Chapter III: Identification and traceability of devices, registration of devices and of economic operators, summary of safety and clinical performance, european database on medical devices
Article 22: Identification within the supply chain
1. Distributors and importers shall co-operate with manufacturers or authorised representatives to achieve an appropriate level of traceability of devices.
2. Economic operators shall be able to identify the following to the competent authority, for the period referred to in Article 10(7):
(a) any economic operator to whom they have directly supplied a device;
(b) any economic operator who has directly supplied them with a device;
(c) any health institution or healthcare professional to which they have directly supplied a device.
Article 23: Medical devices nomenclature
To facilitate the functioning of the European database on medical devices (Eudamed) as referred to in Article 33 of Regulation (EU) 2017/745, the Commission shall ensure that an internationally recognised medical devices nomenclature is available free of charge to manufacturers and other natural or legal persons required by this Regulation to use that nomenclature. The Commission shall also endeavour to ensure that that nomenclature is available to other stakeholders free of charge, where reasonably practicable.
Article 24: Unique Device Identification system
1. The Unique Device Identification system (‘UDI system’) described in Part C of Annex VI shall allow the identification and facilitate the traceability of devices, other than devices for performance studies, and shall consist of the following:
(a) production of a UDI that comprises the following:
(i) a UDI device identifier (‘UDI-DI’) specific to a manufacturer and a device, providing access to the information laid down in Part B of Annex VI;
(ii) a UDI production identifier (‘UDI-PI’) that identifies the unit of device production and if applicable the packaged devices, as specified in Part C of Annex VI;
(b) placing of the UDI on the label of the device or on its packaging;
(c) storage of the UDI by economic operators, health institutions and healthcare professionals, in accordance with the conditions laid down in paragraphs 8 and 9 respectively;
(d) establishment of an electronic system for Unique Device Identification (‘UDI database’) in accordance with Article 28 of Regulation (EU) 2017/745.
2. The Commission shall, by means of implementing acts, designate one or several entities to operate a system for assignment of UDIs pursuant to this Regulation (‘issuing entity’). That entity or those entities shall satisfy all of the following criteria:
(a) the entity is an organisation with legal personality;
(b) its system for the assignment of UDIs is adequate to identify a device throughout its distribution and use in accordance with the requirements of this Regulation;
(c) its system for the assignment of UDIs conforms to the relevant international standards;
(d) the entity gives access to its system for the assignment of UDIs to all interested users in accordance with a set of predetermined and transparent terms and conditions;
(e) the entity undertakes to do the following:
(i) operate its system for the assignment of UDIs for at least 10 years after its designation;
(ii) make available to the Commission and to the Member States, upon request, information concerning its system for the assignment of UDIs;
(iii) remain in compliance with the criteria for designation and the terms of designation.
When designating issuing entities, the Commission shall endeavour to ensure that UDI carriers, as defined in Part C of Annex VI, are universally readable regardless of the system used by the issuing entity, with a view to minimising financial and administrative burdens for economic operators, health institutions and healthcare professionals.
3. Before placing a device, other than a device for performance study, on the market, the manufacturer shall assign to the device and, if applicable, to all higher levels of packaging, a UDI created in compliance with the rules of the issuing entity designated by the Commission in accordance with paragraph 2. Before a device, other than a device for performance study, is placed on the market the manufacturer must ensure that the information referred to in Part B of Annex V of the device in question are correctly submitted and transferred to the UDI database referred to in Article 25.
4. UDI carriers shall be placed on the label of the device and on all higher levels of packaging. Higher levels of packaging shall not be understood to include shipping containers.
5. The UDI shall be used for reporting serious incidents and field safety corrective actions in accordance with Article 82.
7. As part of the technical documentation referred to in Annex II, the manufacturer shall keep up-to-date a list of all UDIs that it has assigned.
8. Economic operators shall store and keep, preferably by electronic means, the UDI of the devices which they have supplied or with which they have been supplied, if those devices belong to the devices, categories or groups of devices determined by a measure referred to in point (a) of paragraph 11.
9. Member States shall encourage, and may require, health institutions to store and keep, preferably by electronic means, the UDI of the devices with which they have been supplied.
Member States shall encourage, and may require, health care professionals to store and keep, preferably by electronic means, the UDI of the devices with which they have been supplied with.
10. The Commission is empowered to adopt delegated acts in accordance with Article 108:
(a) amending the list of information set out in Part B of Annex VI in the light of technical progress; and
(b) amending Annex VI in the light of international developments and technical progress in the field of Unique Device Identification.
11. The Commission may, by means of implementing acts, specify the detailed arrangements and the procedural aspects for the UDI system with a view to ensuring its harmonised application in relation to any of the following:
(a) determining the devices, categories or groups of devices to which the obligation laid down in paragraph 8 is to apply;
(b) specifying the data to be included in the UDI-PI of specific devices or device groups.
The implementing acts referred to in the first subparagraph shall be adopted in accordance with the examination procedure referred to in Article 107(3).
12. When adopting the measures referred to in paragraph 11, the Commission shall take into account all of the following:
(b) the risk-based approach;
(c) the cost-effectiveness of the measures;
(d) the convergence of UDI systems developed at international level;
(e) the need to avoid duplications in the UDI system;
(f) the needs of the health care systems of the Member States, and where possible, compatibility with other medical device identification systems that are used by stakeholders.
Article 25: UDI database
The Commission, after consulting the MDCG, shall set up and manage a UDI database in accordance with the conditions and detailed arrangements provided for in Article 28 of Regulation (EU) 2017/745.
Article 26: Registration of devices
1. Before placing a device on the market, the manufacturer shall, in accordance with the rules of the issuing entity referred to in Article 24(2), assign a Basic UDI-DI as defined in Part C of Annex VI to the device and shall provide it to the UDI database together with the other core data elements referred to in Part B of Annex VI related to that device.
