Post-Market Surveillance (PMS) for Medical Devices

Learn how post-market surveillance (PMS) helps medical device manufacturers monitor safety, collect real-world evidence, maintain MDR compliance and improve devices throughout their lifecycle.
medical device post market surveillance.

Updated: 28th June 2026

Reviewed by: David Small BSc (Hons), MSc, MTOPRA (Founder and CEO)

Why Post-Market Surveillance Is Essential

Achieving CE marking is not the end of the regulatory journey for a medical device. Once a device has been placed on the market, manufacturers are expected to continually monitor its performance, identify emerging risks and ensure that it continues to meet the General Safety and Performance Requirements (GSPRs) throughout its lifecycle.

This ongoing process is known as Post-Market Surveillance (PMS).

Under the EU Medical Device Regulation (EU MDR 2017/745), post-market surveillance is no longer viewed as a reactive complaint handling process. Instead, manufacturers are expected to operate a proactive, systematic and documented surveillance system that continuously collects and analyses real-world evidence relating to the safety and performance of their medical devices.

An effective PMS system enables manufacturers to:

  • Monitor real-world device performance.
  • Detect emerging safety concerns.
  • Identify opportunities for product improvement.
  • Update risk management documentation.
  • Maintain Clinical Evaluation Reports (CERs).
  • Support Post-Market Clinical Follow-up (PMCF).
  • Demonstrate ongoing regulatory compliance.

Rather than simply satisfying regulatory requirements, post-market surveillance provides manufacturers with valuable evidence that helps improve patient safety, optimise device performance and support long-term commercial success.

This guide explains the complete post-market surveillance process, including PMS Plans, PMS Reports, Periodic Safety Update Reports (PSURs), vigilance, trend reporting, serious incident reporting and the relationship between post-market surveillance, ISO 14971 and Clinical Evaluation.

Further Reading:

If you’re looking for more detailed guidance on specific aspects of post-market surveillance, you may also find these articles useful:

What Is Post-Market Surveillance?

Post-Market Surveillance (PMS) is the systematic process of collecting, reviewing and analysing information relating to the safety, quality and performance of a medical device after it has been placed on the market.

Unlike pre-market testing, which evaluates a device under controlled conditions, post-market surveillance examines how the device performs in everyday clinical practice across a wide range of patients, healthcare professionals and healthcare environments.

The objective of PMS is to determine whether a medical device continues to perform as intended while maintaining an acceptable benefit-risk profile throughout its commercial lifecycle.

Manufacturers should continually monitor information obtained from multiple sources, including:

  • Customer complaints.
  • Adverse events.
  • Serious incidents.
  • Clinical feedback.
  • Scientific literature.
  • Distributor feedback.
  • Importer reports.
  • Device returns.
  • Trend analysis.
  • Post-Market Clinical Follow-up (PMCF).
  • Registries.
  • User surveys.

This information allows manufacturers to identify emerging issues at an early stage and implement corrective actions before patient safety is affected.

Post-Market Surveillance Under the EU MDR

The EU Medical Device Regulation significantly strengthened post-market surveillance requirements compared with the previous Medical Device Directive (MDD).

Articles 83 to 86 of the EU MDR require manufacturers to establish, document, implement and maintain a post-market surveillance system that is proportionate to the device’s risk class and appropriate for its intended purpose.

The PMS system should actively collect and evaluate post-market information throughout the entire lifetime of the device.

The key regulatory requirements include:

  • A documented Post-Market Surveillance Plan.
  • Continuous collection of post-market data.
  • Trend analysis.
  • Risk management updates.
  • Clinical Evaluation updates.
  • Corrective and preventive actions (CAPAs).
  • PMS Reports (for Class I devices).
  • Periodic Safety Update Reports (PSURs) for Class IIa, IIb and III devices.
  • Vigilance reporting.
  • Serious incident reporting.

Manufacturers should ensure that information generated through post-market surveillance feeds directly back into their Quality Management System, Technical Documentation and Risk Management File to support continuous improvement.

Why Manufacturers Need a Robust PMS System

Many manufacturers mistakenly believe that post-market surveillance only becomes relevant when something goes wrong.

In reality, an effective PMS system operates continuously, regardless of whether complaints or incidents have been reported.

