EU MDR PRRC (Person Responsible for Regulatory Compliance): Complete Guide to Article 15 Requirements with 2026 Qualification Changes

Every Medical Device Manufacturer and Authorized Representative Must Have a PRRC

The Person Responsible for Regulatory Compliance (PRRC) is one of the most significant new organizational requirements introduced by the EU Medical Device Regulation (MDR 2017/745) and In Vitro Diagnostic Regulation (IVDR 2017/746). Under Article 15, every manufacturer and every authorized representative operating in the EU must have at least one PRRC permanently and continuously at their disposal. This is not optional, it cannot be absorbed into another role, and failure to appoint a qualified PRRC is a regulatory violation that can result in sanctions, loss of market authorization, and enforcement action.

The PRRC replaces the old "Safety Officer for Medical Devices" role that existed in some EU Member States under the Medical Device Directive (MDD). However, the PRRC's responsibilities are significantly broader — covering technical documentation oversight, vigilance, post-market surveillance, clinical evaluation, and device release verification across the entire product lifecycle.

This guide covers everything you need to know about the PRRC role: qualification requirements, responsibilities, the small enterprise outsourcing exemption, the 2025 proposed simplification to qualification thresholds, liability protections, EUDAMED registration obligations, and practical implementation strategies.

Legal Basis: Article 15 of the MDR

Article 15 of Regulation (EU) 2017/745 establishes the PRRC requirement across five key paragraphs:

• Paragraph 1: Manufacturers must have at least one PRRC within their organization who possesses the requisite expertise. The qualification criteria are specified.
• Paragraph 2: Micro and small enterprises may outsource the PRRC to a third party but must have the person permanently and continuously at their disposal.
• Paragraph 3: The specific responsibilities of the PRRC are listed.
• Paragraph 4: The PRRC must not suffer any disadvantage within the manufacturer's organization in relation to the proper fulfillment of their duties.
• Paragraph 5: Similar requirements apply to authorized representatives, who must also have a PRRC.

The parallel provision for IVDs exists in Article 15 of Regulation (EU) 2017/746 (IVDR), with identical structure and qualification requirements.

PRRC Qualification Requirements

Current Qualification Pathways

Article 15(1) defines two qualification pathways:

Pathway A — Formal Education Plus Experience: A diploma, certificate, or other evidence of formal qualification, awarded on completion of a university degree or equivalent course of study recognized by the Member State, in one of the following disciplines:

• Law
• Medicine
• Pharmacy
• Engineering
• Another relevant scientific discipline

PLUS at least one year of professional experience in regulatory affairs or quality management systems relating to medical devices.

Pathway B — Experience Only: At least four years of professional experience in regulatory affairs or quality management systems relating to medical devices.

Qualification Pathway Comparison

Requirement	Pathway A	Pathway B
University degree	Required (law, medicine, pharmacy, engineering, or scientific discipline)	Not required
Professional experience	1+ year in RA or QMS for medical devices	4+ years in RA or QMS for medical devices
Recognition of non-EU qualifications	Must be recognized as equivalent by an EU Member State	N/A
Evidence required	Degree certificate + employment records	Employment contracts, organization charts, training records, document releases
Best suited for	Recent graduates with relevant degrees entering medtech	Experienced professionals without formal degree

Demonstrating Qualifications

Per MDCG 2019-7 (Rev. 1, December 2023), manufacturers must gather sufficient evidence that the appointed PRRC meets the qualifications. Acceptable evidence includes:

• Curriculum Vitae demonstrating relevant experience
• Copies of all relevant certificates and diplomas
• Employment contracts showing relevant roles and responsibilities
• Organization charts showing the PRRC's position in the company
• Training records for regulatory and quality management training
• Internal records such as document releases or approvals demonstrating involvement in RA/QMS activities
• Evidence of non-EU qualification equivalence (for Pathway A with non-EU degrees), requiring recognition by an EU Member State

This documentation should be maintained as part of the QMS and be available for review during Notified Body audits and by Competent Authorities during market surveillance.

