MedDeviceGuideMedDeviceGuide
Back

Investigational Device Rules Compared: FDA 21 CFR 812, EU MDR, SFDA & Health Canada

Side-by-side comparison of investigational device rules: FDA 21 CFR Part 812 IDE, EU MDR Articles 62-82, Saudi SFDA MDS-REQ 2, and Canada's Investigational Testing Authorization.

Ran Chen
Ran Chen
Global MedTech Expert | 10× MedTech Global Access
Published 2026-06-16Last reviewed 2026-06-1610 min read

Before a medical device reaches a human subject in a clinical study, four legal regimes can switch on: the FDA's Investigational Device Exemption (21 CFR Part 812), the EU MDR's clinical investigation regime (Articles 62–82 + Annex XV), Saudi SFDA MDS-REQ 2, and Health Canada's Investigational Testing regime (Medical Devices Regulations, SOR/98-282, Part 3). They share a common purpose — protect subjects, ensure credible data, and let sponsors gather evidence before market authorization — but they differ sharply on what triggers oversight, who must file, and how long the gate takes.

This is a regulatory-research comparison for planning a multi-jurisdiction clinical investigation, not legal advice for a specific study. Verify every hook against the official text listed at the end.

Side-by-Side: The Filing Object and the Trigger

Dimension FDA (US) EU MDR Saudi SFDA Health Canada
Legal text 21 CFR Part 812 (IDE) Regulation (EU) 2017/745, Articles 62–82 + Annex XV MDS-REQ 2 v5 (Requirements for Clinical Trials of Medical Devices) Medical Devices Regulations SOR/98-282, Part 3 (Investigational Testing)
Who must file The sponsor The sponsor (EU-based, or via an EU legal representative if not) Local sponsor, authorized representative, or licensed CRO Only the manufacturer or importer
Filing object IDE application (or Abbreviated IDE) Clinical investigation application via EUDAMED Clinical trial application (Annex 1 form) Investigational Testing Authorization (ITA)
Risk trigger Significant Risk (SR) vs Non-Significant Risk (NSR) vs Exempt All investigations to demonstrate conformity (with PMCF rules separate) All clinical trials of medical devices/IVDs in KSA Class II, III, IV devices (Class I exempt)
Prior approval needed? SR: FDA approval + IRB. NSR: IRB only (auto-approved). Exempt: none. Pre-market: CA authorization + ethics opinion. PMCF (Art. 74): notify ≥30 days before. "No Objection Letter" before commencement "Letter of Authorization" / No-Objection before commencement
Ethics body IRB (Part 56) Ethics Committee (competent authority coordinated) Ethics Committee/IRB + Law of Ethics of Research on Living Creatures Research Ethics Board (REB)
Coordinated review No (single FDA) Yes — Coordinating Member State (Art. 78) Single (SFDA) Single (Health Canada, Medical Devices Bureau)
Target review time 30-day cycle (IDE) Validation in 10 days; coordinated assessment timeline Evaluate within 60 days; missing-docs notice in 5 days Target 30 calendar days
Underlying GCP 21 CFR Parts 50, 56 + 812 ISO 14155:2020 + Annex XV ISO 14155:2020 (devices), ISO 20916:2019 (IVD) Part 3 + Tri-Council / GCP
Import control — (domestic) Investigational device must meet GSPRs except studied aspects Import license under MDS-REQ 5 ITA authorizes sale/import for testing

FDA: 21 CFR Part 812 and the SR/NSR Fork

The US system is the only one that gates oversight on a sponsor's risk determination, reviewed by an Institutional Review Board. Under 21 CFR 812.3(m), a Significant Risk (SR) device is one that:

  • is intended as an implant and presents a potential for serious risk;
  • is purported for use supporting or sustaining human life and presents serious risk;
  • is of substantial importance in diagnosing, curing, mitigating, or treating disease and presents serious risk; or
  • otherwise presents a potential serious risk.

