Skip to main content
QMSQMS
QMS
  • Welcome to your QMS
  • Quality Manual
  • Procedures
    • GP-001 Control of documents
    • GP-002 Quality planning
    • GP-003 Audits
    • GP-004 Vigilance system
    • GP-005 Human Resources and Training
    • GP-006 Non-conformity, Corrective and Preventive actions
    • GP-007 Post-market surveillance
    • GP-009 Sales
    • GP-010 Purchases and suppliers evaluation
    • GP-011 Provision of service
    • GP-012 Design, redesign and development
    • GP-013 Risk management
    • GP-014 Feedback and complaints
    • GP-015 Clinical evaluation
    • GP-016 Traceability and identification
    • GP-017 Technical assistance service
    • GP-018 Infrastructure and facilities
    • GP-019 Non-product software validation
    • GP-020 QMS Data analysis
    • GP-021 Communications
    • GP-022 Document translation
    • GP-023 Change control management
    • GP-024 Predetermined Change Control Plan
    • GP-025 Usability and Human Factors Engineering
    • GP-026 Market-specific product requirements
    • GP-027 Corporate Governance
    • GP-028 AI Development
    • GP-029 Software Delivery and Commissioning
    • GP-030 Cyber Security Management
    • GP-031 Training Data Governance
    • GP-032 CE Mark Process (MDR)
    • GP-050 Data Protection
    • GP-051 Security violations
    • GP-052 Data Privacy Impact Assessment (DPIA)
    • GP-100 Business Continuity (BCP) and Disaster Recovery plans (DRP)
    • GP-101 Information security
    • GP-110 Esquema Nacional de Seguridad
    • GP-200 Remote Data Acquisition in Clinical Investigations
    • GP-600 Equality Planning
  • Records
  • Legit.Health Plus Version 1.1.0.0
  • Legit.Health Plus Version 1.1.0.1
  • Legit.Health version 2.1 (Legacy MDD)
  • Legit.Health US Version 1.1.0.0
  • Legit.Health Utilities
  • Licenses and accreditations
  • Applicable Standards and Regulations
  • BSI Non-Conformities
  • Pricing
  • Public tenders
  • Trainings
  • Procedures
  • GP-032 CE Mark Process (MDR)

GP-032 CE Mark Process (MDR)

Procedure flowchart​

Purpose​

This procedure defines the end-to-end process to obtain and maintain CE marking under Regulation (EU) 2017/745 (MDR). It integrates internal experience from BSI non-conformities and ensures that submissions are complete, traceable, and audit-ready before and after Notified Body (NB) assessment.

Scope​

This procedure applies to all devices that require CE marking under MDR and to all lifecycle stages relevant to conformity assessment: initial MDR certification, significant changes, surveillance and recertification, legacy-transition contexts under MDR transitional provisions (where applicable), and post-market maintenance of CE compliance.

References​

ReferenceDescription
Regulation (EU) 2017/745Medical Device Regulation (MDR)
MDR Annex IGeneral Safety and Performance Requirements (GSPR)
MDR Annex II and IIITechnical documentation and PMS documentation
MDR Annex XIVClinical evaluation and PMCF
MDCG 2020-1Clinical evaluation guidance for MDSW
MDCG 2020-5Clinical evaluation equivalence
MDCG 2020-6Sufficient clinical evidence for legacy devices
MDCG 2020-7PMCF Plan template
MDCG 2020-8PMCF Evaluation Report template
MDCG 2020-13Clinical Evaluation Assessment Report (CEAR) template
MDCG 2022-21PSUR guidance
MEDDEV 2.7/1 rev.4Clinical evaluation methodology (as applicable under MDCG 2020-6)
ISO 13485:2016QMS requirements
ISO 14971:2019Risk management
IEC 62304Software lifecycle processes
IEC 62366-1Usability engineering

Responsibilities​

JD-001​

  • Approve CE marking strategy and major submission decisions.
  • Approve final submission package prior to NB submission.

JD-003​

  • Lead regulatory strategy and conformity assessment planning.
  • Own NB submission package assembly and submission coordination.
  • Coordinate responses to NB questions and NCs.

JD-004​

  • Ensure QMS integration, document control, and record completeness.
  • Verify traceability, consistency, and archival of CE evidence.

JD-005​

  • Lead clinical strategy, CER, PMCF, and clinical evidence rationale.
  • Ensure alignment with MDR Annex XIV and MDCG clinical guidance.

JD-007​

  • Provide product technical evidence (software, cybersecurity, V&V).
  • Support closure of technical NCs.

Detailed process​

1. Define CE regulatory strategy​

  1. Confirm qualification, intended purpose, and classification.
  2. Confirm conformity assessment route and NB interaction plan.
  3. Define applicable standards and guidance baseline.

2. Build submission architecture​

  1. Structure technical documentation per MDR Annex II and III.
  2. Define traceability chain:
    • intended purpose -> claims,
    • claims -> acceptance criteria,
    • acceptance criteria -> evidence,
    • evidence -> analysis and conclusions.

3. Clinical evidence strategy and execution​

  1. Ensure CER is standalone and reviewer-readable.
  2. Ensure each claim has explicit evidence mapping and rationale.
  3. Define PMCF linked to specific identified gaps.
  4. Narrow claims before submission if evidence is insufficient.

4. Pre-submission readiness review​

Run a formal checklist for Annex I, Annex II/III, CER traceability, risk consistency, and IFU claim consistency.

5. NB submission and interaction management​

  1. Submit controlled package version.
  2. Log questions/NCs and assign owners.
  3. Close findings through evidence-backed document updates.

6. Certification and post-market maintenance​

  1. Finalize certificate scope and Declaration of Conformity.
  2. Maintain PMS/PMCF/PSUR/vigilance obligations and change control.

Lessons integrated from BSI non-conformity experience​

  1. Traceability must be explicit end-to-end.
  2. CER must be self-sufficient.
  3. Use exact MDR/MDCG language expected by reviewers.
  4. Do not rely on future PMCF to justify current evidence gaps.
  5. PMCF activities must be specific, measurable, and gap-linked.
  6. Risk and clinical evidence must remain cross-consistent.
Previous
GP-031 Training Data Governance
Next
GP-050 Data Protection
  • Procedure flowchart
  • Purpose
  • Scope
  • References
  • Responsibilities
    • JD-001
    • JD-003
    • JD-004
    • JD-005
    • JD-007
  • Detailed process
    • 1. Define CE regulatory strategy
    • 2. Build submission architecture
    • 3. Clinical evidence strategy and execution
    • 4. Pre-submission readiness review
    • 5. NB submission and interaction management
    • 6. Certification and post-market maintenance
  • Lessons integrated from BSI non-conformity experience
All the information contained in this QMS is confidential. The recipient agrees not to transmit or reproduce the information, neither by himself nor by third parties, through whichever means, without obtaining the prior written permission of Legit.Health (AI Labs Group S.L.)