The Medical Devices Rules, 2017 (MDR 2017) provide the principal regulatory framework for medical devices in India. The rules cover areas such as classification, manufacturing, import, testing, clinical investigation, conformity assessment, labelling, licensing and post-market regulatory requirements.

The regulatory framework has developed considerably since 2017. One major change was the expansion of medical-device regulation so that devices covered by the applicable notifications came under MDR 2017 rather than being regulated only through older device-specific notifications.

By 2026, the framework also includes more detailed risk-classification lists, online regulatory processes, testing laboratories, software-related guidance and further amendments to the rules.

This guide explains the major elements of MDR 2017 in a straightforward way.

What Are the Medical Devices Rules, 2017?

The Medical Devices Rules, 2017 were introduced under the Drugs and Cosmetics Act, 1940 to establish a structured regulatory system for medical devices in India.

The framework is intended to address the safety, quality and performance of medical devices throughout important stages of their lifecycle.

The rules broadly cover:

• Medical device classification
• Manufacturing requirements
• Import requirements
• Conformity assessment
• Quality management systems
• Clinical investigation
• Testing and evaluation
• Labelling
• Licensing
• Post-market surveillance
• Adverse-event reporting
• Regulatory inspections
• Notified bodies and testing laboratories

The Central Drugs Standard Control Organization (CDSCO) is the central regulatory organization involved in implementation of the medical-device framework.

Why MDR 2017 Is Important

A medical device can range from a relatively simple non-invasive product to a highly sophisticated implantable or life-supporting system.

Because the risks can differ substantially, MDR 2017 follows a risk-based regulatory approach.

The basic principle is that devices presenting greater potential risk generally face more extensive regulatory requirements.

This approach helps distinguish regulatory requirements according to the intended use, design characteristics and potential risks associated with a device.

What Products Can Be Medical Devices?

The regulatory definition covers products intended for purposes such as:

• Diagnosis
• Prevention
• Monitoring
• Treatment or alleviation of disease
• Investigation or replacement of anatomy
• Modification or support of physiological processes
• Supporting or sustaining life
• Disinfection of medical devices
• Control of conception

The exact regulatory status depends on the product's intended purpose, mode of action and applicable regulatory provisions.

Examples of products that can fall within the medical-device framework include:

• Diagnostic equipment
• Patient monitoring equipment
• Surgical instruments
• Implants
• Orthopaedic devices
• Dental devices
• Cardiovascular devices
• Respiratory devices
• Medical imaging equipment
• Laboratory and diagnostic devices
• Certain medical-device software
• Various consumables and accessories

Not every healthcare-related product is automatically a medical device. Classification and regulatory status must be determined according to the applicable rules and CDSCO classification information.

Applicability of MDR 2017 in India

MDR 2017 applies to medical devices regulated under India's Drugs and Cosmetics Act framework.

The regulatory system includes both medical devices and in-vitro diagnostic medical devices (IVDs), although IVDs have specific classification and performance-related provisions.

The rules can apply to different participants in the supply and regulatory chain, including:

• Indian manufacturers
• Foreign manufacturers
• Importers
• Authorized agents
• Testing laboratories
• Notified bodies
• Organizations conducting clinical investigations
• Other regulated stakeholders

The regulatory requirements depend on the product, its classification and the specific activity being undertaken.

Risk-Based Classification of Medical Devices

One of the most important parts of MDR 2017 is risk-based classification.

Medical devices are divided into four broad classes:

The classification is determined according to the rules and parameters in the First Schedule.

The classification process considers factors such as:

• Intended use
• Duration of contact
• Invasiveness
• Whether the device is active or non-active
• Implantation
• Whether the device supports or sustains life
• Potential biological effects
• Other applicable risk parameters

The exact classification should therefore not be assumed simply from the product's name.

CDSCO Risk Classification Lists

CDSCO publishes risk-based classification information for different categories of medical devices.

These lists can be updated as the regulatory authority evaluates additional devices and categories.

Examples of areas for which CDSCO has published classification information include:

• Dental devices
• Oncology
• Cardiovascular devices
• Neurological devices
• Radiotherapy
• Interventional radiology
• Respiratory devices
• Ophthalmology
• Urology
• Nephrology and renal care
• Operation theatre equipment
• Medical-device software
• Rehabilitation devices
• General hospital devices

The classification lists should be checked before preparing a regulatory application because the classification framework is dynamic.

Class A Non-Sterile and Non-Measuring Devices

An important exception exists for Class A medical devices that are both non-sterile and non-measuring.

These devices are exempted from the ordinary licensing requirement under the applicable provisions, but registration requirements still apply.

