Post-Market Surveillance & Vigilance
Post-market surveillance (PMS) and vigilance are critical regulatory obligations under both MDR (EU) 2017/745 and IVDR (EU) 2017/746. They ensure medical devices remain safe and perform as intended throughout their entire lifecycle — not just at market entry.
Art. 83–92
MDR PMS & Vigilance articles
2/10/15
Day reporting timelines
Lifecycle
Continuous monitoring obligation
🏥 What This Means for Your Hospital
- You are often the first to observe a device incident — your reports trigger the entire vigilance chain
- Ireland's HPRA relies on healthcare professionals to flag safety concerns early
- Acting on Field Safety Notices protects patients — check for affected devices in your inventory
- Recording UDI numbers enables effective traceability during recalls
1. PMS vs Vigilance — What's the Difference?
Post-market surveillance is a proactive and systematic process through which manufacturers collect, record, and analyse relevant data on the quality, performance, and safety of a medical device throughout its entire lifetime (MDR Article 83, IVDR Article 78).
PMS (Post-Market Surveillance)
The manufacturer actively gathers data about their device from user feedback, literature, registries, and complaints. Governed by MDR Articles 83–85 & Annex III.
Vigilance
Triggered when a serious incident occurs or a field safety corrective action is needed. Governed by MDR Articles 87–92 & IVDR Articles 82–87.
Knowledge Check
What is the key difference between PMS and Vigilance under the MDR?
2. Serious Incidents & Reporting Timelines
Vigilance centres on serious incidents. Under MDR Article 87, manufacturers must report these to the competent authority of the Member State where the incident occurred.
⚠️ What is a Serious Incident? (MDR Article 2(65))
Any incident that directly or indirectly led to, might have led to, or might lead to:
Death
of a patient, user, or other person
Serious Deterioration
in health of a patient, user, or other person
Public Health Threat
serious threat to public health
Reporting Timelines (MDR Article 87(2)–(5))
DAYS
Serious public health threat
Imminent risk requiring urgent field safety corrective action
Example: Batch contamination of IV sets across multiple hospitals
DAYS
Death or unanticipated serious deterioration
Incidents resulting in death or unexpected serious health deterioration
Example: Patient death potentially linked to pacemaker software malfunction
DAYS
All other serious incidents
Standard timeline for serious incidents not falling under 2 or 10 day categories
Example: Surgical instrument fracture during a procedure — patient recovered
Note: These timelines apply to the manufacturer. Healthcare facilities should report internally as quickly as possible so the manufacturer can meet these deadlines.
Knowledge Check
A manufacturer learns that a batch of surgical staplers has caused three patient injuries requiring reoperation. No deaths occurred. What is the reporting deadline?
3. How to Report — HPRA Incident Reporting Flow
In Ireland, medical device incidents should be reported to the HPRA (Health Products Regulatory Authority). Here is the step-by-step process for healthcare professionals:
🔔 When Should You Report?
4. PMS Plans & Reports
Every manufacturer must establish, document, implement, and maintain a PMS plan for each device. This plan is part of the technical documentation described in MDR Annex II & III.
Data collection
A proactive and systematic process to collect data from users, patients, distributors, importers, literature, databases, and registries (Annex III, Section 1.1)
Complaint handling
Procedures for recording/reporting non-conformities, including methods to distinguish device-related issues from other causes
Trend analysis
Effective methods and statistical processes for trend detection and threshold definitions
Indicators & thresholds
Suitable indicators and threshold values to trigger re-assessment of the benefit-risk ratio
Investigation protocols
Methods to investigate complaints and protocols for communicating with competent authorities
Corrective action linkage
Procedures for taking corrective actions, field safety corrective actions, or communicating findings
PMCF/PMPF integration
How post-market clinical/performance follow-up findings feed back into the PMS system
PMS Outputs: Report vs PSUR
PMS Report (Art. 85)
- Summary of PMS data and findings
- Conclusions and any actions taken
- Updated when necessary
- Part of technical documentation
- Available to competent authority on request
PSUR — Periodic Safety Update Report (Art. 86)
- Comprehensive benefit-risk analysis
- Volume of sales and usage estimates
- Updated at least annually (IIa) or as needed
- Must be uploaded to EUDAMED
- Notified Body reviews for Class III
Knowledge Check
A manufacturer of a Class IIb surgical mesh must produce which PMS output?
5. Field Safety Corrective Actions (FSCAs)
An FSCA is any corrective action taken by a manufacturer for technical or medical reasons to prevent or reduce a risk of a serious incident (MDR Article 2(68)). Every FSCA must be accompanied by a Field Safety Notice (FSN) sent to customers and users.
Return of the device to the manufacturer or disposal
Device modification, exchange, or retrofit in the field
Additional information on device use, warnings, or contraindications
Software update to address safety concerns
📋 Case Study: Infusion Pump Recall in an Irish Hospital
A large teaching hospital in Dublin received an FSN from a manufacturer regarding a software defect in their infusion pumps that could, in rare circumstances, cause an over-infusion of medication. Here's how they responded:
⚠️ The Problem
- • Software bug in firmware v2.3.1
- • Could cause 10% over-delivery in specific modes
- • Affected 340 pumps across the hospital group
✅ The Response
- • Clinical Engineering identified all affected units within 24 hours
- • Interim guidance issued to nursing staff on safe mode settings
- • Firmware update rolled out over 2 weeks
- • No patient harm occurred — early action prevented incidents
6. Trend Reporting (MDR Article 88)
Beyond individual incident reports, the regulations require monitoring for trends. If there is a statistically significant increase in the frequency or severity of incidents, this must be reported to competent authorities.