A robust PMS system enables manufacturers to:

  • Demonstrate ongoing regulatory compliance.
  • Maintain confidence in device safety and performance.
  • Detect trends before they develop into significant issues.
  • Support regulatory inspections and Notified Body audits.
  • Maintain Clinical Evaluation Reports.
  • Update Biological Evaluation where necessary.
  • Improve future device designs.
  • Strengthen customer confidence.

Rather than being viewed as an administrative burden, post-market surveillance should form an integral part of the manufacturer’s overall quality and risk management strategy.

The Medical Device Lifecycle and Post-Market Surveillance

Post-market surveillance should not be viewed as a standalone regulatory activity that begins after CE marking. Instead, it forms part of a continuous lifecycle approach to medical device compliance, linking together design, risk management, clinical evaluation and continuous improvement.

Information gathered through post-market surveillance should continually feed back into the manufacturer’s Quality Management System (QMS), Risk Management File and Technical Documentation to ensure the device remains safe, effective and compliant throughout its commercial lifetime.

A typical medical device lifecycle follows this sequence:

  • Device design and development.
  • Risk management (ISO 14971).
  • Biological evaluation (where applicable).
  • Clinical evaluation.
  • Verification and validation.
  • CE marking and market release.
  • Post-market surveillance.
  • Post-Market Clinical Follow-up (PMCF).
  • Risk management updates.
  • Clinical Evaluation Report (CER) updates.
  • Product improvements and design changes.

This cyclical approach ensures that manufacturers continue learning from real-world device performance long after the product reaches the market.

Building an Effective Post-Market Surveillance System

An effective Post-Market Surveillance system is far more than a complaint handling process.

It is a structured programme that continuously gathers, analyses and evaluates information from multiple sources to confirm that the device continues to meet regulatory requirements and deliver an acceptable benefit-risk profile.

A well-designed PMS system should:

  • Define how post-market data will be collected.
  • Identify responsibilities within the organisation.
  • Establish methods for analysing data.
  • Define escalation procedures.
  • Support regulatory reporting.
  • Feed information into risk management.
  • Trigger CAPAs where required.
  • Drive continual improvement.

Manufacturers should ensure that their PMS activities are proportionate to the classification, complexity and intended use of the medical device.

Higher-risk devices generally require more comprehensive surveillance activities than lower-risk devices.

Creating a Post-Market Surveillance (PMS) Plan

Every manufacturer placing medical devices on the European market should establish and maintain a documented Post-Market Surveillance Plan.

The PMS Plan describes how post-market activities will be performed and provides the framework for collecting and evaluating real-world evidence throughout the product lifecycle.

Under Article 84 of the EU MDR, the PMS Plan should form part of the manufacturer’s Technical Documentation and be appropriate for the type of device being placed on the market.

A comprehensive PMS Plan should include:

  • Device description and intended purpose.
  • Device classification.
  • Applicable regulatory requirements.
  • Objectives of post-market surveillance.
  • Data sources to be monitored.
  • Methods for collecting information.
  • Statistical methods and trend analysis.
  • Complaint handling procedures.
  • Vigilance reporting procedures.
  • PMCF activities (where applicable).
  • Responsibilities within the organisation.
  • Review frequencies.
  • Links to risk management.
  • Links to Clinical Evaluation.
  • CAPA procedures.
  • Criteria for updating Technical Documentation.

Rather than being treated as a static document, the PMS Plan should evolve alongside the device as new information becomes available.

Collecting Post-Market Data

The quality of a manufacturer’s post-market surveillance system depends upon the quality of the information collected.

Manufacturers should gather data from a wide range of sources rather than relying solely on complaints.

Typical sources of post-market information include:

  • Customer complaints.
  • Distributor and importer feedback.
  • Healthcare professional reports.
  • Patient feedback.
  • Service and maintenance records.
  • Returned products.
  • Warranty claims.
  • Scientific and clinical literature.
  • Published adverse event databases.
  • Competitor safety notices.
  • Field Safety Corrective Actions (FSCAs).
  • PMCF studies.
  • Clinical registries.
  • User surveys.
  • Internal audits.

By combining information from multiple sources, manufacturers can identify trends that may not be visible when reviewing complaints alone.

