EU MDR & AR Liability: Structuring Your Manufacturer Agreement

## EU MDR & Authorised Representative Liability: A Guide to Structuring Your Mandate Agreement Under the EU Medical Device Regulation (MDR), the relationship between a non-EU manufacturer and their EU Authorised Representative (AR) has evolved from a simple administrative function to a deep-seated regulatory partnership. The MDR establishes significant shared liability, making the AR jointly and severally liable for defective devices placed on the EU market. This shift means that selecting an AR is no longer a simple box-checking exercise; it is a critical strategic decision that requires rigorous due diligence and a meticulously structured written mandate. For manufacturers of higher-risk or novel technologies, such as AI-enabled Software as a Medical Device (SaMD) or drug-device combination products, the stakes are even higher. A robust AR partnership is essential for navigating complex post-market obligations and ensuring long-term market access. This article provides a framework for conducting thorough AR due diligence and structuring a mandate agreement that protects both parties while ensuring full compliance with Regulation (EU) 2017/745 (MDR). ### Key Points * **Shared Liability is a Core MDR Principle:** The MDR explicitly states that the Authorised Representative is legally liable for defective devices on par with the manufacturer. This makes the AR an active stakeholder in the device's compliance. * **Due Diligence Must Go Beyond the Basics:** Verifying an EU address and registration is insufficient. Manufacturers must conduct a deep audit of a potential AR’s Quality Management System (QMS), technical competencies, and documented procedures. * **The Mandate is a Legally Binding Contract:** The written mandate, required under Article 11 of the MDR, must precisely delineate all responsibilities, including vigilance reporting, EUDAMED management, and communication with Competent Authorities. * **Technical Expertise is Non-Negotiable for Complex Devices:** For innovative technologies, the AR must possess or have access to sufficient technical and regulatory expertise to understand the device's risks and effectively represent the manufacturer to regulatory bodies. * **An AR's QMS Reflects Their Competence:** A mature AR will have a robust QMS (often certified to ISO 13485) with clear, documented procedures for handling their MDR obligations, from complaint intake to coordinating Field Safety Corrective Actions (FSCAs). * **Future-Proofing is Essential:** The agreement should be structured to accommodate evolving regulatory interpretations and new guidance from the Medical Device Coordination Group (MDCG), ensuring the partnership remains compliant for the device's entire lifecycle. ## A Framework for Comprehensive AR Due Diligence A manufacturer’s due diligence process should be as rigorous as an internal audit. It is a critical risk-mitigation activity designed to verify that a potential AR has the systems, expertise, and resources to fulfill their significant responsibilities under the MDR. ### Auditing the Authorised Representative's Quality Management System (QMS) The AR’s QMS is the foundation of their ability to perform their duties. A manufacturer should request objective evidence that the AR has robust, documented procedures for all mandated tasks. **Key Areas to Scrutinize:** 1. **Vigilance and Incident Reporting:** * Does the AR have a detailed Standard Operating Procedure (SOP) for receiving and transmitting reportable incidents, FSCAs, and Field Safety Notices to the relevant Competent Authorities within the strict MDR timelines? * How do they document this communication? Ask to see redacted examples or templates. * What is their process for collaborating with the manufacturer during an investigation? 2. **Complaint Management:** * What is their procedure for receiving, documenting, and forwarding complaints or feedback from users, patients, or healthcare professionals to the manufacturer? * How do they ensure this information is transmitted promptly to feed into the manufacturer's own QMS and Post-Market Surveillance (PMS) system? 3. **Communication with Competent Authorities:** * Does the AR have a defined process for handling formal inquiries from Competent Authorities? * Who on their team is responsible for this communication, and what are their qualifications? * How do they ensure the manufacturer is kept informed of all such interactions? 4. **Documentation Access and Control:** * What is their system for maintaining continuous access to the manufacturer’s up-to-date Technical Documentation, Declaration of Conformity, and relevant certificates? * How do they ensure the confidentiality and security of this highly sensitive information? ### Assessing Technical and Regulatory Expertise The level of expertise required of an AR depends directly on the complexity and risk class of the device portfolio. * **For General Devices (e.g., Class I or IIa mechanical devices):** The AR should have a strong team of regulatory professionals with deep knowledge of the MDR, EUDAMED, and European regulatory structures. * **For High-Risk or Novel Devices (e.g., Class IIb/III SaMD, implants, combination products):** The AR requires a higher level of specialized expertise. Manufacturers should ask: * Does your