This distinction is important because "Class A" does not automatically mean that every Class A device has exactly the same regulatory pathway.

For example, a Class A device that has a measuring function or is supplied in a sterile condition may not qualify for the same exemption.

Manufacturing Regulation Under MDR 2017

Manufacturers in India must follow the applicable regulatory pathway based on the device's classification.

The process can involve:

1. Determining the intended use
2. Determining the applicable device classification
3. Preparing technical documentation
4. Establishing the required quality management system
5. Conducting applicable testing
6. Completing conformity assessment
7. Applying through the prescribed regulatory system
8. Obtaining the applicable manufacturing licence
9. Maintaining manufacturing and quality records
10. Meeting continuing regulatory obligations

Manufacturing requirements can differ substantially between Class A/B and Class C/D devices.

Manufacturing Licences

For commercial manufacturing, MDR 2017 uses different application and licence forms depending on the regulatory pathway.

For example, CDSCO's regulatory pathway identifies:

• Form MD-3 → Form MD-5 for certain Class A and B manufacturing licences
• Form MD-4 → Form MD-6 for certain Class A and B loan-licence arrangements
• Form MD-7 → Form MD-9 for Class C and D manufacturing
• Form MD-8 → Form MD-10 for applicable Class C and D loan-licence arrangements

The applicable licensing authority also depends on the device class and regulatory pathway.

State Licensing Authority and Central Licensing Authority

MDR 2017 uses two important regulatory authorities:

State Licensing Authority

The State Licensing Authority (SLA) has responsibilities for specified medical-device regulatory activities, particularly within the Class A and B manufacturing framework.

Central Licensing Authority

The Central Licensing Authority (CLA), operating through the central regulatory system, handles important areas including:

• Class C and D manufacturing
• Import licences
• Certain clinical and investigational permissions
• Other centrally regulated medical-device activities

The exact authority depends on the activity and applicable regulatory provision.

Import of Medical Devices

Imported medical devices are regulated under MDR 2017.

An importer generally needs to follow the applicable import licensing pathway before importing a regulated device into India.

For medical-device imports, the regulatory pathway includes:

Application in Form MD-14 → Import Licence in Form MD-15

The import process can involve documentation relating to:

• Manufacturer details
• Authorized agent
• Manufacturing site
• Device details
• Intended use
• Classification
• Regulatory approvals
• Technical documentation
• Quality management
• Labelling
• Testing
• Existing approvals or certificates where relevant

Import requirements can vary depending on the device and its regulatory status.

Role of the Indian Authorized Agent

Foreign manufacturers generally need an appropriate Indian regulatory representative or authorized agent for applicable regulatory activities.

The authorized agent can act as an important communication point between the overseas manufacturer and Indian regulatory authorities.

Documentation should clearly establish:

• Manufacturer identity
• Authorized-agent relationship
• Manufacturing location
• Device details
• Applicable regulatory permissions
• Responsibilities within India

The precise requirements should be checked against the current MDR framework and CDSCO application pathway.

Quality Management System Requirements

Quality management is an important part of medical-device regulation.

A suitable quality management system helps manufacturers establish controlled processes for areas such as:

• Production
• Inspection
• Testing
• Documentation
• Equipment
• Supplier management
• Corrective and preventive actions
• Complaints
• Traceability
• Non-conforming products
• Post-market activities

The level and nature of quality-management requirements depend on the device classification and applicable regulatory provisions.

Essential Principles of Safety and Performance

Medical devices are expected to meet applicable Essential Principles of Safety and Performance.

These principles are designed to address fundamental aspects of device safety and performance.

They can relate to:

• Design
• Construction
• Materials
• Electrical safety
• Mechanical safety
• Biological compatibility
• Software-related performance
• Packaging
• Labelling
• Risk management
• Protection against reasonably foreseeable risks

Manufacturers should maintain appropriate technical evidence demonstrating that applicable principles have been addressed.

Technical Documentation

Regulatory submissions generally require structured technical information about the device and its manufacturing process.

Depending on the product and pathway, documentation may include:

• Device description
• Intended purpose
• Classification rationale
• Design information
• Manufacturing information
• Risk analysis
• Performance data
• Test reports
• Stability information where applicable
• Clinical evidence
• Labelling
• Instructions for use
• Quality-management information
• Packaging information
• Post-market surveillance information

The specific documentation should be determined from the applicable CDSCO application requirements.

Testing and Evaluation

Testing is an important component of medical-device regulation.