📈
Increasing complaint rates
Rising complaints for a specific device model over time
📉
Higher failure rates
Failure rates exceeding expectations during specific procedures
🔗
Event clustering
Similar adverse events across different healthcare facilities
⚡
Emerging use-errors
New use-error patterns not identified pre-market
🦠
Infection patterns
Rise in infections or complications post-implantation
🧩
Component failures
Specific component failures appearing across a product line
Knowledge Check
Under MDR Article 88, what triggers a trend report to the competent authority?
7. PMCF & PMPF Studies
Post-market clinical/performance follow-up is a continuous process to proactively collect and evaluate clinical data from CE-marked devices, updating the clinical evaluation throughout the device lifecycle.
PMCF
Post-Market Clinical Follow-up for medical devices under MDR.
Methods: clinical investigations, registries, surveys, literature reviews
PMPF
Post-Market Performance Follow-up for IVDs under IVDR.
Particularly important for Class C/D IVDs and companion diagnostics
8. SSCP — Summary of Safety & Clinical Performance
For implantable devices and Class III devices, manufacturers must draw up an SSCP — a public-facing document uploaded to EUDAMED.
SSCPs must be validated by the Notified Body (Art. 32(3)) and updated annually. The IVDR equivalent — the SSP (Summary of Safety and Performance) — is required for Class C and D IVDs.
9. EUDAMED & UDI System
EUDAMED is the European database established under MDR Article 33 that centralises information about medical devices across the EU, serving as the primary electronic system for PMS and vigilance.
Actor Registration
Registration of manufacturers, ARs, importers, NBs
UDI/Device Registration
Device UDI-DI data and Basic UDI-DI
NB & Certificates
Notified Body designations and certificates
Clinical Investigations
Clinical investigations and performance studies
Vigilance & PMS
Incident reports, FSCAs, FSNs, PSURs
Market Surveillance
CA market surveillance activities
Knowledge Check
What is the purpose of the UDI-PI (Production Identifier) component of the UDI?
10. National Competent Authorities
| Country | Competent Authority |
|---|---|
| 🇮🇪 Ireland | HPRA — Health Products Regulatory Authority |
| 🇩🇪 Germany | BfArM — Federal Institute for Drugs and Medical Devices |
| 🇫🇷 France | ANSM — Agence nationale de sécurité du médicament |
| 🇳🇱 Netherlands | IGJ — Health and Youth Care Inspectorate |
| 🇮🇹 Italy | Ministry of Health — DG Medical Devices |
| 🇪🇸 Spain | AEMPS — Spanish Agency of Medicines |
| 🇧🇪 Belgium | FAMHP — Federal Agency for Medicines and Health Products |
| 🇸🇪 Sweden | Läkemedelsverket — Medical Products Agency |
11. Irish & HSE Context
🇮🇪 HPRA & Vigilance
The HPRA uses a risk-based approach to market surveillance — devices with higher inherent risk (Class III, Class D IVDs) receive more scrutiny. When you report an incident, the HPRA evaluates it and may trigger FSCAs at national or EU level.
The HPRA's vigilance system feeds directly into the manufacturer's post-market risk management process, potentially triggering corrective actions across all EU markets.
🏥 HSE Medical Device Governance
The HSE Medical Device Governance Policy requires each healthcare facility to maintain:
- Device inventories with UDI information where available
- Documented procedures for receiving and acting on FSCAs
- Incident reporting aligned with national vigilance requirements
- Cooperation with manufacturers in PMS and PMCF activities
🎯 Key Takeaways
Irish Context — Vigilance & the HPRA
In Ireland, all serious incidents must be reported to the HPRA. Manufacturers report directly; hospitals should also notify the HPRA if they become aware of a serious incident.
The HPRA publishes Field Safety Notices (FSNs) from manufacturers and coordinates with EU authorities via the EUDAMED vigilance module.
HSE hospitals should have a process to receive and action HPRA safety notices — typically managed through the clinical engineering or risk management department.
Trend reporting: if you notice recurring near-misses or minor incidents with the same device, report this to the HPRA even if individual incidents do not meet the serious incident threshold.
Useful HPRA Links:
This is educational content only and is not an accredited or externally verified course. Always refer to official HPRA publications and your facility's own policies.
Knowledge Check
4 questions · 80% required to pass
Q1.What is the primary purpose of Post-Market Surveillance (PMS) under MDR?
Q2.What is a PSUR (Periodic Safety Update Report)?
Q3.What is a Field Safety Corrective Action (FSCA)?
Q4.Within what timeframe must a manufacturer report a serious incident to the competent authority?
0/4 answered
Print-Friendly Summary
One-page PDF for ward reference & quick revision
Was this module useful?