What a medical device regulatory assessment is

A medical device regulatory assessment answers four questions before a team commits time and money: Is the product a medical device? What class is it in each target market? Which pathway leads to market? And is the company’s documentation and quality system ready for that pathway? Done early, it shapes design, testing and clinical plans. Done late, it often means rework.

The assessment has become more demanding in 2026. In the US, FDA’s QMSR now requires a quality system that complies with ISO 13485 (eCFR, 21 CFR 820.10). In the EU, EUDAMED registration became mandatory on May 28, 2026 (HPRA), and a proposal to simplify the MDR is moving through the legislative process (European Commission).

The US: classification and premarket pathways

FDA assigns device types “to one of three regulatory classes based on the level of control necessary,” where “Class I includes devices with the lowest risk and Class III includes those with the greatest risk” (FDA). Classification starts by finding the matching classification regulation and product code.

PathwayWhen it appliesBasis
ExemptMany class I and some class II devicesGeneral controls (and special controls for class II)
510(k)“If your device is classified as Class I or II, and if it is not exempt, a 510k will be required”Substantial equivalence to a legally marketed predicate
De NovoNovel low-to-moderate risk devices without a predicateClassifies the new device type; general or special controls provide assurance
PMA”For Class III devices, a premarket approval application (PMA) will be required”Scientific review of safety and effectiveness

Sources: FDA, Classify Your Medical Device; FDA, 510(k); FDA, De Novo; FDA, PMA.

Review timelines matter for planning. Under MDUFA V goals, FDA commits to “a MDUFA decision for 95% of 510(k) submissions within 90 FDA Days” and “within 150 FDA Days for 70% of De Novo requests” (FDA MDUFA V commitment letter). FDA days exclude time waiting for the sponsor’s answers, so real calendar time is usually longer.

The EU: classification and conformity assessment

Under the MDR, “Devices shall be divided into classes I, IIa, IIb and III, taking into account the intended purpose of the devices and their inherent risks,” following the rules in Annex VIII (MDR Article 51, via Advisera). MDCG 2021-24 rev.1, updated in April 2026, gives classification guidance, and MDCG 2019-11 rev.1 covers software (European Commission MDCG guidance). Most devices above class I need a notified body.

US vs EU at a glance

TopicUnited States (FDA)European Union (MDR)
Risk classesI, II, IIII, IIa, IIb, III
How class is setClassification regulations and product codesAnnex VIII rules applied by the manufacturer
Market accessExemption, 510(k), De Novo or PMA decided by FDAConformity assessment, usually by a notified body, then CE marking
Clinical evidenceDepends on pathway; often bench data for 510(k)Clinical evaluation required for all classes, scaled to risk
QMSQMSR (ISO 13485 incorporated)Article 10 QMS, typically ISO 13485-based
DatabaseFDA registration and listing, GUDIDEUDAMED
Local presenceUS agent for foreign firmsEU authorised representative for non-EU firms

The same device can land in different classes. Software and AI-enabled devices are the most common example, so assess each market separately.

How to run a regulatory assessment, step by step

  1. Write the intended use and indications precisely. Everything else depends on this wording.
  2. Confirm device status in each market, including whether software functions qualify as a device.
  3. Classify using FDA product codes and MDR Annex VIII rules, and record the rationale.
  4. Choose the pathway: for the US, search for predicates and weigh 510(k) against De Novo; for the EU, select the conformity assessment route and notified body.
  5. Map evidence needs: bench testing, standards, software, cybersecurity, biocompatibility, usability and clinical data.
  6. Assess QMS readiness against ISO 13485 and QMSR or MDR requirements.
  7. Gap-assess existing documentation against the requirements of the chosen pathways.
  8. Build the plan and timeline, including FDA pre-submission meetings and notified body capacity.
  9. Revisit at design changes and when rules change, such as the MDR simplification proposal.

Regulatory assessment checklist

  • Intended use and indications documented and frozen
  • Device status confirmed for each target market
  • FDA classification and product code identified with rationale
  • MDR class and rule identified with rationale
  • US pathway selected (exempt, 510(k), De Novo or PMA) with predicate analysis
  • EU conformity route and notified body identified
  • Evidence plan covers testing, software, cybersecurity and clinical needs
  • QMS readiness assessed against ISO 13485, QMSR and MDR
  • Existing documents gap-assessed against pathway requirements
  • Timeline includes FDA review goals and notified body queues

Turn the assessment into evidence

A regulatory assessment is only as good as the documents behind it. AskDona checks design documents, procedures and draft submissions against FDA, ISO 13485 and EU MDR requirements or your own checklist, flags gaps and inconsistencies, and cites the passage behind every finding.

Run a sample regulatory document assessment on one document. AskDona shows the evidence; your regulatory team decides.

FAQ

What is a medical device regulatory assessment? An evaluation of a product’s device status, classification, market pathway and documentation readiness in each target market.

How do I know if I need a 510(k)? If the device is class I or II and not exempt, FDA requires a 510(k) (FDA).

What if there is no predicate device? The De Novo pathway can classify novel low-to-moderate risk devices (FDA).

Is the FDA class the same as the EU class? Not necessarily; the systems use different classes and rules.

When should a regulatory assessment happen? As early as the intended use is defined, and again whenever design or regulations change.

References

All pages opened and checked by October 13, 2026.

SourceTypeDateUsed for
eCFR: 21 CFR 820RegulationCurrentQMSR
HPRA: EUDAMEDCompetent authorityMar 23, 2026EUDAMED date
European Commission: MDR overviewRegulator2026Simplification proposal
FDA: Classify your medical deviceRegulatorAug 26, 2026Classes, pathways
FDA: 510(k)RegulatorAug 22, 2024510(k)
FDA: De NovoRegulatorSep 30, 2025De Novo
FDA: PMARegulatorMay 16, 2019PMA
FDA: MDUFA V commitment letterRegulator2022Review goals
Advisera: MDR Article 51Regulation text reproductionn.d.EU classes
European Commission: MDCG guidanceRegulator2026Classification guidance