Patient Guard

Person Responsible for Regulatory Compliance (PRRC) MDR



This blog will explain about the Person Responsible for Regulatory Compliance (PRRC) in relation to EU Medical Device CE marking under the MDR, and EU In Vitro Diagnostic CE marking under the IVDR. We will look at the necessary steps to ensure that your medical device or IVD is compliant with the medical device and IVDR EU market.


Before the introduction of new medical device regulations in Europe, there was no specific legal requirement for medical device manufacturers to check their documentation or ensure that their devices were compliant, it was implied within other parts of the previous regulations such as drawing up technical documentation and declaration of conformities etc, but it was never legally stated that this was required to be completed by or verified by a qualified person.

This made it much easier for poor quality or counterfeit medical devices to enter the marketplace and for post-market surveillance of those devices to be inadequate. This in turn leads to missed opportunities for Notified Bodies and Competent Authorities in stopping potential adverse incidents from occurring.

illustration of people with pencils in their hands writing on a large clipboard with the heading regulations on it - used by patient guard limited to discuss the topic of EU regulations and PRRC under article 15 in relation to medical devices and IVDS.


Most notably, this is exampled in the case of the PIP breast implant scandal that came to light in 2010, when it was identified that instead of medical-grade silicone being used, the Chinese supplier changed the silicone in the manufacturing process to an unauthorised grade, leading to the implants to rupture, the effects of which are still being felt by over 40,000 women who were implanted with them to this day.

Another issue also raised in 2010 was the DePuy Orthopaedics Inc metal on the metal hip implant recall. The recall came after data from a study indicated that the five-year failure rate of this product is approximately 13% or 1 in 8 patients. Even if the defective device is replaced, it can leave behind dangerous, possibly deadly fragments that may not be discovered for years. DePuy identified reasons for the failure of the hip replacement system as component loosening, component malalignment, infection, fracture of the bone, dislocation, metal sensitivity and pain. Additional complications from the hip replacement system may include increased metal ion levels in the blood, bone staining, necrosis, swelling, nerve damage, tissue damage and/or muscle damage.

A need for change

The investigations into these scandals identified several significant failures, with blame being apportioned to the suppliers, manufacturers, Notified Bodies and Competent Authorities. To the suppliers for lack or poor Quality Control (QC) measures and procedures, the manufacturers for poor verification and validation procedures, as well as poor control over their suppliers. The Notified Bodies for not identifying issues during surveillance audits and the competent authorities for lack of scrutiny in the proof that these devices were effectively safe.

This led to more robust legislation being drafted to ensure that these issues were addressed as well as making the new legislation reflect the significant technological advancements within the industry since the initial regulations were implemented back in 1993.

illustration of a hand changing the c in change to a g to make it change. This image is used by patient guard ltd to discuss EU PRRC requirements in relation to MDR and IVDR for medical device and IVDS in the EU.
image of arrows pointing upwards and a shield. This is used by patient guard to discuss their PRRC services in relation to MDR and IVDR for medical devices and IVDs and their medical device consultancy.

New Regulations

The European Medical Device Regulation (MDR) EU 2017/745 and In Vitro Diagnostic Device Regulations (IVDR) EU 2017/746 which were introduced in 2017 and came into force on May 21st, 2021 (a year delay due to covid, originally were due to come into force in May 21st, 2020) and May 21st, 2022, respectively.

Since then there has been an extension,  to Article 120 of the regulations. This is in relation to legacy devices that need to have notified body approval. The extension has been implemented to allow notified bodies longer to get through the back log of legacy devices that are still not MDR compliant. Further information on this can be found in our blog; “MDR & IVDR Article 120 – Why has the EU moved back the timeframes?“. 

The regulaitons introduce a raft of new measures and requirements on Medical Device Manufacturers, Distributors, Importers, Authorised Representatives, Notified Bodies and Competent Authorities.

PRRC - Article 15

Part of these new measures is the introduction of a Person Responsible for Regulatory Compliance (PRRC). Article 15 of regulations EU 2017/745 (MDR) and EU 2017/746 (IVDR), the legal requirements for the PRRC are presented.

They state that each manufacturer and authorised representative (if applicable) must have at their disposal a PRRC, who has the necessary requisite qualifications and experience for regulatory compliance.

illustration of a clipboard with a gold certificated ribbon on it. This is used by patient guard ltd to discuss PRRC in relation to MDR and IVDR for EU medical devices and IVDs.
Picture of the letter A in capitals with a big green tick next to it. Used by Patient Guard limited for the PRRC blog in relation to EU medical device and IVD compliance.

