Published: 2nd June 2026
Reviewed by: David Small BSc (Hons), MSc, MTOPRA (Founder and CEO)
The MHRA 2026 Roadmap: Navigating the New Draft Regulations for Medical Devices & IVDs
The UK medical device regulatory framework is undergoing its biggest transformation since Brexit. The MHRA’s draft Medical Devices (Amendment) Regulations 2026 introduce major changes including the International Reliance Pathway (IRP), stricter IVD classifications, AI and software oversight through PCCPs, and enhanced post-market surveillance obligations. This guide explains what the new regulations mean for manufacturers, UK Responsible Persons, and regulatory teams preparing for the future of UKCA compliance.
Need an Introduction to UK Medical Device Regulations?
This article focuses on the MHRA 2026 regulatory roadmap and upcoming changes to the UK medical device framework. If you're looking for a complete overview of UK medical device regulations, including UKCA marking, MHRA registration, UK Responsible Person requirements, classification and post-market surveillance, read our Complete Guide to UK Medical Device Regulations.
The UK Medical Device Regulatory Landscape Has Changed
The UK medical device and IVD regulatory framework is entering its most significant transformation since Brexit. On 11 May 2026, the Medicines and Healthcare products Regulatory Agency (MHRA) released the draft Medical Devices (Amendment) Regulations 2026, introducing sweeping reforms that will reshape how manufacturers access and maintain products on the Great Britain (GB) market.
The proposed legislation introduces the International Reliance Pathway (IRP), formalises Predetermined Change Control Plans (PCCPs) for AI and software devices, strengthens post-market surveillance obligations, and aligns UK In Vitro Diagnostic (IVD) classification rules with globally recognised risk-based frameworks.
For medical device manufacturers, UK Responsible Persons (UKRPs), importers, and regulatory professionals, these changes are not simply administrative updates — they represent a fundamental shift in compliance strategy, technical documentation expectations, and market access planning.
With the MHRA stakeholder impact survey closing on 19 June 2026, businesses now have a limited opportunity to influence the final legislation before implementation.
What Are the MHRA 2026 Medical Device Regulations?
The Medical Devices (Amendment) Regulations 2026 are designed to modernise the UK medical device framework by:
- Increasing patient safety
- Aligning with international regulatory standards
- Supporting innovation in AI and software medical devices
- Improving post-market monitoring
- Creating faster access pathways for trusted international approvals
- Strengthening transparency and traceability requirements
The draft regulations align heavily with:
- EU MDR 2017/745
- EU IVDR 2017/746
- IMDRF guidance documents
- Global Medical Device Nomenclature (GMDN) principles
- International UDI frameworks
For many organisations, the reforms will require major updates to:
- Quality Management Systems (QMS)
- Technical Documentation
- Clinical Evaluation Reports (CERs)
- Performance Evaluation Reports (PERs)
- Risk Management Files
- Vigilance procedures
- Labelling systems
- Supplier oversight processes
From Consultation to Law: What the 2026 Amending Regulations Mean for Your Business
The MHRA’s roadmap signals the end of the post-Brexit “transition era.” Instead of temporary recognition measures and legacy pathways, the UK is building a standalone but internationally aligned regulatory framework.
Manufacturers that prepare early will benefit from:
- Faster UK market access
- Reduced disruption during implementation
- Improved Approved Body readiness
- Greater global harmonisation
- Lower long-term compliance costs
However, organisations relying on legacy MDD/AIMDD/IVDD documentation may face significant remediation work.
The International Reliance Pathway (IRP): A New Route to UK Market Access
What Is the International Reliance Pathway?
The International Reliance Pathway (IRP) is arguably the most transformative feature of the 2026 regulations.
The pathway allows manufacturers with approvals from recognised international regulators to obtain a Certificate of International Reliance for Great Britain market access.
Recognised jurisdictions include:
- United States FDA
- Health Canada
- Australian Therapeutic Goods Administration (TGA)
The MHRA may expand recognised jurisdictions in future phases.
Why the IRP Matters for Medical Device Manufacturers
The IRP dramatically reduces duplication between regulatory systems.
Manufacturers with:
- FDA 510(k) clearance
- PMA approvals
- De Novo classifications
- Health Canada licences
- Australian ARTG inclusion
may be able to leverage existing technical evidence rather than undergoing full independent UK conformity assessment procedures.
Strategic Benefits of the IRP
Potential advantages include:
- Faster time-to-market in Great Britain
- Lower regulatory costs
- Reduced technical review duplication
- Improved scalability for global manufacturers
- Simplified entry for innovative technologies
For multinational manufacturers already maintaining FDA or TGA approvals, this could significantly accelerate UK commercialisation strategies.
Important Limitations of the International Reliance Pathway
The IRP is not automatic recognition.
Manufacturers must still comply with:
- UK labelling requirements
- UDI obligations
- Post-market surveillance obligations
- Vigilance reporting requirements
- UK Responsible Person (UKRP) requirements
- GB registration obligations
The MHRA also reserves the right to request:
- Additional clinical evidence
- GB-specific risk data
- Supplementary performance evidence
- Clarification on intended purpose claims
This is especially relevant where devices differ materially from previously approved international versions.
Software as a Medical Device (SaMD) and AI: PCCPs Explained
What Is a Predetermined Change Control Plan (PCCP)?
The 2026 draft regulations formally introduce Predetermined Change Control Plans (PCCPs) for Software as a Medical Device (SaMD) and AI-enabled medical technologies.
A PCCP allows manufacturers to define anticipated software modifications in advance during the initial regulatory submission.