The three pathways (812.2):

  • Exempt (812.2(c)) — e.g., a legally marketed device used per its labeling, certain consumer-preference testing, veterinary use, and some non-invasive diagnostic devices meeting §809.10(c) labeling. No IDE.
  • Non-Significant Risk (NSR) → Abbreviated IDE (812.2(b)) — IRB approval only; the study is automatically approved unless FDA notifies the sponsor otherwise. The sponsor still must label per §812.5, monitor per §812.46, keep records, and obtain informed consent (Part 50).
  • Significant Risk (SR) → full IDE (812.2(a)) — requires both FDA approval (§812.30) and IRB approval before commencing; the sponsor meets all of Part 812 including sponsor/investigator obligations and reporting.

Cross-market trap: the SR/NSR determination is made by the IRB, not the FDA, for NSR studies. Sponsors exporting an NSR device to the EU, Saudi Arabia, or Canada will find there is no equivalent "abbreviated" exemption — those regimes apply their gates regardless of the US NSR determination.

Recommended Reading
FDA Prior Knowledge Framework for Cell and Gene Therapy: Draft Guidance June 2026
Regulatory Policy & Legislation2026-06-07 · 11 min read

EU MDR: Articles 62–82 and the Single-Submission Model

The EU MDR replaced the MDD's single Article 15 with twenty-one articles (62–82), addressed to the sponsor (not the manufacturer). The operative mechanics:

  • Article 62(2): if the sponsor is not established in the EU, it must designate an EU legal representative who is responsible for compliance and is the addressee for all communications.
  • Article 70: the application is submitted through EUDAMED, which generates a Union-wide unique single identification number used for all communication.
  • Article 78: for multi-state studies, a sponsor may propose a Coordinating Member State (CMS) that leads a single coordinated assessment. This procedure currently runs as a voluntary European Commission pilot (launched 6 February 2025) and its outcome is not yet legally binding on participating Member States — each still issues its own national authorization. It becomes operative only once EUDAMED's clinical-investigation module is functional: the voluntary phase opens 6 months after the EU's Official Journal notice confirming the module, and the assessment becomes mandatory for all Member States 5 years after that notice (a timeline put in place through Regulation (EU) 2024/1860, in force since 9 July 2024). Until then, sponsors must obtain national authorization in each Member State.
  • Article 74: post-market clinical follow-up (PMCF) investigations follow a lighter notification route — notify competent authorities at least 30 days before starting, with ethics opinion required.
  • Annex XV, Chapter II: the documentation set — application form, investigator's brochure, Clinical Investigation Plan (CIP), and sponsor obligations.
  • Article 80: safety reporting — serious adverse device effects (SADE) and unanticipated serious adverse device effects (USADE) reported without delay; device deficiencies that could have led to a SADE within 2 days; full USADE report within 7 days; immediate-risk within 24 hours, all via EUDAMED.
  • Article 69: the sponsor must provide compensation/indemnification for subjects.

The verification gate: under Article 62(4)(l), the investigational device must conform to applicable General Safety and Performance Requirements (Annex I) except the aspects covered by the investigation, with every precaution taken to protect subjects.

Saudi Arabia: MDS-REQ 2 v5 and the No-Objection Gate

SFDA MDS-REQ 2 (Requirements for Clinical Trials of Medical Devices, Version 5.0) aligns with the Medical Devices Law (Royal Decree M/54) and its Implementing Regulations. The mechanism:

  • Who may apply: a local sponsor, an authorized representative (if the sponsor is outside KSA), or a licensed Contract Research Organization (CRO). An outside-KSA sponsor must hold an Authorized Representative License and an Establishment License; CROs need an SFDA establishment license.
  • Process: submit required documents (originally by email to MDCI@sfda.gov.sa, now via the SFDA cloud system). SFDA notifies of missing documents within 5 days; the application goes void if not completed within 60 days of submission; after completion, SFDA evaluates within 60 days and issues a "No Objection Letter" (or rejection).
  • Standards: ISO 14155:2020 (devices) and ISO 20916:2019 (IVD performance studies), plus the Law of Ethics of Research on Living Creatures and the Declaration of Helsinki.
  • Import: investigational devices imported into KSA need an import license under MDS-REQ 5.
  • Staffing: a full-time Saudi national must be in charge of clinical trials (bachelor's degree + ≥3 years' experience).
  • Notification duties: notify SFDA within 5 days of trial completion, major protocol deviations, or any event affecting subject safety or rights.

