What Is EU IVDR? Regulation 2017/746 Guide for IVD Makers

The IVDR regulation changed how Europe approves tests for disease, infection, and health risk. If you make, import, or sell diagnostic tests in Europe, the EU IVDR now sets the rules you must follow. The law is long and the deadlines keep moving, which confuses many teams.

This guide explains the basics in plain English. You will learn what the regulation covers, how the four risk classes work, and what the latest deadlines mean for your products. You will also get a practical compliance roadmap and answers to common questions.

Quick answer: The IVDR (Regulation (EU) 2017/746) is the European law for in vitro diagnostic (IVD) devices. It replaced Directive 98/79/EC, applies since 26 May 2022, and sets rules for classification, performance evidence, notified body review, traceability, and post-market monitoring.

What Is the EU IVDR?

The EU IVDR is the In Vitro Diagnostic Medical Devices Regulation, formally Regulation (EU) 2017/746. An in vitro diagnostic device tests samples from the human body, such as blood, urine, or tissue. Examples include pregnancy tests, HIV assays, glucose meters, and cancer markers.

The regulation became law in 2017 and started to apply on 26 May 2022. It replaced the older In Vitro Diagnostic Directive (IVDD, 98/79/EC).

Unlike a directive, a regulation applies directly in every EU member state. Countries do not need to write their own versions. That gives manufacturers one common rulebook.

The IVDR regulation has three main goals:

Protect patients and users with stronger safety and performance evidence
Create clear rules for every company in the supply chain
Make devices traceable through a public database

The law also widened the definition of an IVD. Software that analyzes test data, and tests offered through online services, can now fall inside the scope.

Why the IVDR Regulation Replaced the IVDD

The old directive left too much room for interpretation. Under the IVDD, most manufacturers classified their own devices and declared them compliant without outside review. Authorities often found problems only after devices reached patients.

The IVDR regulation closes that gap. The European Commission estimates that about 85% of IVDs now need notified body involvement. Under the old directive, only a small share needed it.

Key changes from the IVDD include:

A four-class, rule-based risk classification system
Stronger clinical and analytical evidence
Mandatory UDI labeling for traceability
Clear duties for importers, distributors, and authorized representatives
A named PRRC (Person Responsible for Regulatory Compliance)
Tougher post-market surveillance duties

Therefore, many tests that were self-certified for years now need an outside audit. This shift creates the biggest workload for small and mid-size companies.

Who Must Follow the EU IVDR?

The regulation applies to every business that places IVDs on the EU market. That includes companies outside Europe. Many teams assume only EU manufacturers need to comply, but that is wrong.

These groups have duties under the IVDR regulation:

Manufacturers design the device and carry the main responsibility.
Authorized representatives act for non-EU manufacturers inside the EU.
Importers check that devices meet the rules before they enter the market.
Distributors verify labels, CE marks, and documents.
Health institutions that make in-house tests must meet specific conditions.

A non-EU manufacturer must name an EU authorized representative. That person or firm handles registration tasks and keeps technical files available for authorities.

Each role must also register in EUDAMED, the European medical device database. Registration gives each business a Single Registration Number (SRN).

Check your role early. Many companies discover too late that they count as a manufacturer, for example when they relabel another company’s product under their own name.

IVDR Risk Classes and Classification Rules

Classification decides your path to CE marking. The IVDR uses seven rules in Annex VIII to place each device into one of four classes. Higher risk means more oversight.

Class	Risk level	Typical examples	Notified body role
A	Lowest	Specimen containers, general lab reagents	Self-certified (unless sterile)
B	Low to moderate	Many self-tests, some clinical chemistry assays	Required
C	Moderate to high	Cancer screening, genetic tests, companion diagnostics	Required, with deeper review
D	Highest	Blood donor screening for serious infections	Required, plus EU reference lab checks

Class A non-sterile devices stay under manufacturer control. Everything else needs a notified body to assess conformity.

Intended purpose drives the class. A test for the same marker can land in different classes depending on its claims and users. For example, many self-test devices fall under Class C, while some, such as pregnancy tests, fall under Class B.

Class D devices face the toughest process. Under the rules, EU reference laboratories may verify performance, and batches may need checking before release.

Get your classification checked early. A wrong class can cost you a full year of work.

IVDR Regulation Requirements for Manufacturers

The regulation lists many duties in Articles 10 to 16 and the annexes. You can group them into a few clear areas. Use this as a checklist for your own gap review.

Quality management system. You need a QMS that covers design, production, supplier control, complaints, and corrective actions. Most companies base it on ISO 13485.

Risk management. You must run a documented risk process across the device life cycle.

General Safety and Performance Requirements (GSPR). Annex I lists what your device must achieve. You must show evidence for each applicable item.

Performance evaluation. You must prove scientific validity, analytical performance, and clinical performance.

Technical documentation. Annexes II and III define the file content. Reviewers use it to judge conformity.

Labeling and instructions. Labels must meet Annex I rules and carry UDI data.

