EU MDR Post-Market Surveillance Requirements — PMS Plan, PSUR, PMCF Guide (2026)

EU MDR Post-Market Surveillance: A Complete Guide for RA/QA Professionals

The EU Medical Device Regulation (MDR 2017/745) fundamentally transformed post-market surveillance requirements for medical devices sold in the European market. Unlike the previous Medical Devices Directive (MDD 93/42/EEC), which treated PMS as a general obligation, the MDR establishes PMS as a structured, proactive, and continuous process with explicit documentation requirements, defined deliverables, and direct links to clinical evaluation and risk management.

For regulatory affairs (RA) and quality assurance (QA) professionals, the MDR's PMS requirements represent the most comprehensive post-market framework of any global jurisdiction. This guide covers every aspect — from the PMS Plan through PSUR submission, PMCF studies, vigilance reporting, and Notified Body audit expectations.

The EU MDR PMS Regulatory Framework

PMS requirements under MDR 2017/745 are distributed across several articles and annexes:

MDR Reference	Subject	Key Requirement
Article 2(60)-(62)	Definitions	Defines PMS, PMS plan, and corrective action
Article 10(10)	General Obligations	Manufacturers must establish, document, implement, and maintain a PMS system
Article 83	PMS System	Requires a PMS system proportionate to the risk class and type of device
Article 84	PMS Plan	Documented plan addressing data collection, analysis, and resulting actions
Article 85	PMS Report	Summary report for Class I devices — updated when necessary
Article 86	PSUR	Periodic Safety Update Report for Class IIa/IIb/III — submitted to Notified Body
Articles 87-92	Vigilance	Serious incident reporting, FSCAs, trend reporting, analysis of incidents
Annex III	Technical Documentation on PMS	PMS plan, PMS report/PSUR, and PMCF plan/report as part of technical file
Annex XIV Part B	PMCF	Post-Market Clinical Follow-up evaluation plan and report

The PMS Plan (Article 84)

Every manufacturer must create a PMS Plan for each device or device group. The plan is a living document that forms part of the technical documentation under Annex III. Article 84 specifies that the PMS plan must address:

Required Elements

Proactive and systematic data collection — processes to collect and use data on quality, performance, and safety throughout the device lifecycle
Analysis of collected data — indicators and methodologies for ongoing analysis, including statistical methods and thresholds for action
Effective and appropriate methods — mechanisms to investigate complaints, market data, and user feedback
Methods for managing events subject to vigilance reporting — interface between PMS and vigilance processes
Methods for communicating with competent authorities — reporting obligations and communication channels
Procedures to fulfill manufacturer obligations — reference to Articles 83-86 requirements
Systematic procedures to identify corrective and preventive actions
Effective tools to trace and identify devices — UDI system, registration, traceability

Data Sources Required by the PMS Plan

MDCG 2020-7 (Post-market clinical follow-up Plan and Report Templates) and MDCG 2022-21 (Periodic Safety Update Report) clarify that the PMS plan must include data from:

Serious incidents and field safety corrective actions (own and similar devices)
Records of non-serious incidents and expected undesirable side-effects
Trend reports and statistical analysis
Relevant literature, databases, and registers
Feedback and complaints from users, distributors, and importers
Information from EUDAMED (when fully functional)
Information on similar devices on the market

PMS Report vs. PSUR

The MDR distinguishes between two output documents depending on device classification:

Aspect	PMS Report (Article 85)	PSUR (Article 86)
Applies to	Class I devices	Class IIa, IIb, and III devices
Update frequency	Updated when necessary	Class IIa: at least every 2 years; Class IIb/III: at least annually
Submission	Available to competent authority on request	Submitted to Notified Body; Class III also uploaded to EUDAMED
Content	Results and conclusions of PMS data analysis, rationale and description of preventive and corrective actions taken	Same as PMS Report PLUS: conclusions on benefit-risk determination, main findings of PMCF, volume of sales, user population estimate, usage frequency
Benefit-risk update	Not explicitly required	Must confirm or update the benefit-risk determination

PSUR Content Requirements (MDCG 2022-21)

