. The QMSR transition simplifies this somewhat by aligning FDA requirements with ISO 13485. Expect 12 to 18 months.

Starting from scratch. For new manufacturers building a quality system to support both markets simultaneously, plan for 24 to 36 months from quality system initiation to dual market access. Building the system right from the start is faster and less expensive than retrofitting compliance later.

The key to all these timelines is starting with a thorough gap analysis and building an integrated system from the outset. Trying to bolt EU MDR compliance onto an FDA-only system (or vice versa) always takes longer and costs more than building an integrated approach.

Common Dual Compliance Pitfalls

Watch for these common mistakes that derail dual compliance efforts:

Treating EU MDR as "just another CE mark." The transition from MDD to EU MDR is not incremental. EU MDR requirements are substantially more demanding, particularly in clinical evidence, post-market surveillance, and technical documentation. Manufacturers who underestimate this shift find themselves with inadequate technical files that Notified Bodies will not accept.

Ignoring Notified Body capacity constraints. Notified Body availability remains a bottleneck in the EU market. If you have not engaged a Notified Body, start the process immediately. Wait times for initial certification audits can exceed 12 months for some Notified Bodies.

Duplicating rather than integrating. Every duplicated procedure is a liability. It doubles your maintenance burden, doubles your training requirements, and creates opportunities for divergence. Invest the time upfront to build integrated procedures.

Underestimating clinical evaluation requirements. EU MDR clinical evaluation is not a one-time exercise. It is a living document that must be updated throughout the device lifecycle. Budget for ongoing clinical evaluation maintenance, not just initial creation.

Forgetting about EUDAMED. While EUDAMED's full implementation timeline has been extended, certain modules are functional and others are approaching activation. Manufacturers should be preparing for EUDAMED registration, UDI-DI allocation, and device registration data entry.