EU MDR Notified Body Capacity and the 2026-2030 Certificate Expiry Cliff
Data-driven analysis of EU MDR/IVDR certificate expiry timelines, notified body capacity concentration, and manufacturer country exposure using EUDAMED and NANDO data.
Executive Summary: The Impending Recertification Wave
For medical device and in vitro diagnostic (IVD) manufacturers operating in the European Union, navigating the transition from legacy directives (MDD, AIMDD, IVDD) to the Medical Device Regulation (EU) 2017/745 (MDR) and In Vitro Diagnostic Medical Device Regulation (EU) 2017/746 (IVDR) is a high-stakes, time-sensitive challenge. While the European Commission has twice extended transitional deadlines under Regulation (EU) 2023/607, these legislative extensions have not resolved the fundamental operational bottleneck: Notified Body capacity.
As of July 2026, manufacturers are facing a double-fronted challenge. First, the extended transitional deadlines for legacy devices are fast approaching (December 31, 2027, for Class III and implantable Class IIb devices; December 31, 2028, for most Class IIb, IIa, and Class I sterile/measuring devices). Second, the first wave of genuine MDR certificates issued between 2020 and 2022 is beginning to expire, creating a compounding recertification cliff between 2026 and 2030.
To understand the scope, concentration, and timing of this threat, this article provides a detailed data analysis of the EUDAMED certificate database and the NANDO notified-body registry.
[!IMPORTANT] Key Database Findings (Data as of July 8, 2026):
- EUDAMED Completeness Gap: EUDAMED contains 3,581 registered certificates (3,343 MDR, 238 IVDR). This represents a partial dataset — roughly a fifth of the ~17,549 MDR certificates estimated to be issued by industry body Team-NB — because the upload of historical certificates by Notified Bodies is not mandatory until May 28, 2027.
- Extreme Capacity Concentration: Only 48 distinct Notified Body SRNs appear as active issuers in the database. The top four Notified Bodies (TÜV Rheinland, TÜV SÜD, 3EC International, and SGS Belgium) account for 45% of all registered certificates.
- The Expiry Cliff Peaks in 2029-2030: Among EUDAMED-registered MDR certificates, expiries increase from 119 in 2026 to 430 in 2027, 690 in 2028, and peak at 794 in 2029 and 841 in 2030.
- Geographic Exposure: China-headquartered manufacturers hold the largest share of EUDAMED-registered certificates (682), followed by Italy (465), Germany (438), and the United States (226).
Direct Answer: Navigating the Recertification Schedule
Scenario Question
We hold MDR/IVDR certificates (or depend on legacy MDD/AIMDD devices) and need to plan recertification and new submissions for 2026-2030. Can notified-body capacity absorb the expiry wave, which NBs are actually issuing, and when does the cliff peak?
Direct Answer
No, Notified Body capacity cannot comfortably absorb the upcoming wave of recertifications and legacy transitions without significant sequencing delays. Manufacturers must assume a 13-to-18-month review timeline for technical documentation.
Among currently registered EUDAMED certificates, the expiry cliff peaks sharply in 2029 and 2030, with 1,635 MDR certificates expiring in those two years alone (representing 49% of all MDR certificates currently registered). When combined with the estimated 14,200 historical certificates that must be registered by May 2027 and the legal transition deadlines of December 2027 and December 2028, a major bottleneck is guaranteed. For the qualitative backdrop to this capacity crunch, see our companion piece on the EU MDR notified body capacity crisis 2026-2027; this article supplies the empirical expiry-timeline and issuer-concentration data that the narrative layer does not.
Manufacturers must take three immediate actions:
- Submit early: For 2027-2028 expiries, recertification applications must be submitted immediately.
- Secure Notified Body commitment: Ensure your Notified Body has formally allocated capacity for your specific product codes.
- Audit data readiness: Mitigate technical file deficiencies early to avoid multi-month clock-stops.
How many MDR and IVDR certificates are registered in EUDAMED, and why is that fewer than the certificates Team-NB says have been issued?
As of July 8, 2026, the EUDAMED certificate module lists a total of 3,581 registered certificates. This dataset is split as follows:
- MDR Certificates: 3,343
- IVDR Certificates: 238
To understand what this data represents, we must analyze the certificate types. The EUDAMED database classifies these certificates according to the specific conformity assessment route chosen.
