CE Marking

CE marking — Conformité Européenne — is the visible symbol affixed to a product to signal that the manufacturer (or, for non-EU manufacturers, the authorised representative) has carried out the conformity-assessment procedure(s) required by all EU harmonisation legislation applicable to that product, has drawn up an EU declaration of conformity, and accepts legal responsibility for the product's compliance. It is the manufacturer's own declaration — backed, for most regulated product categories, by a Notified Body certificate when the applicable conformity-assessment module requires third-party involvement.

CE marking is not approval, not a quality mark, and not a safety endorsement by the European Union. It is a market-access marking under the New Legislative Framework (Regulation (EC) 765/2008 and Decision 768/2008/EC) that permits the product to be placed on the market and to circulate freely in the European Economic Area (EU 27 + Iceland, Liechtenstein, Norway). Turkey and Switzerland have separate arrangements; the United Kingdom now operates the UKCA mark (with CE recognition continuing under successive extensions — the current Government position extends indefinite CE recognition for most categories including medical devices).

CE marking is product-category-specific. The same product may be subject to multiple directives or regulations (e.g. a software-controlled connected medical device — MDR + Radio Equipment Directive 2014/53/EU + RoHS Directive 2011/65/EU + cybersecurity provisions under the Cyber Resilience Act once that applies). The CE mark is affixed once but the manufacturer must satisfy all applicable acts. The EU Declaration of Conformity must list every applicable act and the conformity-assessment route used for each.

Only products covered by EU legislation requiring CE marking must (and may) carry the mark. The principal acts are:

• Medical devices — MDR (EU) 2017/745 and IVDR (EU) 2017/746.
• Machinery — Machinery Regulation (EU) 2023/1230 (applies 14 Jan 2027, replacing Directive 2006/42/EC).
• Low-voltage equipment — Low Voltage Directive 2014/35/EU.
• Electromagnetic compatibility — EMC Directive 2014/30/EU.
• Radio equipment — Radio Equipment Directive 2014/53/EU (with cybersecurity provisions under Delegated Regulation (EU) 2022/30 from 1 Aug 2025).
• Personal Protective Equipment — PPE Regulation (EU) 2016/425.
• Toys — Toy Safety Directive 2009/48/EC (under revision to a Regulation).
• Construction products — Construction Products Regulation (EU) No 305/2011 (under revision).
• Pressure equipment — PED 2014/68/EU.
• Measuring instruments — MID Directive 2014/32/EU.
• Cyber resilience — Cyber Resilience Act (EU) 2024/2847 (applies from late 2027 to products with digital elements).
• AI systems — AI Act (EU) 2024/1689 (CE marking for high-risk AI systems from 2 Aug 2026 and the rest of the timeline through 2027).

Products not covered by any CE-requiring legislation must not carry the CE mark — affixing it on a non-in-scope product is itself a market-surveillance violation under Regulation (EU) 2019/1020. The default safety regime for consumer products not covered by sector-specific legislation is the General Product Safety Regulation (EU) 2023/988 (GPSR), which applies from 13 December 2024 and replaced the GPSD; GPSR does not require CE marking but does require defined economic-operator obligations, traceability and post-market monitoring.

Decision 768/2008/EC defines a horizontal catalogue of conformity-assessment modules (A through H1) that sector legislation references. Each sector picks the modules applicable for each risk class; the manufacturer chooses among the available modules within the constraints set by the act.

MDR and IVDR do not use module names directly but the annex-based routes (Annex IX, X, XI) are derivatives of module-H, module-B+D, and module-B+F respectively.

For medical devices under MDR + IVDR the CE-marking conformity assessment depends on risk class. The Annex VIII classification rules drive the route (Annex IX = full QMS, Annex X = type-examination, Annex XI = production-quality-assurance), the Notified Body involvement, the technical-documentation depth, the clinical / performance evidence required, and the PMS / PSUR cadence. The economic-operator obligations (Articles 10-16) — manufacturer, authorised representative, importer, distributor — and the PRRC requirement (Article 15) apply to every CE-marked medical device, irrespective of class.

Even Class I medical devices (the only class that may self-declare without a Notified Body for non-sterile / non-measuring / non-reusable-surgical-instrument variants) must have a complete technical documentation file per Annex II + III, must register the manufacturer + device in EUDAMED, must operate a quality management system (ISO 13485 is the recognised standard), must conduct post-market surveillance with a PMS plan, and must maintain vigilance reporting per Article 87. MDCG 2019-15 is the operational guidance specifically for Class I and is frequently misunderstood — Class I is not 'CE marking lite'.

Sterile Class I, Class I with a measuring function, and Class I reusable surgical instruments all require Notified Body involvement for the relevant aspect (sterility, metrology, reprocessing instructions). The CE mark on such a product is followed by the 4-digit identification number of the Notified Body.