Depending on the device, testing may involve:

• Physical testing
• Chemical or physicochemical testing
• Sterility testing
• Biocompatibility assessment
• Electrical safety
• Performance testing
• Mechanical testing
• Implantation testing
• Microbiological testing
• Software validation
• Other product-specific assessments

CDSCO has also developed and recognized medical-device testing laboratories for applicable testing and evaluation activities.

Notified Bodies

Notified bodies have an important role in conformity assessment for applicable medical devices.

They can audit manufacturing facilities and assess compliance with relevant quality-management and regulatory requirements.

The notified-body framework is particularly relevant to applicable Class A and B devices, while higher-risk devices follow more extensive central regulatory pathways.

A notified body must meet applicable accreditation and registration requirements before performing the relevant activities.

Clinical Investigation

Clinical investigation can become relevant when sufficient existing evidence is not available to establish the safety and performance of a medical device.

The regulatory pathway can involve:

• Clinical investigation plans
• Ethical oversight
• Clinical evidence
• Risk-benefit assessment
• Investigational-device permissions
• Clinical investigation permission
• Reporting and documentation

CDSCO's regulatory pathway identifies Form MD-22 → Form MD-23 for permission to conduct clinical investigation of an investigational medical device.

Separate permissions can apply to importing or manufacturing an investigational device.

Labelling Requirements

Labelling is another important component of MDR 2017.

Depending on the device, labels and accompanying information may contain details such as:

• Device name
• Manufacturer information
• Manufacturing details
• Batch or lot information
• Manufacturing date where applicable
• Expiry information where applicable
• Storage conditions
• Intended use
• Warnings and precautions
• Sterility information
• Licence information
• Other information required under applicable provisions

Labelling should be consistent with the approved or declared intended purpose and technical documentation.

2026 Update: Sterilization-Site Labelling

One of the important 2026 developments is the Medical Devices (Second Amendment) Rules, 2026, notified through G.S.R. 743(E).

The amendment introduces requirements concerning devices where sterilization activity is outsourced.

Manufacturers using an external sterilization facility must plan for the applicable requirement to identify the sterilization site's licence number on the device label.

The amendment also introduces a Ninth Schedule containing prescribed fees for specified medical-device tests and evaluations.

The sterilization-site labelling requirement has a six-month compliance period from the notification date, making this an important implementation point for manufacturers during 2026–2027.

2026 Update: European Union Countries and Rule 63

The Medical Devices (Third Amendment) Rules, 2026, through G.S.R. 744(E), made another notable change.

The amendment adds European Union countries to the countries referenced in the relevant provision of Rule 63.

This relates to the regulatory framework for certain devices without an Indian predicate and the circumstances in which clinical-investigation requirements may be considered for waiver or modification.

Importantly, this should not be interpreted as an automatic exemption from Indian regulatory requirements for every device approved or marketed in the European Union.

The applicable conditions under Rule 63 and the Central Licensing Authority's assessment continue to matter.

2026 Update: Quality Management for Certain Class A Devices

G.S.R. 744(E) also amended provisions relating to specified Class A non-sterile and non-measuring medical devices.

The amendment adds Quality Management System requirements alongside applicable standards in the relevant provisions.

This is an important development because Class A devices that fall under the applicable provisions should not be treated as completely outside quality-management considerations simply because they may benefit from a licensing exemption.

2026 Update: Medical Device Software

Medical-device software has become increasingly important as healthcare products incorporate software, algorithms, connectivity and digital functionality.

In July 2026, CDSCO published a Guidance Document on Medical Device Software under MDR 2017.

The guidance addresses areas including:

• Scope
• Definition
• Classification
• Standards
• Technical documentation
• Quality management
• Regulatory submissions

This reflects the growing importance of software within India's medical-device regulatory framework.

Registration and Licensing Are Not the Same

A common area of confusion is the difference between registration and licensing.

Registration may involve recording a device or establishment within the regulatory system.

Licensing, on the other hand, represents a formal regulatory permission for applicable activities such as manufacturing or importing.

The regulatory pathway should therefore be determined based on:

• Device classification
• Device status
• Manufacturing or import activity
• Sterile/non-sterile status
• Measuring/non-measuring status
• Applicable exemptions
• Current CDSCO notifications

Sale and Distribution Regulation

MDR 2017 also contains provisions relating to the distribution and handling of medical devices.

The regulatory framework includes requirements concerning the registration of premises and applicable activities associated with medical-device distribution.

Organizations involved in medical-device distribution should therefore consider:

• Device classification
• Applicable registration
• Storage conditions
• Traceability
• Documentation
• Labelling
• Complaint handling
• Recall procedures
• Regulatory records

Post-Market Surveillance

Regulation does not necessarily end after a device receives a licence.