Proposed 2025 Simplification: Removing Rigid Qualification Thresholds

The European Commission's December 2025 MDR simplification package proposes amending Article 15 to remove the prescriptive qualification criteria. Under the proposal:

• The PRRC must still "possess the requisite expertise in the field of medical devices"
• But the specific requirements for university degrees and minimum years of experience would be removed
• Micro and small enterprises that outsource the PRRC would no longer be required to have them "permanently and continuously" at their disposal

This change is being driven by industry feedback that the rigid qualification thresholds have created a supply-demand imbalance — there simply are not enough qualified professionals to fill all required PRRC positions across the EU. The proposal is under legislative review and expected to progress through 2026-2027.

Even with these proposed changes, manufacturers should maintain thorough qualification documentation, as the fundamental requirement for demonstrated expertise remains.

Recommended Reading

Document Control for Medical Devices: Complete Guide to FDA, ISO 13485, and EU MDR Requirements

Quality Systems Regulatory2026-04-16 · 22 min read

PRRC Responsibilities Under Article 15(3)

The PRRC of a manufacturer is responsible for ensuring that:

(a) Device Conformity Verification Before Release

The conformity of each batch of devices has been adequately checked before release, in accordance with the manufacturer's quality management system. This means the PRRC must be involved in the final release process or have a documented mechanism to verify that release checks have been performed.

(b) Technical Documentation and DoC Maintenance

The technical documentation and the EU Declaration of Conformity are drawn up and kept up to date. The PRRC does not necessarily write every page of the technical file, but must ensure that the documentation exists, is current, and meets MDR requirements.

(c) Post-Market Surveillance Obligations

The obligations for post-market surveillance (PMS) are fulfilled, including:

• Maintaining the PMS plan
• Ensuring periodic safety update reports (PSURs) are prepared
• Overseeing the post-market clinical follow-up (PMCF) evaluation
• Reviewing trending data from complaints, incidents, and non-conformities

(d) Vigilance Reporting

The reporting obligations in the context of vigilance are fulfilled, including:

• Ensuring incidents are reported to Competent Authorities within required timelines
• Overseeing Field Safety Corrective Actions (FSCAs)
• Maintaining vigilance records
• Ensuring coordination between manufacturer, authorized representative, and importers

(e) Clinical Investigation Declarations

For investigational devices, the PRRC is responsible for ensuring that the declarations required in the context of clinical investigations (MDR) or performance studies (IVDR) are properly submitted.

Responsibilities Summary Table

Responsibility Area	Article Reference	Key Deliverables
Device release verification	Art. 15(3)(a)	Batch release records, QMS verification
Technical documentation	Art. 15(3)(b)	Technical file, DoC, continuous updates
Post-market surveillance	Art. 15(3)(c)	PMS plan, PSUR, PMCF evaluation, trending reports
Vigilance reporting	Art. 15(3)(d)	Incident reports, FSCA, safety notices
Clinical investigations	Art. 15(3)(e)	Investigational device declarations

The PRRC for Authorized Representatives

Under Article 15(6), authorized representatives (EC REPs) must also have a PRRC permanently and continuously at their disposal within the European Union. This is a separate requirement from the manufacturer's PRRC.

Key rules for the authorized representative's PRRC:

• Must be qualified under the same criteria as the manufacturer's PRRC
• May be outsourced (even for authorized representatives that are not micro/small enterprises)
• Must be independent — the same person cannot serve as both the manufacturer's PRRC and the authorized representative's PRRC
• Must be located in the EU — MDCG 2019-7 recommends the authorized representative's PRRC be based within the EU

Manufacturer PRRC vs. Authorized Representative PRRC

Aspect	Manufacturer PRRC	Authorized Representative PRRC
Legal basis	Art. 15(1)	Art. 15(6)
Must be internal employee	Yes (unless micro/small enterprise)	No (may always be outsourced)
Location	Near manufacturing site (recommended)	Within the EU (required)
Scope of responsibilities	Full lifecycle: design through PMS	Limited to AR obligations under Art. 11(3)
Can be same person as other PRRC?	No — must be separate from AR's PRRC	No — must be separate from manufacturer's PRRC

Small and Micro Enterprise Outsourcing Rules

Who Qualifies as a Small or Micro Enterprise?