1. Classification under the applicable act(s) — risk class, conformity-assessment route(s), Notified Body involvement requirement.
2. Quality management system — sized to the risk class. For medical devices, ISO 13485 is the recognised standard. For other categories, ISO 9001 is the typical baseline.
3. Technical file / technical documentation — physical or electronic, structured per the relevant annex (MDR Annex II + III; LVD / EMC analogues; etc.).
4. Harmonised standards conformity — applying harmonised standards listed in the Official Journal under the applicable act gives a presumption of conformity; the conformity must be evidenced through testing or design analysis.
5. Risk management — for medical devices, ISO 14971. For machinery, EN ISO 12100. For PPE, the relevant EN standard. The risk-management file is part of the technical documentation.
6. Performance / clinical evidence — for medical devices, clinical evaluation report (MDR Article 61 + Annex XIV) or performance evaluation report (IVDR Annex XIII). For other categories, performance / safety testing per the applicable harmonised standards.
7. Labelling — CE mark, manufacturer identification, authorised representative identification (for non-EU manufacturers), UDI (medical devices), warnings / IFU / language localisation per Member State requirements.
8. Notified Body involvement — for any module above self-declaration, a Notified Body designated for the relevant act + scope (NANDO-listed) issues the relevant certificate.
9. EU Declaration of Conformity — the legal instrument that ties product → applicable acts → conformity-assessment route → harmonised standards → NB certificate(s) → manufacturer signature.
10. Registration in the EU database — EUDAMED (medical devices), Safety Gate / SafetyBusiness Gateway (consumer products), etc.
11. Authorised representative — for non-EU manufacturers, an EU-established authorised representative with a written mandate (MDR / IVDR Article 11 + analogues in other sector legislation).
12. Post-market obligations — PMS / vigilance / FSCA / PSUR for medical devices; market-surveillance cooperation per Regulation (EU) 2019/1020 for all CE-marked products.

The CE mark is defined in Annex II of Regulation (EC) 765/2008. It consists of the letters 'CE' in the prescribed graphical form with defined proportions (preserving relative dimensions when scaled). Minimum height 5 mm — unless the act specifies otherwise (some product categories allow smaller marks for very small products, e.g. PPE Article 17 allows a minimum 5 mm or proportional reduction when affixed directly to small PPE).

Placement — on the product itself, visible, legible, indelible. Where this is not possible due to the nature of the product, on the packaging and accompanying documents. The CE mark is followed by the 4-digit identification number of the Notified Body involved in the production-phase conformity assessment, when applicable. Where the conformity-assessment involvement is design-phase only (e.g. EU type-examination), the NB number is not affixed alongside the CE mark on the product.

The CE mark may be accompanied by a pictogram or any other mark indicating a special risk or use, but no other mark / sign / inscription may be affixed that is likely to mislead third parties as to the meaning or graphical form of the CE marking. Additional national marks or third-party certification marks are permitted only where they cannot be confused with the CE mark and do not impair its visibility / legibility.

The EU Declaration of Conformity (EU DoC) is the controlling legal instrument. Module A of Decision 768/2008 + the sector-specific annexes (e.g. MDR Annex IV) specify the minimum contents:

1. Unique identification of the product — model, type, batch / serial number where appropriate, UDI for medical devices.
2. Name and address of the manufacturer + authorised representative (for non-EU manufacturers).
3. A statement that the DoC is issued under the sole responsibility of the manufacturer.
4. Object of the declaration — product identification sufficient to permit traceability; may include an image.
5. Reference to the relevant EU harmonisation legislation under which the DoC is issued — every applicable act.
6. References to the relevant harmonised standards used or to the other technical specifications relied upon. Standards must be cited with year and (where relevant) clause.
7. Where applicable, the Notified Body — name, identification number, conformity-assessment procedure performed, certificate(s) issued.
8. Any additional information required by the specific act.
9. Place + date of issue, signature, name and function of the signatory.

The DoC must be kept for at least 10 years after the last unit is placed on the market (15 years for implantable devices under MDR Article 10(8)). It must be made available to market surveillance authorities on request and may need to accompany each unit (for some PPE, machinery, etc.). The DoC may be in any official EU language; market surveillance authorities may request a translation into the language of the Member State where the product is placed on the market.

