ECHA's OR Pilot: How Non-EU Med Device Makers Can Prepare for 2026

With the European Chemicals Agency (ECHA) announcing a pilot project focusing on Only Representatives (ORs) and with inspections planned for 2026, non-EU manufacturers of medical device components and materials face heightened scrutiny. This initiative underscores the critical importance of selecting a compliant, effective, and strategically aligned REACH OR. A failure in OR performance can lead to supply chain disruptions, enforcement actions, and loss of EU market access, making a thorough evaluation process essential. Choosing an OR extends far beyond a simple registration transaction. It involves appointing a legal entity to fulfill complex, long-term regulatory obligations on your behalf. This requires a partner with deep technical expertise, robust operational frameworks, and a clear understanding of the legal and commercial implications. A comprehensive selection process should assess an OR’s ability to manage the full REACH lifecycle—from dossier preparation to navigating substance evaluations and managing downstream user communication—while safeguarding the manufacturer's interests through clear contractual terms. ### Key Points * **Increased Scrutiny is Coming:** The ECHA Forum's 2026 pilot project on ORs signals a move towards stricter enforcement. Non-EU manufacturers must ensure their OR can withstand detailed inspection. * **Look Beyond Basic Registration:** A qualified OR is not just a submission agent. They must be equipped to manage ongoing compliance activities, including dossier updates, substance evaluation (CoRAP), and communication within the supply chain. * **Technical Competence is Non-Negotiable:** The OR must possess verifiable expertise in chemistry, toxicology, and the specifics of the REACH regulation, particularly as it applies to substances used in complex articles like medical devices. * **Contractual Safeguards are Critical:** The OR agreement must explicitly define liability, confirm the manufacturer's ownership of data and registration numbers, and outline a clear process for service termination or transfer to avoid being locked in. * **Operational Robustness is Proof of Capability:** A prospective OR should demonstrate mature quality management systems (QMS), documented procedures (SOPs) for handling inquiries and non-compliance, and secure protocols for protecting Confidential Business Information (CBI). ## The Strategic Importance of the Only Representative in 2026 and Beyond Under Article 8 of the REACH Regulation (EC) No 1907/2006, a non-EU manufacturer can appoint an EU-based Only Representative to fulfill the obligations of importers. This centralizes the manufacturer's REACH compliance, relieving their EU customers (importers) of the burden. The OR legally steps into the shoes of the importers, taking on all responsibilities for registering substances and ensuring ongoing compliance. The upcoming ECHA enforcement project highlights a critical reality: not all ORs are created equal. National authorities will likely investigate whether ORs are merely "letterbox" companies or if they possess the technical and operational substance to genuinely manage their legal duties. For non-EU medical device manufacturers, whose products often contain specialized materials and substances, the stakes are particularly high. A compliant OR is a key partner in safeguarding market access and managing regulatory risk. ## Core Criteria for Evaluating a REACH Only Representative A robust evaluation process should be structured around three main pillars: technical competence, operational frameworks, and contractual protections. ### 1. Technical and Regulatory Competence An OR’s primary value lies in their expert knowledge. Manufacturers should rigorously assess this competence. **What to Assess:** * **Dossier Preparation and Strategy:** Does the OR have a track record of successfully preparing and submitting registration dossiers? Can they explain their strategy for data gathering, generating read-across arguments, and managing Substance Information Exchange Forum (SIEF) participation? * **Lifecycle Management Expertise:** Go beyond registration. Probe their experience with post-registration processes: * **Substance Evaluation (CoRAP):** How do they handle information requests from ECHA or Member State Competent Authorities during substance evaluation? * **Authorisation (Annex XIV):** Do they have experience with substances on the Authorisation List and the application process? * **Restriction (Annex XVII):** Can they advise on the impact of existing or proposed restrictions on substances relevant to the medical device industry? * **Downstream User Communication:** How do they manage the legal requirement to communicate information up and down the supply chain? This includes providing updated Safety Data Sheets (SDSs) and exposure scenarios to importers and downstream users. * **Team Qualifications:** Who will be managing the account? Request information on the qualifications of their staff, including toxicologists, chemists, and regulatory specialists. Do they have specific experience with polymers, alloys, or other materials common in medical devices? ### 2. Operational Frameworks and Quality Management Systems (QMS) A competent OR operates under a structured, documented system that ensures consistency, reliability, and security. **What to Look For:** * **Formal Quality System:** Does the OR operate under a recognized QMS, such as ISO 9001? While not mandatory, it demonstrates a commitment to quality and process control. * **Standard Operating Procedures (SOPs):** Ask to see a list of their SOPs. They should have documented processes for