Long-Term IVDR Class C Compliance: Quality Management, Risk Control and Post-Market Surveillance
Obtaining CE marking for an in vitro diagnostic medical device is an important achievement, but manufacturers must continue meeting regulatory requirements after the product enters the European market. Under Regulation (EU) 2017/746, regulatory conformity is an ongoing responsibility that includes maintaining technical documentation, controlling manufacturing processes and monitoring device performance.
For Class C products, these activities are especially important because incorrect diagnostic results may have serious implications for individual patients or public health. Products used for infectious disease testing, cancer diagnosis, genetic testing and other important medical applications must continue to perform consistently with their intended purposes.
A long-term regulatory strategy helps manufacturers maintain control over product quality and respond to changes in performance, manufacturing conditions or scientific knowledge. Companies seeking information about Class C compliance support can explore the services described by I3CGLOBAL at i3cglobal.com/ivdr-class-c/.
Why Compliance Must Continue After CE Certification
CE certification demonstrates that the manufacturer has completed the applicable conformity assessment requirements. However, it does not mean that the product's regulatory responsibilities have ended.
Manufacturers must maintain their quality management systems and ensure that the device continues to satisfy the applicable General Safety and Performance Requirements. New complaints, scientific findings, manufacturing changes and market experience may affect the original performance evaluation.
For example, a diagnostic reagent may initially demonstrate acceptable analytical performance during validation. Later changes in raw material suppliers or formulation may influence stability or measurement consistency. The manufacturer must have procedures for identifying and evaluating these changes.
Risk Management Throughout the Device Lifecycle
Risk management is a continuous process under the IVDR. Manufacturers must identify hazards, estimate and evaluate associated risks, implement controls and assess the remaining risks throughout the device lifecycle.
For Class C products, potential risks may include false-positive results, false-negative results, cross-reactivity, specimen contamination, reagent degradation, incorrect calibration and inadequate user instructions.
Maintaining an Updated Risk Management File
The risk management file should contain the relevant hazard analysis, risk evaluations, control measures and verification evidence. It should be reviewed when new information becomes available or when product changes may affect previously identified risks.
Post-market complaints should be evaluated to determine whether they reveal new hazards or indicate that existing risk controls are insufficient. Corrective actions should be documented and their effectiveness assessed.
Post-Market Surveillance as a Continuous Information System
Post-market surveillance allows manufacturers to evaluate how their products perform after commercial distribution. It provides information that may not be available through pre-market laboratory and clinical studies alone.
Manufacturers should establish a PMS plan that identifies relevant information sources, collection methods, evaluation procedures and responsibilities. The system should be appropriate to the product's intended purpose and risk profile.
Important Sources of Post-Market Information
- Complaints from laboratories and healthcare professionals.
- Reports of suspected device malfunctions.
- Information about unexpected diagnostic results.
- Relevant scientific publications.
- Field performance information.
- Manufacturing deviations and nonconformities.
- Corrective and preventive action records.
- Information about comparable diagnostic products.
The information collected should be evaluated systematically. Manufacturers should determine whether emerging trends indicate potential safety issues or whether additional performance studies are necessary.
Periodic Safety Update Report Requirements for Class C Devices
Article 81 of the IVDR establishes the Periodic Safety Update Report requirements. Manufacturers of Class C and Class D devices must prepare and update their PSUR at least annually.
The report should include conclusions from post-market surveillance activities, information about preventive and corrective actions, sales volumes and estimates of the population using the device, together with other information required by the regulation.
The PSUR should be based on actual post-market information rather than being prepared as a routine administrative document. Manufacturers should establish a process for collecting data throughout the reporting period and evaluating it before the report is finalised.
The report must be made available to the notified body through the applicable regulatory arrangements. Manufacturers should also maintain appropriate records to demonstrate that PSUR activities are performed according to the regulatory requirements.
Post-Market Performance Follow-Up and Evidence Updates
Post-market performance follow-up is an important part of the IVDR performance evaluation framework. Its purpose is to collect and assess performance information after the product has entered the market.
The PMPF plan should explain the activities used to gather relevant data and how the results contribute to maintaining the performance evaluation. Activities may include literature reviews, analysis of complaints, user feedback and additional performance studies where appropriate.