Table 1: EUDAMED Certificate Type Breakdown (July 2026)
| Regulation | Certificate Type (EUDAMED Code) | Registered Count | Share of Regulation |
|---|---|---|---|
| MDR | Quality Management System (quality-management-system) |
2,642 | 79.0% |
Technical Documentation (technical-documentation) |
372 | 11.1% | |
Quality Assurance (quality-assurance) |
321 | 9.6% | |
Product Verification (product-verification) |
6 | 0.2% | |
Type Examination (type-examination) |
2 | 0.1% | |
| MDR Total | 3,343 | 100% | |
| IVDR | Quality Management System (quality-management-system) |
141 | 59.2% |
Technical Documentation (technical-documentation) |
96 | 40.3% | |
Production Quality Assurance (production-quality-assurance) |
1 | 0.4% | |
| IVDR Total | 238 | 100% |
The Completeness Gap Explained
The official EUDAMED count of 3,343 MDR certificates stands in sharp contrast to the figures published by the European Association of Medical Devices Notified Bodies (Team-NB). In their recent industry surveys, Team-NB members reported having issued approximately 17,549 MDR certificates.
Why is there a discrepancy of nearly 14,200 certificates? The answer lies in the transitional timeline of EUDAMED itself:
- Mandatory Registration Timeline: While the EUDAMED database became mandatory for actor registration, device identification, and certificate listing on May 28, 2026, the European Commission provided a transitional window for uploading historical certificates.
- Historical Certificate Deadline: Notified Bodies have until May 28, 2027, to upload all certificates that were issued under the MDR/IVDR prior to the mandatory date and remain active. (For the broader EUDAMED mandatory-registration milestones, including actor, device, and UDI deadlines, see our EUDAMED mandatory registration guide.)
- The Data Signal: Consequently, the 3,581 certificates currently in EUDAMED represent a partial "early adopter" set. This set is heavily biased toward recently issued certificates (2024-2026) and manufacturers who proactively updated their registries.
[!TIP] Do not treat EUDAMED as a complete representation of the market until after the May 2027 deadline. However, it is an excellent representative sample for analyzing issuer concentration and country-of-origin exposure.
How concentrated is notified-body capacity - which NBs are actually issuing MDR/IVDR certificates?
While NANDO lists 3,410 active notified-body organizations across all EU directives and regulations (such as machinery, toys, and personal protective equipment), only a fraction are designated under the medical device regulations. As of early-to-mid 2026, approximately 50 Notified Bodies are designated under the MDR and around 17 under the IVDR.
However, our empirical analysis of the EUDAMED database reveals that actual certificate issuance is even more concentrated. Only 48 distinct Notified Body Single Registration Numbers (SRNs) appear as active issuers of registered certificates. Furthermore, the top issuers hold a massive share of the registry.
Table 2: Top 10 Notified Body Issuers in EUDAMED (July 2026)
| Rank | Notified Body Number | Notified Body Name | Registered Certificates | Market Share (%) |
|---|---|---|---|---|
| 1 | 0197 | TÜV Rheinland LGA Products GmbH | 627 | 17.5% |
| 2 | 0123 | TÜV SÜD Product Service GmbH | 436 | 12.2% |
| 3 | 2265 | 3EC International a.s. | 296 | 8.3% |
| 4 | 1639 | SGS Belgium NV | 244 | 6.8% |
| 5 | 2460 | DNV Product Assurance AS | 148 | 4.1% |
| 6 | 2696 | UDEM Adriatic d.o.o. | 110 | 3.1% |
| 7 | 0344 | DEKRA Certification B.V. | 103 | 2.9% |
| 8 | 0482 | DNV MEDCERT GmbH | 99 | 2.8% |
| 9 | 0297 | DQS Medizinprodukte GmbH | 93 | 2.6% |
| 10 | 0425 | ICIM S.p.A. | 87 | 2.4% |
| Top 10 Total | 2,243 | 62.6% | ||
| Other 38 NBs | 1,338 | 37.4% | ||
| Total | 3,581 | 100% |
Key Takeaways on NB Concentration
- The Top 4 Dominance: TÜV Rheinland, TÜV SÜD, 3EC International, and SGS Belgium account for 1,603 certificates, or 44.8% of the entire registered database.
- The Tail Risk: The bottom 38 designated Notified Bodies share only 37% of the registered volume. Many smaller, regionally focused NBs have issued fewer than 10 certificates each.
