EU Authorised Representative: Role & Responsibilities Under MDR

## EU Authorised Representative: A Deep Dive into Roles, Responsibilities, and Strategic Selection Under MDR For non-EU medical device manufacturers, placing a device on the European market requires appointing a European Authorised Representative (AR). Under the EU Medical Device Regulation (MDR 2017/745), this role has been transformed from a simple administrative contact into a crucial regulatory partner with significant legal and financial liability. Understanding the AR's expanded responsibilities and selecting a qualified, competent partner is one of the most critical strategic decisions a manufacturer will make for ensuring compliant and successful market access in the European Union. The MDR, in Article 11, explicitly states that the Authorised Representative is "jointly and severally liable" with the manufacturer for defective devices. This provision fundamentally elevates the AR's risk and responsibilities, compelling them to perform active verification and oversight of the manufacturer's activities. A manufacturer can no longer view the AR as a passive mailbox; they must be treated as an integral extension of the quality and regulatory team, with the expertise to scrutinize technical documentation and engage effectively with EU Competent Authorities. --- ### Key Points * **Legal Liability is Shared:** Under MDR Article 11, the AR is legally liable alongside the non-EU manufacturer for defective devices placed on the EU market. This makes the selection process and mandate agreement critical for risk management. * **Active Verification Role:** The AR is no longer a passive administrative contact. They must actively verify that the manufacturer has drawn up the necessary technical documentation, a Declaration of Conformity (DoC), and has a compliant quality management system. * **The Mandate is Everything:** The written mandate between the manufacturer and the AR is a legally binding contract that must, at a minimum, detail all tasks laid out in MDR Article 11(3). A vague agreement is a significant compliance risk. * **Gateway to EU Authorities:** The AR serves as the primary point of contact for all EU Competent Authorities and is responsible for cooperating with them on any matter of compliance, including providing technical documentation and samples upon request. * **Vigilance and PMS Cooperation:** The AR must be immediately informed by the manufacturer of any vigilance events, complaints, or non-conforming devices and plays a key role in coordinating with authorities during Field Safety Corrective Actions (FSCAs). * **Technical Expertise is Non-Negotiable:** A high-quality AR must have access to personnel with sufficient technical and regulatory expertise to understand the manufacturer's device technology, risk class, and intended use. This is essential for fulfilling their verification duties. * **EUDAMED Responsibilities:** The AR plays a role in verifying the accuracy of information uploaded to the EUDAMED database by the manufacturer, further integrating them into the regulatory lifecycle of the device. --- ### ## Understanding the AR's Core Responsibilities Under MDR The shift from the previous Medical Devices Directive (MDD) to the current Medical Device Regulation (MDR) imposed a much stricter framework on all economic operators, with the AR role seeing one of the most significant expansions. Article 11(3) of the MDR outlines the minimum tasks that must be included in the mandate. A compliant AR must perform the following: 1. **Verify Manufacturer's Core Compliance Documents:** The AR must verify that the manufacturer has correctly drawn up the EU Declaration of Conformity and the technical documentation for the device. They must also ensure that an appropriate conformity assessment procedure has been carried out. 2. **Maintain Access to Documentation:** The AR must keep a copy of the technical documentation, the Declaration of Conformity, and any relevant certificates (e.g., from a Notified Body) readily available for inspection by EU Competent Authorities for the required retention period (at least 10 years after the last device was placed on the market, or 15 for implantable devices). 3. **Cooperate with Competent Authorities:** The AR must fully cooperate with any request from a Competent Authority. This includes providing all necessary documentation to demonstrate a device's conformity and providing device samples if requested. 4. **Manage EUDAMED Registration:** While the manufacturer is responsible for uploading information to EUDAMED, the AR must verify the accuracy of key data elements before they are made public. 5. **Facilitate Vigilance and Complaint Handling:** The AR must be immediately informed by the manufacturer of any complaints or reports from healthcare professionals, patients, or users about suspected incidents related to a device. They serve as a critical communication link in the EU vigilance system. 6. **Terminate the Mandate for Non-Compliance:** If the AR believes the manufacturer is acting contrary to its obligations under the MDR, the AR is legally required to terminate the mandate and inform the relevant Competent Authority and Notified Body. ### ## A Framework for Selecting and Qualifying an Authorised Representative Choosing an AR is a long-term decision that requires thorough due diligence. A poor choice can lead to market access delays, compliance gaps, and significant legal exposure. Manufacturers should use a structured evaluation process to assess potential partners. **Key Evaluation Criteria Checklist:** * **Regulatory Expertise and Experience:** * **MDR-Specific Knowledge:** Does the AR have demonstrable, hands-on experience with the MDR, or is their experience primarily from the old MDD/IVDD era? Ask for case studies or references. * **Device-Specific Competence:** Do they have personnel with expertise relevant to your device's technology and risk class? An AR for a simple Class I reusable instrument requires a different skillset than one for a Class III active implantable or a complex AI-based SaMD. * **PRRC Availability:** Does the AR have a designated Person Responsible for Regulatory Compliance (PRRC) as required by MDR Article 15, and what are their qualifications? * **Robust Quality Management System (QMS):** * **Certification:** Is the AR certified to a relevant quality standard, such as ISO 13485? This demonstrates a commitment to structured, documented processes. * **Documented Procedures:** Request to see their standard operating procedures (SOPs) for key AR tasks, such as technical documentation review, vigilance reporting, and communication with authorities. A mature AR will have these readily available. * **Vigilance and Post-Market