The collection of diverse, high-quality post-market data supports more informed regulatory decisions and enables manufacturers to respond proactively to emerging risks before they develop into significant safety concerns.

Trend Analysis

One of the primary objectives of post-market surveillance is to identify emerging trends before they develop into significant safety issues.

Trend analysis involves reviewing post-market data over time to detect patterns that may indicate changes in device performance, reliability or safety. While an isolated complaint may not require regulatory action, a gradual increase in similar events could suggest an underlying issue that requires investigation.

Manufacturers should routinely monitor:

  • Complaint rates.
  • Device failures.
  • Adverse events.
  • Customer feedback.
  • Service reports.
  • Returned products.
  • Clinical outcomes.
  • PMCF findings.

Where statistically significant trends are identified, manufacturers should investigate the root cause, assess the impact on patient safety and determine whether corrective action is required.

Trend analysis should form part of the manufacturer’s routine management review process and should be documented within the Quality Management System.

Complaint Handling

Complaints are one of the most valuable sources of post-market surveillance data.

Every complaint provides an opportunity to evaluate how a medical device performs in real-world clinical use and determine whether any action is required to maintain patient safety.

Manufacturers should establish documented procedures for:

  • Receiving complaints.
  • Recording complaint information.
  • Investigating reported issues.
  • Determining root causes.
  • Assessing regulatory reporting requirements.
  • Implementing corrective actions.
  • Monitoring the effectiveness of those actions.

Complaint investigations should also determine whether the issue affects previously completed risk assessments, Clinical Evaluation Reports or Technical Documentation.

A well-managed complaint handling system not only supports regulatory compliance but also provides valuable information for future product improvements.

Medical Device Vigilance

Medical device vigilance is the process of identifying, investigating and reporting serious incidents and Field Safety Corrective Actions associated with medical devices that have been placed on the market.

While post-market surveillance focuses on collecting and analysing a wide range of performance and safety data, vigilance concentrates specifically on incidents that may affect patient safety.

An effective vigilance system enables manufacturers to:

  • Identify serious incidents promptly.
  • Investigate the root cause.
  • Assess potential risks.
  • Notify Competent Authorities where required.
  • Implement corrective actions.
  • Communicate safety information to customers.

Vigilance activities should be fully integrated into the manufacturer’s overall post-market surveillance system to ensure that important safety information contributes to continual product improvement.

Serious Incident Reporting

Under the EU MDR, manufacturers are required to report certain serious incidents involving their medical devices to the relevant Competent Authority within specified timeframes.

Examples of reportable incidents include:

  • Patient death.
  • Serious deterioration in a patient’s health.
  • Serious public health threats.
  • Device malfunctions that could lead to serious harm.
  • Incorrect test results with significant clinical consequences.
  • Software failures affecting patient safety.

Not every complaint constitutes a serious incident. Manufacturers should establish documented procedures for determining whether an event meets the reporting criteria defined under the applicable regulations.

Prompt reporting supports regulatory oversight while helping protect patients from avoidable harm.

medical device post market surveillance.

Field Safety Corrective Actions (FSCAs)

Where post-market surveillance identifies unacceptable risks, manufacturers may need to implement a Field Safety Corrective Action (FSCA).

An FSCA is any action taken to reduce the risk associated with a medical device that has already been supplied to customers.

Examples include:

  • Product recalls.
  • Device modifications.
  • Software updates.
  • Safety notices.
  • Changes to Instructions for Use (IFU).
  • Additional user training.
  • Device replacement programmes.

When appropriate, manufacturers should also issue a Field Safety Notice (FSN) informing customers of the identified risk, the corrective action being taken and any actions required by users.

Effective management of FSCAs demonstrates a proactive commitment to patient safety and regulatory compliance.

Periodic Safety Update Reports (PSUR)

For Class I medical devices, manufacturers are generally required to prepare a Post-Market Surveillance Report summarising the results and conclusions of their post-market surveillance activities.

The report provides documented evidence that the manufacturer is actively monitoring device performance and maintaining compliance with the EU MDR.

A typical PMS Report includes:

  • Summary of surveillance activities.
  • Complaint analysis.
  • Trend analysis.
  • Risk management updates.
  • Corrective and preventive actions (CAPAs).
  • Clinical data review.
  • Literature review.
  • Conclusions regarding device safety and performance.

