A Competent Authority is the national government body in each EU or EEA member state responsible for implementing and enforcing the Medical Device Regulation (EU MDR 2017/745) and IVDR (2017/746). It oversees market surveillance, vigilance, and clinical investigations, designates and monitors notified bodies, and can restrict, suspend, or recall unsafe devices.
What is a Competent Authority?
A Competent Authority (CA) is the government regulator that a single EU or EEA member state appoints to apply medical device law within its territory. Examples include BfArM in Germany, ANSM in France, and FAMHP in Belgium. Article 101 of the EU MDR requires every member state to designate one or more competent authorities and grant them the powers necessary to enforce the regulation.
The Competent Authority operates above the routine certification process. It generally does not issue CE certificates itself. Instead, it designates and supervises Notified Bodies, oversees higher-level regulatory enforcement, and intervenes directly on matters relating to safety, vigilance, registration, inspections, and market surveillance.
Outside the European Union, equivalent functions are performed by national regulators such as the FDA (United States), Health Canada, TGA (Australia), PMDA (Japan), and CDSCO (India), although each operates under its own legal framework.
Why the Competent Authority matters in medical device development
For manufacturers, the Competent Authority is the regulator that ultimately controls whether a device can enter or remain on the market. A CA can request technical documentation, inspect manufacturing facilities, require a Field Safety Corrective Action (FSCA), suspend registrations, or order a product recall.
The commercial consequences are significant. Failed inspections may delay market entry while manufacturers address findings. Poor vigilance reporting can escalate into recalls, regulatory actions, or reputational damage. Because information shared with one Competent Authority is coordinated across EU member states, an issue identified in one country may quickly trigger regulatory attention throughout the European market.
Maintaining complete documentation and an effective quality system therefore protects both patient safety and business continuity.
How a Competent Authority works
Under EU MDR and IVDR, Competent Authorities perform several core regulatory functions:
- Notified Body oversight. Designate, monitor, audit, suspend, or withdraw the designation of Notified Bodies under EU MDR Chapter IV (Articles 35–50). A Notified Body’s certificate is not the same as Competent Authority approval.
- Market surveillance and enforcement. Conduct inspections, review technical documentation, investigate complaints, restrict product availability, require corrective actions, or apply enforcement measures under Chapter VII (Articles 93–100).
- Vigilance. Receive serious incident reports and Field Safety Corrective Actions (FSCAs) under Articles 87–92, evaluate manufacturer actions, and determine whether additional regulatory measures are necessary.
- Clinical investigations. Review and authorize clinical investigations conducted within their jurisdiction under EU MDR Chapter VI.
- Registration. Validate EUDAMED actor registrations and issue the Single Registration Number (SRN) required before manufacturers can complete device registration.
Regulatory coordination occurs through the Medical Device Coordination Group (MDCG) established under Article 103, which publishes guidance documents that promote consistent interpretation of the MDR across member states.
From 28 May 2026, the first mandatory EUDAMED modules became operational, making Competent Authority validation of actor registrations a mandatory step toward EU market access. Until the EUDAMED vigilance module becomes fully operational, manufacturers continue submitting serious incident reports directly to national Competent Authorities.
Common challenges and best practices
One of the most common misconceptions is believing that receiving a CE certificate from a Notified Body completes regulatory oversight. In reality, the Competent Authority retains the legal power to inspect manufacturers, request documentation, investigate complaints, and initiate enforcement actions throughout the product lifecycle.
Documentation deficiencies are another common challenge. During inspections, Competent Authorities routinely evaluate technical documentation prepared under EU MDR Annex II and Annex III. Missing traceability, incomplete PMS records, or outdated technical files frequently lead to findings.
Successful manufacturers typically:
- Keep technical documentation inspection-ready throughout the product lifecycle.
- Maintain complete traceability between design, risk management, clinical evidence, and post-market surveillance.
- Prepare standardized vigilance, recall, and FSCA documentation before incidents occur.
- Map each product and manufacturing site to the appropriate Competent Authority and understand country-specific reporting obligations.
- Keep EUDAMED registrations current as products, certificates, or organizational details change.
How SJML helps with Competent Authority interactions
Syrma Johari MedTech (SJML) runs QARA as a managed Compliance-as-a-Service function that covers regulatory strategy, device classification, and international registration across FDA 510(k), CE marking, and EU MDR/IVDR technical files. Its teams prepare and remediate DHF and technical documentation, run ISO 13485 and MDSAP-aligned quality systems, and manage post-market surveillance, vigilance, complaints handling, and EUDAMED submissions. That support helps manufacturers meet Competent Authority expectations for inspections, registration, and adverse event reporting, and scales from startups through large OEMs.
Frequently asked questions
A Competent Authority is a government regulator responsible for enforcing medical device legislation, overseeing market surveillance, and supervising Notified Bodies. A Notified Body is an independent organization designated by a Competent Authority to perform conformity assessments and issue CE certificates for higher-risk devices. The Notified Body certifies products, while the Competent Authority regulates and enforces compliance.
Each EU member state designates its own Competent Authority, such as BfArM in Germany or ANSM in France. Outside Europe, equivalent national regulators include the FDA in the United States, Health Canada, the TGA in Australia, the PMDA in Japan, and the CDSCO in India. Manufacturers should identify the appropriate regulatory authority for every target market.
A Competent Authority can inspect manufacturers, distributors, and importers, review technical documentation, require corrective actions, initiate market surveillance investigations, order Field Safety Corrective Actions (FSCAs), mandate recalls, suspend market access, and apply regulatory penalties. It also validates EUDAMED registrations and reviews serious incident reports submitted through the vigilance system.
Serious incidents and Field Safety Corrective Actions (FSCAs) are reported to the appropriate national Competent Authority, not the Notified Body. Until the EUDAMED vigilance module becomes fully operational, manufacturers continue submitting these reports directly to national Competent Authorities within the reporting timelines specified in EU MDR Articles 87–92.
Related terms
- Notified Body
- Authorised Representative
- EU MDR 2017/745
- EUDAMED
- Field Safety Corrective Action (FSCA)
