What CE marking means for a medical device
CE medical device marking is the visible outcome of a conformity assessment under the European Union Medical Device Regulation, Regulation (EU) 2017/745, usually referred to as the MDR. For a manufacturer, it means the device has been assessed against the MDR requirements that apply to its intended purpose, risk class and design. For a buyer or distributor, it is evidence of EU market access for that device, but it is not a general quality award, an FDA clearance, or proof that a regulator tested every unit.
The value of the mark depends on the file behind it: classification, technical documentation, clinical evaluation, risk management, post-market surveillance, labelling, UDI data and, where required, a notified body certificate. This article is part of our Regulatory coverage.
Start with intended purpose and product scope
The CE marking route starts before testing, forms or certificates. The first question is whether the product is legally a medical device under the MDR. That answer depends on the manufacturer’s intended purpose, claims, mode of action and presentation to users. A product intended for diagnosis, prevention, monitoring, prediction, prognosis, treatment or alleviation of disease may fall within the MDR if its principal intended action is not achieved by pharmacological, immunological or metabolic means.
This scope decision matters because similar-looking products can be regulated in different ways. A wellness app, a clinical decision support tool, an accessory, an in vitro diagnostic device, a drug-device combination and a general laboratory product may sit in different regulatory categories. The CE route also changes if the item is custom-made, investigational, a system or procedure pack, or a device supplied by a non-EU manufacturer through an authorised representative.
A practical scope review should record:
- the intended medical purpose and the claims made in labels, instructions and promotional material;
- the target patient or user population;
- whether the product is a medical device, accessory, IVD, medicinal product combination, PPE or another regulated product;
- whether software, hardware, sterile packaging or reusable functions change the risk profile;
- which economic operators are involved, including manufacturer, authorised representative, importer and distributor.
If the scope decision is wrong, the later work can also be wrong. A device may be under-classified, a notified body may be omitted, or evidence may be prepared for the wrong regulatory framework.
Classification determines the conformity assessment route
Under the MDR, medical devices are classified as class I, IIa, IIb or III according to the risk-based rules in Annex VIII. The classification determines whether the manufacturer can self-declare conformity or must involve a notified body. As the risk class increases, the review of the quality management system and technical documentation becomes more demanding.
| Device category | Typical conformity route | Key point for CE marking |
|---|---|---|
| Class I, non-sterile, no measuring function, not reusable surgical instruments | Manufacturer prepares technical documentation and issues the EU declaration of conformity | No notified body certificate is normally required, but the evidence must still be complete |
| Class I sterile, measuring or reusable surgical instruments | Notified body involvement is required for the relevant limited aspects | The CE mark is followed by the notified body identification number where applicable |
| Class IIa | Notified body conformity assessment is required | Technical documentation and QMS evidence must support the device group and intended use |
| Class IIb | Notified body assessment is required, with higher scrutiny than class IIa | Clinical evidence, risk controls and post-market plans are usually central to review |
| Class III | Highest level of notified body assessment under the MDR | Design, clinical evidence, safety and performance justification receive intensive review |
Classification is not a commercial choice. It should be justified rule by rule and retained in the technical documentation. Small wording changes in intended purpose can change classification, especially for software, implantable devices, devices that administer medicines, and devices that contact the central circulatory or nervous system.
The evidence package behind a CE medical device mark
The CE mark is defensible only if the manufacturer can show conformity with the MDR. Compliance is not reduced to one test report. The MDR expects a structured evidence package that links product design, risk controls, clinical data, manufacturing controls and post-market feedback.
General safety and performance requirements
Annex I of the MDR sets out the general safety and performance requirements, often abbreviated as GSPRs. Manufacturers normally build a GSPR checklist that identifies every applicable requirement, explains why non-applicable items are excluded, and references the evidence used to demonstrate conformity. Depending on the device, that evidence may include design verification, validation, biological safety, electrical safety, usability, sterilisation validation, packaging validation, software lifecycle records, cybersecurity documentation and clinical evidence.
