When Must I Report an Adverse Event? Timelines for Every Country (2026)
Level 1 — Explain It Like I'm Five
If you made a toy and a kid got hurt, you'd tell the safety people right away, right? You wouldn't wait a whole year to mention it.
Adverse event reporting is the same thing: when something bad happens with a medical device — or could have happened — the maker has to tell the government, fast. How fast depends on which country. Some say 2 days. Some say 30 days. But you always have to tell.
Level 2 — The General Picture
An adverse event is any incident where a medical device may have caused or contributed to a death, serious injury, or malfunction that could lead to death or serious injury if it happened again. Manufacturers are legally required to report these events to regulatory authorities.
The key question for every complaint is: "Is this reportable?" If yes, the clock starts ticking immediately. Miss the deadline and you face regulatory consequences — warning letters, fines, or worse.
Level 3 — The Exact Timelines by Country
| Country | Event Type | Deadline | Regulation | Submit To |
|---|---|---|---|---|
| US (FDA) | Death or serious injury (requires remedial action) | 5 business days | 21 CFR 803.53 | FDA via eMDR |
| Death or serious injury | 30 calendar days | 21 CFR 803.50 | FDA via eMDR | |
| Malfunction (would cause death/injury if recurred) | 30 calendar days | 21 CFR 803.50 | FDA via eMDR | |
| EU (MDR) | Death or unanticipated serious deterioration | 10 days | Art. 87(3)(b) | Competent Authority via EUDAMED/national |
| Serious public health threat | 2 days | Art. 87(3)(a) | Competent Authority | |
| Other serious incidents | 15 days | Art. 87(3)(c) | Competent Authority | |
| Statistically significant trend increase | Without undue delay | Art. 88 | Competent Authority | |
| Canada (HC) | Death or serious deterioration in health | 10 calendar days | CMDR s.60(a) | HC via MDPR form |
| Could cause death/serious deterioration if recurred | 30 calendar days | CMDR s.60(b) | HC via MDPR form | |
| Japan (PMDA) | Death or serious adverse event | 15 days | PMD Act | PMDA via MedSafe |
| Australia (TGA) | Death or serious public health threat | 2 days | TG Act 1989 | TGA via IRIS |
| Serious injury | 10 days | TG Act 1989 | TGA via IRIS | |
| China (NMPA) | Death | 7 days | Order No. 1 | Provincial monitoring center |
| Serious injury | 20 days | Order No. 1 | Provincial monitoring center |
The critical decision: Is this complaint reportable?
For EVERY complaint, you must document your reportability assessment. Regulators audit your "no" decisions as aggressively as your "yes" decisions. Use a decision tree:
- Did an incident occur involving the device? → If no, document why and close
- Did the device fail, malfunction, or have labeling inadequacy? → If no, document why
- Did it cause death or serious injury? → If yes, report to all applicable jurisdictions immediately
- If no injury occurred: Could it cause death or serious injury if the same thing happened again? → If yes, still reportable
What RA/QA must do Monday morning
- Review every complaint received in the last 24 hours against the decision tree
- Document the reportability determination for each — even if the answer is "not reportable"
- For reportable events: start the clock, assign to filing team, track to submission
- Maintain a reporting log with event dates, awareness dates, submission dates, and acknowledgments
Level 4 — The Deeper Analysis
Why the timelines differ
The variation in reporting timelines reflects different regulatory philosophies. The EU's 2-day window for public health threats reflects the post-PIP implant scandal urgency. FDA's 5-day "remedial action" report reflects enforcement focus — if you're already recalling, FDA wants to know immediately. Health Canada's 10/30-day structure came from the CMDR's original 1998 design, reinforced by Vanessa's Law in 2014.
The underreporting problem
FDA receives several hundred thousand MDRs annually through MAUDE, yet studies consistently show underreporting. The structural causes: ambiguous "could cause" criteria, decentralized complaint handling in large organizations, and the tension between legal risk (reporting implies acknowledgment) and regulatory risk (not reporting triggers enforcement). FDA's response has been data-driven enforcement — using MAUDE data as pre-inspection intelligence to find underreporters.