- Strategic Constraint: If a manufacturer is partnered with a dominant NB (e.g., TÜV Rheinland or TÜV SÜD), they are competing for reviewer attention against hundreds of other manufacturers in the same queue. If they are partnered with a smaller NB, they face the risk that the NB may restrict its scope or exit the market due to staffing constraints.
When does the certificate expiry cliff peak in 2026-2030, and what does it mean for recertification timing?
MDR certificates have a maximum validity period of five years. Because the first significant wave of MDR certificates was issued between 2020 and 2022, we are now entering the initial renewal cycle.
By analyzing the expiryDate field for all registered MDR certificates in EUDAMED, we can plot the exact timeline of the coming expiry cliff.
Table 3: MDR Certificate Expiries by Year (EUDAMED Database)
| Year | Expiring Certificates | Percentage of Total MDR | Cumulative Expiries |
|---|---|---|---|
| Legacy/Stale | 35 | 1.0% | 35 |
| 2026 | 119 | 3.6% | 154 |
| 2027 | 430 | 12.9% | 584 |
| 2028 | 690 | 20.6% | 1,274 |
| 2029 | 794 | 23.8% | 2,068 |
| 2030 | 841 | 25.2% | 2,909 |
| 2031 | 434 | 13.0% | 3,343 |
| Total | 3,343 | 100% |
Analysis of the Expiry Timeline
- The 2026-2028 Wave: A total of 1,239 MDR certificates (37.1% of the registered database) are scheduled to expire between 2026 and 2028. This wave represents the early adopters who transitioned to MDR before the mandatory deadlines.
- The 2029-2030 Peak: The cliff peaks dramatically in 2029 and 2030, with 1,635 expiries (49% of the database). This peak is caused by the surge of certificates issued right before the original May 2024 MDR transition deadline, which was subsequently modified.
- The Compounding Effect: This expiry timeline only reflects certificates already issued under the MDR. It does not include the thousands of legacy MDD/AIMDD certificates that are currently extended under Regulation (EU) 2023/607 and must transition to MDR by the December 2027 and December 2028 deadlines.
[!WARNING] The Overlap Bottleneck: In 2027 and 2028, Notified Bodies must simultaneously process:
- Recertifications for the 1,120 MDR certificates expiring in 2027-2028.
- Initial MDR applications for the estimated 10,000+ legacy devices whose transitional extensions expire in December 2027 (Class III/implantable) and December 2028 (Class IIb/IIa/I).
- New device submissions (innovative products).
Which manufacturer countries are most exposed to the recertification wave?
By extracting the country prefix from the actorSrn field (the Single Registration Number of the manufacturer), we can identify which geographic regions are most heavily exposed to this capacity constraint.
Table 4: Top 10 Manufacturer Countries by Registered EUDAMED Certificates
| Rank | Country Code | Country Name | Registered Certificates | Share of Registry (%) |
|---|---|---|---|---|
| 1 | CN | China | 682 | 19.0% |
| 2 | IT | Italy | 465 | 13.0% |
| 3 | DE | Germany | 438 | 12.2% |
| 4 | US | United States | 226 | 6.3% |
| 5 | KR | South Korea | 151 | 4.2% |
| 6 | TR | Turkey | 149 | 4.2% |
| 7 | IN | India | 136 | 3.8% |
| 8 | FR | France | 127 | 3.5% |
| 9 | PL | Poland | 111 | 3.1% |
| 10 | ES | Spain | 107 | 3.0% |
| Top 10 Total | 2,592 | 72.4% | ||
| Other Countries | 989 | 27.6% | ||
| Total | 3,581 | 100% |
Critical Geographic Insights
- China's Dominance: Chinese manufacturers hold 682 certificates (19% of the database). This reflects a massive export focus. Because Chinese manufacturers typically lack a local European presence, they rely heavily on EU Authorized Representatives (EC REPs) and are highly sensitive to administrative delays in certificate processing.
- European Core: Italy and Germany combined hold 903 certificates (25.2%). These domestic European manufacturers are major employers and are highly integrated into regional hospital procurement networks, meaning any certificate expiry directly threatens European healthcare supply chains.
- Out-of-Union Exposure: Non-EU manufacturers (China, USA, South Korea, Turkey, India) hold 1,344 certificates (37.5% of the registry). These entities must manage complex logistics, including double-labeling transitions, local representative coordination, and import inspections, compounding the risk of a certificate lapse.