Under Commission Recommendation 2003/361/EC:

Enterprise Category	Headcount	Annual Turnover or Balance Sheet
Micro	Fewer than 10	≤ EUR 2 million
Small	Fewer than 50	≤ EUR 10 million
Medium	Fewer than 250	≤ EUR 50 million
Large	250+	> EUR 50 million

Only micro and small enterprises (fewer than 50 employees and ≤ EUR 10 million turnover) may outsource the PRRC role. Medium and large enterprises must have the PRRC as a direct employee.

Outsourcing Requirements

When outsourcing the PRRC, the manufacturer must:

1. Establish a formal contract with the external provider that lays down provisions ensuring the permanent and continuous availability of the PRRC
2. Document the PRRC's qualifications (same as for an internal PRRC)
3. Demonstrate how legal obligations are met through the outsourcing arrangement
4. Ensure the PRRC is adequately integrated into the manufacturer's processes — MDCG 2019-7 states the PRRC should "be available to perform its operational duties and react in a timely manner"
5. Ensure EU-based availability — MDCG 2019-7 recommends the external PRRC be located within the EU if the manufacturer is EU-based

What "Permanently and Continuously at Their Disposal" Means

The MDCG 2019-7 (Rev. 1) clarified that this phrase means:

• The PRRC must be available to perform operational duties and react in a timely manner
• It does not mean 24-hour availability on a daily basis
• Response time expectations should be defined in the outsourcing contract
• The PRRC should have access to all necessary information (e.g., non-conformities, incidents, audit findings) to perform their tasks effectively

Proposed 2025 Simplification for Outsourcing

The December 2025 simplification package proposes removing the "permanently and continuously" requirement for micro and small enterprises that outsource the PRRC. This would provide more flexibility for small companies to use PRRC services on a part-time or as-needed basis.

Recommended Reading

Cost of Quality (CoQ) in Medical Devices: Complete Framework — Prevention, Appraisal, Internal & External Failure Costs

Quality Systems ISO 134852026-04-17 · 14 min read

Liability Protection: Article 15(5) — No Disadvantage

Article 15(5) states: "The person responsible for regulatory compliance shall suffer no disadvantage within the manufacturer's organization in relation to the proper fulfillment of his or her duties, regardless of whether or not they are employees of the organization."

This provision exists because the PRRC's duties may occasionally conflict with commercial interests. For example:

• The PRRC may need to recommend withholding a device batch from release when conformity checks have not been completed
• The PRRC may need to report an incident to Competent Authorities even when the manufacturer would prefer to handle it internally
• The PRRC may need to recommend a Field Safety Corrective Action that impacts revenue

The "no disadvantage" clause protects the PRRC from retaliation for fulfilling their regulatory duties. In practice, this means:

• The PRRC's employment terms cannot be negatively affected by regulatory decisions they make
• Termination of the PRRC for performing their duties would be a regulatory violation
• The manufacturer must ensure the PRRC has the authority and independence to fulfill their role

EUDAMED Registration Requirements

Under Annex VI, Part A of the MDR, the PRRC must be registered in EUDAMED. Specifically:

• Section 1 of the actor registration requires the "name, address and contact details of the person or persons responsible for regulatory compliance referred to in Article 15"
• The information must be complete, accurate, and kept up to date
• Registration should take place as part of the manufacturer entering their data into EUDAMED

From May 28, 2026, EUDAMED actor registration becomes mandatory. This means every PRRC must be registered in EUDAMED by that date, with accurate contact information and qualification evidence available for Competent Authority review.