Multi-jurisdiction filing strategy
For manufacturers selling in 5+ markets, a single adverse event may be simultaneously reportable to FDA (30-day MDR), EU NCA (10-day serious incident), Health Canada (10-day mandatory report), PMDA (15-day), and TGA (10-day). The unified strategy: evaluate every event against the most conservative criteria (EU MDR's "serious incident" definition), file the initial report to the fastest deadline (EU 2-day if applicable), then file to remaining jurisdictions within their respective timelines. One investigation, one root cause analysis, multiple report forms.
Frequently Asked Questions
When must a medical device manufacturer report an adverse event?
A manufacturer must report when they become aware that a device may have caused or contributed to a death or serious injury, or when a malfunction could lead to death or serious injury if it recurred. In the US, reports are due within 30 calendar days (5 business days if remedial action is needed). In the EU, serious incidents must be reported within 2–15 days depending on severity. Health Canada requires reports within 10 days for death/serious injury and 30 days for potential recurrence events. The clock starts when the manufacturer becomes "aware" — which includes complaints, service reports, literature, and regulatory database findings.
What happens if I report an adverse event late?
Late reporting is a common FDA 483 observation and warning letter finding. FDA tracks your submission dates against your awareness dates and flags late reports. In the EU, late vigilance reporting can result in Notified Body nonconformities and competent authority enforcement. Health Canada can impose conditions on your device licence or pursue enforcement under Vanessa's Law, which carries penalties up to $5 million and/or 2 years imprisonment. The consequence escalates with frequency — a pattern of late reporting signals systemic failure.
Do I need to report adverse events for devices sold in other countries if I'm only regulated in one?
Generally, yes. Most jurisdictions require you to report events regardless of where they occurred, if the device is also sold in that jurisdiction. Health Canada's SOR/2020-262 added "foreign risk notification" requirements — you must notify HC within 72 hours of becoming aware of foreign regulatory actions related to serious risk. EU MDR requires reporting serious incidents to the competent authority of each Member State where the device is or was made available. A complaint from a Japanese hospital about a device also sold in the US and EU triggers reporting obligations in all three jurisdictions.
How do I decide if a complaint is reportable?
Apply a documented decision tree to every complaint: (1) Did an incident involving the device occur? (2) Did the device fail, malfunction, or have labeling inadequacy? (3) Did it cause or contribute to death or serious injury? (4) If no injury occurred, could the same incident cause death or serious injury if it recurred? If any of criteria 3 or 4 are met, the event is reportable. Document your rationale for EVERY determination — especially when you decide NOT to report. Inspectors specifically check non-reported complaints for missed reportable events.
References
See how these signals relate to your device
Generate a free mini evidence pack in under 3 minutes. No account required.
Generate My Evidence PackRelated Articles
Correction, Removal, or Recall? How to Navigate 21 CFR 806 When Your Device Has a Field Problem
Engineering finds a field problem. Is it a correction, removal, or recall? Learn the 21 CFR 806 decision tree, health hazard evaluation process, and what happens when you miss the 10-day reporting window.
March 6, 2026
pms_explainedStop Using RPN for Safety Risk: Why ISO 14971 Rejected Detection and What Auditors Actually Want
The most common mistake in medical device risk management: using FMEA Risk Priority Numbers for ISO 14971 risk evaluation. Here is why Detection is not a risk factor, what auditors look for, and what real FDA enforcement data shows.
March 6, 2026
pms_explainedWhat Is PMCF and Do I Really Need It? 4-Level Guide (2026)
PMCF (Post-Market Clinical Follow-up) explained at 4 levels — from playground analogy to the MDD-to-MDR evidence crisis. Covers MDCG 2020-7/2020-8 templates, PMCF plan writing, method selection, and why 'not applicable' rarely works with Notified Bodies.
February 18, 2026