India's Medical Devices Rules 2017 (MDR 2017) significantly transformed the regulatory landscape for medical device manufacturers in the country. If you are a startup building a medical device for the Indian market — or an established manufacturer who has not yet gone through formal registration — this guide is for you.
We have navigated this process ourselves at AMRIT MediTech for our AMRITShvAsa Spirometer and AMRIT FlapSense. This is what we learned, condensed into a practical checklist.
This article is for informational purposes. Regulatory requirements can change and vary by device. Always verify current requirements on the CDSCO website or consult a qualified regulatory professional.
What is MDR 2017?
The Medical Devices Rules 2017 replaced the earlier Drug and Cosmetics Act provisions for medical devices. It introduced a risk-based classification system (Class A to Class D), mandatory manufacturer registration, and quality management requirements aligned with international standards.
The rules apply to all medical device manufacturers, importers, and distributors operating in India. Non-compliance can result in products being seized, fines, or inability to legally sell in the Indian market.
Step 1: Classify Your Device
Everything in MDR 2017 flows from your device classification. India uses a four-class risk-based system:
| Class | Risk Level | Examples | Regulatory Path |
|---|---|---|---|
| Class A | Low risk | Bandages, thermometers, tongue depressors | Registration with State Licensing Authority |
| Class B | Low-medium risk | Spirometers, syringes, blood pressure monitors | CDSCO registration required |
| Class C | Medium-high risk | Ventilators, dialysis machines, bone screws | CDSCO + clinical data requirements |
| Class D | High risk | Heart valves, implantable defibrillators | Most stringent requirements, clinical evidence mandatory |
Use Schedule 1 of MDR 2017 and the CDSCO classification guidelines to determine your device class. When in doubt, seek a formal classification opinion from CDSCO.
Step 2: Manufacturer Registration Checklist
Manufacturing Site Registration
Register your manufacturing premises with the State Drugs Controller or CDSCO (depending on device class)
Obtain Form MD-3 (manufacturing licence application) and supporting documents
Prepare site master file detailing your manufacturing facility, equipment and processes
Ensure facility meets GMP (Good Manufacturing Practice) requirements under Schedule 5 of MDR 2017
Technical Documentation
Device description including intended purpose, indications and contraindications
Design history file (DHF) — design inputs, outputs, verification and validation records
Risk management file per ISO 14971 (risk analysis, risk evaluation, risk controls)
Biocompatibility testing report (ISO 10993) if device contacts the body
Electrical safety and EMC testing reports for electrically powered devices (IEC 60601)
Software documentation for software-as-a-medical-device (IEC 62304)
Labelling and Instructions for Use (IFU) in English and relevant regional languages
Quality Management System (QMS)
Implement a QMS compliant with ISO 13485:2016 — this is the international standard for medical device quality systems
Document management procedures (document control, record retention)
Management review, internal audit and corrective action procedures
Supplier qualification and control procedures
Post-market surveillance (PMS) and vigilance reporting system
Complaint handling and adverse event reporting procedures
Step 3: Product Registration with CDSCO
For Class B, C and D devices, you must register the product itself with CDSCO through the Online Submission Portal:
- Create an account on the SUGAM portal (sugam.gov.in)
- Submit Form MD-14 (for Class B) or MD-15 (for Class C/D) with required technical documents
- Pay the prescribed government fee
- Respond to queries raised by CDSCO reviewers
- Receive Form MD-16 (product registration certificate)
Processing timelines vary from 3 months for Class B devices to 12+ months for Class D. Having your technical documentation complete and organized significantly reduces review cycles.
Do not begin selling or distributing your device in India before receiving formal CDSCO registration. Penalties under MDR 2017 include product seizure, financial penalties and criminal liability.
Step 4: Post-Market Obligations
Registration is not the end — MDR 2017 requires ongoing compliance:
- Adverse event reporting: Report serious adverse events to CDSCO within 30 days (or immediately for life-threatening incidents)
- Post-market clinical follow-up: Maintain evidence that the device continues to perform as intended after market release
- Periodic Safety Update Reports (PSUR): Required for Class C and D devices annually
- Labelling updates: Any change to labelling or IFU must be notified to CDSCO
- Renewal: Licences require periodic renewal — track your renewal dates carefully
Common Mistakes Startups Make
- Starting technical documentation late — documentation should be built during development, not after
- Confusing ISO 13485 with ISO 9001 — general quality management is not sufficient; medical device-specific QMS is required
- Underestimating risk management scope — ISO 14971 applies to design, manufacturing and post-market phases
- Missing biocompatibility requirements — if any material contacts the patient directly or indirectly, biocompatibility testing is needed
- Treating software as non-regulated — software that influences diagnosis or treatment is a medical device in itself under MDR 2017
Conclusion
MDR 2017 compliance is achievable for startups — but it requires early planning, disciplined documentation and a genuine commitment to quality. The companies that approach regulatory compliance as a product development discipline (rather than a checkbox exercise) end up with better products, fewer post-market issues, and faster market access.
At AMRIT MediTech, we offer regulatory consulting services to help startups and manufacturers navigate MDR 2017, ISO 13485 and related standards. If you would like to discuss your specific situation, reach out to our team.
Need Help With MDR 2017 Compliance?
AMRIT MediTech's regulatory consulting team supports startups and manufacturers through device classification, technical documentation, QMS setup and CDSCO registration.
Book a Free Consultation CallBack to All Articles