• Applying the CE mark to a product not covered by any CE-requiring legislation (e.g. furniture, cosmetics, textiles other than PPE) — itself a violation of Regulation (EU) 2019/1020.
• Missing or wrong Notified Body number alongside the CE mark — most common when production-phase NB involvement is required but the design-phase NB number is incorrectly used.
• Missing harmonised-standards citation in the DoC, or citing standards with wrong year / withdrawn version.
• DoC missing the authorised representative information for non-EU manufacturers.
• Technical documentation incomplete — risk-management file not integrated, clinical / performance evaluation missing, GSPR matrix incomplete.
• Conformity-assessment route mis-selected — module D used where Annex IX full QMS was required; Class I self-declaration claimed for a device that has a measuring function or is sterile.
• Significant change implemented post-CE without notifying the Notified Body per MDCG 2020-3 / 2022-14 (or analogous sector guidance) — invalidates the certificate.
• Confusion with the China Export mark (a misleading lookalike with different letter spacing) — not a recognised mark and not compliant.
• Multiple acts applicable but only one cited in the DoC (e.g. a connected radio device cites RED but omits LVD, EMC, RoHS).
• Importer or distributor obligations under Articles 13-14 MDR / IVDR (and the Regulation (EU) 2019/1020 analogues for other acts) not implemented — importer details missing from labelling, traceability records missing.
• Authorised representative mandate not written or scope inadequate vs Article 11 MDR / IVDR.
• PSUR / PMS reports not generated, vigilance reporting clocks missed — invalidates the basis on which the CE mark was issued.
• EUDAMED registrations not maintained for new variants / significant changes / FSCAs.

Affixing the CE mark is not the end of the conformity-assessment obligation. The manufacturer must:

• Operate the QMS continuously and maintain Notified Body surveillance audits (typically annual for module D / E / H, with surveillance findings tied to certificate maintenance).
• Notify the Notified Body of any significant change to the device, the QMS, or the manufacturing process per MDCG 2020-3 / 2022-14 or sector analogue. Implementing a significant change without NB notification invalidates the certificate.
• Maintain the technical documentation as a living file — design changes, supplier changes, manufacturing-process changes, clinical / performance updates, post-market data integrated.
• Conduct post-market surveillance per the act (MDR Articles 83-86 / IVDR 78-81 for medical devices; GPSR Article 9 + 19 for general consumer products; act-specific provisions for others).
• Update the EU Declaration of Conformity when applicable standards are revised, when conformity-assessment routes change, when the product configuration changes, or when economic-operator details change.
• Re-register or maintain registrations in EUDAMED / Safety Gate / sector databases.
• Cooperate with market-surveillance authority requests and notify FSCAs (medical devices) or recalls / withdrawals (other categories) per the applicable act.

Notified Body certificates have validity periods — typically 5 years for MDR / IVDR with surveillance audits annually. Recertification requires a substantive re-review; the lead time to recertification (typically 12-18 months) must be built into the QMS calendar.

• Conformity-assessment route correctly selected per product portfolio — % audited.
• Harmonised-standards register currency vs OJ — % standards on current revision.
• Technical documentation completeness score per product (GSPR matrix coverage, evidence link rate).
• Notified Body surveillance audit findings — open / closed / overdue.
• Significant-change notifications to NB — submitted / pending NB acceptance / implemented post-acceptance.
• DoC currency — % DoCs with valid signatures + current standards + correct economic-operator details.
• EUDAMED registration completeness per device + UDI-DI + certificate.
• PMS / PSUR cadence on-time submission rate.
• Vigilance / FSCA reporting clock adherence (2 / 10 / 15-day for medical devices).
• Authorised representative mandate currency for non-EU manufacturers.
• Importer / distributor due-diligence records completeness.
• Market-surveillance authority interactions — request closure cycle time.

V5 Ultimate treats CE marking as a structured, lifecycle workspace anchored on the applicable EU acts for each product family. The product master carries the applicable acts (MDR / IVDR / MD / LVD / EMC / RED / PPE / RoHS), the classification rationale, the conformity-assessment route, the Notified Body (NANDO entry + scope) and the certificate validity timeline. Harmonised standards are tracked in a register with OJ publication dates, withdrawal dates, transition periods and applicability per product — so when a harmonised standard is updated in the OJ, every affected DoC is flagged for revision before the transition deadline closes.

The technical documentation workspace is structured against MDR Annex II + III (medical devices) or the sector-specific annex (other categories). The GSPR / essential-requirements matrix is a controlled live workspace — every applicable requirement is a row, every evidence reference is a link, incomplete rows are flagged before the DoC can be signed. The risk-management file (ISO 14971 / EN ISO 12100 / sector-specific) is integrated and version-controlled. Clinical / performance evaluation deliverables are scheduled with PMCF / PMPF data acquisition tracked against plan.

EU Declarations of Conformity are generated from the underlying conformity-assessment data — applicable acts, harmonised standards (with year + clause), NB certificates, economic-operator details, signatory routing for PRRC + authorised representative. Significant-change assessments are routed through the MDCG 2020-3 / 2022-14 decision tree (or sector analogue) with NB notification packages auto-prepared. EUDAMED submissions are batched per device and per change; Notified Body surveillance findings are CAPA-routed, tracked to closure, and visible in management review. Post-market data — PMS, PSUR, vigilance, FSCA — feed back into the technical documentation so the CE-marked product's evidence dossier remains a living record, not a launch artefact.