eIFU Electronic Instructions for Use for Medical Devices: EU MDR Regulation 2025/1234, FDA Rules, Website Access, QR Codes, and Paper IFU Requirements

Why eIFU Matters for Medical Device Manufacturers

Electronic Instructions for Use (eIFU) represent one of the most significant regulatory changes in medical device labeling in recent years. The European Commission's Implementing Regulation (EU) 2025/1234, adopted on June 25, 2025 and effective July 16, 2025, fundamentally expanded the scope of devices eligible for eIFU — from a narrow set of implantable and fixed-installation devices to all professional-use medical devices.

This shift affects virtually every medical device manufacturer selling in the EU. For companies managing large product portfolios, the regulation is estimated to save approximately 500 tons of paper per company per year while improving information currency and reducing environmental impact. However, the transition from paper IFU to eIFU requires careful compliance planning, risk assessment, system validation, and label redesign.

This guide covers the complete regulatory framework for eIFU across the EU, US, and global markets, with practical implementation guidance for manufacturers.

Regulatory Framework Overview

EU Regulations Governing eIFU

FDA References

What Changed: Regulation 2025/1234

Before the Amendment (2021/2226 Original Scope)

Under the original Implementing Regulation 2021/2226, eIFU was only permitted for three narrow categories of medical devices:

1. Implantable and active implantable devices (e.g., pacemakers, cochlear implants)
2. Fixed installed medical devices and their accessories (e.g., MRI scanners, CT machines)
3. Devices with built-in systems visually displaying instructions (e.g., devices with integrated screens)

The rationale was that these devices could not easily carry bulky paper manuals and were typically operated by trained healthcare professionals.

After the Amendment (2025/1234)

The new regulation dramatically expands eIFU eligibility:

• All medical devices intended for professional use may now use eIFU instead of paper
• This includes devices without a medical purpose under MDR Annex XVI
• Paper IFU remains mandatory for devices where use by laypersons (patients, general public) is reasonably foreseeable
• The regulation entered into force on July 16, 2025

What Has Not Changed

• Devices used by laypersons still require paper IFU
• The risk assessment requirement remains in full force
• The paper-upon-request obligation (within 7 calendar days, at no cost) continues
• National language requirements still apply to eIFU content
• Validation of the eIFU system is still required

Key Simplifications in the 2025 Amendment

Beyond expanding scope, Regulation 2025/1234 also simplified several administrative requirements from the original 2021 regulation:

1. Deleted Article 8: The requirement for a Notified Body to specifically review eIFU requirements has been removed — this is now covered under general conformity assessment activities, eliminating redundancy
2. Deleted Article 5(12): The requirement to inform every user who downloaded the eIFU of any changes has been removed — post-market surveillance obligations already cover this, and the requirement was impractical for anonymous website downloads
3. Deleted Article 6(4): The restriction on providing parts of the IFU intended for patients by electronic means has been removed

Who Can Use eIFU: Eligibility Decision Tree

Step 1: Is Your Device Software?

If the device is software as defined by the MDR, eIFU is always permitted — even if the device is used by laypersons. The electronic instructions must be provided through the software itself, not in paper form. This is established in Article 3(3) of Implementing Regulation 2021/2226 and was unchanged by the 2025 amendment.

Step 2: Is Your Device an IVD?

IVDs are governed by the IVDR, not by Regulation 2021/2226. Under IVDR Article 10(11):

"When the device is intended for professional use only, instructions for use may be provided to the user in non-paper format (e.g. electronic), except when the device is intended for near-patient testing."

This means:

• Professional-use IVDs: eIFU permitted
• Near-patient testing IVDs: paper IFU required
• Lay-use IVDs: paper IFU required

Step 3: Is Your Device Used Exclusively by Healthcare Professionals?

If yes, eIFU is permitted under Regulation 2025/1234.

If the device may also be used by laypersons (patients, caregivers), paper IFU must still be provided for those users. In practice, if a device is intended for professional use but layperson use is "reasonably foreseeable," manufacturers must provide paper IFU.

Summary Table

Risk Assessment Requirements (Article 4)

Manufacturers cannot simply switch to eIFU. They must conduct and document a specific risk assessment that demonstrates eIFU maintains or improves the level of safety compared to paper IFU.

