Step 1: Pre-Evaluation

Defining the Right Regulatory Path: Classifying Your Drug-Device Combination Product

The first and most crucial step in the regulatory pathway is determining the correct classification of your product—whether it qualifies as an integral drug-device combination (iDDC), a co-packaged product, or both. Ideally, this decision should be made early in development and double-checked again for accuracy, as it defines the applicable regulatory route: either the EU Medical Device Regulation (MDR 2017/745) or Directive 2001/83/EC for medicinal products.

In the section that follows, we’ll explore key aspects of this classification, including:

• Differentiating between iDDCs and co-packaged products
• Verifying the need for a CE mark
• Understanding the role of Notified Bodies (NBs) in the approval process

These foundational elements are essential for a smooth and compliant development pathway.

CE Mark and Notified Body Involvement: Key Steps in the Regulatory Assessment

Once the classification of your combination product is determined, the next step is verifying the regulatory status of the medical device component—particularly its CE marking and the involvement of a Notified Body (NB).

CE Mark Verification

Start by evaluating whether the device component already holds a valid CE mark under the Medical Device Regulation (MDR). It’s essential to ensure that its intended purpose aligns with the therapeutic or medical function of the combination product.

• CE-marked and compatible: If alignment is confirmed, proceed confidently to the next step in the regulatory pathway.
• No CE mark or not compatible:
  - For co-packaged products, identify a suitable alternative that meets MDR requirements.
  - For iDDCs, classify the device component per MDR Annex VIII rules as it would be a standalone medical device.

Notified Body (NB) Involvement

The need for NB involvement depends on the device classification, which is determined based on factors such as the intended use, invasiveness, duration of contact, and the potential risk to users or patients—defined in detail in MDR Annex VIII.

• Class I devices (e.g., non-sterile syringes without measurement markings) typically do not require NB review.
• Higher-risk classes (Is, Im, IIa, IIb, III)—including sterile prefilled syringes or syringes with graduation—do require the involvement of a Notified Body seeking for Notified Body opinion (NBOp).

Understanding and fulfilling these requirements early in development ensures smoother regulatory progress and helps avoid costly delays.

Step 2: Data Creation & Documentation

From top to bottom the tasks of step 2 and the substeps 2.1 and 2.2 are evaluated separately for the following products:
1. iDDC with and without NB
2. iDDC with CE-marked device component
3. Co-packed/ referenced

iDDC with and without NB

Step 2.1
Objective: For the iDDCs with and without a NB compliance to the applicable GSPRs, Annex I, MDR is to be demonstrated.

The GSPRs – the General Safety & Performance requirements are a set of requirements covering the whole range of medical devices. From a simple tongue plaster to MRT. For placing of a medical device on the EU market, compliance to the applicable GSPRs is to be demonstrated.

Annex I is divided into three main chapters: (details see below table)

• Chapter I general requirements
• Chapter II requirements regarding design and manufacture
• Chapter III requirements regarding the information supplied with the device

Covering requirements that ensure that device is:

• Safe for patients, users, and others
• Perform as intended
• Manufactured and designed to minimize risk

Each chapter does include several requirements, as outlined in the table below. Each of those requirements includes a subset of requirements resulting in total of approximately 200 requirements.

Table 1 GSPR overview

CHAPTER I GENERAL REQUIREMENTS	CHAPTER II REQUIREMENTS REGARDING DESIGN AND MANUFACTURE	CHAPTER III REQUIREMENTS REGARDING THE INFORMATION SUPPLIED WITH THE DEVICE
1 Safe; perform as intended	10 Chemical, physical and biological properties	23 Label and instructions for use
2 Risk reduction, risk-benefit ratio	11 Infection and microbial contamination
3 Risk Management System	12 Devices incorporating a substance considered to be a medicinal product
4 Risk control measures	13 Devices incorporating materials of biological origin
5 Eliminating & reducing risks related to use error	14 Construction of devices and interaction with their environment
6 Lifetime	15 Devices with a diagnostic or measuring function
7 Transport & Storage	16 Protection against radiation
8 Minimising foreseeable risks, and any undesirable side-effects	17 Electronic programmable systems
9 Devices without a medical purpose	18 Active devices and devices connected to them
	19 Particular requirements for active implantable devices
	20 Protection against mechanical and thermal risks
	21 Protection against the risks posed to the patient or user by devices supplying energy or substances
	22 Protection against the risks posed by medical devices intended by the manufacturer for use by lay persons

Documenting the tasks in a tabulated for this results in the so-called GSPR Checklist (see annex II MDR, 4), see example below.

Step 2.2
While Annex I defines the WHAT (safety and performance requirements), Annex II specifies the HOW (documentation structure and data organization), detailing the technical documentation requirements necessary to demonstrate compliance to the applicable GSPRs.