Manufacturers and other stakeholders may have continuing responsibilities after a device enters the market.

Post-market activities can include:

• Monitoring complaints
• Recording adverse events
• Investigating safety issues
• Corrective actions
• Field safety corrective actions
• Recalls where necessary
• Maintaining records
• Reporting applicable incidents to authorities

Effective post-market surveillance helps identify problems that may not have been apparent during development or pre-market testing.

Adverse Event Reporting

Medical-device adverse events can provide important safety information.

Manufacturers and relevant stakeholders should maintain processes for identifying, documenting, evaluating and reporting applicable adverse events.

CDSCO provides medical-device adverse-event reporting mechanisms and related regulatory resources.

Medical Device Testing Laboratories

Testing laboratories are an important part of the regulatory ecosystem.

They may conduct testing or evaluation on behalf of manufacturers under the applicable MDR framework.

Testing can support:

• Product development
• Regulatory submissions
• Quality control
• Performance evaluation
• Safety assessment
• Compliance verification

CDSCO maintains information concerning registered medical-device testing laboratories.

Medical Devices and In-Vitro Diagnostics

IVDs are an important category within India's medical-device framework.

Examples can include products used for examination of:

• Blood
• Urine
• Tissue
• Other biological specimens

IVDs are also classified using a four-class risk system:

• Class A
• Class B
• Class C
• Class D

However, IVDs have specific performance-evaluation and regulatory requirements that should be considered separately from conventional medical devices.

Medical Device Software

Software can be regulated as a medical device when its intended purpose brings it within the applicable medical-device definition.

Examples can include certain software intended for:

• Diagnostic support
• Monitoring
• Analysis
• Clinical decision support
• Measurement
• Management of medical information where the regulatory definition applies

The regulatory status depends on intended purpose and functionality rather than simply whether the product is delivered electronically.

Regulatory Pathway: Simplified Overview

A simplified MDR 2017 pathway can look like this:

Step 1: Define the device

Identify the intended use, indications, operating principle and product characteristics.

Step 2: Determine classification

Use the applicable MDR 2017 classification rules and current CDSCO classification lists.

Step 3: Establish quality systems

Implement the applicable quality-management and manufacturing controls.

Step 4: Generate technical evidence

Prepare testing, risk-management, performance and other required technical documentation.

Step 5: Complete conformity assessment

Follow the applicable notified-body or regulatory assessment pathway.

Step 6: Apply for the appropriate licence

Use the applicable MDR forms and regulatory portal.

Step 7: Meet labelling requirements

Ensure labels and instructions meet applicable regulatory requirements.

Step 8: Maintain post-market controls

Monitor complaints, safety events and product performance after market entry.

Important MDR 2017 Forms

The following forms are among the commonly referenced MDR pathways:

The exact form required depends on the regulatory activity and device circumstances.

Online Regulatory Applications

Medical-device applications are processed through the applicable online regulatory systems.

CDSCO identifies online pathways including the SUGAM system and the National Single Window System (NSWS) for relevant regulatory processes.

Applicants should use the current portal instructions and application forms rather than relying on older application procedures.

Common Regulatory Challenges

Organizations working with medical devices may encounter challenges such as:

Incorrect classification

A product can be placed in an incorrect class if its intended purpose or risk characteristics are not properly evaluated.

Incomplete technical documentation

Missing test reports, risk documentation, manufacturing information or clinical evidence can complicate regulatory review.

Outdated classification information

CDSCO classification lists can change, so older classification documents should not automatically be treated as current.

Labelling inconsistencies

Information on the label should remain consistent with the regulatory application, intended purpose and supporting documentation.

Quality-management gaps

Manufacturing organizations need appropriate systems for document control, production, testing, complaints and corrective actions.

Post-market weaknesses

Regulatory responsibilities continue after market entry, making complaint and safety monitoring important.

Software-related uncertainty

Digital medical products can require careful analysis of their intended purpose, functionality, classification and supporting evidence.

How Manufacturers Can Prepare for MDR Compliance

A practical compliance framework can include:

• Maintain an updated device inventory
• Map each device to its current CDSCO classification
• Document intended purpose clearly
• Maintain technical documentation
• Establish appropriate quality-management procedures
• Track licences and registration details
• Review product labels periodically
• Maintain supplier and manufacturing records
• Maintain complaint-handling procedures
• Establish adverse-event reporting procedures
• Monitor CDSCO notifications
• Review new classification lists
• Track changes to MDR 2017
• Assess software-related regulatory requirements where applicable

MDR 2017 and International Regulatory Frameworks

India's medical-device framework has increasingly incorporated internationally recognized regulatory concepts.