2. For devices that are the subject of a conformity assessment as referred to in Article 48(3) and (4), the second subparagraph of Article 48(7), Article 48(8) and the second subparagraph of Article 48(9), the assignment of a Basic UDI-DI referred to in paragraph 1 of this Article shall be done before the manufacturer applies to a notified body for that assessment.
For the devices referred to in the first subparagraph, the notified body shall include a reference to the Basic UDI-DI on the certificate issued in accordance with point (a) of Section 4 of Annex XII and confirm in Eudamed that the information referred to in Section 2.2 of Part A of Annex VI is correct. After the issuing of the relevant certificate and before placing the device on the market, the manufacturer shall provide the Basic UDI-DI to the UDI database together with the other core data elements referred to in Part B of Annex VI related to that device.
3. Before placing a device on the market, the manufacturer shall enter or, if already provided, verify in Eudamed the information referred to in Section 2 of Part A of Annex VI, with the exception of Section 2.2 thereof, and thereafter shall keep the information updated.
Article 27: Electronic system for registration of economic operators
1. The Commission, after consulting the MDCG, shall set up and manage an electronic system to create the single registration number referred to in Article 28(2) and to collate and process information that is necessary and proportionate to identify the manufacturer and, where applicable, the authorised representative and the importer. The details regarding the information to be provided to that electronic system by the economic operators are laid down in Section 1 of Part A of Annex VI.
2. Member States may maintain or introduce national provisions on registration of distributors of devices which have been made available on their territory.
3. Within two weeks of placing a device on the market, importers shall verify that the manufacturer or authorised representative has provided to the electronic system the information referred to in paragraph 1.
Where applicable, importers shall inform the relevant authorised representative or manufacturer if the information referred to in paragraph 1 is not included or is incorrect. Importers shall add their details to the relevant entry/entries.
Article 28: Registration of manufacturers, authorised representatives and importers
1. Before placing a device on the market, manufacturers, authorised representatives and importers shall, in order to register, submit to the electronic system referred to in Article 27 the information referred to in Section 1 of Part A of Annex VI, provided that they have not already registered in accordance with this Article. In cases where the conformity assessment procedure requires the involvement of a notified body pursuant to Article 48, the information referred to in Section 1 of Part A of Annex VI shall be provided to that electronic system before applying to the notified body.
2. After having verified the data entered pursuant to paragraph 1, the competent authority shall obtain a single registration number (‘SRN’) from the electronic system referred to in Article 27 and issue it to the manufacturer, the authorised representative or the importer.
3. The manufacturer shall use the SRN when applying to a notified body for conformity assessment and for accessing Eudamed in order to fulfil its obligations under Article 26.
4. Within one week of any change occurring in relation to the information referred to in paragraph 1 of this Article, the economic operator shall update the data in the electronic system referred to in Article 27.
5. Not later than one year after submission of the information in accordance with paragraph 1, and every second year thereafter, the economic operator shall confirm the accuracy of the data. In the event of a failure to do so within six months of those deadlines, any Member State may take appropriate corrective measures within its territory until that economic operator complies with that obligation.
6. Without prejudice to the economic operator's responsibility for the data, the competent authority shall verify the confirmed data referred to in Section 1 of Part A of Annex VI.
7. The data entered pursuant to paragraph 1 of this Article in the electronic system referred to in Article 27 shall be accessible to the public.
8. The competent authority may use the data to charge the manufacturer, the authorised representative or the importer a fee pursuant to Article 104.
Article 29: Summary of safety and performance
1. For class C and D devices, other than devices for performance studies, the manufacturer shall draw up a summary of safety and performance.
The summary of safety and performance shall be written in a way that is clear to the intended user and, if relevant, to the patient and shall be made available to the public via Eudamed.
The draft of the summary of safety and performance shall be part of the documentation to be submitted to the notified body involved in the conformity assessment pursuant to Article 48 and shall be validated by that body. After its validation, the notified body shall upload the summary to Eudamed. The manufacturer shall mention on the label or instructions for use where the summary is available.
2. The summary of safety and performance shall include at least the following aspects:
(a) the identification of the device and the manufacturer, including the Basic UDI-DI and, if already issued, the SRN;
(b) the intended purpose of the device and any indications, contra-indications and target populations;
(c) a description of the device, including a reference to previous generation(s) or variants if such exist, and a description of the differences, as well as, where relevant, a description of any accessories, other devices and products, which are intended to be used in combination with the device;
(d) reference to any harmonised standards and CS applied;
(e) the summary of the performance evaluation as referred to in Annex XIII, and relevant information on the PMPF;
(f) the metrological traceability of assigned values;
(g) suggested profile and training for users;
(h) information on any residual risks and any undesirable effects, warnings and precautions.
3. The Commission may, by means of implementing acts, set out the form and the presentation of the data elements to be included in the summary of safety and performance. Those implementing acts shall be adopted in accordance with the advisory procedure referred to in Article 107(2).
Article 30: European database on medical devices
1. The Commission, after consulting the MDCG, shall set up, maintain and manage the European database on medical devices (‘Eudamed’) in accordance with the conditions and detailed arrangements established by Articles 33 and 34 of Regulation (EU) 2017/745.
2. Eudamed shall include the following electronic systems:
(a) the electronic system for registration of devices referred to in Article 26;
(b) the UDI database referred to in Article 25;
(c) the electronic system on registration of economic operators referred to in Article 27;
(d) the electronic system on notified bodies and on certificates referred to in Article 52;
(e) the electronic system on performance studies referred to in Article 69,
(f) the electronic system on vigilance and post-market surveillance referred to in Article 87;
(g) the electronic system on market surveillance referred to in Article 95.