That’s what some NBs expect being provided (and recommended as the review is facilitated by a familiar structure of the data).

Although not explicitly required by Article 117, Annex II not only provides a structure but also offers guidance regarding the content requirements for fulfilling Annex I.

Table 2 Summary of Annex II MDR

CH.	Description	Main Content	Key Points/Examples
1	Device description and specification, including variants and accessories	- General description of the device - Intended purpose and users - Risk class and justification - Principles of operation - Novel features - Accessories and variants - Reference to previous and similar generations	- General description of the device - Intended purpose and users - Risk class and justification - Principles of operation - Novel features - Accessories and variants - Reference to previous and similar generations
2	Information supplied by the manufacturer	- Labels - Instructions for Use (IFU) - Other information provided with the device	- All labeling and IFU as supplied to users
3	Design and manufacturing information	- Description of design and manufacturing processes - Manufacturing environment controls - Suppliers and subcontractors	- Design drawings - Design Specifications - Manufacturing process details - List of critical suppliers
4	General safety and performance requirements	- Evidence of conformity with GSPRs (Annex I) - Declaration of conformity - List of applicable standards and guidelines	- How the device meets safety/performance requirements - Applied harmonized standards
5	Risk management	- Benefit-risk analysis - Risk management process and results - Compliance with ISO 14971	Risk Management file Including Plan, report, analysis
6	Product verification and validation	- Pre-clinical and clinical data - Biocompatibility, electrical safety, software validation - Sterilization, stability, packaging - Additional info for specific cases (e.g., medicinal products, animal tissues, measuring function)	Test reports/ test summaries, e.g. Design verification studies Biocompatibility plan & report, clinical evaluation, transport, packaging, sterilization…

Why is that information about Annex II, I helpful?
Let us first take a closer look at the expectations regarding the data and information related to the medical device component within the dossier. These expectations are outlined in the EMA Guideline.

Some examples:

Module 3.2.

P.2 Pharmaceutical Development
This section of the dossier should summarise the information relevant to development of the specific medical device (part) integrated into the medicinal product, including the rationale for its selection in the specific sections of 3.2.P.2. A risk assessment summary for the medicinal product, aligned with relevant risk management principles in ICH Q9, should be presented.

P.3.5 Process validation and/or evaluation
Process validation for the integral medicinal product manufacturing process should be performed, as appropriate, in line with relevant European guidelines, including the assembly and sterilisation of the device (part) (if applicable) and any filling steps.

P.8 Stability
Stability studies for the integral medicinal product (or variant, where justified) should include the following tests/studies:
4. Functionality tests determined as stability-indicating CQAs for the medicinal product (refer to P.2.4).

The requirements defined by the EMA Guideline, the Annex II & I do correlate quite well, as shown with the examples below:

Table 3 Correlation between Annex II, I, & EMA guideline (excerpt)

Annex II MDR sections	Annex I MDR	Dossier / CTD
3 Summary of development 3a) information to allow the design stages applied to the device to be understood;	1 “… devices shall be designed & manufactured…” See also, e.g. 7, 10	3.2.P.2 This section of the dossier should summarise the information relevant to development of the specific medical device (part) integrated into the medicinal product,
3 Process verification & validation („ 3b (…) complete information and specifications, including the manufacturing processes and their validation“)	e.g. 1, 7, 10	3.2.P.3.5
6 Stability testing („ detailed information regarding test design, complete test or study protocols (…) for stability, including shelf life; “	6, 11.3, 11.4	3.2.P.8

Thus, this correlation might serve for various purposes, e.g.
- Guidance where to find data for the device component in the dossier (ideally) suitable demonstrating compliance to Annex I / II
- Guidance where to allocate device component data in the dossier
- Guidance where to allocate device component data in the TD

Even if it is considered as a single integral product, it will be unavoidable to divide the data in principle into three buckets, as these are used for different purposes.

• Part 1 and 2 for the Notified Body Opinion (NBOp) or the MAHs declaration of conformity.
• The MAHs declaration of conformity or NBOp plus bucket 3 and 2 for approval by the authorities.

Redundancies cannot be avoided, but can be reduced through a clever structure, which ultimately can also simplify data maintenance.

Explanation of the Structure:
Buckets 1 & 2: Focus on documentation for the Notified Body Opinion (NBOp) and MAHs declaration of conformity (e.g., GSPR checklist, risk management, technical specifications).

Parts 3 & 2: Combine the NBOp/ MAHs declaration of conformity with additional data (e.g., clinical, stability, or drug-specific information) for regulatory approval by authorities (e.g., EMA or national agencies).