The MDCG 2022-21 guidance provides a detailed template for PSURs. Key sections include:

Device description and intended purpose
Summary of PMS plan and methods
Summary of PMS data collected (complaints, vigilance, literature, registries)
Analysis of results — including trend analysis with statistical methods
Benefit-risk analysis — updated based on new PMS data
Conclusions on ongoing acceptability of benefit-risk ratio
PMCF findings and their impact
Actions taken or planned — CAPAs, field safety corrective actions, updates to IFU or labeling

Post-Market Clinical Follow-Up (PMCF)

PMCF is the most significant PMS addition in the MDR compared to the old MDD. Defined in Annex XIV Part B, PMCF is a continuous process that updates the clinical evaluation throughout the device lifecycle.

PMCF Plan Requirements

The PMCF plan must specify:

General methods: device registries, post-market clinical studies, published literature surveys, patient/clinician surveys
Specific methods: appropriate to the device risk class and clinical data gaps identified in the clinical evaluation
Objectives: what clinical questions the PMCF addresses (long-term safety, rare complications, off-label use, real-world performance)
Rationale: justification for methods chosen and why they are adequate
Timelines and milestones

PMCF Report

The PMCF report must document all findings and feed into the clinical evaluation report (CER) and the PSUR. It must include analysis of PMCF data, conclusions on continued safety and performance, and any updates needed to the clinical evaluation, risk management, or benefit-risk determination.

Key MDCG Guidance

MDCG 2020-7: PMCF Plan and Report templates
MDCG 2020-8: PMCF Evaluation Report template for Class III and implantable devices

Vigilance System (Articles 87-92)

The MDR vigilance system requires manufacturers to report safety events to competent authorities through EUDAMED (or national systems until EUDAMED is fully operational).

Reporting Timelines

Event Type	Timeline	Article
Serious incident — death or unanticipated serious deterioration	2 days (initial report)	87(3)(a)
Serious incident — serious public health threat	2 days (initial report)	87(3)(a)
Other serious incidents	10 days (initial report)	87(3)(b)
Serious incident — where causality needs investigation	15 days (initial report)	87(3)(c)
Field Safety Corrective Action (FSCA)	Before or simultaneously with FSCA start	87(4)
Trend report (statistically significant increase in events)	Without undue delay after detection	88
Final report (after investigation)	As soon as investigation is complete	87(8)

Trend Reporting (Article 88)

A major MDR addition: manufacturers must report statistically significant increases in the frequency or severity of non-serious incidents or expected undesirable side-effects that could have a significant impact on benefit-risk analysis. This requires manufacturers to maintain baseline event rates and statistical process control methods to detect trends.

Notified Body Oversight of PMS

Notified Bodies (NBs) play a critical role in PMS assessment under the MDR:

Conformity assessment: NBs must review the PMS plan, PMS report/PSUR, and PMCF plan/report as part of the technical documentation review for CE marking
PSUR review: For Class IIb and III devices, the NB must review the PSUR and provide an opinion on the ongoing benefit-risk ratio
Unannounced audits: NBs conduct unannounced audits at least once every 5 years, which include PMS system verification
Sampling and testing: NBs may request samples and verify that manufactured devices conform to technical documentation

Common NB Audit Findings for PMS

PMS plan not device-specific — using a generic template without device-level customization
PMCF plan lacking clear clinical questions and defined endpoints
Insufficient data sources — relying only on complaints without systematic literature monitoring or registry data
No statistical methodology for trend detection
PMS/PSUR not feeding back into clinical evaluation and risk management
Missing or inadequate equivalent device justification in PMCF planning
Trend reporting process not defined or not implemented

EUDAMED and Electronic Reporting

The European Database on Medical Devices (EUDAMED) is being deployed in modules. When fully operational, EUDAMED will be the central platform for:

UDI registration and device identification
Vigilance reporting (serious incidents and FSCAs)
Clinical investigation submissions
PSUR submissions (for Class III devices)
Market surveillance activities

Until EUDAMED modules are fully functional, manufacturers report through national competent authority systems.