Surveillance (PMS) Capabilities:** * **Clear Processes:** What is their documented process for handling incident reports and communicating with manufacturers and Competent Authorities within the strict MDR timelines? * **Crisis Management:** How would they support a manufacturer in the event of a recall or Field Safety Corrective Action (FSCA)? Do they have experience managing such events? * **Liability and Insurance:** * **Sufficient Coverage:** Given the joint liability clause, does the AR carry adequate product liability insurance? Request to see a certificate of insurance. * **Contractual Clarity:** How does the mandate agreement address liability, indemnification, and the process for managing legal claims? * **Communication and Transparency:** * **Dedicated Point of Contact:** Will you have a dedicated account manager or regulatory specialist? * **Communication Protocols:** What are the standard communication channels and expected response times? Do they offer a client portal for document exchange and status updates? * **Business Stability and Scalability:** * **Track Record:** How long has the company been in business? A stable, long-standing AR is less likely to cease operations, which would force a disruptive and costly transition. * **Portfolio Management:** Can they support your company's growth, including an expanding product portfolio or entry into new EU member states? ### ## Scenario 1: Selecting an AR for an AI-Enabled Software as a Medical Device (SaMD) A non-EU manufacturer of a Class IIb diagnostic SaMD that uses a machine learning algorithm needs an AR with highly specialized expertise. * **What the AR Must Scrutinize:** The AR must be able to competently review technical documentation related to the software lifecycle (IEC 62304), cybersecurity (MDCG 2019-16), IT infrastructure, data privacy (GDPR), and the clinical evaluation of an adaptive algorithm. A generic understanding of medical devices is insufficient. * **Critical Performance Data to Assess:** The AR should have processes to verify the manufacturer's clinical evaluation report (CER), usability engineering file (IEC 62366), and the post-market clinical follow-up (PMCF) plan, which is critical for an evolving AI/ML device. * **Key Questions for the AR:** * "Please describe your team's experience with SaMD and AI/ML devices under the MDR." * "What is your documented procedure for reviewing a manufacturer's software verification and validation documentation?" * "How do you stay current with evolving EU guidance on cybersecurity and AI in medical devices?" ### ## Scenario 2: Selecting an AR for a Novel Class IIb Orthopedic Implant A manufacturer is introducing an orthopedic implant with a novel surface technology that has limited long-term clinical data. * **What the AR Must Scrutinize:** The AR's team must understand biocompatibility (ISO 10993 series), sterilization, risk management for implantable devices (ISO 14971), and the heightened clinical evidence requirements under the MDR. They need to understand the device's interaction with the human body. * **Critical Performance Data to Assess:** The AR must be capable of reviewing the manufacturer’s strategy for generating sufficient clinical evidence, including the CER and the PMCF plan. They must also understand the documentation related to material characterization and preclinical testing. * **Key Questions for the AR:** * "What is your experience with implantable devices in the orthopedic space?" * "Describe your process for reviewing a CER for a high-risk device with novel technology." * "How have you previously managed communications with a Competent Authority regarding an implantable device?" ### ## Strategic Considerations: The Mandate and Authority Communication The mandate agreement is the legal foundation of the manufacturer-AR relationship. It must be meticulously drafted to ensure full compliance and clear expectations. This agreement should go beyond the minimum requirements of Article 11 and detail specific procedures, timelines, and responsibilities for all shared regulatory activities. For non-EU manufacturers accustomed to the US system, it is important to note the AR role is significantly more involved than that of a U.S. Agent. Under 21 CFR, the U.S. Agent for a foreign establishment primarily serves as a communication link with the FDA. They do not share the same legal liability for the device itself. This distinction underscores why due diligence and a comprehensive mandate are so critical in the EU; the AR is a true regulatory partner, not just a correspondent. Clear protocols for communication with EU Competent Authorities should be established in the mandate, ensuring the AR acts as a well-informed and effective representative. ### ## Finding and Comparing Providers Selecting the right Authorised Representative requires a systematic approach. Manufacturers should identify a shortlist of potential providers through industry directories, recommendations from Notified Bodies or regulatory consultants, and professional networks. When comparing options, look beyond the price tag. Evaluate the depth of their regulatory team, the robustness of their QMS, and their experience with your specific device type. Request a copy of their standard mandate agreement and have it reviewed by legal counsel. Ask for client references, particularly from companies with similar products. A slightly higher fee for a highly competent, well-insured, and experienced AR is a strategic investment in compliance and risk mitigation. To find qualified vetted providers [click here](https://cruxi.ai/regulatory-directories/vat_fiscal_rep) and request quotes for free. ### ## Key Regulatory References When navigating AR requirements, manufacturers should refer to the primary source documents and official guidance. * **EU Regulation 2017/745 (the Medical Device Regulation - MDR):** Specifically Article 11 (Authorised Representative) and Article 15 (Person Responsible for Regulatory Compliance). * **MDCG 2022-16:** Guidance on Authorised Representatives Regulation (EU) 2017/745 and Regulation (EU) 2017/746. * **The "Blue Guide" on the implementation of EU products rules:** Provides general guidance on the roles and responsibilities of different economic operators in the EU. * **MDCG Guidance Documents:** Various documents related to EUDAMED, vigilance, and post-market surveillance provide context for the AR's operational responsibilities. *** *This article is for general educational purposes only and is not legal, medical, or regulatory advice. For device-specific questions, sponsors should consult qualified experts and consider engaging FDA via the Q-Submission program.* --- *This answer was AI-assisted and reviewed for accuracy by Lo H. Khamis.*