EU MDR Compliance for Surgical Instruments: 2026 Guide

26 May 2021 changed what a plain steel forceps is, legally speaking. Under the old Medical Device Directive, a reusable Kelly clamp was Class I self-certified — the manufacturer wrote a Declaration of Conformity, kept a technical file, and shipped. Under Regulation (EU) 2017/745, that same clamp is Class Ir, and a notified body has to be involved before it can carry a CE mark.

Five years on, most of the transition noise has settled and the shape of the obligation is clear. What is not clear to many buyers — and to a fair number of smaller manufacturers — is exactly which parts of the file a notified body actually audits, what changed in 2026 with EUDAMED, and what is still coming in 2027.

This is the practical version, written from the manufacturing side.

How Reusable Instruments Are Classified Under the MDR

Annex VIII, Rule 6 is the operative text. Surgical invasive devices for transient use are Class IIa, unless they are reusable surgical instruments — in which case they fall to Class I.

Article 2(6) defines the term tightly. A reusable surgical instrument is one intended for surgical use in cutting, drilling, sawing, scratching, scraping, clamping, retracting, clipping or similar procedures, without connection to an active device, and which the manufacturer intends to be reused after cleaning, disinfection and sterilisation.

Read that definition carefully, because it draws the boundary of your whole regulatory burden:

• A Mayo-Hegar needle holder, a Langenbeck retractor, a bone rongeur, a Cusco speculum — all reusable surgical instruments. Class Ir.
• A bipolar forceps that plugs into a generator — connected to an active device. Not Ir. It classifies under Rule 9 as an active therapeutic device, typically Class IIb.
• A single-use disposable speculum — reusable is in the definition. Not Ir. It stays plain Class I sterile (Is) or Class I, depending on whether it is supplied sterile.
• An instrument intended to be used in contact with the central circulatory or central nervous system — Rule 6 kicks it up to Class III regardless.

Most of a general surgery catalogue lands squarely in Class Ir. That is why the Ir sub-class matters so much to instrument makers and so little to almost anyone else.

What the Notified Body Actually Reviews

This is the single most misunderstood point about the regulation of EU MDR surgical instruments, and it cuts both ways — some manufacturers over-scope the audit and pay for it, some under-scope it and fail.

Per Annex IX Chapter I and Section 4, or Annex XI Part A, notified body involvement for Class Ir is limited to the aspects relating to reuse. Specifically:

• Cleaning
• Disinfection
• Sterilisation
• Maintenance
• Functional testing
• The related instructions for use

Everything else — design, material selection, mechanical performance, biocompatibility, risk management, labelling outside the reprocessing instructions — remains the manufacturer’s own conformity assessment. The notified body does not certify that your rongeur cuts bone well. It certifies that your validated reprocessing instructions actually return the rongeur to a safe, functional state, cycle after cycle.

In practice that means the audit lands on a specific stack of evidence:

The cycle limit is where files most often fail. An IFU that says “may be reused indefinitely” is not supportable. You need a number, and you need test data behind it — typically 100, 250 or 500 cycles depending on the instrument class, with functional testing at the endpoint.

The Rest of the File Is Still Yours

Limited notified body scope is not a light regulatory burden. The manufacturer still owns the entire technical documentation set under Annexes II and III, and a competent authority can ask for it at any time.

General Safety and Performance Requirements

Annex I replaces the old Essential Requirements. Every applicable GSPR needs a line in the checklist, a stated method of conformity, and a document reference. For an instrument maker, the ones that carry real work are §10 (chemical, physical and biological properties — steel grade, biocompatibility per ISO 10993), §14 (devices with a measuring function, if graduated), and §23 (label and IFU content).

Risk Management

ISO 14971 across the product family. The risk file must connect to the reprocessing validation — a residual risk of retained soil in a box joint is a risk file entry, and its control measure is the validated cleaning instruction the notified body is auditing.

Clinical Evaluation

Article 61 applies to every class, including Ir. For well-established instrument designs, the equivalence route with a literature-based clinical evaluation report is normally accepted — you are not running a trial for a Kocher forceps. But the CER has to exist, be signed by a qualified evaluator, and be updated on a defined schedule under your PMS plan.

Quality Management System

Article 10(9). ISO 13485:2016 certification is the practical route. For Class Ir the notified body audits the QMS only insofar as it covers the reprocessing aspects — but a competent authority inspection covers all of it, and buyers will ask for the full certificate regardless.

PRRC and Authorised Representative

Article 15 requires a Person Responsible for Regulatory Compliance with defined qualifications — a relevant degree plus one year of regulatory experience, or four years of experience. Micro and small enterprises may contract this in rather than employ it.

Article 11 requires a non-EU manufacturer to appoint an EU Authorised Representative under a written mandate. The mandate is not a formality: the AR holds a copy of the technical documentation, is named on the label, and carries joint liability for defective devices under Article 11(5).

