Updated 6th June 2026
Person Responsible for Regulatory Compliance (PRRC)
The introduction of the Medical Device Regulation (MDR) and In Vitro Diagnostic Regulation (IVDR) fundamentally changed the compliance landscape by introducing a mandatory, highly scrutinized role: the Person Responsible for Regulatory Compliance (PRRC).
Under Article 15, manufacturers and Authorized Representatives must have a qualified PRRC permanently and continuously at their disposal to ensure that the supervision, control, and post-market safety of devices are actively managed within the organization. As European Competent Authorities and Notified Bodies tighten their auditing standards, understanding the exact boundaries of this role is critical to maintaining market access.
1. Mandatory PRRC Qualifications & Experience Standards
To step into the role of a PRRC, an individual must possess requisite expertise in the field of medical devices or in vitro diagnostic medical devices. As outlined in Article 15(1), this expertise must be formally proven through one of two pathways:
The Academic Pathway: A formal university degree, diploma, or recognized equivalent course of study in law, medicine, pharmacy, engineering, or a relevant scientific discipline, combined with at least one year of professional experience in regulatory affairs or quality management systems (QMS) relating to medical devices or IVDs.
The Experience Pathway: A minimum of four years of substantive professional experience in regulatory affairs or QMS within the medical device or IVD sector.
The Standard for Valid Experience
The Medical Device Coordination Group clarified in its md_mdcg_2019_7_guidance document that professional experience must be substantive and recent.
⚠️ Audit Warning: The guidance explicitly states that experience limited to the administrative handling of documents or merely shadowing regulatory affairs professionals will not be considered sufficient. Manufacturers must maintain robust evidence of their PRRC’s practical capabilities—such as detailed CVs and training certificates—as Competent Authorities frequently request these during market surveillance inspections.
2026 Audit Focus Alert:
Notified Bodies are actively verifying the "permanently and continuously at their disposal" requirement for outsourced PRRCs. Your contractual agreement must explicitly define their operational availability, swift response times for vigilance reporting, and proof that they are not over-allocated to too many legal entities.
2. Outsourcing Guidelines for Micro and Small Businesses
Recognizing that small companies may lack the resources for a full-time, in-house regulatory executive, Article 15(2) offers a vital lifeline for micro and small enterprises (companies with fewer than 50 employees and an annual turnover/balance sheet under €10 million). These entities are not required to have the PRRC directly within their organization but must have them “permanently and continuously at their disposal.”
This allows smaller manufacturers to subcontract the PRRC role to an external third-party expert. However, this setup is under intense audit scrutiny.
What Your PRRC Contract Must Contain
To satisfy a Notified Body, your contract with an external PRRC must be explicit. The MDCG 2019-7 Guidance framework notes that the contract must define how continuous availability is realistically achieved. It clarifies that while the PRRC must be available to perform operational duties and react in a timely manner (especially during vigilance or recall events), it does not legally imply a 24-hour daily availability.
The contract must also clearly document that the designated individual meets the precise qualification criteria under Article 15(1).
Need a Fully Compliant, Outsourced PRRC?
Navigating the strict boundaries of MDCG 2019-07 Rev. 1 requires more than just a signature. Your outsourced PRRC must have substantive, recent experience, ensure continuous availability, and maintain total independence from your Authorized Representative to pass Notified Body scrutiny.
At Patient Guard, we provide dedicated, highly qualified Article 15 PRRC services tailored specifically to micro and small medical device and IVD manufacturers.
Explore Our Dedicated PRRC Services →Deep Dive: The 5 Statutory Responsibilities of a PRRC
The guidance framework in MDCG 2019-07 Rev. 1 explicitly aligns the day-to-day duties of the PRRC with the overarching organizational requirements of medical device and IVD manufacturers. It is not a passive or symbolic title; the PRRC holds direct, legal accountability for ensuring five specific pillars of compliance are maintained:
1. Pre-Release Product Conformity Checks
According to Article 15(3)(a), the PRRC must ensure that device conformity is properly checked in accordance with the manufacturer's Quality Management System (QMS) before any single batch or device is released into the market. The guidance notes that simply checking for the physical presence of a document is entirely insufficient. The PRRC is expected to actively audit and sample:
- The validity and consistency of test reports against the latest standards.
