Medical Device Reporting (MDR)

Medical Device Reporting (MDR) is the name FDA gives to its mandatory post-market safety-surveillance regulation for medical devices, codified at 21 CFR Part 803. It requires manufacturers, importers, and device user facilities to report to FDA when they become aware of information reasonably suggesting one of their marketed devices may have caused or contributed to a death or serious injury, or has malfunctioned in a way that would be likely to cause or contribute to a death or serious injury if the malfunction were to recur. MDR is a post-market obligation — it applies to devices already on the market, and sits alongside (not instead of) the premarket classification and clearance/approval framework (510(k), PMA, De Novo) that determines how a device reaches the market in the first place.

A note on the acronym: this is not the EU’s ‘MDR’

Anyone searching ‘MDR’ in a research-compliance context should confirm which regulation is meant, because the acronym is genuinely ambiguous and the two things it can refer to have almost nothing in common functionally:

• FDA’s Medical Device Reporting (this entry, 21 CFR Part 803) is a post-market adverse-event reporting obligation — an ongoing duty to tell FDA when a marketed device hurts someone or malfunctions dangerously.
• The EU Medical Device Regulation — Regulation (EU) 2017/745, also commonly shortened to ‘MDR’ — is the European Union’s premarket framework governing how a device earns CE marking and lawful access to the EU/EEA market, replacing the older Medical Device Directive 93/42/EEC. It became fully applicable on 26 May 2021.

A device can be squarely subject to both regimes at once (a manufacturer selling in both the US and EU has obligations under each), but ‘we filed our MDR’ means something completely different depending on which regulator the speaker works with. When the context pairs the acronym explicitly with ‘FDA,’ as opposed to ‘EU’ or ‘Europe,’ the FDA post-market reporting rule covered here is almost always the one intended.

Who must report

Part 803 defines three mandatory-reporter categories, each with different obligations:

• Manufacturers must report to FDA directly whenever they become aware that one of their devices may have caused or contributed to a death or serious injury, or has malfunctioned in a way likely to cause death or serious injury if it recurred.
• Importers must report deaths or serious injuries to both FDA and the manufacturer; malfunction reports (absent a death or serious injury) go to the manufacturer only, not to FDA directly.
• Device user facilities — hospitals, ambulatory surgical facilities, nursing homes, and outpatient treatment/diagnostic facilities (not physician offices, which are exempt) — must report a device-related death to both FDA and the manufacturer, and a device-related serious injury to the manufacturer, reporting to FDA directly only if the manufacturer is unknown. User facilities must also submit an annual report to FDA summarizing the reports they filed that year.

Individual clinicians, patients, and consumers are not mandatory reporters under Part 803. They can report suspected device problems voluntarily through FDA’s MedWatch program using Form 3500 — a separate, voluntary channel from the mandatory-reporter obligation described here.

Reporting timelines

• 30-day reports. The baseline MDR timeline: a manufacturer or importer becoming aware of a reportable death, serious injury, or malfunction must submit the report within 30 calendar days of becoming aware of it.
• 5-day reports. A shorter, 5-workday timeline applies when an event requires remedial action to prevent an unreasonable risk of substantial harm to public health (for example, triggering a field correction or product recall), or when FDA specifically requests a 5-day report for an event that otherwise would fall under the 30-day timeline.
• User facility timelines. A device user facility must report a death to both FDA and the manufacturer no later than 10 workdays after becoming aware of it; a serious injury report to the manufacturer follows the same 10-workday standard.

How reports are filed

Mandatory MDR reports use MedWatch Form 3500A (the mandatory-reporter form, distinct from the voluntary Form 3500). FDA requires most mandatory reporters to submit MDR reports electronically through its eMDR (electronic MDR) system rather than on paper, as part of a broader move toward electronic adverse-event submission across FDA’s safety-surveillance programs.

Why this matters for research institutions

MDR obligations attach primarily to manufacturers, importers, and device user facilities as legally defined entities — not, by default, to a university or hospital’s research administration office simply because a study involves a device. But research institutions that also function as device user facilities (most academic medical centers do) carry Part 803 obligations independent of any research protocol, and investigators or research staff who become aware of a device-related death or serious injury during a study should route that information promptly to the institution’s risk management, biomedical engineering, or regulatory affairs office responsible for MDR compliance, in addition to any separate adverse-event reporting the study protocol or IRB requires. MDR reporting is not a substitute for a study’s own adverse-event reporting obligations to the IRB or study sponsor under investigational device and Good Clinical Practice requirements — the two reporting duties run in parallel and serve different purposes: MDR protects the marketed-device safety system generally, while study-level adverse-event reporting protects the specific trial’s human subjects and data integrity.

Related CASRAI content

• Investigational Device — the study-level question of whether a device is the object of a clinical investigation and what IDE requirements apply.
• FDA Medical Device Regulations: Classification, 510(k), and PMA Pathways — the premarket classification and clearance/approval framework MDR sits alongside.
• Humanitarian Use Device (HUD) — a related device-specific FDA designation.