IVDREU In Vitro Diagnostic Regulation (2017/746)

Regulation (EU) 2017/746 — the In Vitro Diagnostic Regulation — is the EU law that governs in vitro diagnostic medical devices placed on the EU market. It entered into force on 25 May 2017, applied from 26 May 2022 (one year later than originally planned, postponed by Regulation (EU) 2022/112) and replaced Directive 98/79/EC (IVDD). Like MDR, IVDR is a directly-applicable Regulation, not a Directive: the legal text is the law in every Member State without national transposition.

An in vitro diagnostic device is any reagent, calibrator, control material, kit, instrument, apparatus, equipment, software or system, used alone or in combination, intended by the manufacturer for the in vitro examination of specimens (including blood and tissue) derived from the human body for the purpose of providing information about physiological / pathological process, congenital impairment, predisposition to a medical condition, to determine safety and compatibility with potential recipients, to predict treatment response or reactions, or to define / monitor therapeutic measures (Article 2). Specimen receptacles are explicitly included. Companion diagnostics (Article 2(7)) and software intended to drive an IVD interpretation are explicitly covered.

The headline change vs IVDD is structural. IVDD operated under a 'list-based' system — only a defined annex of high-risk assays (HIV, hepatitis, blood-grouping) required Notified Body involvement; everything else self-declared CE marking. IVDR replaces that with rule-based classification (Annex VIII), four risk classes (A / B / C / D), and Notified Body involvement for everything above Class A non-sterile. The Commission's own estimate: ~80% of IVDs now need Notified Body conformity assessment vs ~20% under IVDD — an industry-wide capacity shock that drove the Regulation (EU) 2024/1860 transition extension.

IVDR Articles 10-16 mirror MDR Articles 10-16: manufacturer (Article 10) holds primary responsibility for conformity; authorised representative (Article 11) is the legal proxy for non-EU manufacturers and is jointly liable; importer (Article 13) and distributor (Article 14) carry due-diligence obligations. The Person Responsible for Regulatory Compliance (PRRC, Article 15) is mandatory for every manufacturer with equivalent qualifications to the MDR PRRC role.

Article 5(5) — the 'in-house IVD' exemption — is the substantive difference vs MDR. Health institutions in the EU may manufacture, modify and use IVDs within the same health institution without applying the full IVDR conformity-assessment route, subject to documented conditions: the institution complies with EN ISO 15189 (or equivalent); the devices are not transferred to another legal entity; documented justification that the target patient group's specific needs cannot be met, or cannot be met at the appropriate level of performance, by an equivalent CE-marked device on the market; the institution publishes a declaration, maintains documentation, performs PMS, and reports serious incidents per Article 82. MDCG 2023-1 provides operational guidance. The exemption is a major route for European reference and university hospitals — and has shaped how laboratory-developed tests (LDTs) sit under IVDR.

Annex VIII contains 7 classification rules organised by intended-use risk. Every IVD falls into Class A (lowest), B, C or D (highest). The class drives the conformity-assessment route (Annex IX / X / XI), Notified Body involvement, the depth of performance evidence required, PMS / PSUR cadence, EUDAMED visibility and, for Class D, EU Reference Laboratory verification. MDCG 2020-16 rev.2 is the operational interpretive guidance.

IVDR became fully applicable on 26 May 2022 (originally 26 May 2020; postponed by 2022/112). The original IVDR transition allowed legacy IVDD-certified devices to remain on the market until 26 May 2025. Notified Body capacity was insufficient and EUDAMED was not fully operational; Regulation (EU) 2024/1860 (the 'IVDR + EUDAMED amendment') extended the transition substantially — under conditions — and put EUDAMED's mandatory use on a phased timeline.

The transition end-dates per class under Regulation (EU) 2024/1860 (conditional on continued IVDD compliance, no significant changes, MDR-compliant QMS by specified milestone dates, formal IVDR conformity-assessment application lodged with a Notified Body by the relevant deadline, and a written agreement with the Notified Body):

The extensions are not automatic. Manufacturers must continue to comply with IVDD, have no significant changes in design or intended purpose, have an IVDR-compliant QMS in place by 26 May 2025, and meet the Notified Body application / agreement deadlines per class. Manufacturers that have not engaged a Notified Body by the relevant deadline lose the right to continue selling on the legacy IVDD certificate and must withdraw.