- Whether technical documentation reflects recent product or design changes before implementation.
- That all mandatory verifications, validations, and pre-release QMS testing have been fully signed off.
2. Technical Documentation & Declaration of Conformity Maintenance
Under Article 15(3)(b), the PRRC is directly responsible for ensuring that the comprehensive Technical Documentation and the formal EU Declaration of Conformity are drawn up, compiled accurately, and kept continually up to date. If an audit reveals gaps in the technical file, the PRRC is held accountable for failing to enforce this oversight.
3. Robust Post-Market Surveillance (PMS) Oversight
In line with Article 15(3)(c), the PRRC must assess the real-world performance and relevance of the manufacturer's Post-Market Surveillance system. The PRRC must ensure that the PMS system effectively gathers reactive and proactive data to support continuous device safety, risk management updates, and product improvements.
4. Comprehensive Vigilance & Incident Reporting
Under Article 15(3)(d), the PRRC is tasked with ensuring all strict reporting timelines to European Competent Authorities are met. This includes the systematic recording, tracking, and mandatory reporting of serious incidents, Field Safety Corrective Actions (FSCAs), and statistical trend reporting.
5. Investigational & Performance Study Statements
For manufacturers designing investigational medical devices or devices intended for interventional clinical performance studies, the PRRC must ensure the mandatory statement required by Annex XV (MDR) or Annex XIV (IVDR) is formally issued. This statement legally signs off that every possible precaution has been taken to protect the health and safety of the human subjects involved.
The PRRC's 'Duty to Escalate':
Given the immense regulatory burden of these five duties, the December 2023 guidance introduces a vital clause: the PRRC is legally obligated to formally inform top management if the manufacturer's organization fails to provide the necessary information, or if conditions prevent the PRRC from fulfilling their Article 15 duties effectively.
3. Strict Separation of Roles: Preventing Conflicts of Interest
One of the most vital compliance guardrails reaffirmed by the MDCG is the absolute independence required between a manufacturer and its European Authorized Representative (AR).
Can one individual act as the PRRC for a non-EU manufacturer and its Authorized Representative? No.
Even if the non-EU manufacturer and the AR belong to the exact same parent company or large corporate organization, they cannot share a PRRC. The regulations deliberately demand that the AR adds an independent, additional layer of scrutiny over the manufacturer’s compliance, vigilance, and post-market tracking. Allowing the same person or the same external consulting firm to hold both roles completely hollows out this regulatory check-and-balance system.
Crucial Rule for Outsourcing: The PRRC of a micro or small enterprise and the PRRC of that enterprise’s Authorized Representative shall not belong to the same external organization
4. Financial Outlook & 2026 Talent Market Realities
The medical device regulatory sector faces a continuous shortage of qualified talent, which has significantly driven up recruitment and overhead costs for in-house positions. For companies insisting on hiring a full-time, in-house Article 15 specialist in the UK, current base salary expectations generally span the following brackets:
| Role | Average Base Salary Range (2026 Data) |
|---|---|
| Regulatory Affairs Specialist | £45,000 – £68,000 |
| Quality Assurance Specialist | £38,000 – £52,000 |
| Regulatory Affairs / QA Manager | £65,000 – £95,000+ |
For many small to mid-sized manufacturers, these salary requirements—combined with the legal liabilities the PRRC faces—make outsourcing the role to an established regulatory consultancy the most financially predictable and legally compliant path forward.