team include individuals with experience in software validation, cybersecurity, clinical data for AI/ML, or the specific clinical application of our device? * How would you handle a technical question from a Competent Authority regarding our device’s mechanism of action or clinical evidence? * Can you provide case studies or references from clients with similarly complex devices? ## Structuring a Robust Mandate Agreement The written mandate is the cornerstone of the manufacturer-AR relationship. It should be a detailed, unambiguous legal document that clearly defines the roles, responsibilities, and operational procedures for all regulatory activities. Vague agreements create compliance gaps and increase liability risk. ### Key Clauses to Include in the Mandate 1. **Precise Delineation of Responsibilities:** * Do not rely on a simple statement that the AR will "fulfill their obligations under Article 11." * Explicitly list each task and define which party is Responsible, Accountable, Consulted, and Informed (a RACI model). * **Cover:** Verification of the Declaration of Conformity and Technical Documentation, registration obligations in EUDAMED, handling of requests from Competent Authorities, and management of vigilance and FSCA reporting. 2. **Information Exchange and Documentation Access:** * Specify the manufacturer’s obligation to provide the AR with immediate and continuous access to the complete, up-to-date Technical Documentation. * Define the protocol for notifying the AR of any changes to the device, its labeling, or the manufacturer’s QMS that could impact compliance. 3. **Post-Market Surveillance (PMS) and Vigilance Protocols:** * Clearly outline the communication workflow for incidents. For example: "The AR will, upon receipt of a complaint or incident report, forward it to the manufacturer’s designated contact person within 24 hours." * Define the AR's role in reviewing the manufacturer's PMS reports to ensure they meet MDR requirements, even if the manufacturer is primarily responsible for creating them. 4. **Liability, Indemnification, and Insurance:** * While the MDR establishes joint liability, the mandate can define the terms of indemnification between the two parties. This clause should be drafted carefully by legal counsel. * Require the AR to maintain a specific level of liability insurance and to provide the manufacturer with a certificate of insurance annually. 5. **Termination and Transition Plan:** * Define the conditions and notice period for terminating the agreement. * Critically, this clause must outline a clear process for transitioning to a new AR, including the transfer of all relevant documentation and notifications to Competent Authorities, to avoid any interruption of market access. ## Strategic Considerations and Future-Proofing Choosing an AR is a long-term strategic decision. The ideal partner not only ensures compliance today but also helps the manufacturer anticipate future challenges. * **Scalability:** Can the AR handle an expanding product portfolio or entry into new EU member states? * **Regulatory Intelligence:** Does the AR provide proactive updates on new MDCG guidance or changes in the regulatory landscape that could affect the manufacturer’s devices? * **Flexibility:** The mandate should include a clause for periodic review (e.g., annually) to update the agreement in response to new regulations or changes in the business relationship. Engaging with a potential AR early in the go-to-market process allows a manufacturer to build a stronger, more transparent partnership and ensure that all systems are in place well before the first device is placed on the market. ## Key EU Regulatory References When navigating AR requirements, manufacturers should always refer to the official source documents. Key references include: * **Regulation (EU) 2017/745 on medical devices (MDR):** Specifically Article 11, which outlines the tasks and responsibilities of the Authorised Representative. * **Relevant Medical Device Coordination Group (MDCG) guidance documents:** The MDCG frequently publishes guidance on topics related to the implementation of the MDR, including vigilance, post-market surveillance, and EUDAMED, which directly impact the AR's role. Manufacturers should monitor the official European Commission website for the latest documents. ## Finding and Comparing Authorised Representative Providers Selecting the right Authorised Representative requires a systematic approach. Manufacturers should identify several potential providers and evaluate them against the criteria discussed in this article. Key factors to compare include their level of experience with similar device types, the depth of their QMS, the transparency of their fee structure, and the qualifications of their staff. It is advisable to request proposals from multiple providers to compare their service offerings and approach to partnership. To find qualified vetted providers [click here](https://cruxi.ai/regulatory-directories/cosmetics_rp) and request quotes for free. *** This article is for general educational purposes only and is not legal, medical, or regulatory advice. For device-specific questions, sponsors should consult qualified experts and consider engaging FDA via the Q-Submission program. --- *This answer was AI-assisted and reviewed for accuracy by Lo H. Khamis.*