What to Register in EUDAMED

Data Point	Requirement
PRRC name	Full legal name
Contact details	Email, phone, postal address
Organization	Employer name (if different from manufacturer)
Qualification evidence	Not uploaded directly, but must be maintained and available
Updates	Must be updated whenever PRRC changes or contact details change

PRRC Integration Into the Quality Management System

The PRRC's role must be clearly defined within the manufacturer's QMS. Key QMS elements to address:

Organizational Placement

• The PRRC should report to senior management, not to a function that could create conflicts of interest (e.g., not reporting to sales or marketing)
• The org chart should clearly show the PRRC's position and reporting lines
• For medium and large enterprises, the PRRC must be an employee — having the role in the org chart as a dotted-line external consultant is not sufficient

Procedure Documentation

• A PRRC procedure should define appointment, qualification verification, and role responsibilities
• The procedure should specify how the PRRC is involved in batch release, technical documentation reviews, PMS activities, and vigilance
• The procedure should address succession planning — what happens when the PRRC leaves

Training and Competence

• Even after appointment, the PRRC should maintain ongoing training in MDR/IVDR requirements
• Training records should be maintained as evidence of continued competence
• Familiarity with specific standards relevant to the manufacturer's devices should be documented

Access and Authority

• The PRRC must have access to all relevant documentation, including technical files, risk management files, complaint data, and audit findings
• The PRRC must have the authority to intervene in release decisions, PMS processes, and vigilance reporting
• MDCG 2019-7 (Rev. 1) added that the manufacturer "should involve the PRRC in the processes it deems relevant and enable the PRRC to receive all necessary information"

Recommended Reading

Single-Use Device Reprocessing & Remanufacturing: FDA & EU MDR Regulatory Guide (2026)

Regulatory Quality Systems2026-04-15 · 32 min read

Virtual Manufacturers and OEM Relationships

A specific challenge arises for virtual manufacturers — organizations that fully source their named product from an original equipment manufacturer (OEM) that has designed and manufactured the device. Under the MDR, the virtual manufacturer is the legal manufacturer and bears all manufacturer responsibilities, including PRRC appointment.

MDCG 2019-7 clarifies that:

• Virtual manufacturers must meet all PRRC requirements as if they had designed and manufactured the device themselves
• The OEM's PRRC does not satisfy the virtual manufacturer's PRRC obligation
• The virtual manufacturer's PRRC must have access to sufficient technical documentation to fulfill their responsibilities, even though the documentation originates from the OEM
• Contractual arrangements with the OEM should ensure the PRRC has access to all necessary information

Comparison: PRRC vs. Similar Roles in Other Jurisdictions

Aspect	EU MDR PRRC	US FDA (No direct equivalent)	UK UKCA (RP)
Legal basis	Article 15 MDR	N/A	UK MDR 2002 (amended)
Required for	All manufacturers and ARs	N/A	All manufacturers placing devices on UK market
Must be employee	Yes (except micro/small)	N/A	Similar provisions
Qualifications	Specific degree + experience or 4 years experience	N/A	Similar to MDR
Responsibilities	Tech doc, PMS, vigilance, release	N/A	Similar scope
Registration	EUDAMED	N/A	MHRA registration
Liability protection	Article 15(5)	N/A	Similar provisions

The EU MDR PRRC is unique globally in its specificity. No other jurisdiction has an equivalent role with such detailed qualification criteria and legal protections. The closest parallels are the UK Responsible Person requirements (which mirror the MDR) and Australia's TGA requirements for sponsor responsibilities.

Common Implementation Mistakes

1. Treating the PRRC as a purely administrative appointment. The PRRC must be genuinely qualified and actively involved in regulatory activities. A Notified Body will assess whether the PRRC actually performs the duties defined in Article 15(3).

2. Appointing an unqualified person. The qualification criteria are legal requirements, not suggestions. If the PRRC cannot demonstrate the required education or experience, the appointment is non-compliant.

3. Failing to update EUDAMED when the PRRC changes. From May 2026, inaccurate PRRC information in EUDAMED could trigger market surveillance action.

4. Conflicts of interest in PRRC placement. The PRRC should not be in a position where commercial pressures can override their regulatory judgment. Reporting to the CEO or board — rather than to sales or operations leadership — is the recommended practice.