Minimum Risk Assessment Elements

The risk assessment must cover at least the following:

1. Intended users and their digital literacy — Can the target user population reliably access and understand electronic instructions?
2. Environment of use — Is reliable internet access available where the device is used (e.g., operating rooms, rural clinics, field settings)?
3. Urgency of access — Are there foreseeable medical emergency situations where immediate access to instructions is critical? If so, emergency information must still be provided on the device or a leaflet
4. Alternative access mechanisms — How will users access instructions if the electronic system is unavailable (server outage, broken QR code link, etc.)?
5. Cybersecurity risks — What are the risks of unauthorized modification, interception, or unavailability of eIFU content?
6. Language and accessibility — Does the eIFU system support the required national languages and accessibility standards?
7. Software and hardware requirements — Are there specific system requirements for accessing eIFU that could exclude some users?

The risk assessment must be documented and maintained as part of the technical file. It must be updated whenever the eIFU system, device, or intended user population changes.

Risk Assessment Practical Tips

• Document internet availability assumptions for each target market
• Consider healthcare facilities in rural or underserved areas
• Assess whether QR codes or URLs are more appropriate for your user base
• Include cybersecurity risk analysis referencing MDR Article 10(10) and the EU Cyber Resilience Act
• Maintain the risk assessment as a living document linked to your ISO 14971 risk management file

eIFU Delivery Requirements (Article 5)

How eIFU Must Be Provided

The regulation defines eIFU as instructions displayed in electronic form by:

• The device itself (built-in display)
• Portable storage media supplied with the device
• Software
• A website

Mandatory Conditions

If a manufacturer chooses eIFU, they must comply with all of the following:

1. Safety equivalence: The risk assessment must demonstrate that eIFU maintains or improves safety compared to paper IFU
2. All Member States: eIFU must be provided in all EU Member States where the device is made available, unless specifically justified in the risk assessment
3. Paper on request: A system must be in place to provide paper IFU at no additional cost, within 7 calendar days of receiving a request (or at delivery if requested at time of order)
4. Emergency information: Information on foreseeable medical emergency situations must be provided on the device or a leaflet. For devices with built-in displays, information on how to start the device must be included
5. Validation evidence: Manufacturers must ensure proper design and functioning of the eIFU system and provide verification and validation evidence
6. Language compliance: eIFU content must comply with national language requirements of each Member State where the device is placed on the market
7. Historical versions: Manufacturers must keep previous versions of eIFU available on the website

EUDAMED Integration

The internet address (URL) of the eIFU must be integrated into EUDAMED via the UDI database — at the latest by the time mandatory device registration in the database becomes effective. This means the eIFU URL becomes part of the device's UDI record and is accessible through the EUDAMED portal.

Labeling Requirements (Article 6)

When providing eIFU instead of paper IFU, the manufacturer must clearly indicate on the product label that instructions are supplied in electronic form rather than paper. The label must specify:

• That the IFU is available electronically
• How to access it (website URL or QR code)
• That a paper copy is available upon request

Label Content Checklist

• Statement that IFU is provided in electronic form
• URL or QR code directing to the eIFU
• Instructions for requesting a paper copy
• Contact information for paper copy requests
• Emergency information on the device or an accompanying leaflet

QR Code vs. URL

Both QR codes and URLs are acceptable for directing users to eIFU. The choice should be documented in the risk assessment:

• QR codes: Easier for mobile access; may be preferred in clinical settings with smartphones available
• URLs: More universally accessible; useful for desktop access and environments without smartphone cameras

For devices where both healthcare professionals and lay users may need access, consider providing both a QR code and a human-readable URL.

FDA eIFU Requirements

While the EU has formal eIFU legislation, the FDA takes a more flexible approach:

Key FDA Principles

1. 21 CFR Part 801 requires "adequate directions for use" for most devices, which traditionally meant paper
2. The FDA allows manufacturers to provide IFUs electronically but still expects printed copies to be available upon request
3. Accessibility and reliability: Electronic platforms must meet accessibility standards and be reliably available
4. Cybersecurity: The FDA's postmarket cybersecurity guidance encourages secure distribution channels for digital documentation
5. UDI integration: 21 CFR Part 830 supports digital tools for traceability and identification, including links to electronic labeling

Practical Differences: FDA vs. EU

eIFU System Validation

Implementing an eIFU solution has major implications for the manufacturer's Quality Management System. Notified Bodies will review the eIFU system during conformity assessment.