The report should be updated whenever new information significantly affects the device’s benefit-risk profile or regulatory compliance.

Post-Market Surveillance Reports (PMS Reports)

For Class IIa, Class IIb and Class III medical devices, manufacturers are generally required to prepare a Periodic Safety Update Report (PSUR) instead of a standard PMS Report.

The PSUR provides a comprehensive summary of the safety and performance of the device throughout the reporting period.

A PSUR typically includes:

  • Sales volumes and estimated patient exposure.
  • Summary of post-market surveillance findings.
  • Serious incident analysis.
  • Field Safety Corrective Actions.
  • Benefit-risk evaluation.
  • Risk management updates.
  • PMCF findings.
  • Clinical Evaluation updates.
  • Conclusions regarding the continued safety and performance of the device.

The frequency of PSUR updates depends upon the classification of the medical device and the applicable regulatory requirements.

The PSUR plays an important role in demonstrating that manufacturers continue to monitor and maintain the safety of their devices throughout the product lifecycle.

Post-Market Clinical Follow-up (PMCF)

Post-Market Clinical Follow-up (PMCF) forms an important part of the overall post-market surveillance system for many medical devices.

While post-market surveillance collects information from a wide variety of sources, PMCF focuses specifically on generating and evaluating additional clinical evidence after a device has been placed on the market.

PMCF activities may include:

  • Clinical follow-up studies.
  • Post-market clinical investigations.
  • User questionnaires.
  • Patient registries.
  • Published scientific literature.
  • Analysis of long-term clinical outcomes.

The objective of PMCF is to confirm that the device continues to achieve its intended purpose, maintains an acceptable benefit-risk profile and performs safely during routine clinical use.

For many Class IIa, IIb and III medical devices, PMCF plays a vital role in maintaining regulatory compliance throughout the product lifecycle.

If you would like to learn more, read our dedicated guide to Post-Market Clinical Follow-up (PMCF).

Relationship with ISO 14971

Post-market surveillance and risk management should operate as a continuous feedback loop.

During product development, manufacturers identify potential hazards and implement risk control measures in accordance with ISO 14971. However, once the device enters routine clinical use, post-market surveillance provides real-world evidence that either confirms those assumptions or identifies previously unknown risks.

Information obtained through PMS should therefore be used to:

  • Verify the effectiveness of existing risk controls.
  • Identify previously unknown hazards.
  • Reassess the probability of harm.
  • Review residual risks.
  • Update the Risk Management File.
  • Implement additional corrective actions where necessary.

By integrating post-market surveillance with ISO 14971, manufacturers can demonstrate that risk management continues throughout the entire lifecycle of the medical device rather than ending at market release.

Relationship with Clinical Evaluation

Clinical Evaluation and Post-Market Surveillance are closely connected under the EU MDR.

Clinical Evaluation establishes whether sufficient clinical evidence exists to demonstrate the safety and performance of a medical device before and after market placement.

Post-market surveillance then provides the real-world clinical data needed to confirm that those conclusions remain valid throughout the device’s commercial life.

PMS activities support Clinical Evaluation by:

  • Providing real-world clinical evidence.
  • Identifying changes in the benefit-risk profile.
  • Supporting Clinical Evaluation Report (CER) updates.
  • Identifying the need for additional PMCF activities.
  • Confirming long-term device performance.
  • Supporting regulatory submissions.

Together, Clinical Evaluation and Post-Market Surveillance provide continuous evidence that the device remains safe, performs as intended and continues to comply with the General Safety and Performance Requirements (GSPRs).

Common Post-Market Surveillance Mistakes

Many manufacturers view post-market surveillance as a regulatory obligation rather than an opportunity to improve their products. This often leads to weaknesses that become apparent during Notified Body audits or Competent Authority inspections.

Common mistakes include:

  • Treating complaint handling as the entire PMS system.
  • Failing to maintain an up-to-date PMS Plan.
  • Collecting insufficient post-market data.
  • Limited trend analysis.
  • Weak links between PMS and ISO 14971.
  • Failing to update Clinical Evaluation Reports.
  • Poor documentation of corrective actions.
  • Inadequate PMCF planning.
  • Delayed vigilance reporting.
  • Failing to review PMS activities regularly.