Annex II + Annex III specify the technical documentation contents. The structure mirrors MDR Annex II + III with IVD-specific adaptations:

• Device description + specification — including intended purpose, intended user, intended testing population, intended specimen types, the analyte / marker measured, the principle of the test, accessories, software, kit contents.
• Information to be supplied — label, IFU, packaging, training materials. For self-tests and near-patient tests, additional comprehension requirements per Annex I §20.
• Design + manufacturing information — manufacturing process flow, manufacturing sites, critical suppliers.
• GSPR matrix — Annex I requirements with applicability rationale, methods used to demonstrate conformity, references to controlled evidence documents.
• Benefit-risk + risk-management — the ISO 14971 risk-management file with companion ISO/TR 24971 guidance.
• Performance evaluation — Annex XIII Part A — the performance evaluation report (PER) integrating scientific validity, analytical performance, and clinical performance evidence.
• Verification + validation — including stability (real-time + accelerated), software (IEC 62304), usability for self-tests (IEC 62366), interferences, traceability of calibrators / control materials, manufacturing-process validation.
• Annex III — PMS plan, PMPF plan + report (default mandatory; absence requires justification), PSUR cadence per class.
• EU declaration of conformity per Article 17 + Annex IV.
• References to the QMS and to the controlled records that contain the underlying evidence.

Annex I contains 20 GSPRs in three chapters: General requirements (§1-9), Requirements regarding performance, design and manufacture (§10-19), and Requirements regarding the information supplied with the device (§20). Hot-button GSPRs for IVDs: §1 (intended purpose performance must be achieved); §3 risk management; §9 chemical, physical and biological properties; §10 infection / microbial contamination including sterilisation; §13 traceability of calibrators and control materials to higher-order reference materials or measurement procedures (ISO 17511); §16 software lifecycle including cybersecurity per MDCG 2019-16; §18 instruments and equipment used by lay persons (self-testing); §19 measurement function; §20 labelling and IFU.

Standard inspection deliverable: the GSPR matrix — a row per requirement, applicability with rationale, harmonised standard used (with year and clause), reference into the controlled document that evidences conformity. Notified Bodies sample rows during technical-documentation assessment; incomplete or unjustified applicability statements are the most common opening finding.

Annex XIII Part A formalises the performance evaluation as an integrated continuous process across three pillars:

• Scientific validity — the association of an analyte with a clinical condition or physiological state. Evidence: peer-reviewed scientific literature, expert consensus documents, proof-of-concept studies, opinions from professional / scientific bodies. The scientific-validity report demonstrates that measuring the analyte yields clinically meaningful information.
• Analytical performance — the ability of a device to correctly detect or measure a particular analyte. Evidence: analytical sensitivity, analytical specificity, accuracy (trueness + precision), linearity, measuring range, limit of detection / quantitation, interferences, cross-reactivity, traceability of calibrators (ISO 17511), stability of reagents (real-time + accelerated). The analytical-performance report integrates these studies.
• Clinical performance — the ability of a device to yield results that are correlated with a particular clinical condition or physiological state in accordance with the target population and intended user. Evidence: clinical sensitivity / specificity, predictive values, likelihood ratios, expected values / reference range studies. Clinical-performance studies under Articles 57-77 + Annex XIII Part A §2 + Annex XIV are required where the existing evidence is insufficient.

The three pillars consolidate into the Performance Evaluation Report (PER), a living document updated throughout the lifecycle and integrating Post-Market Performance Follow-up (PMPF) data per Annex XIII Part B. PER is one of the largest deliverable categories in an IVDR technical-documentation submission, and one of the most-cited NB findings — incomplete coverage of the three pillars, weak literature-search methodology, missing traceability per ISO 17511, absent or stale PMPF integration.

Articles 78-81 + Annex III formalise PMS for IVDs (mirroring MDR Articles 83-86). A PMS plan is required for every class. A PMS report (updated when necessary) is required for Class A and B. A PSUR — Periodic Safety Update Report — is required for Class C (every 2 years) and Class D (annually, submitted via EUDAMED for Notified Body / authority review).

Post-Market Performance Follow-up (PMPF) is the IVD analogue of MDR PMCF. Annex XIII Part B requires a PMPF plan that proactively collects performance data once the device is on the market. Default mandatory; absence requires explicit, NB-acceptable justification per the relevant MDCG guidance. PMPF feeds back into the PER, into the risk-management file (ISO 14971 §10) and into the PSUR.

Article 83 trend reporting — statistically significant increases in non-serious incidents or expected erroneous results require reporting and may trigger action. Article 82 vigilance — serious incidents — has the same MDR clocks: 2 days for serious public-health threat or death / unanticipated serious deterioration; 10 days for serious public-health threat (lesser); 15 days for other serious incidents. Definition of 'serious incident' for IVDs is interpreted with care — an erroneous result that leads (or might lead) to death or serious deterioration in health, or to a serious public-health threat, is reportable.

Article 24 + Annex VI Part C establish the UDI requirement for IVDs (same logic as MDR). Each device has a UDI-DI (model identifier) + UDI-PI (production identifier — lot / serial / expiry / manufacturing date). UDI is placed on the label, on higher levels of packaging, and registered in EUDAMED with the device data. Specimen receptacles, calibrators, control materials and individual reagents within multi-reagent kits each carry distinct UDIs per the IVD-specific MDCG guidance.

