MDR vs MDD: What Really Changed and Why It Changed Everything

Two Regulations, Two Philosophies

The MDD — Medical Device Directive — entered the world in 1993 with a clean, attractive regulatory narrative: prove your product meets the requirements, receive a CE mark, and you're in the European market. The CE mark was an entry ticket. Clear the entry conditions, and the door opens.

The MDR — Medical Device Regulation — published in 2017 and fully enforced from 2021 (with extensions for some categories) is built on a fundamentally different premise: market authorization is not the finish line, it's the beginning of a lifecycle-long obligation. You're not proving the device is safe at a point in time — you're demonstrating that you can manage risk across the entire product lifecycle.

That difference sounds philosophical. In practice it is entirely operational — and the companies that treat it as a nuance rather than a structural shift are the ones arriving to the Notified Body underprepared, with files that reflect MDD thinking inside an MDR wrapper.

Why ~70% of MDD-Era CE Marks Face Re-Certification

The MDD allowed grandfathering — CE marks issued under the old directive continued to be valid until the transition deadline. For many companies, this created a dangerous continuity fantasy: "We have CE, we're in the market." The problem is that the MDR does not recognize grandfathering as a permanent mechanism. The vast majority of legacy CE marks must undergo full re-certification under MDR requirements.

What does that mean practically? A company that has sold a device in Europe since 2010 under an MDD-era CE mark, and has not executed a structured MDR transition, may find itself with a product that has no legal basis to remain on the market. This isn't hypothetical: mid-sized Israeli MedTech companies with portfolios of four to eight products have faced the reckoning of discovering that each product requires a separate, multi-year technical file — from scratch.

The Notified Body Capacity Crisis: The Real Reason for Delays

One of the most common questions we hear: "We submitted to our Notified Body and they said 18 to 24 months. Is that normal?" The answer is yes — but not for the reasons most people assume.

The MDR significantly expanded the scope of devices requiring Notified Body involvement (Class IIa and above). At the same time, the number of bodies that received designation under the MDR initially dropped sharply — many simply failed to pass their own re-designation process. The result: same or reduced supply, dramatically increased demand. What you get is a 12 to 24-month queue just to reach initial review.

The situation is worse than the headline suggests: a Notified Body that reaches review and finds an underprepared technical file doesn't send you to the back of the line — it ejects you from the queue entirely. We have seen cases where inadequate representation cost a company a full year on a round of questions that were entirely predictable. The Notified Body's questions were not unreasonable; the company's preparation just wasn't calibrated to MDR depth expectations.

What the MDR Actually Requires: The Delta from MDD

The CER: When Literature Is No Longer Enough

The Clinical Evaluation Report under MDR is one of the most common failure points we see. Under MDD, companies could rely on published literature and a relatively flexible equivalence argument — "our device is similar to device X, which is already approved." The MDR significantly tightened the definition of equivalence.

To claim your device is equivalent to another, you now need access to that device's clinical data — including unpublished post-market data. If the comparison device belongs to a competitor, you can assume that access doesn't exist. The practical implication: Post-Market Clinical Follow-up has shifted from a recommendation to a near-universal obligation.

For Israeli companies whose products are based on early-stage academic research, this means PMCF data collection needs to be planned as a core part of the regulatory strategy — not bolted on after the fact when a Notified Body asks for it.

EUDAMED and UDI: The Infrastructure That's Still Coming Online

EUDAMED — the European database on medical devices — has existed for years, but under the MDD it was largely a passive registry. The MDR turns it into an active operational platform: UDI registration, certificate registration, market surveillance events, PMCF summaries — all routed through EUDAMED.

The practical complication: EUDAMED itself is still not fully functional across all its modules. Activation timelines have slipped multiple times. Companies waiting for EUDAMED to be "fully ready" before preparing their registration workflows risk being caught completely unprepared when it goes live in full. The system won't wait for your internal processes to catch up.

What Israeli MedTech Companies with Legacy CE Marks Are Actually Doing

We see three main paths playing out in practice, each with distinct business implications.

Path 1: Structured Transition

The company builds a complete MDR technical file and submits to its Notified Body on a planned timeline. This is the right path — but it requires 18 to 36 months of lead time, depending on risk class and the current state of the legacy file. Companies that had not started their transition by 2022 or 2023 are already operating under timeline pressure they may not fully appreciate.

Path 2: Rescue — Entering a Stalled Process Mid-Flight

Companies that began the process with inadequate representation — often with a consultant who promised an unrealistic timeline — find themselves in a second or third round of Notified Body questions with no clear path forward. We have entered situations like this and, through focused gap analysis and targeted file reconstruction, shortened the remaining cycle by a year or more. The entry requires rapid diagnosis of which sections of the file are failing the MDR depth standard and why — and rebuilding those sections specifically, not the whole file.

Path 3: Portfolio Rationalization

A company with six products decides that only two of them justify the MDR investment at this stage. The others are temporarily withdrawn from the European market. This is not a failure — it's a business decision. The problem is that companies often reach this decision too late, after investing significant resources in technical files for products that won't cover the regulatory cost at current volumes. The rationalization conversation is better held at the beginning, before files are built.

The Mental Shift MDR Requires From Leadership

The hardest thing to explain to a CFO looking at the bottom line: the MDR didn't add "more requirements" — it changed the regulatory cost model permanently.

Under MDD, regulatory costs could reasonably be treated as a one-time capital expenditure: build the file, receive CE, minimal ongoing costs. Under MDR, regulatory costs are operational and recurring: a PMS Plan that must continuously run, a PSUR that must be rewritten on a defined schedule, PMCF that must be planned, executed, and reported, EUDAMED that must be kept current, Notified Body surveillance that arrives with unannounced audits.

A company pricing a product for the European market needs to include all of this in its per-unit economics before deciding the market is worth entering. The CE mark under MDR is not just harder to get — it's more expensive to hold.

The Bottom Line for Israeli Companies

If you have a product with an MDD-era CE mark and you are still "evaluating" when to begin the transition — you are likely already behind. If you are mid-process and stuck — there is work that can be done, but the timeline window is narrowing.

We are not a large consulting firm — and for this kind of work, that matters. The people who know your file are the people in the room when the Notified Body asks questions, because they have answered those same questions before. The goal: a technical file that clears review on a defensible timeline, without burning your budget on avoidable question rounds.