EUDAMED: What Changed in 2026

The database moved from voluntary to mandatory this year, and it caught out manufacturers who had been treating it as a future problem.

Under Regulation (EU) 2024/1860, the Commission adopted a staged rollout. The Actor Registration and UDI/Devices modules were declared functional by Commission Decision (EU) 2025/2371, which started the six-month clock. Mandatory use of both began 28 May 2026.

The practical deadlines:

The Single Registration Number is the piece that matters commercially. From 28 May 2026, EUDAMED is the legal route to obtaining an SRN, and the SRN is what a distributor or hospital procurement team will ask you for. No SRN, no tender.

Direct Part Marking Is the 2027 Problem

Article 27(4) requires the UDI carrier to appear on the device itself for reusable devices that require cleaning, disinfection, sterilisation or refurbishing between uses. Article 123(3)(f) sets the timeline, adding two years to the base UDI dates — which puts Class I reusable instruments at 26 May 2027.

For an instrument manufacturer this is a production problem, not a paperwork problem. The mark has to survive hundreds of steam cycles, ultrasonic baths and enzymatic detergents without becoming unreadable and without creating a crevice that harbours soil. Laser marking under a controlled passivation regime is the accepted answer; chemical etching generally is not, because the etched recess is a cleaning liability. We covered the technical trade-offs in our post on laser marking versus etching on surgical instruments.

If you are a buyer specifying instruments for delivery in 2027, ask now whether the manufacturer’s marking process has been validated for legibility after the stated reprocessing cycle limit. Plenty have the laser and have not run the test.

Transition Timelines for Legacy Stock

Regulation (EU) 2023/607 extended the MDD-certificate transition, but the extension is conditional, and the conditions have already closed.

Devices that were Class I under the MDD and became up-classified under the MDR — which is exactly what happened to reusable instruments — could benefit from the extended deadline of 31 December 2028 only if the manufacturer had a compliant QMS in place by 26 May 2024, lodged a formal application with a notified body by 26 May 2024, and signed a written agreement with that body by 26 September 2024.

Those gates are shut. A manufacturer who missed them cannot place Class Ir devices on the EU market under the old declaration. If you are sourcing and a supplier is still quoting a 2028 transition date, ask to see the notified body application acknowledgement and the signed written agreement. Both are dated documents. It is a five-minute check that separates the compliant suppliers from the optimistic ones.

A Practical Compliance Sequence

For a manufacturer building the file from a standing start, the order that works:

1. Group the catalogue into device families by reprocessing characteristics — not by clinical specialty. A hinged ratcheted clamp and a hinged ratcheted needle holder share a cleaning challenge; a solid retractor does not belong in that group.
2. Certify the QMS to ISO 13485:2016. Nothing downstream is credible without it.
3. Run cleaning and sterilisation validations on the worst-case device in each family, at an accredited laboratory. This is the long-lead item — budget three to six months.
4. Write the IFU to ISO 17664-1 with the validated parameters and a stated cycle limit.
5. Build the Annex II/III technical documentation, GSPR checklist, ISO 14971 risk file, and the Article 61 clinical evaluation report.
6. Appoint the PRRC and the EU Authorised Representative under written mandate.
7. Apply to a notified body for the Annex IX §4 or Annex XI Part A assessment covering reprocessing aspects.
8. Register in EUDAMED, obtain the SRN, and assign Basic UDI-DI and UDI-DI codes per family.
9. Issue the Declaration of Conformity per Annex IV and apply the CE mark with the notified body number.
10. Stand up post-market surveillance — PMS plan, PSUR schedule, vigilance reporting under Articles 87–90.

Steps 3 and 7 are where timelines slip. Notified body capacity has improved since the 2022 bottleneck but has not become generous, and a validation report that comes back with a failed worst-case soil test puts you back to step 3 with a redesigned cleaning instruction.

What Buyers Should Ask For

If you are procuring rather than manufacturing, the documentation set that proves compliance for EU MDR surgical instruments is short and specific. Ask for:

• The EU Declaration of Conformity, naming Regulation (EU) 2017/745 and the notified body number
• The notified body certificate covering reprocessing aspects for the relevant device family
• The ISO 13485:2016 certificate, in date, with scope covering the products you are buying
• The Single Registration Number and the Basic UDI-DI for each family
• The IFU with validated reprocessing parameters and a stated maximum cycle count
• The EU Authorised Representative’s name and address, matching what appears on the label

A supplier who can produce all six within a working day has a real file. One who sends only an ISO 13485 certificate and a generic CE logo does not.

Fizza Surgical has manufactured under CE marking and ISO 13485 since our earliest export work, and our current catalogue of reusable surgical instruments is built and documented to the requirements set out above. Our certifications page lists the current certificate scope.

This article is general regulatory information, not legal advice. Confirm current requirements with your notified body or a qualified regulatory consultant before making submission decisions.