How do the Regulation 2023/607 transition deadlines interact with the expiry cliff?
To prevent a sudden withdrawal of medical devices from the EU market, the European Parliament and Council enacted Regulation (EU) 2023/607 in March 2023. This regulation extended the transitional period for "legacy devices" (devices covered by a valid MDD or AIMDD certificate issued before May 26, 2021) subject to strict conditions.
Table 5: Extended Transition Deadlines under Regulation (EU) 2023/607
| Device Class | Original Deadline | Extended Transition Deadline | Key Condition for Extension |
|---|---|---|---|
| Class III & Class IIb Implantable | May 26, 2024 | December 31, 2027 | Formal QMS application with Notified Body by May 26, 2024; signed written agreement by September 26, 2024. |
| Class IIb Non-Implantable, Class IIa, Class I sterile/measuring | May 26, 2024 | December 31, 2028 | Formal QMS application with Notified Body by May 26, 2024; signed written agreement by September 26, 2024. |
| Class I requiring NB involvement under MDR | May 26, 2024 | December 31, 2028 | Formal QMS application with Notified Body by May 26, 2024; signed written agreement by September 26, 2024. |
| Class III custom-made implantable | May 26, 2024 | May 26, 2026 | Formal MDR application submitted by May 26, 2024; signed written agreement by September 26, 2024. |
The Interaction Risk
While these extensions provided temporary breathing room, they created a massive operational overlap. Notified Bodies are now processing:
- The transition of legacy devices that successfully met the May and September 2024 application gates. These must complete their full MDR audits before December 2027 (high risk) and December 2028 (moderate risk).
- The first wave of MDR renewals (the 1,239 EUDAMED-registered MDR certificates expiring between 2026 and 2028).
- The introduction of new, innovative devices that have no legacy counterparts.
Because the pool of designated Notified Bodies has grown only modestly (from roughly 40 in 2023 to around 50 in 2026), the total review capacity remains severely constrained. The proposed uniform service-level requirements under the EU notified body conformity-assessment implementing regulation 2026/977 aim to make that constrained capacity more predictable, but they do not add new reviewers.
[!CAUTION] The Expiry Gap: Under Article 120 of the MDR, if a legacy certificate expires before the Notified Body completes the MDR assessment, the device can only remain on the market if the manufacturer has signed a contract with an NB and the national competent authority has granted a derogation under Article 97 or Article 59. This is an administrative emergency exit, not a viable business strategy — our missed notified-body deadline emergency exit guide walks through when and how that contingency applies.
What submission-sequencing and recertification-readiness steps should manufacturers take now?
Given the empirical evidence of extreme issuer concentration and the upcoming expiry peak, medical device manufacturers must transition from reactive compliance to proactive sequencing.
The recommended pathway for manufacturers comprises five distinct phases:
- Certificate & Code Audit: Map all certificates and codes to identify target timelines.
- Capacity Verification: Engage the Notified Body early to secure review resources.
- Technical File Gap Analysis: Remediate clinical and technical documentation.
- Submission Sequencing: Phase submissions to avoid overloading internal and external teams.
- Active Clock-Stop Management: Dedicate resources for rapid response to reviewer queries.
Step 1: Certificate and Code Audit
Begin by compiling a complete inventory of all active certificates across your entire product portfolio. For each certificate:
- EUDAMED Validation: Verify that the certificate is already listed in EUDAMED, or confirm when your Notified Body plans to upload it ahead of the May 2027 mandatory deadline.
- Code Mapping: Map the specific product codes associated with each device. Under the MDR, Notified Bodies are designated for specific codes (EMDN codes for device classification, and MDA/MDN codes for Notified Body scope). Ensure you know the exact codes for your devices, as scope restrictions can prevent your current Notified Body from renewing certain products.
- Expiry Tracking: Cross-reference the expiry dates against the aggregate cliff timeline (Table 3). If you have certificates expiring in 2027 or 2028, you must initiate work immediately.
Step 2: Capacity Verification
Do not assume that because a Notified Body issued your initial MDR certificate, they will have the resources to process your renewal or transition your remaining legacy devices.
- Active Engagement: Contact your Notified Body's account manager to request a formal capacity allocation.