Harmonised standards can support conformity when they are used correctly, but a standard certificate is not a substitute for MDR compliance. The manufacturer still has to show that the selected standards are current, relevant to the device, and sufficient for the identified risks.
Technical documentation
Annex II and Annex III technical documentation should present a coherent file. It should identify the device, describe its design and manufacturing process, justify its classification, list specifications, document risk management, show verification and validation results, and explain the post-market surveillance system.
For many manufacturers, the weakness is not the absence of testing. It is poor traceability between hazards, requirements, test evidence, labelling and clinical claims. A strong file makes it easy to answer four questions: what the device is intended to do, what can go wrong, what evidence shows that risks are controlled, and how the manufacturer will detect new information after the device reaches the market.
Clinical evaluation and post-market surveillance
Clinical evaluation is required under the MDR and should be proportionate to the device type and risk. It may use clinical investigation data, scientific literature, equivalent device data where justified, and post-market information. Compared with the former directive system, the MDR places more emphasis on continuous clinical evidence. Post-market clinical follow-up, complaint data, vigilance reports, trend reporting and periodic safety update reports may all affect continued conformity.
Post-market surveillance is part of the lifecycle evidence supporting the CE mark. If post-market data reveal new risks, changed benefit-risk conclusions or unsupported claims, the manufacturer may need corrective action, field safety communication, labelling updates or design changes.
Notified body review and the meaning of a CE certificate
A notified body is an independent conformity assessment body designated for specific MDR scopes. It is not enough to choose any notified body; the body must be designated for the relevant device codes and conformity assessment route. For class IIa, IIb, III and certain class I devices, the notified body reviews the manufacturer’s QMS and selected technical documentation according to the applicable MDR annexes.
The phrase CE certificate is often used loosely. In practice, a manufacturer may hold MDR certificates issued by a notified body for its quality management system, technical documentation assessment, EU type examination or product verification, depending on the route. The EU declaration of conformity remains the manufacturer’s formal declaration that the device complies with applicable legislation.
Where a notified body is involved, the CE marking is followed by the notified body’s four-digit identification number. Where a device is ordinary class I and no notified body is required, the CE mark is not followed by a notified body number. Buyers should therefore not judge legitimacy only by the presence or absence of a number. They should compare the number, certificate scope, device name, Basic UDI-DI and manufacturer details. See also: Implants.
Legacy device transition rules are conditional
Many searches for CE medical device requirements concern devices still moving from the former Medical Devices Directive or Active Implantable Medical Devices Directive into the MDR system. Regulation (EU) 2023/607 extended MDR transition periods, but the extension is not a blanket permission to continue business as usual.
| Legacy device situation | Key date or endpoint | Important limitation |
|---|---|---|
| Higher-risk legacy devices, including class III and many class IIb implantable devices | Transition may run until 31 December 2027 | Only if the MDR transition conditions are met |
| Other eligible class IIb, class IIa and relevant class I devices needing notified body involvement under MDR | Transition may run until 31 December 2028 | Classification for transition purposes is assessed under MDR rules |
| Legacy devices without a timely MDR application | The transition may have ended on 26 May 2024 | The extension depended on meeting application and QMS conditions |
| Devices already lawfully placed on the market under the old framework or transition provisions | No separate MDR sell-off deadline applies | Shelf-life, expiry date and other safety limits still matter |
The main conditions include continued compliance with the former directive requirements, no significant change in design or intended purpose, no unacceptable risk to health or safety, and compliance with MDR requirements related to post-market surveillance, market surveillance, vigilance and registration. Manufacturers also had to put an MDR-compliant quality management system in place by 26 May 2024, lodge a formal MDR conformity assessment application by 26 May 2024 where required, and sign a written agreement with a notified body by 26 September 2024.
As of September 2026, those 2024 deadlines are no longer planning milestones; they are historical eligibility tests. A manufacturer that missed them should not assume that a legacy CE mark remains valid. A manufacturer that met them still needs to manage certificate scope, surveillance transfer, significant-change controls and evidence showing why the device remains eligible.