key activities, including: * Onboarding new clients and substances. * Communicating with SIEF members. * Responding to authority inquiries or inspections. * Managing and updating registration dossiers. * Handling non-compliance events. * **Confidential Business Information (CBI) Security:** How do they protect sensitive product formulation and tonnage data? Inquire about their data security protocols, server locations, access controls, and non-disclosure agreements with staff. * **Record Keeping and Traceability:** REACH requires records to be kept for at least 10 years after the last manufacturing or import date. Verify that the OR has a robust system for secure, long-term data retention and can ensure traceability of all communications and submissions. ### 3. Contractual and Legal Safeguards The OR agreement is the most important tool for defining the relationship and protecting the manufacturer's interests. Never accept a simple, one-page agreement. **Essential Contractual Provisions:** * **Clear Definition of Roles and Responsibilities:** The contract must clearly delineate the duties of the OR and the obligations of the non-EU manufacturer (e.g., providing accurate tonnage data, technical information, and timely payments). * **Data and Registration Ownership:** This is non-negotiable. The contract must explicitly state that the non-EU manufacturer is the sole owner of all technical data, study reports, and the REACH registration number itself. This ensures the assets can be transferred if the relationship ends. * **Liability and Indemnification:** While the OR is legally liable to EU authorities, the contract should specify the conditions under which the manufacturer indemnifies the OR (e.g., if the manufacturer provides false information). * **Termination and Transfer Clause:** A robust exit strategy is crucial. The contract should detail the process for terminating the agreement and transferring the OR role to another provider. This clause should specify: * Notice periods for termination. * A fixed, reasonable fee for the transfer process. * A commitment from the outgoing OR to cooperate fully with the new OR. * A clear timeline for the handover of all data, SIEF communications, and dossier access (e.g., via REACH-IT). ## A Step-by-Step Vetting Process A structured approach ensures all critical aspects are covered before making a final decision. 1. **Initial Screening and Longlisting:** Identify potential ORs through industry directories, trade associations, and referrals. Review their websites for professionalism, clarity of services, and evidence of experience in the medical device or related high-tech sectors. 2. **Request for Proposal (RFP) or Detailed Questionnaire:** Send a formal request to your shortlisted candidates. Use the criteria outlined above to build a comprehensive questionnaire. Ask for specific examples of their experience, descriptions of their quality systems, and a sample OR agreement for review. 3. **In-Depth Interviews:** Schedule calls with the technical and operational teams—not just the sales representatives. Use this time to ask detailed, scenario-based questions. For example: "Walk us through how you would handle a formal request for further information from ECHA on one of our substances." 4. **Reference Checks:** Request references from 2-3 current or former clients, preferably non-EU companies in a similar industry. Ask about the OR's responsiveness, technical expertise, proactivity, and handling of complex issues. 5. **Legal and Final Review:** Have your legal counsel review the proposed OR agreement carefully, paying close attention to the clauses on data ownership, liability, and termination. Compare the service fees against the scope of work to ensure there are no hidden costs. ## Finding and Comparing REACH Only Representative Providers The process of identifying and vetting qualified REACH Only Representatives can be time-consuming. Using a specialized directory allows non-EU manufacturers to efficiently find providers with relevant experience and compare their offerings. When evaluating options, it is essential to look for providers who can demonstrate a deep understanding of the regulatory landscape and possess the robust operational systems necessary to manage long-term compliance, especially in light of increasing enforcement. A quality directory can help streamline the initial screening process, providing access to a curated list of providers and facilitating direct requests for proposals. This enables a more focused and effective selection process, ensuring the chosen OR is a true regulatory partner. To find qualified vetted providers **[click here](https://cruxi.ai/regulatory-directories/reach_only_rep)** and request quotes for free. ## Key EU/ECHA References When discussing REACH obligations, manufacturers should refer to the official sources for the most accurate and up-to-date information. * **Regulation (EC) No 1907/2006 (The REACH Regulation):** The core legal text governing the registration, evaluation, authorisation, and restriction of chemicals in the EU. * **ECHA Guidance on registration:** Provides detailed information on the registration process, data requirements, and dossier preparation. * **ECHA Guidance for Only Representatives:** A key document outlining the specific roles, responsibilities, and legal obligations of an Only Representative under REACH. *** This article is for general educational purposes only and is not legal, medical, or regulatory advice. For device-specific questions, sponsors should consult qualified experts and consider engaging FDA via the Q-Submission program. --- *This answer was AI-assisted and reviewed for accuracy by Lo H. Khamis.*