- Scope Confirmation: Verify that your Notified Body retains its designation scope for your specific product codes. Notified Bodies regularly modify their scopes or face staff shortages in specific clinical areas (e.g., active implantables, drug-delivery combination products).
- Project Scheduling: Request a written commitment showing when they will assign a lead reviewer to your files once submitted.
Step 3: Technical File Gap Analysis
The most common cause of Notified Body review delays is a deficiency in the technical documentation, particularly regarding clinical evidence and post-market data.
- Clinical Evaluation Report (CER) Audit: Ensure your CER is updated with recent post-market clinical follow-up (PMCF) data. Under the MDR, Notified Bodies expect active clinical data rather than passive literature reviews, especially for Class III and implantable devices.
- MDCG Guidance Alignment: Audit your technical files against the latest Medical Device Coordination Group (MDCG) guidance documents, such as MDCG 2020-6 (clinical evidence for legacy devices) and MDCG 2025-10 (post-market surveillance templates).
- Supplier Control Verification: Confirm that your sub-tier suppliers (especially contract manufacturers, sterile packaging providers, and active pharmaceutical ingredient suppliers) have provided complete validation files. A single missing supplier certificate can halt the entire review process.
Step 4: Submission Sequencing
If you manage a large product portfolio, submitting all technical files simultaneously is a recipe for failure. It will overwhelm your internal regulatory team and create a bottleneck at your Notified Body.
- Priority Matrix: Establish a sequencing schedule based on three factors:
- Regulatory Expiry: Priority goes to certificates expiring within the next 12 to 15 months.
- Commercial Value: Prioritize high-revenue, high-margin products that anchor your market share.
- Technical Complexity: High-risk Class III devices require significantly longer review times (often 18+ months) and must be submitted much earlier than simple Class IIa consumables.
- Phased Batches: Group submissions into quarterly batches to maintain a steady flow of reviews and response cycles.
Step 5: Active Clock-Stop Management
The submission of your technical file is merely the starting point of the review process.
- Dedicated Resource Allocation: Form a dedicated response team (comprising regulatory affairs, clinical specialists, and quality engineers) specifically tasked with addressing Notified Body questions.
- Timeline Discipline: Notified Bodies typically provide a 30-day window to respond to deficiencies. A delayed or incomplete response can lead to your file being pushed to the bottom of their review queue, or even the rejection of your application.
- Pre-emptive Mock Audits: Conduct mock Q&A sessions internally to anticipate the types of clinical and technical questions your Notified Body is likely to ask.
FAQs: EU Notified Body Capacity and Expiries
How many notified bodies are actively issuing MDR/IVDR certificates as of mid-2026?
Our EUDAMED analysis reveals that only 48 distinct Notified Body SRNs have registered issued certificates. While NANDO lists a slightly higher number of designated organizations, many have not yet registered certificates in EUDAMED or have extremely limited operational throughput.
When do most MDR certificates expire - is there a recertification cliff in 2027-2028?
Yes, but it is part of a larger cliff that peaks in 2029 and 2030. In the EUDAMED database, 430 MDR certificates expire in 2027 and 690 in 2028. However, the peak occurs in 2029 (794 expiries) and 2030 (841 expiries), meaning nearly half of all currently active MDR certificates will face renewal in those two years.
Why does EUDAMED show fewer certificates than the Team-NB survey total?
EUDAMED registration of historical certificates is not mandatory for Notified Bodies until May 28, 2027. The 3,581 certificates currently in EUDAMED represent a partial set of early uploads. The complete dataset will not be available in EUDAMED until mid-2027.
How long before an MDR certificate expiry should a manufacturer start recertification with the notified body?
Manufacturers should initiate the recertification process 12 to 18 months before their certificate expires. Given that Notified Body review times for technical documentation average 13 to 18 months, starting any later than 12 months before expiry introduces a severe risk of a certificate lapse and temporary market withdrawal.
Conclusion: Empirical Timing Beats Qualitative Guesswork
The EU notified body capacity crisis is no longer a vague narrative. The EUDAMED and NANDO data provides a clear timeline: the recertification wave is real, highly concentrated, and front-loaded. With only 48 active issuers and the top 4 controlling nearly 45% of the market, manufacturers cannot afford to rely on administrative grace periods or last-minute extensions.
By auditing your portfolio, verifying NB capacity, and sequencing submissions according to the empirical timeline of the expiry cliff, you can protect your market access and ensure uninterrupted supply to European patients.