EUDAMED and UDI now affect the launch sequence
Regulation (EU) 2024/1860 introduced a gradual roll-out of EUDAMED. Following a European Commission decision published in November 2025, the first four EUDAMED modules became mandatory from 28 May 2026: actor registration, UDI and device registration, notified bodies and certificates, and market surveillance.
This affects practical CE launch planning. Manufacturers need the correct actor registration, Basic UDI-DI and UDI-DI strategy, device data, certificate data where applicable, and consistency between EUDAMED entries, the EU declaration of conformity, labels and instructions for use. For devices first placed on the EU market after the mandatory-use date, EUDAMED registration should be treated as a pre-market operational step, not a post-launch administrative cleanup.
UDI is not just a barcode project. The Basic UDI-DI appears in the EU declaration of conformity and technical documentation, while the UDI carrier appears on labels and packaging according to MDR timing and device type. If product variants, packaging levels and certificates are not mapped early, EUDAMED records can become inconsistent with regulatory evidence.
Common mistakes when checking a CE medical device
Manufacturers, importers and purchasers often focus on the logo because it is visible. The more important question is whether the mark is supported by the right evidence for the exact device and intended use. Common errors include:
- treating an ISO 13485 certificate as if it were an MDR CE certificate;
- using a notified body certificate outside its device scope, model list or validity conditions;
- forgetting that ordinary class I self-declared devices still need technical documentation and PMS;
- assuming an MDD certificate extension applies without checking the 2024 application, QMS and written-agreement conditions;
- changing design, software, materials, supplier controls or intended purpose during transition without assessing whether the change is significant;
- allowing the EU declaration of conformity, label, IFU, EUDAMED record and certificate to show inconsistent device identifiers;
- making promotional claims that go beyond the clinical evaluation or the certified intended purpose.
A defensible review compares the device, label, IFU, declaration of conformity, certificate, technical documentation index, UDI data and manufacturer details. If those elements do not align, the CE mark may still be present, but the regulatory position deserves closer scrutiny.
Frequently asked questions
Is CE marking mandatory for medical devices in the EU?
For most medical devices placed on the EU market, yes. Devices other than custom-made or investigational devices must bear CE marking when they are considered compliant with the MDR and have passed the applicable conformity assessment. Custom-made and investigational devices follow specific MDR pathways rather than the ordinary CE marking route.
Does every CE medical device need a notified body?
No. Ordinary class I devices can generally be self-declared by the manufacturer after the required documentation is prepared. Notified body involvement is required for class IIa, IIb, III and specific class I devices, such as devices placed on the market sterile, devices with a measuring function and reusable surgical instruments, within the relevant limits.
Is an ISO 13485 certificate enough for CE marking?
No. ISO 13485 can support the manufacturer’s quality management system, but CE marking under the MDR requires conformity with MDR obligations. That includes classification, GSPRs, technical documentation, clinical evaluation, PMS, labelling, declaration of conformity and notified body assessment where required.
Can an MDD CE marked device still be sold in the EU?
Some legacy devices can still be placed on the EU market during the extended transition periods ending on 31 December 2027 or 31 December 2028, depending on the device and only if the legal conditions are met. Devices already lawfully placed on the market may continue to be made available without a separate MDR sell-off deadline, subject to shelf-life and safety limits.
What should buyers verify before accepting a CE medical device?
Buyers should verify that the manufacturer and device identity match the declaration of conformity, certificate where applicable, labelling and UDI information. For notified body devices, they should check that the certificate covers the device type and intended purpose. For legacy devices, they should also ask for evidence that the transition conditions remain satisfied.
Source note: This overview reflects public EU regulatory materials available as of 10 September 2026, including Regulation (EU) 2017/745, Regulation (EU) 2023/607, Regulation (EU) 2024/1860, European Commission EUDAMED notices and relevant MDCG Q&A guidance. It is an editorial summary and not legal advice.