Validation Requirements

1. Functional testing: Verify that the eIFU system correctly displays content across supported browsers, devices, and operating systems
2. Availability testing: Demonstrate system uptime and failover capabilities (the eIFU must be available when users need it)
3. Content accuracy: Validate that eIFU content matches the approved labeling and is updated correctly when revisions occur
4. Access testing: Verify that QR codes and URLs resolve correctly and consistently
5. Paper request system: Test the end-to-end process for requesting and receiving paper IFU
6. Security testing: Assess vulnerability to unauthorized modification, data breaches, and denial-of-service attacks
7. Language testing: Verify that all required language versions are available and display correctly
8. Version control: Validate that historical versions remain accessible and that current versions are clearly identified

What Notified Bodies Will Review

• The documented risk assessment for eIFU
• Validation evidence for the eIFU platform
• Labeling changes reflecting electronic IFU provision
• Procedures for updating eIFU content and notifying users
• Procedures for fulfilling paper copy requests within 7 days
• Cybersecurity measures for the eIFU system
• Integration with UDI/EUDAMED

Implementation Checklist

Pre-Implementation Assessment

• Determine which devices in your portfolio are eligible for eIFU
• Identify which markets each device is sold in and applicable language requirements
• Assess whether any devices have foreseeable layperson use (requiring paper IFU)
• Evaluate current IT infrastructure for eIFU hosting and delivery
• Assess cybersecurity posture and requirements

Risk Assessment and Documentation

• Conduct Article 4 risk assessment for each device or device family
• Document risk mitigation measures
• Integrate eIFU risk assessment into the ISO 14971 risk management file
• Prepare the eIFU-specific risk assessment as a standalone document for the technical file

System Design and Validation

• Select eIFU delivery method (website, built-in display, storage media, or software)
• Design URL/QR code scheme and label content
• Validate eIFU system across browsers, devices, and connection speeds
• Test paper request fulfillment process (must work within 7 calendar days)
• Implement version control and historical version access
• Conduct cybersecurity assessment
• Validate all required language versions

Regulatory Submissions

• Update product labeling to indicate eIFU provision
• Include eIFU risk assessment in technical documentation
• Include validation evidence in technical documentation
• Update Declaration of Conformity if labeling changes affect conformity
• Plan for EUDAMED UDI database URL integration
• Notify your Notified Body of the labeling change

Ongoing Maintenance

• Establish procedures for updating eIFU content when IFU revisions occur
• Monitor eIFU system availability and performance
• Maintain paper IFU stock for request fulfillment
• Periodically review risk assessment for new risks or changed circumstances
• Track regulatory developments (MedTech Europe is advocating for eIFU expansion to certain lay-use devices and near-patient tests)

Future Outlook

Expansion to Lay-Use Devices

MedTech Europe, Eurom, and EuromContact have published position papers advocating for eIFU expansion to certain medical devices used by laypersons, specifically when:

• Professional guidance is provided during initial use
• The device is used recurrently, building user familiarity
• The paper IFU is actually less usable than eIFU (small fonts, limited space for visuals, physical degradation)

The MDCG has been called upon to establish a dedicated workstream under the New Technologies working group to address this further expansion.

Environmental Impact

The EU Commission's adoption of eIFU expansion is explicitly linked to the European Green Deal's climate neutrality goals. Eliminating paper IFUs reduces paper consumption, packaging size, and shipping weight, contributing to sustainability objectives under the Packaging and Packaging Waste Regulation 2025/40.

Global Convergence

While the EU leads on formal eIFU legislation, regulatory bodies worldwide are moving toward greater acceptance of electronic labeling. Manufacturers with global portfolios should design eIFU systems that can accommodate multiple regulatory requirements simultaneously.

Key Takeaways

• EU Regulation 2025/1234 (effective July 16, 2025) permits eIFU for all professional-use medical devices
• A documented risk assessment (Article 4) is mandatory before switching to eIFU
• Paper IFU must be available upon request within 7 calendar days at no cost to the user
• Labels must clearly indicate eIFU format and provide URL or QR code access
• The eIFU URL must be integrated into EUDAMED via the UDI database
• Software may always use eIFU, even for layperson use (provided through the software itself)
• IVDs are governed by IVDR provisions, not the eIFU-specific regulation
• The FDA allows electronic IFUs but expects paper copies upon request
• System validation evidence is required and will be reviewed by Notified Bodies
• MedTech Europe is advocating for further expansion to certain lay-use devices and near-patient tests