5. Eudamed Registration and the Strict 7-Day Rule
Once a PRRC is appointed, their compliance lifecycle is tracked publicly. Under Article 31 (MDR) and Article 28 (IVDR), manufacturers and authorized representatives are legally mandated to enter their PRRC’s name, legal address, and direct contact details into the Eudamed database.
The Compliance Clock: If you change your PRRC, terminate a subcontracting agreement, or if your PRRC’s contact details change, you must update this information in Eudamed within one week. This tight window means regulatory managers must have their documentation completely finalized before making operational organizational shifts.
FAQs
What is a PRRC, and why is it important for medical device manufacturers?
A Person Responsible for Regulatory Compliance (PRRC) is a regulatory role mandated under the EU Medical Device Regulation (MDR 2017/745) and In Vitro Diagnostic Regulation (IVDR 2017/746). The PRRC ensures that a manufacturer complies with regulatory requirements throughout the device lifecycle.
Why it matters: Appointing a PRRC is mandatory for EU medical device and IVD manufacturers and essential for ensuring compliance with MDR and IVDR regulations.
Who can serve as a PRRC?
A PRRC must have:
- Qualifications: A university degree in law, medicine, pharmacy, engineering, or a related field.
- Experience: At least one year of professional experience in regulatory affairs or quality management systems for medical devices.
For smaller manufacturers without in-house expertise, the PRRC role can be outsourced to a qualified consultant.
What are the main responsibilities of a PRRC?
The PRRC is responsible for:
- Product Conformity: Ensuring that devices conform to MDR/IVDR requirements.
- Technical Documentation: Overseeing the preparation and maintenance of documentation.
- Post-Market Surveillance (PMS): Ensuring PMS activities are conducted and reports are generated.
- Vigilance Reporting: Reviewing and reporting adverse events to the relevant authorities.
- Regulatory Compliance: Ensuring Declaration of Conformity and CE marking requirements are met.
Key insight: The PRRC acts as the compliance backbone for manufacturers operating in the EU market.
Does every manufacturer need a PRRC under the EU MDR/IVDR?
Yes, all manufacturers of medical devices and IVDs intending to market products in the EU must appoint a PRRC. This includes:
- EU-based manufacturers.
- Non-EU manufacturers, who must appoint a PRRC via their EU Authorized Representative (EU AR).
Key takeaway: Non-compliance with the PRRC requirement can result in regulatory penalties or denial of market access.
What is the difference between a PRRC and an EU Authorized Representative?
- PRRC: Ensures compliance with MDR/IVDR and oversees regulatory and quality activities.
- EU Authorized Representative (EU AR): Represents non-EU manufacturers in regulatory matters and acts as the point of contact with EU authorities.
Key insight: While the EU AR can appoint a PRRC on behalf of a non-EU manufacturer, the two roles have distinct responsibilities.
Can Patient Guard provide PRRC services for medical device manufacturers?
Yes! Patient Guard offers professional PRRC services, including:
- Acting as the PRRC for EU-based or non-EU manufacturers.
- Overseeing technical documentation, PMS, and vigilance activities.
- Ensuring compliance with MDR/IVDR requirements.
- Supporting regulatory audits and inspections.
Why choose Patient Guard: With extensive experience in regulatory compliance and MDR/IVDR expertise, we provide tailored PRRC solutions to meet your business needs efficiently.
Patient Guards Recent Posts
Post-Deadline Reality Check: I’ve Submitted My IVDR Class C – Now What?
Submitted your IVDR Class C application? Learn what happens next, common causes of delays, review timelines, and why the September 2026 contract deadline is critical for maintaining EU market access.
The MHRA 2026 Regulatory Roadmap Explained
Learn how the MHRA 2026 Regulations will impact UKCA compliance, IVD classifications, AI medical devices, IRP pathways, and post-market surveillance.
Medical Device Regulatory Consulting Services Explained
Explore medical device regulatory consulting services for ISO, FDA, EU, and more. Build compliant systems, pass audits, and scale globally with expert support.
