Why Medical Device Sourcing Requires Specialised Due Diligence
Medical device sourcing operates under one of the most stringent regulatory frameworks in global trade. A product incorrectly classified, manufactured outside the required quality management system, or imported without proper registration can result in enforcement action, import seizure, significant fines, and in serious cases criminal liability. The same regulatory framework that makes medical device distribution a higher-barrier business also makes it a defensible one, operators who invest in proper compliance are protected from low-cost competitors who cannot meet the requirements.
This guide covers the essential regulatory requirements for major markets, the quality management standard that underpins the sector, and how to evaluate medical device manufacturers before entering a distribution or import relationship.
EU Medical Device Regulation (MDR)
The EU Medical Device Regulation (MDR 2017/745) replaced the previous Medical Devices Directive from May 2021. It significantly raised requirements for manufacturers placing devices on the EU market:
CE marking under MDR. All medical devices sold in the EU must bear CE marking under the MDR. Unlike the previous MDD, the MDR requires involvement of a Notified Body for a wider range of device classes, including many Class I devices that were previously self-certified.
EUDAMED registration. All devices and their manufacturers and authorised representatives must be registered in the EU medical device database (EUDAMED) before placing products on the market.
Authorised Representative (AR). Manufacturers based outside the EU must appoint an EU Authorised Representative who is legally accountable for the device's compliance on the EU market. The AR is a formal legal role, not simply a local distributor.
Unique Device Identification (UDI). Medical devices sold in the EU must carry a UDI label and be registered in EUDAMED with UDI data. Implementation timelines vary by device class.
For importers and distributors, MDR imposes specific obligations: verification that the manufacturer has CE marking documentation, Authorised Representative appointment, and that device labelling meets EU requirements.
FDA Regulation for US Market Access
In the United States, medical devices are regulated by the FDA under the Federal Food, Drug, and Cosmetic Act. The regulatory pathway depends on device classification:
Class I devices (lowest risk, tongue depressors, bandages, examination gloves) are generally exempt from premarket notification and are subject only to General Controls.
Class II devices (moderate risk, infusion pumps, surgical drapes, diagnostic equipment) typically require a 510(k) premarket notification demonstrating substantial equivalence to a legally marketed predicate device.
Class III devices (highest risk, implantable devices, life-sustaining equipment) require Premarket Approval (PMA), which involves clinical data review.
Foreign manufacturers exporting to the US must register their facility with the FDA and list their devices annually. US importers bear legal responsibility for verifying that their foreign suppliers have completed the required FDA registration and applicable premarket submissions. Devices that arrive at US ports without proper registration are subject to import refusal.
ISO 13485: The Medical Device Quality Management Standard
ISO 13485 is the international quality management standard for medical device manufacturers. It specifies requirements for a quality management system where an organisation needs to demonstrate its ability to provide medical devices and related services that consistently meet customer and applicable regulatory requirements.
ISO 13485 certification is required or strongly expected by:
- EU importers and distributors requiring evidence of manufacturer QMS compliance under MDR
- US-market devices undergoing FDA inspection
- Hospital and healthcare institution procurement departments
- National health service procurement systems in most developed markets
When evaluating a medical device manufacturer, request their ISO 13485 certificate and the name of the certifying body. Verify the certificate on the CB's public database, ISO 13485 certificates are frequently counterfeited. The certificate scope should specifically cover the product category you are sourcing.
Beyond the certificate, ask specifically about design control procedures (if the manufacturer is developing custom devices), change control processes, post-market surveillance systems, and complaint handling procedures. These are the areas where regulatory inspections most frequently identify deficiencies.
Find Medical Device Manufacturers
Browse verified medical device and healthcare equipment manufacturers in the Hell of a Partner medical device directory. Profiles include ISO 13485 certification status, primary markets, and capabilities, enabling a first-pass filter before detailed regulatory due diligence.
For broader context on building a distribution or import business in regulated industries, read our guides on becoming a B2B distributor and finding distribution partners in Europe. For sourcing regulatory guidance specific to your product category and target market, consult a regulatory affairs specialist before committing to a manufacturer relationship.