FDA Medical Device Reporting Requirements
When must medical device problems be reported to the FDA?
Under 21 CFR Part 803, a device problem has to be reported to the FDA once a manufacturer, importer or device user facility becomes aware of information that reasonably suggests a device caused or contributed to a death or serious injury. Manufacturers and importers must also report malfunctions that would be likely to cause or contribute to a death or serious injury if they happened again. The deadline depends on who you are: 10 work days for user facilities, 30 calendar days for importers and manufacturers, and 5 work days for manufacturers in certain cases (eCFR §803.10).
What makes an event reportable
- The FD&C Act (21 U.S.C. 360i(a)(1)) says the regulations "shall require" manufacturers and importers to report information that reasonably suggests a marketed device "may have caused or contributed to a death or serious injury". They must also report a malfunction where the device or a similar device "would be likely to cause or contribute to a death or serious injury if the malfunction were to recur" [1].
- A serious injury is one that is life threatening, causes permanent impairment of a body function or permanent damage to a body structure, or needs medical or surgical intervention to prevent that [1].
- Any information, including professional, scientific or medical facts, observations or opinions, can "reasonably suggest" a reportable event. You do not have to report if a person qualified to make a medical judgment (physicians, nurses, risk managers, biomedical engineers) would reasonably conclude the device did not cause or contribute to the event. You must keep the basis for that decision in your MDR event files (eCFR §803.20(c)).
Deadlines by reporter
| Reporter | What | Deadline / recipient |
|---|---|---|
| User facility | Device-related death | 10 work days, to the FDA and the manufacturer if known |
| User facility | Device-related serious injury | 10 work days, to the manufacturer (to the FDA if the manufacturer is unknown) |
| User facility | Annual report (Form FDA 3419) | By January 1 each year; not needed if no MDRs were submitted that year |
| Importer | Death or serious injury | 30 calendar days, to the FDA and the manufacturer |
| Importer | Reportable malfunction | 30 calendar days, to the manufacturer only |
| Manufacturer | Death, serious injury or reportable malfunction | 30 calendar days, to the FDA |
| Manufacturer | Event needing remedial action to prevent an unreasonable risk of substantial harm to public health, or one the FDA has asked for in writing | 5 work days |
| Manufacturer | Supplemental reports | Whenever you obtain information that was not in the initial report |
Sources for the table: §803.10, §803.20(b), §803.33. The statute sets the 10-working-day limit for user facilities and the January 1 annual summary [1].
Points from the FDA's 2016 guidance "Medical Device Reporting for Manufacturers"
- A "work day" is Monday to Friday, excluding Federal holidays. The clock starts the day after you become aware of the event [2].
- If you start a remedial action that the FDA would treat as a Class I recall, the MDR is due within 5 work days of the decision. Later events linked to that same remedial action go back to 30-day reports [3].
- Supplemental reports are due within one month (30 calendar days) of receiving the new information, and must be sent electronically [3].
- If an investigation is needed to decide whether an event is reportable, it should be completed in a timely manner. Once you decide it is reportable, the 30-day or 5-day deadline applies [4].
Other reporting routes
- Voluntary reports: health professionals, consumers and others "may" report to the FDA voluntarily on Form FDA 3500 (§803.20(a)(1)).
- Malfunction summaries: the statute allows malfunction reports for some lower-risk devices to be submitted quarterly in summary form. This does not cover Class III devices, Class II devices that are implantable, life-supporting or life-sustaining, or devices the FDA has designated [1].
- VMSR program: the FDA's Voluntary Malfunction Summary Reporting guidance (August 2024) builds on that malfunction-summary option [5]. I did not review which devices qualify.
Approach: I searched the FD&C Act (21 U.S.C. 360i, 2023 U.S. Code edition) and the FDA's medical device guidance documents. I took the regulation text from the current 21 CFR Part 803 on the official eCFR, because the regulation itself is not in the datasets I can search.
Who has to report them?
Under the FDA's Medical Device Reporting (MDR) rules, three groups have to report: manufacturers, importers and device user facilities. Distributors only have to keep complaint files, and health professionals, patients and consumers can report voluntarily but are not required to.
1. Manufacturers (report to the FDA)
- A manufacturer is "any person who manufactures, prepares, propagates, compounds, assembles, or processes a device." The term also covers anyone who [p12]:
- repackages or changes the container, wrapper or labeling of a device;
- initiates specifications for devices that a second party makes for them to distribute (a specification developer);
- makes components or accessories that are devices themselves, either ready to use as is or processed by a licensed practitioner to suit a particular patient.
- This includes foreign manufacturers that export devices to the US. It also includes US manufacturers of devices that are not cleared or approved in the US but are exported. Failing to submit required reports is a prohibited act under section 301(q) of the FD&C Act [p12].
- Reprocessors of single-use devices become the manufacturer and take on all of the original manufacturer's obligations, including MDR [p13].
- Contract manufacturers: one that does not distribute or market what it makes for a specification developer has no MDR obligation. If it does distribute or market those devices, both firms must report, unless one of them gets an exemption under 21 CFR 803.19(b). The FDA recommends a joint request that names which firm will file the reports [p21].
- Under the 1996 user facility guidance, foreign manufacturers had to designate a US agent who submits MDR reports and keeps complaint files for them [p11].
2. Importers (report to the FDA and the manufacturer)
- An importer is anyone who imports a device into the US and moves it on toward the person who makes the final delivery or sale to the end user. If you repackage or relabel, you count as a manufacturer instead [p52].
- Deaths and serious injuries go to the FDA and the manufacturer. Malfunctions go to the manufacturer only. Importers must also keep written MDR procedures and adverse event files [p52][p53].
3. Device user facilities (report to the FDA and/or the manufacturer)
- These are hospitals, ambulatory surgical facilities, nursing homes, outpatient diagnostic facilities and outpatient treatment facilities, but not physician's offices. School nurse offices and employee health units are not user facilities [p52].
- Outpatient treatment facilities include ambulance providers, rescue services and home healthcare groups [p22].
- A facility is covered whether or not it is licensed or accredited [p21].
- A facility "becomes aware" of an event when medical personnel employed by or formally affiliated with it get information that reasonably suggests a reportable event [p20].
- "Patient of the facility" also covers employees or affiliated individuals who suffer a device-related death or serious injury while doing their job [p22].
- A "physician's office" (which does not have to report) includes the offices of dentists, chiropractors, optometrists and nurse practitioners, as well as school clinics, employee health clinics and free-standing care units. It can be independent, a group practice or part of an HMO [p22].
Not required to report
- Distributors (other than the manufacturer or importer) only have to keep device complaint records under 21 CFR 803.18(d). Repackaging or relabeling makes a distributor a manufacturer [p53].
- Health professionals, consumers and others "may" report voluntarily on Form FDA 3500, as noted in the previous answer (eCFR §803.20(a)(1)).
Approach: I searched the FDA's medical device guidance documents: the 2016 manufacturer MDR guidance and the 1996 user facility MDR guidance. The 1996 guidance predates later amendments to 21 CFR Part 803 (for example, its semiannual user facility report has since become an annual report), so I used it only for its definitions and the US-agent point.