A proactive and well-documented PMS system not only supports regulatory compliance but also improves product quality, reduces regulatory risk and enhances patient safety.

Summary

Post-Market Surveillance is one of the most important requirements of the EU Medical Device Regulation and should be considered an integral part of every manufacturer’s Quality Management System.

Rather than being viewed as a reactive process focused solely on complaints, PMS provides a structured framework for collecting, analysing and acting upon real-world evidence throughout the entire lifecycle of a medical device.

An effective PMS system combines complaint handling, trend analysis, vigilance, PMCF, risk management and clinical evaluation into a continuous improvement process that protects patients while supporting ongoing regulatory compliance.

Manufacturers that invest in robust post-market surveillance systems are better positioned to demonstrate regulatory compliance, respond quickly to emerging risks and continually improve the safety and performance of their medical devices.

How Can Patient Guard Help?

Patient Guard supports medical device manufacturers in developing and maintaining compliant Post-Market Surveillance systems for the EU MDR, UK MDR and international markets.

Our regulatory specialists can assist with:

  • Post-Market Surveillance Plans (PMS Plans).
  • PMS Reports.
  • Periodic Safety Update Reports (PSURs).
  • Post-Market Clinical Follow-up (PMCF).
  • Vigilance procedures.
  • Serious incident reporting.
  • Trend analysis.
  • Risk Management updates (ISO 14971).
  • Clinical Evaluation updates.
  • Technical Documentation maintenance.
  • Notified Body inspection readiness.

Whether you are launching a new medical device or maintaining an existing product, Patient Guard can help you implement a practical, risk-based post-market surveillance system that supports long-term regulatory compliance.

Frequently Asked Questions About Medical Device PMS

Post-market surveillance (PMS) is the systematic process of collecting, analysing and evaluating information about a medical device after it has been placed on the market. It enables manufacturers to monitor real-world safety and performance, identify emerging risks and demonstrate ongoing compliance with regulations such as the EU MDR and UK MDR.

Yes. Articles 83–86 of the EU Medical Device Regulation (EU MDR 2017/745) require manufacturers to establish, document and maintain a post-market surveillance system that is appropriate for the device's risk class. The system must continuously collect and evaluate post-market data throughout the product lifecycle.

A PMS Plan typically defines how the manufacturer will collect, review and analyse post-market data. It should include the surveillance objectives, data sources, complaint handling procedures, trend analysis methods, vigilance activities, PMCF requirements, responsibilities and links to risk management and clinical evaluation.

A PMS Report is generally prepared for Class I medical devices and summarises the results of post-market surveillance activities. A Periodic Safety Update Report (PSUR) is required for Class IIa, IIb and III devices and provides a more comprehensive review of safety, performance, benefit-risk assessment and post-market clinical data.

Complaint handling is only one part of a post-market surveillance system. PMS also includes trend analysis, literature reviews, vigilance reporting, Post-Market Clinical Follow-up (PMCF), customer feedback, risk management updates and continuous evaluation of device performance.

PMCF is a component of the overall post-market surveillance system. While PMS gathers information from a wide range of sources, PMCF focuses on collecting additional clinical evidence after market placement to confirm the device continues to achieve its intended purpose and maintains an acceptable benefit-risk profile.

Information collected through PMS is used to verify existing risk control measures, identify previously unknown hazards and update the Risk Management File. This ensures that risk management remains an ongoing process throughout the entire lifecycle of the medical device.

Manufacturers should collect information from multiple sources, including customer complaints, adverse events, serious incidents, PMCF studies, scientific literature, healthcare professional feedback, distributor reports, device returns, service records and trend analysis. Using multiple data sources provides a more complete understanding of device performance.

An inadequate PMS system can result in non-conformities during Notified Body audits, delays in certification, regulatory enforcement action or increased risks to patient safety. Manufacturers may also fail to identify emerging safety issues before they become significant problems.

Yes. Patient Guard supports manufacturers with the development and maintenance of compliant Post-Market Surveillance systems, including PMS Plans, PMS Reports, PSURs, PMCF documentation, vigilance procedures, risk management updates and Clinical Evaluation Reports to help maintain compliance with the EU MDR and UK MDR.