EUDAMED phased deployment was made law-binding by Regulation (EU) 2024/1860. Operational modules: Actor (Dec 2020), UDI/Device (live), Notified Body + Certificates (live). The Vigilance, Market Surveillance, and Clinical/Performance Studies modules become mandatory on the calendar fixed by the Commission's Implementing Acts as each module reaches operational readiness — the binding mandatory-use dates landed in 2026-2027 per Regulation (EU) 2024/1860. When fully mandatory, technical documentation, PSURs (Class C + D), PMPF reports, FSCAs and Article 83 trend reports become inspectable by competent authorities across all Member States simultaneously.

• GSPR matrix incomplete or applicability rationale missing.
• Performance Evaluation Report — incomplete coverage across scientific validity / analytical performance / clinical performance pillars; literature search methodology weak; traceability of calibrators per ISO 17511 not demonstrated.
• PMPF claimed unnecessary without acceptable justification — IVDR default expectation is PMPF for every device.
• Risk-management file static — no integration of post-market performance data per ISO 14971 §10.
• Classification per Annex VIII rules misapplied — companion diagnostic claimed Class B, self-test claimed Class B without lay-user comprehension evidence.
• Stability evidence — real-time stability not yet sufficient to support claimed shelf-life; accelerated stability alone insufficient.
• Critical-supplier list incomplete or critical suppliers not audited.
• Vigilance — serious-incident reporting clock missed; 'erroneous result' definition applied too narrowly.
• Software classification per Rule 11-equivalent IVD logic wrong; cybersecurity evidence per MDCG 2019-16 absent for connected devices.
• UDI placement on calibrator / control / individual reagent components missing.
• EUDAMED registrations not maintained for new lot specifications, variants or significant changes.
• PSUR cadence wrong for class; Class D PSUR not submitted via EUDAMED.
• Article 5(5) in-house exemption claimed without ISO 15189 evidence or without the documented justification of inadequacy of CE-marked alternatives.
• Self-test / lay-user IVD without IEC 62366 usability evidence covering label / IFU comprehension by representative lay users.
• Significant change notifications to Notified Body missing for assay reformulation / specimen type addition / measuring-range change.
• PRRC qualification evidence missing or PRRC continuity gap.

• GSPR matrix completeness across portfolio.
• PER currency vs required update cadence per class.
• PMS plan + report on-time submission rate.
• PMPF data acquisition vs PMPF plan milestones.
• Vigilance reporting on-time rate (2 / 10 / 15-day) across the IVD portfolio.
• Article 83 trend signal-detection cycle time.
• Significant-change notifications to Notified Body — open vs closed within target.
• Class D EURL coordination — lot-test cycle time + lot-pass rate.
• Critical supplier audit coverage + frequency.
• UDI completeness across reagents / calibrators / controls / kits.
• EUDAMED registration completeness per device + certificate + FSCA.
• Notified Body finding rate + time-to-closure.

V5 Ultimate treats IVDR as a first-class compliance overlay on the discrete-industry QMS for IVD manufacturers (and on the process profile for reagent / consumables-led operations). Every device record carries its IVDR classification (Annex VIII rule + applicability rationale + intended purpose), the conformity-assessment route, the relevant Notified Body and (for Class D) the designated EURL. The GSPR matrix is a controlled workspace — every applicable GSPR is a live row, every evidence reference is a link, and incomplete rows are flagged before the technical documentation can be locked for Notified Body submission.

The Performance Evaluation Report is structured against the Annex XIII three-pillar model — scientific validity, analytical performance, clinical performance — with the literature search methodology, traceability evidence per ISO 17511, stability data (real-time + accelerated) and clinical-performance studies linked to the controlled documents. PMPF plans are scheduled with milestone tracking and the data-acquisition cadence visible against plan; the PER auto-rolls in PMPF data per Annex XIII Part B.

PMS plans, PSUR cadence and vigilance clocks are enforced per class with PRRC routing and EUDAMED submission packages. The Article 5(5) in-house exemption is a distinct workspace with the ISO 15189 evidence, the documented inadequacy-of-alternatives justification, the institutional declaration and the PMS / serious-incident reporting obligations tracked separately from the commercial-CE-mark path.

Class D coordination with the EU Reference Laboratory is modelled explicitly — designated EURL per device, lot-by-lot test routing where required, performance-verification submissions, EURL feedback into the PER. Significant-change notifications to the Notified Body are a structured workflow with the Annex VIII / VII classification-impact assessment built in. Notified Body findings are logged, mapped to CAPAs, tracked to closure, and surfaced in the next management review.