PRRC. Each manufacturer must have a qualified person who checks compliance.

Post-market duties. You must monitor your device after launch and report serious incidents.

Each area links to the others. A weak risk file, for instance, will undermine your performance evaluation.

Performance Evaluation Under the EU IVDR

Performance evaluation is the heart of the EU IVDR. It shows that your test works, is safe, and meets its claims. The process is continuous, not a one-time report.

The regulation asks for three pillars of evidence:

Scientific validity: Does the marker link to a real clinical condition? Published research often supports this.
Analytical performance: Does the test measure correctly? This covers accuracy, sensitivity, specificity, precision, and limits of detection.
Clinical performance: Does the test give useful results for patients in real settings?

You document the work in a Performance Evaluation Plan (PEP) and a Performance Evaluation Report (PER). For Class C and D devices, you also prepare a Summary of Safety and Performance (SSP). The notified body reviews that summary.

After launch, you keep collecting data through post-market performance follow-up (PMPF). New findings flow back into your report.

Companies often underestimate this step. Old IVDD files rarely include structured clinical performance data, so teams must plan studies early.

NKB Regovanta explains this work on its IVDR performance evaluation service page.

Technical Documentation and QMS Under the IVDR Regulation

Your technical documentation proves compliance. The notified body reads it line by line, so structure matters. Annexes II and III describe what it must contain.

Core sections include:

Device description and specification
Information supplied with the device, such as labels and instructions
Design and manufacturing information
GSPR checklist with linked evidence
Benefit-risk analysis and risk management results
Product verification and validation data
Performance evaluation documents
Post-market surveillance plan and reports

Reviewers want a file that is clear, searchable, and consistent. Each claim should point to a controlled report. Name devices and variants the same way across all documents.

Your QMS supports the file. Design controls, change records, supplier audits, and complaint handling all feed evidence into it. A notified body audits both the QMS and the file.

For deeper reading on structure, see NKB Regovanta’s guide to Annex II and III technical documentation. You can also set up your system with its ISO 13485 and QMS support.

The Notified Body’s Role in the IVDR Regulation

A notified body is an independent organization designated by EU authorities. It audits your QMS, reviews your technical documentation, and issues the CE certificate. Without that certificate, Class B, C, and D devices cannot carry the CE mark.

Capacity has been a real problem. Few notified bodies hold IVDR designation, and demand is high. Industry experts have long urged companies to apply early and secure a slot.

When you pick a body, check four things:

Its designation scope covers your device type
It has capacity for new applications
It explains fees and timelines clearly
Its auditors understand your technology

Sign a written agreement. Several transition rules depend on a signed contract with a designated body, so the paperwork matters as much as the audit.

NKB Regovanta supports manufacturers with notified body strategy and audit readiness, including selection, application readiness, and responses to findings.

EU IVDR Transition Deadlines Explained

The transition periods let legacy IVDs stay on the market while manufacturers move to the new rules. Regulation (EU) 2024/1860 extended these deadlines, published in July 2024.

Device class	Final date to hold IVDR certificate
Class D	31 December 2027
Class C	31 December 2028
Class B	31 December 2029
Class A sterile	31 December 2029

Extra time is not automatic. Your device must meet conditions. According to QbD Group, the manufacturer must have had a compliant QMS in place by 26 May 2025. You also must lodge a formal application and sign a written agreement with a notified body by class-based dates.

Application dates run by class: May 2025 for Class D, May 2026 for Class C, and May 2027 for Class B and sterile Class A. Signed agreements follow in September of those years.

Importantly, you cannot make significant design changes to a legacy device and keep the extension. Check this rule before any product update.

If you hold Class C devices, confirm that your 2026 application step is complete. Read NKB’s IVDD to IVDR transition support to plan the remaining milestones.

EUDAMED, UDI, and 2026 Updates for the IVDR

EUDAMED is the EU’s central database for medical devices. It improves transparency and traceability. The rollout is happening module by module.

On 27 November 2025, the Commission published Decision (EU) 2025/2371. It confirmed that four modules became mandatory from 28 May 2026:

Actor registration
UDI and device registration
Notified bodies and certificates
Market surveillance

From that date, you must register new IVDR devices before their first unit reaches the EU market. Legacy devices have a longer window, ending 28 November 2026. The clinical investigation and vigilance modules are not yet mandatory.

The UDI system gives each device a unique code. It links labels, registration, and traceability. You must assign a Basic UDI-DI and device-level identifiers.

Lawmakers are also reviewing the framework. The Commission proposed targeted simplification of the MDR and IVDR in December 2025. Adoption is expected by Q2 2027, and details may change. Therefore, plan to the current law and watch updates.

For help with registration, see NKB’s EUDAMED, UDI, and economic operator support.

How to Comply With the IVDR Regulation: A Step-by-Step Plan

A clear plan prevents rushed work. Follow these steps in order, and adjust for your product.

Step 1: Confirm scope. Decide whether your product is an IVD, and name your role in the supply chain.

Step 2: Define the intended purpose. Write exact claims, sample types, and user groups. Everything else follows from this.