5. Insufficient contractual provisions for outsourced PRRCs. The outsourcing contract must specifically address availability requirements, scope of responsibilities, access to information, authority levels, and liability allocation.

6. Not having a PRRC succession plan. If the PRRC leaves, the manufacturer is immediately non-compliant. Have a backup plan and interim arrangements documented in your QMS.

7. Assuming one PRRC can cover multiple legal manufacturers in a group. Each legal manufacturer within a corporate group must have its own PRRC. A single PRRC cannot serve multiple legal entities, even within the same group.

Recommended Reading

CSV to CSA Transition: Complete Guide to FDA's 2025 Computer Software Assurance Final Guidance

Quality Systems FDA QMSR2026-04-17 · 17 min read

FAQ

Can the PRRC be a part-time role?

Yes, for micro and small enterprises that outsource the PRRC, the role can be fulfilled on a part-time basis as long as the person is "permanently and continuously at their disposal" and can respond in a timely manner. For medium and large enterprises, the PRRC must be an internal employee, but there is no requirement that PRRC duties must occupy 100% of their time.

Can one person serve as PRRC for both the manufacturer and the authorized representative?

No. Article 15(1) and 15(6) require separate PRRCs for the manufacturer and the authorized representative. The MDCG 2019-7 guidance explicitly states they cannot be the same person.

What happens if we cannot find a qualified PRRC?

This is a significant challenge, especially for small companies. Options include: (1) outsourcing to a specialized PRRC service provider (if you qualify as micro/small enterprise), (2) training an existing employee to meet the qualification criteria, or (3) hiring a qualified regulatory professional. The December 2025 simplification proposal may ease this burden by removing rigid qualification thresholds.

Does the PRRC need to sign the EU Declaration of Conformity?

The MDR does not require the PRRC to personally sign the DoC. The DoC must be signed by an authorized person within the manufacturer's organization. However, the PRRC must ensure that the DoC is drawn up and kept up to date (Article 15(3)(b)), so in practice, the PRRC typically reviews and approves the DoC before signature.

Can a non-EU resident serve as PRRC for an EU manufacturer?

MDCG 2019-7 recommends that the PRRC of an EU-based manufacturer should also be located in the EU, to ensure sufficient organizational integration. For manufacturers based outside the EU, the PRRC should be located near the manufacturing site. Qualifications acquired outside the EU must be recognized as equivalent by an EU Member State.

What sanctions apply if a manufacturer does not have a PRRC?

The MDR leaves sanctions to individual Member States. In practice, consequences can include: suspension of CE marking, withdrawal of devices from the market, fines, and restrictions on future market access. Notified Bodies will assess PRRC compliance during conformity assessment audits.

How does the PRRC role differ under the IVDR?

The structure is identical — Article 15 of Regulation (EU) 2017/746 mirrors the MDR provisions. The only practical difference is that the PRRC's expertise should relate to IVD devices specifically, including performance evaluation and IVD-specific PMS requirements.

Is there a training course or certification for PRRCs?

There is no official EU certification for PRRCs. Various organizations offer PRRC training courses (typically 1-2 days), including qtec Academy, LS Academy, and others. These courses are valuable for professional development but do not replace the legal qualification requirements — a training certificate alone does not qualify someone as a PRRC.

When does the PRRC requirement apply to legacy devices under transition?

All manufacturers — including those marketing legacy devices under the MDD transition provisions of Regulation (EU) 2023/607 — must have a PRRC in place. This was a condition of the transition extension: by May 26, 2024, manufacturers had to have a QMS compliant with MDR Article 10(9), which includes the PRRC requirement.

What is MDCG 2019-7 and why does it matter?

MDCG 2019-7 is the Medical Device Coordination Group's guidance document on Article 15 of the MDR and IVDR. It provides interpretation of the PRRC requirements, including what "permanently and continuously at their disposal" means, how to document qualifications, and recommendations for PRRC location. The December 2023 revision (Rev. 1) added further clarifications on availability requirements and the PRRC's role in the organization. While not legally binding, it represents the consensus view of EU Competent Authorities and is the reference document used by all Notified Bodies during audits.