What does a Person Responsible for Regulatory Compliance do?

The PRRC is responsible for the following:

  • The conformity of the devices is appropriately checked, by the quality management system under which the devices are manufactured, before a device is released
  • The technical documentation and the EU declaration of conformity are drawn up and kept up to date
  • The post-market surveillance obligations are complied with by the regulation
  • The reporting obligations to Notified Bodies (if applicable) and Competent Authorities are fulfilled

What are the qualifications needed?

The qualifications required to be a PRRC are as follows either:

  • A diploma, certificate, or other evidence of formal qualification, awarded on completion of a university degree or of a course of study recognised as equivalent by the Member State concerned, in law, medicine, pharmacy, engineering or another relevant scientific discipline, and at least one year of professional experience in regulatory affairs or in quality management systems relating to medical devices.
  • Or four years of professional experience in regulatory affairs or in quality management systems relating to medical devices.
illustration of a person with a cp and gown and a certificate indicating a degree or qualification - used by patient guard limited when describing what qualifications are needed for a PRRC for medical devices and IVDs.
image of three multicoloured cogs, representing manufacturers, importers, distributors, and authorised representatives of medical devices and IVDs requiring a PRRC.

Who needs to have a PRRC?

Medical Device Manufacturers, Importers, Authorised Representatives are all required to have their own PRRC. Guidance on PRRC requirements are given in EU guidance document: MDCG 2019-7 Rev.1.

Micro and small enterprises (companies that turnover of fewer than 10 million Euros per year and have less than 50 employees) shall not be required to have the person responsible for regulatory compliance within their organisation but shall have such person permanently and continuously at their disposal.

This means the PRRC may be subcontracted to a professional as for small companies this may not constitute a full-time role and the recruitment costs could be inhibitive.

Does it affect me?

If you are the legal manufacturer and CE mark holder of a medical device (as well as own-brand labelled devices) and sell them into the European Union (EU) including Northern Ireland, then you are legally required to have a PRRC permanently at your disposal regardless of the classification of devices you sell.

What is the cost of employing a Person Responsible for Regulatory Compliance?

Typically, if you employ someone with the necessary qualifications and experience you would be looking at the following average costs in the UK.

  • Quality Assurance: £22,000-£36,000 Average base pay (, UK. March 2024)
  • Regulatory Affairs: £31,000 – £61,000 Average base pay (, UK. March 2024)

The cost of hiring a manager in each of these areas would be significantly more.

  • Quality Assurance Manager: £35,000 – £54,000 Average base pay (, UK. March 2024)
  • Regulatory Affairs Manager: £38,000 – £60,000 Average base pay (, UK. April 2022)

These are based on roles for all industries in England, so it’s likely that medical device-specific roles would cost more than these figures.

Can we help you with your PRRC requirements?

Join our news letter to get monthly updates on Regulatory changes and updates to standards

Subscribe to our News Letter

* indicates required

Please select all the ways you would like to hear from Patient Guard Limited:

You can unsubscribe at any time by clicking the link in the footer of our emails. For information about our privacy practices, please visit our website.

We use Mailchimp as our marketing platform. By clicking below to subscribe, you acknowledge that your information will be transferred to Mailchimp for processing. Learn more about Mailchimp's privacy practices.

How much time is involved in the Person Responsible for Regulatory Compliance MDR service?

Depending on how many medical device products the company has in their portfolio and the number of devices placed on the marketplace, as well as the complexity of those devices in terms of classification (I, Is, Im, IIa, IIb, III) will dictate how much time and effort would need to be placed in ensuring ongoing compliance with the medical device regulations.

For the average Micro and small enterprises (companies with a turnover of fewer than 10 million Euros per year and have less than 50 employees), this is unlikely to be a full-time role (37.5 hours per week) in terms of time and effort required to maintain the ongoing regulatory requirements once the device is placed onto the market.

Therefore, it makes much more sense from a cost perspective to outsource this to a professional service provider. For example, Patient Guard is a company that specialises in this area and typically will cover this for clients with 8 hours of work (2 hours per week) in the month.

What will happen if I don’t have a PRRC?

Due to this being a legal requirement, there are significant penalties for companies that do not have a PRRC in place. This could be punishable by a large fine or even a prison sentence.

Judge behind a bench with hammer and gavel and justice scales.
illustration of a clock with a tick as the small and big hands on the clock face.

When do I need to be compliant by?

As soon as you place product on the EU market under the MDR or IVDR, you must have a PRRC in place. 


Do you need support with Medical Device or IVD compliance?

We can help you!