David Small BSc (Hons), MSc, MTOPRA

David Small BSc (Hons), MSc, MTOPRA

Reviewed by
David Small, BSc (Hons), MSc, MTOPRA
Founder & CEO |
20+ years in medical device regulatory affairs,  MDR/IVDR compliance and quality systems.

Patient Guards Recent Posts

Why Notified Bodies Reject IVDR Performance Evaluation Reports: The Top 3 Mistakes Manufacturers Make

More than half of IVDR submissions face deficiencies during Notified Body review, with Performance Evaluation Reports (PERs) among the most common areas of concern. Learn the three critical mistakes that lead to PER rejections—including weak State of the Art justification, non-systematic literature reviews, and poor traceability between Scientific Validity, Analytical Performance, and Clinical Performance data—and discover how to build a compliant, audit-ready IVDR technical file.

Read More »
10 Common Technical Documentation Deficiencies Found During EU MDR and IVDR Notified Body Reviews

10 Common Technical Documentation Deficiencies Found During EU MDR and IVDR Notified Body Reviews

Preparing technical documentation for EU MDR or IVDR certification is only half the challenge. Successfully passing a Notified Body review depends on demonstrating consistency across your Quality Management System, Clinical Evaluation, Risk Management, Biological Evaluation, Performance Evaluation and Post-Market Surveillance activities. Discover ten of the most common technical documentation deficiencies identified during MDR and IVDR conformity assessments—and learn how to reduce the likelihood of costly review cycles and certification delays.

Read More »
Patient Guard EU Authorised Representative Services

EU Authorised Representative Services for Medical Device & IVD Manufacturers

Selling medical devices or IVDs in Europe? If your company is based outside the EU, appointing an EU Authorised Representative (EC Rep) is a legal requirement under EU MDR 2017/745 and IVDR 2017/746. Patient Guard provides expert EU Authorised Representative services, EUDAMED support, regulatory guidance, and ongoing compliance management to help manufacturers access and maintain the European market with confidence.

Read More »

Patient Guards Related Services

Patient Guards Regulatory Tools

Need Training?

Do you need training on Quality Management Systems or EU MDR/ EU IVDR? then check out our training courses.

Share this guide:

Most Popular

Why Notified Bodies Reject IVDR Performance Evaluation Reports: The Top 3 Mistakes Manufacturers Make

More than half of IVDR submissions face deficiencies during Notified Body review, with Performance Evaluation Reports (PERs) among the most common areas of concern. Learn the three critical mistakes that lead to PER rejections—including weak State of the Art justification, non-systematic literature reviews, and poor traceability between Scientific Validity, Analytical Performance, and Clinical Performance data—and discover how to build a compliant, audit-ready IVDR technical file.

Read More »

10 Common Technical Documentation Deficiencies Found During EU MDR and IVDR Notified Body Reviews

Preparing technical documentation for EU MDR or IVDR certification is only half the challenge. Successfully passing a Notified Body review depends on demonstrating consistency across your Quality Management System, Clinical Evaluation, Risk Management, Biological Evaluation, Performance Evaluation and Post-Market Surveillance activities. Discover ten of the most common technical documentation deficiencies identified during MDR and IVDR conformity assessments—and learn how to reduce the likelihood of costly review cycles and certification delays.

Read More »

EU Authorised Representative Services for Medical Device & IVD Manufacturers

Selling medical devices or IVDs in Europe? If your company is based outside the EU, appointing an EU Authorised Representative (EC Rep) is a legal requirement under EU MDR 2017/745 and IVDR 2017/746. Patient Guard provides expert EU Authorised Representative services, EUDAMED support, regulatory guidance, and ongoing compliance management to help manufacturers access and maintain the European market with confidence.

Read More »
patient guard
Patient Guard

Sign up to our newsletter

Be the first to hear industry news and how Patient Guard can help you.

Get the latest updates on medical device regulation

Sign up to our newsletter and we’ll deliver news and insights straight to your inbox.
Patient Guard Regulatory Affairs and Quality Assurance

Get the Medical Device Technical Checklist

Thank you! The checklist is now ready to download.

checklist-tablet