When Should the Performance Evaluation Be Updated?
Manufacturers should review performance evaluation documentation when relevant new evidence becomes available. This may include updated scientific literature, new clinical findings, changes in the intended population or performance issues identified through post-market surveillance.
The Performance Evaluation Report should remain consistent with the product's actual design, intended purpose and performance claims. Any important changes should be documented and assessed through the manufacturer's quality management system.
Technical Documentation and Change Control
Technical documentation should accurately represent the device throughout its lifecycle. Annex II and Annex III establish the principal requirements for product-related technical information and post-market surveillance records.
Changes to the product may require technical documentation updates. These changes can involve reagent formulation, software, product specifications, manufacturing equipment, packaging, labelling or intended purpose.
Establishing a Controlled Change Management Process
Manufacturers should evaluate every proposed change before implementation. The assessment should identify its effect on product safety, performance, risk management and regulatory conformity.
Where necessary, additional verification or validation studies should be conducted. Changes affecting the certified product or quality management system should be evaluated according to the applicable notified body notification and approval requirements.
Supplier Management and Manufacturing Consistency
Diagnostic product quality depends on the reliability of raw materials, reagents, components and manufacturing processes. Variations in these inputs may affect product stability and analytical performance.
Manufacturers should establish risk-based supplier qualification procedures. These may include supplier audits, quality agreements, incoming inspections, material specifications and ongoing supplier performance reviews.
When a critical supplier changes, the manufacturer should assess whether the new material or process requires additional testing. Relevant records should be maintained in the quality management system.
Internal Audits and Management Reviews
Internal audits help manufacturers evaluate whether their quality management system is operating according to approved procedures and applicable regulatory requirements. Audit activities should cover relevant processes, including design controls, manufacturing, documentation, complaint handling and post-market surveillance.
Management reviews provide an opportunity to evaluate quality performance, outstanding corrective actions, regulatory changes and resource requirements. These reviews should result in documented decisions and appropriate follow-up activities.
UDI, EUDAMED and Regulatory Information Management
Manufacturers should maintain appropriate device identification and traceability processes. Unique Device Identification requirements support the identification of devices throughout the supply chain and help improve regulatory traceability.
Companies should also monitor applicable EUDAMED obligations and implementation requirements. Registration, device information and regulatory communication processes should be aligned with the applicable legal provisions.
Regulatory teams should maintain awareness of changes to European guidance, common specifications and relevant harmonised standards. These developments may influence technical documentation, performance evaluation and quality management procedures.
How I3CGLOBAL Can Support Ongoing IVDR Class C Compliance
Maintaining regulatory conformity can require specialist technical and regulatory knowledge. Manufacturers may seek external assistance when reviewing technical documentation, updating performance evaluation reports or preparing for notified body assessments.
I3CGLOBAL provides information about its IVDR Class C regulatory and product technical consultation services. Its dedicated website page discusses support areas relevant to technical documentation, performance evaluation and regulatory compliance.
Businesses considering external assistance should establish the scope of support and clarify which activities remain the responsibility of their internal regulatory and quality teams. External consulting should strengthen the manufacturer's existing compliance system rather than replace its legal responsibilities.
Common Long-Term Compliance Mistakes
One frequent mistake is treating certification as the end of regulatory work. Manufacturers may obtain CE marking but fail to update their technical documentation when product specifications or manufacturing processes change.
Another issue is collecting post-market data without evaluating its significance. PMS should be an active process that contributes to risk management and performance evaluation rather than a collection of unreviewed complaints.
Companies should also avoid relying on outdated performance evidence, ignoring supplier changes or failing to review the effectiveness of corrective actions.
Conclusion
Long-term IVDR Class C compliance requires manufacturers to maintain effective quality management, risk assessment, technical documentation and post-market surveillance throughout the product lifecycle. Annual PSUR updates and ongoing performance evaluation are important responsibilities for Class C manufacturers.
Companies that establish clear internal processes can manage product changes and regulatory information more IVDR Class C Devices effectively. By maintaining consistent documentation and obtaining appropriate regulatory guidance, manufacturers can develop a sustainable compliance strategy for their diagnostic products. I3CGLOBAL provides information about its IVDR Class C Devices IVDR Class C consultation services for organisations seeking support with these ongoing responsibilities.