Cross-market trap: SFDA requires both an AR license and an establishment license to be in place before the clinical-trial application is even accepted — budget for those licensing steps, not just the trial review.

Canada: SOR/98-282 Part 3 and the ITA

Health Canada regulates investigational use through Part 3 (Investigational Testing) of the Medical Devices Regulations (SOR/98-282), administered by the Medical Devices Bureau. Key features:

  • Who can apply: only manufacturers and importers can apply for an Investigational Testing Authorization (an investigator/clinician may act as regulatory correspondent if authorized by the manufacturer).
  • Scope: an ITA is required for Class II, III, and IV devices; Class I is exempt.
  • The filing: per section 81 (supporting records (a)–(k)) and section 82, plus section 86 labelling ("for investigational use only"). The application typically includes the protocol, REB Attestation (REBA), Clinical Trial Site Information, the Investigational Testing Application, and the Qualified Investigator Undertaking (QIU).
  • Decision: Health Canada issues a Letter of Authorization (often a No-Objection Letter); the target screening + review time is 30 calendar days.
  • Combination with drugs: a protocol combining an unlicensed Class II–IV device with a drug requires both an ITA and a Clinical Trial Application (CTA), authorized before commencement.

Cross-market trap: Canada's Class I exemption has no direct equivalent in the EU or Saudi regimes for the same device — a Class I device may still trigger MDR clinical-investigation obligations or SFDA review depending on claims.

Recommended Reading
IVD Registration Compared: FDA 809, EU IVDR, China, Brazil & India
Regulatory IVD & Diagnostics2026-06-16 · 13 min read

What to Verify in the Original Text

  • 21 CFR 812.2 (a), (b), (c) and 812.3(m) — confirm which of Exempt / NSR / SR applies, and re-read the SR definition before relying on an NSR/Abbreviated path.
  • EU MDR Article 62(4) (the conditions to start, including GSPR conformity) and Articles 70, 74, 78, 80 — confirm the EUDAMED submission, the PMCF notification route, the coordinated-assessment timeline, and the safety-reporting clocks.
  • MDS-REQ 2 v5 — confirm the 5-day / 60-day / 60-day clock sequence, the AR + establishment license prerequisites, and the MDS-REQ 5 import license.
  • SOR/98-282 Part 3, sections 81–86 — confirm the ITA records, the Class I exemption, and the "for investigational use only" labeling rule.

Practical Implications for a Multi-Site Study

If you plan a single protocol across these regions, the binding constraints stack: the FDA SR determination does not exempt you elsewhere; the EU's 10-day validation + coordinated assessment and SFDA's 60-day evaluation are the longest gates; Canada's 30-day ITA is comparatively fast but excludes Class I; and Saudi Arabia's AR/establishment licensing must close before the trial application is even accepted. Build the regulatory pathway into the protocol design — especially the safety-reporting clocks (EU Article 80's 24-hour/2-day/7-day tiers are the strictest of the four) and the compensation/insurance obligation that only the EU makes explicit at the instrument level.

The reverse-direction trap — will the FDA accept data from these studies? Under 21 CFR 812.28, data from clinical investigations conducted outside the US that began on or after 21 February 2019 must come from studies run in accordance with good clinical practice, including independent ethics-committee review and informed consent. So a pivotal study run in Saudi Arabia, the EU, or Canada can support a US IDE or marketing submission — but only if the protocol, from day one, satisfies both the local regime and the GCP/record-keeping expectations the FDA will later audit. Designing the CIP and consent process to the stricter of FDA (812.28) and the local text avoids a costly re-run.

Sources