Redundancy Management: Use cross-references and modular documentation to avoid duplication while ensuring all requirements for both the NBOp and marketing authorization are met. The correlation table between Annex II, I and the CTD might serve as a pointing document.

Data Maintenance: A well-organized structure ensures easier updates and compliance tracking over the product lifecycle.

iDDC with CE-marked device component

Step 2.1
Objective: Demonstrate compatibility and reconfirm the suitability of the device for use with the drug.

Data Assessment/Creation Steps:

1. Reconfirm the scope of the CE-marked device for the combination product, including its intended use (indications, limitations), manufacturing processes, assembly requirements, and other relevant parameters.
2. Evaluate existing data to determine its adequacy in addressing the requirements outlined in the EMA Guideline.
3. Address potential gaps: While the CE mark provides a presumption of conformity with relevant requirements, additional data may still be necessary to fully demonstrate compliance with the General Safety and Performance Requirements (GSPRs) for the particular combination.

Step 2.2
Objective: Drug-device compatibility data

Documentation Compilation:

1. Include a valid CE certificate or Declaration of Conformity (DoC) for the device to demonstrate compliance with applicable General Safety and Performance Requirements (GSPRs).
2. Embed evidence documentation (e.g., supplier data, internal test reports, risk assessments) in the dossier to confirm compatibility between the device and medicinal product. This should address interaction risks, usability, and performance throughout the product’s lifecycle.
3. Structure the data in line with CTD requirements provided in the EMA guideline

Key Considerations:

• Supplier Data: If relying on supplier-provided evidence (e.g., biocompatibility, sterilization validation), ensure it is traceable and referenced in the dossier.
• Own Data: Include in-house compatibility studies (e.g., leachables/extractables, dose accuracy) to address gaps not covered by the CE mark or supplier documentation.
• Risk Assessment: Align with ICH Q9/ISO 14971 principles to justify compatibility and mitigate interaction risks.

Co-packed/referenced

Step 2.1
Target: Demonstration of compatibility of the device with the drug.

Data Assessment/Creation:

• Request and assess device supplier data, including the CE certificate, scope of certification, and additional documentation such as the Instructions for Use (IFU) and any other relevant technical or regulatory documents.
  
  Avoid assuming device manufacturer obligations under MDR Article 16 by ensuring:
  - The device’s intended use remains unchanged.
  - No modifications are made to the device that could void its CE mark
• Follow EMA Guideline requirements to ensure alignment with regulatory expectations for a co packed/ referenced product

Step 2.2
Target: Drug-device compatibility data.

Documentation Compilation:

• Include a valid CE certificate or Declaration of Conformity (DoC) for the device to confirm compliance with applicable regulations.
• Embed evidence documentation (e.g., supplier-provided data, internal test reports, risk assessments) within the dossier to substantiate compatibility and safety of the device-drug combination. Ensure all data is traceable and cross-referenced in alignment with CTD structure (e.g., Module 3.2.P.7 for container closure system details).

Key Considerations

1. Regulatory Compliance and CE Marking

• CE Mark Validity: Ensure the co-packaged device has a valid CE mark under MDR (or MDD during transition periods). Verify the device’s intended use aligns with its original certification when paired with the medicinal product
• MDR Transition Challenges: If the device is transitioning from MDD to MDR, confirm the manufacturer’s compliance timeline to avoid market disruptions
• Unique Device Identification (UDI): Include the device’s UDI in documentation (if applicable) and ensure traceability

2. Documentation and Dossier Integration

• EMA Guidelines: Follow EMA’s quality documentation requirements for co-packaged products, focusing on:
  - Container Closure System (Module 3.2.P.7): Detail device specifications, sterility, and compatibility with the drug
  - Pharmaceutical Development (Module 3.2.P.2): Describe how the device impacts drug safety, efficacy, and usability (e.g., dosing accuracy)
  - Stability Data: Provide in-use stability data if the device affects drug integrity (e.g., sterility maintenance)
• Supplier Agreements: Secure contracts ensuring the device manufacturer remains responsible for MDR compliance (e.g., post-market surveillance)

Summary
Depending of the product, the following should be available:

	iDDC with NB	iDDC without NB	iDDC with CE marked device	Co-packed/ referenced
Deliverable	GSPR Checklist Technical documentation acc. Annex II CTD	GSPR Checklist Technical documentation acc. Annex II MAH’s statement of compliance with the relevant GSPRs of the MDR Annex I CTD	GSPR Checklist (part of CE certificate/ Declaration of conformity for the device component, in a best case scenario) Suitability & compatibility data for the device component CE certificate/ Declaration of conformity for the device component CTD	Suitability & compatibility data for the device component CE certificate/ Declaration of conformity for the device component CTD
Next step	NBOp	Authority approval