Competent Authority Market Surveillance

National competent authorities (NCAs) such as BSI (UK, pre-Brexit), BfArM (Germany), ANSM (France), and others conduct market surveillance activities under MDR Chapter VII:

Review of vigilance reports and PSURs
Unannounced site inspections
Product sampling and testing
Review of technical documentation
Coordinated assessments with other NCAs via the Medical Device Coordination Group (MDCG)

Non-compliance can result in device suspension, withdrawal from market, or referral to the European Commission for EU-wide action.

Key Differences: MDR vs. MDD for PMS

Aspect	MDD (93/42/EEC)	MDR (2017/745)
PMS Plan	Implicit — part of QMS	Explicit — Article 84, mandatory for every device
PSUR	Not required	Mandatory for Class IIa/IIb/III (Article 86)
PMCF	Referenced in MEDDEV 2.12-2	Mandatory with detailed requirements (Annex XIV Part B)
Trend reporting	Not specified	Mandatory (Article 88)
Vigilance timelines	Generally 10 days	2/10/15 days depending on severity
NB PSUR review	Not required	Required for Class IIb/III
EUDAMED reporting	Not available	Mandatory when operational

Action Items for RA/QA Professionals

Create device-specific PMS plans — one plan per device group with clear data sources, analysis methods, and thresholds
Implement PMCF programs — define clinical questions, choose appropriate methods, set timelines
Establish PSUR writing process — with templates aligned to MDCG 2022-21
Build trend detection capability — implement statistical process control for complaint and incident data
Link PMS to CER — ensure PMS findings systematically update the clinical evaluation report
Link PMS to risk management — PMS data must flow into ISO 14971 risk management files
Prepare for NB audits — have PMS deliverables (plan, report/PSUR, PMCF plan/report) ready and current
Monitor EUDAMED deployment — prepare for electronic reporting requirements
Train personnel — ensure PMS, vigilance, and PMCF staff understand MDR requirements
Use regulatory intelligence tools — monitor EU vigilance databases, recall databases, and NB audit trends with platforms like TrueMedDevice

Frequently Asked Questions

What is the difference between a PMS Report and a PSUR under the EU MDR?

A PMS Report (Article 85) is required for Class I devices and summarizes PMS data and actions taken. A PSUR (Article 86) is required for Class IIa, IIb, and III devices and additionally includes benefit-risk analysis, sales volume data, user population estimates, and PMCF findings. PSURs must be submitted to the Notified Body (NB reviews for Class IIb/III), while PMS Reports are available on request to competent authorities.

How often must PSURs be updated under the MDR?

Class IIa devices require PSUR updates at least every 2 years. Class IIb and Class III devices require annual PSUR updates. However, more frequent updates may be required if new safety data or significant changes in the benefit-risk profile emerge. The Notified Body may also request additional updates during their review cycle.

Is PMCF mandatory for all device classes under the EU MDR?

Yes. PMCF is mandatory for all device classes under MDR Annex XIV Part B. However, for Class I devices and well-established technologies, the PMCF plan may justify a reduced scope (such as literature monitoring only). For Class III and implantable devices, comprehensive PMCF with prospective clinical data collection is typically expected. A justification is required if no PMCF activities are deemed necessary.

What triggers trend reporting under MDR Article 88?

Manufacturers must report when they detect a statistically significant increase in the frequency or severity of non-serious incidents or expected undesirable side-effects that could significantly impact the benefit-risk analysis. This requires maintaining baseline event rates and using statistical process control methods. The report must include the observed trend, time period, estimated number of affected devices, and planned actions.

What do Notified Body auditors focus on for PMS under the MDR?

NB auditors typically focus on: (1) device-specific PMS plans with clear data collection methods, (2) PMCF plan adequacy and active data collection, (3) PSUR content quality and timely updates, (4) evidence that PMS data feeds into clinical evaluation and risk management, (5) trend detection methodology, (6) vigilance reporting compliance, and (7) evidence of corrective actions from PMS findings. The most common finding is that PMS is treated as a checkbox exercise rather than a meaningful, data-driven process.

EU MDR Post-Market Surveillance Requirements: Complete Guide for RA/QA (2026)