EU MDR PSURs: The Annual Reporting Clock That Skips Class IIa

The periodic safety update report under Article 86 of EU MDR 2017/745 gets described, almost universally, as an annual filing. For a large share of the devices it covers, that description is simply wrong. Class IIb and Class III devices do update their PSUR at least annually — but Class IIa devices update theirs only when necessary, and at least every two years. A program that applies one PSUR calendar across a mixed-class portfolio is either over-reporting on its IIa devices or, more dangerously, has never checked whether it is doing the opposite for IIb and III.

Two different clocks by class

Article 86(1) sets the periodicity directly, and it is not uniform. Manufacturers of Class IIb and Class III devices must update the PSUR for each device, or each category or group of devices, at least annually. Manufacturers of Class IIa devices update the PSUR when necessary and at least every two years. Neither obligation applies to Class I devices at all — those manufacturers instead maintain a post-market surveillance report under Article 85, kept current and available on request, with no notified body review built into the article.

Two different review paths

The class line does not stop at periodicity. It also decides who actually sees the report and when. For Class III devices and implantable devices, the PSUR has an active review cycle: manufacturers submit it through the electronic system referenced in Article 92 — the same EUDAMED infrastructure now mandatory across its core modules — to the notified body involved in the conformity assessment. That notified body reviews the report and adds its evaluation to the electronic system, and both the PSUR and the evaluation become visible to competent authorities through it.

• Class III and implantable devices. PSUR submitted via EUDAMED to the notified body; the notified body reviews it and records an evaluation in the same system; competent authorities see both.
• Class IIa and non-implantable Class IIb devices. PSUR stays inside the technical documentation, made available to the notified body involved in conformity assessment and, on request, to competent authorities — with no routine submission-and-evaluation cycle.
• Class I devices. No PSUR at all; the Article 85 PMS report serves the equivalent function, without a notified body in the loop.

A Class IIa PSUR and a Class III PSUR answer the same article, but not the same reviewer, on the same clock, or through the same channel. Treating them as one obligation is where the gaps open. Why the class split matters operationally

What the report actually has to contain

Article 86 ties the PSUR's content directly to the post-market surveillance system the manufacturer is already required to run: a summary of the results and conclusions of the analyses of post-market surveillance data gathered under the Article 84 PMS plan, together with a rationale and description of any preventive and corrective actions taken. Where relevant to the device's risk profile, that summary draws on the main findings of the PMCF plan's results, the conclusions of the benefit-risk determination, and — where practicable — the volume of sales, an estimate of the size and characteristics of the population using the device, and the frequency of use. None of that is new data collection; it is the PMS plan's output, packaged on the class-appropriate clock and routed through the class-appropriate reviewer.

The PSUR is also not the vigilance system. It reports on a schedule, drawing on the surveillance program's cumulative picture; a serious incident still triggers vigilance reporting on its own, much shorter clock regardless of where a device sits in its PSUR cycle. Programs that conflate the two — or that build a single PSUR template and stretch it across every class in the portfolio — tend to find the gap at the worst time: during a notified body's technical documentation review, not during their own planning cycle.