These include:

• Risk-based classification
• Quality management
• Essential safety and performance principles
• Clinical evidence
• Conformity assessment
• Post-market surveillance
• Device identification
• Software-related regulatory considerations

However, compliance with another country's regulatory framework does not automatically mean that all Indian requirements are satisfied.

A device intended for the Indian market must meet the applicable Indian regulatory requirements.

What Changed Between the Earlier Framework and the Modern MDR System?

India's medical-device regulatory system has gradually moved toward a more comprehensive and risk-based framework.

Some important developments include:

• Wider regulation of medical devices
• Four-level risk classification
• Licensing of applicable device categories
• Greater emphasis on quality systems
• Formalized testing laboratories
• Notified-body participation
• Clinical investigation provisions
• Post-market surveillance
• Online application systems
• More detailed device-specific classification lists
• Increased attention to medical-device software
• Continuing amendments to address emerging regulatory requirements

2026 Regulatory Checklist

For organizations reviewing their MDR compliance in 2026, the following checklist can be useful:

• Confirm whether the product qualifies as a medical device

• Confirm whether it is an IVD

• Identify the intended purpose

• Verify the current CDSCO classification

• Determine whether it is Class A, B, C or D

• Check whether a Class A exemption applies

• Determine the correct manufacturing or import pathway

• Review applicable quality-management requirements

• Prepare technical documentation

• Check testing requirements

• Review clinical evidence requirements

• Verify labelling requirements

• Review outsourced sterilization requirements

• Check the latest applicable 2026 amendments

• Establish post-market surveillance procedures

• Monitor CDSCO updates regularly

Frequently Asked Questions

What is MDR 2017 in India?

MDR 2017 refers to India's Medical Devices Rules, 2017, which establish regulatory requirements for applicable medical devices, including classification, manufacturing, import, testing, licensing, labelling and post-market activities.

Who regulates medical devices in India?

The Central Drugs Standard Control Organization, under the Ministry of Health and Family Welfare, plays a central role in India's medical-device regulatory system. State Licensing Authorities also have responsibilities for specified device activities.

What are the four medical-device classes?

The four risk categories are Class A, Class B, Class C and Class D, ranging from low risk to high risk.

Are all Class A devices exempt from licensing?

No. The important exemption applies to Class A devices that are non-sterile and non-measuring, subject to the applicable regulatory provisions. Other Class A devices can have different requirements.

Is an import licence required for medical devices?

Regulated imported medical devices generally follow the applicable MDR import-licensing pathway. The standard import pathway identified by CDSCO uses Form MD-14 for application and Form MD-15 for the import licence.

Does MDR 2017 apply to medical-device software?

Certain medical-device software is regulated under MDR 2017. CDSCO published a specific guidance document on medical-device software in 2026 to provide additional regulatory direction.

What was an important MDR change in August 2026?

Two important amendments were notified in August 2026. One introduced sterilization-site labelling requirements and a Ninth Schedule for specified testing fees. Another added European Union countries to the relevant Rule 63 provision and introduced additional quality-management requirements for specified Class A non-sterile, non-measuring devices.

When does the outsourced sterilization labelling requirement become mandatory?

The 2026 amendment provides a six-month period from the notification date for mandatory compliance with the relevant sterilization-site labelling provision.

Does EU approval automatically remove Indian clinical requirements?

No. The 2026 Rule 63 amendment should not be interpreted as an automatic exemption for every European Union-approved device. The conditions and assessment requirements under Indian regulations remain relevant.

Where can current MDR information be checked?

Current rules, notifications, classification lists, guidance documents and regulatory notices should be checked through official CDSCO resources because the regulatory framework and device classifications can be updated.

Conclusion

The Medical Devices Rules, 2017 provide India's central framework for regulating medical devices through a risk-based approach.

The framework covers classification, manufacturing, imports, testing, quality systems, clinical investigation, labelling, licensing and post-market surveillance. The regulatory pathway becomes increasingly detailed as the potential risk associated with a device increases.

For manufacturers and importers, one of the most important steps is determining the correct classification and regulatory pathway before preparing an application.

The 2026 regulatory developments also demonstrate that MDR 2017 continues to evolve. Recent changes address areas including outsourced sterilization labelling, testing fees, quality-management requirements for specified Class A devices, recognition of European Union countries under Rule 63 and regulatory guidance for medical-device software.

Because notifications, classification lists and guidance can change, organizations should verify the latest CDSCO requirements before submitting an application or making regulatory decisions.