Step 3: Classify the device. Apply the Annex VIII rules and record your reasoning. NKB Regovanta offers qualification and classification support for tricky cases.

Step 4: Run a gap analysis. Compare current files, QMS, and evidence with the regulation.

Step 5: Update the QMS. Add IVDR-specific procedures for PMS, vigilance, UDI, and PRRC duties.

Step 6: Plan evidence. Build your PEP and schedule analytical and clinical studies.

Step 7: Choose a notified body. Apply as early as possible and sign the agreement.

Step 8: Build the file. Compile technical documentation with clear GSPR links.

Step 9: Pass the audit. Answer findings quickly and completely.

Step 10: Register and launch. Complete EUDAMED, UDI, the Declaration of Conformity, and CE marking.

Step 11: Monitor. Run PMS and PMPF, and update your files.

Common EU IVDR Mistakes to Avoid

Most delays come from a handful of repeat errors. Learn from them before you start.

Starting late. Studies, audits, and reviews all take time. Waiting for the deadline puts you in a queue.
Wrong classification. A weak rationale leads to rejection and rework.
Thin clinical evidence. Old IVDD data rarely meets IVDR standards.
Messy documentation. Reviewers cannot approve what they cannot find.
Ignoring the PRRC role. An unqualified or unavailable PRRC creates audit findings.
Skipping post-market planning. Regulators expect a working PMS system at certification.
Assuming the transition is automatic. Missing an application or contract date can end your extension.

NKB Regovanta’s insights library covers several of these topics. Browse its Global Regulatory Insights hub for articles such as IVDR transition planning, Class D verification, PRRC appointment, and GSPR evidence mapping.

Choosing an IVDR Regulation Consulting Partner

Many manufacturers hire outside experts for gap analysis, evidence plans, and files. A good partner shortens the learning curve and reduces review rounds.

Look for these signs:

Direct experience with IVD classes A to D
Strength in performance evaluation, not just paperwork
Clear scope, deliverables, and timelines in writing
Honest talk about risk and notified body capacity
Support after certification

NKB Regovanta, a regulatory and quality consultancy active since 2018, provides EU MDR and IVDR consulting across the full lifecycle. The team supports IVDR classification, performance evaluation, PMPF, notified body readiness, and EUDAMED tasks. Its IVD industry page describes the sector focus.

Ready to talk about your product? Book a consultation with the EU regulatory team.

What the Community Says About the EU IVDR

Real practitioners share useful lessons in public forums. Reddit communities such as r/regulatoryaffairs and r/medicaldevices host discussions on IVDR timelines, notified body delays, and file reviews. Search each community for “IVDR” to find current posts and comment threads.

Treat forum advice as a starting point. Always confirm details against the regulation, the Commission’s guidance, and your notified body’s instructions.

For authoritative reading, the European Commission publishes a Q&A on the IVDR transitional periods. It explains agreements, notified body changes, and eligibility conditions.

Frequently Asked Questions About the IVDR Regulation

What is the IVDR in simple terms?

The IVDR is the EU law that governs diagnostic tests. It sets rules for classification, evidence, certification, labeling, and monitoring before and after products reach patients.

What is the difference between IVDD and IVDR?

The IVDD allowed most manufacturers to self-certify. The IVDR uses risk classes, requires notified body review for most devices, and demands stronger performance evidence and traceability.

When did the EU IVDR start?

The regulation has applied since 26 May 2022. Transition periods let eligible legacy devices stay on the market until 2027, 2028, or 2029, depending on class.

Does the IVDR apply to companies outside the EU?

Yes. Any company that places IVDs on the EU market must comply. Non-EU manufacturers must appoint an EU authorized representative.

Which IVDs need a notified body?

Class B, C, and D devices need a notified body. Class A non-sterile devices can follow a self-certification route.

What are the IVDR classes?

The IVDR has four classes, A, B, C, and D. Class A carries the lowest risk and Class D the highest.

What is performance evaluation under the IVDR?

It is the process that proves scientific validity, analytical performance, and clinical performance. You document it in a plan and a report, then update it with post-market data.

Is EUDAMED mandatory for IVDs?

Four EUDAMED modules became mandatory on 28 May 2026. They cover actor registration, UDI and device registration, notified bodies and certificates, and market surveillance.

How can I prepare for the IVDR?

Classify your device, run a gap analysis, update your QMS, plan performance studies, and apply to a notified body early.

Conclusion: Plan Early and Build Clear Evidence

The EU IVDR raises the bar for every diagnostic test sold in Europe. The IVDR regulation rewards companies that plan early, document clearly, and build real performance evidence. It punishes those who treat it as a paperwork exercise.

Start with classification and a gap analysis. Then lock in your notified body, protect your transition dates, and keep your files consistent. If you want an expert partner for your IVD, contact NKB Regovanta to discuss your regulatory roadmap.

What Is EU IVDR (Regulation (EU) 2017/746) | A Guide for IVD Manufacturers

Table of Contents