This is particularly important for:
- Machine learning systems
- Adaptive AI algorithms
- Cloud-connected medical software
- Cybersecurity patching
- Continuous software deployment models
Developing Medical Device Software?
IEC 62304 provides the internationally recognised framework for medical device software lifecycle processes. For a practical introduction to software safety classification, development planning, requirements, architecture, testing, risk management, configuration management and software maintenance, read our Complete Guide to IEC 62304 for Medical Device Software.
Why PCCPs Are Critical for AI Medical Devices
Historically, even small algorithm updates could trigger:
- Re-certification
- Additional technical review
- Delays in deployment
- Increased compliance costs
The PCCP framework supports agile software development while maintaining regulatory oversight.
Manufacturers can pre-authorise:
- Performance tuning
- Software patches
- Cybersecurity improvements
- Limited algorithm refinements
- User interface improvements
This creates a more realistic compliance model for modern AI-driven healthcare technology.
What Are Predetermined Change Control Plans (PCCPs)?
As medical device software and AI-enabled technologies continue to evolve, regulators are developing more flexible approaches to managing controlled software changes. Learn how Predetermined Change Control Plans can support planned modifications while maintaining regulatory compliance in our guide to PCCPs for Medical Device Software.
Software Classification Changes Under the MHRA 2026 Draft
The MHRA is also aligning more closely with IMDRF and EU MDR Rule 11 software classification principles.
Many software products are expected to move into:
- Class IIa
- Class IIb
- Class III
Higher-risk software categories may include:
- Diagnostic AI systems
- Clinical decision support software
- Oncology prediction platforms
- Monitoring algorithms
- Treatment recommendation systems
This means more software manufacturers will require:
- UK Approved Body involvement
- Enhanced clinical evidence
- Formal PMS systems
- Stronger cybersecurity controls
UK IVD Classification Reform: Transition to Classes A–D
The End of the Legacy IVD Framework
The UK is replacing its outdated IVD classification system with the internationally recognised risk-based structure:
- Class A
- Class B
- Class C
- Class D
This mirrors the EU IVDR framework and significantly increases scrutiny for higher-risk IVDs.
High-Risk Class D IVD Requirements
Class D IVDs — such as blood screening tests and high-risk infectious disease diagnostics — will face the most rigorous oversight.
Manufacturers will need:
- Performance Evaluation Reports (PERs)
- Scientific validity evidence
- Analytical performance data
- Clinical performance evidence
- Ongoing lifecycle updates
The MHRA also expects PERs to become “living documents” continuously updated throughout the product lifecycle.
Impact on IVD Manufacturers
Many legacy self-certified IVDs may now require:
- Approved Body review
- Expanded technical documentation
- Post-market performance follow-up
- Additional stability studies
- Usability validation
- Enhanced vigilance systems
This transition could create substantial workload pressures across the IVD industry.
Technical Documentation Requirements Are Becoming Much Stricter
Readily Searchable Technical Documentation
The MHRA is moving away from fragmented legacy technical files toward fully searchable digital documentation systems.
Manufacturers should expect requirements for:
- Structured electronic documentation
- Clear traceability
- Integrated risk management
- Version-controlled records
- Digital audit trails
This aligns with modern expectations for regulatory inspections and remote assessments.
Expanded Medical Device Data Retention Periods
The draft regulations extend document retention obligations to:
- Device lifetime plus 10 years
- Device lifetime plus 15 years for implantable devices
This aligns closely with EU MDR requirements.
Manufacturers still operating under older MDD systems may need major updates to:
- Record retention policies
- Supplier agreements
- Archiving procedures
- Complaint handling systems
Essential Requirements Are Being Re-Anchored to MDR GSPRs
The MHRA’s Essential Requirements are now heavily aligned with EU MDR General Safety and Performance Requirements (GSPRs).
Key focus areas include:
Chemical and Physical Safety
Manufacturers must strengthen evidence relating to:
- CMR substances
- Phthalates
- Material biocompatibility
- Toxicological risk assessment
- Chemical exposure justification
Cybersecurity and Connected Devices
The draft regulations place significantly greater emphasis on:
- Network security
- Data protection
- Software resilience
- Penetration testing
- Vulnerability management
- Cybersecurity lifecycle maintenance
This is particularly relevant for:
- Connected medical devices
- Cloud-based systems
- Remote monitoring technologies
- Wearable devices
- AI-enabled platforms
Need an Introduction to ISO 27001?
Information security and cybersecurity are increasingly important considerations for medical device software, connected devices and digital health technologies. For a practical introduction to information security management systems, risk assessment, security controls, governance and continual improvement, read our Beginner's Guide to ISO 27001 and Information Security.
New Rules for Custom-Made Medical Devices
Increased Oversight for Custom-Made Implantables
The 2026 regulations significantly tighten controls over custom-made devices (CMDs).
Class IIb and Class III custom-made implantable devices will now require:
- UK Approved Body QMS certification
- Stronger technical documentation
- Enhanced traceability
- Formal design controls
This marks a major shift away from lighter-touch historical oversight.
Electronic Prescriptions for CMDs
The draft also allows electronic prescriptions for custom-made devices.
Benefits include:
- Faster workflows
- Improved supply chain efficiency
- Better traceability
- Stronger digital audit trails
- Reduced administrative burden
Implant Cards Become Mandatory
Manufacturers of implantable devices must now provide Implant Cards to patients.
These cards must include:
- UDI information
- Device name
- Serial number
- Manufacturer information
- Safety warnings
- Precautions for patients and healthcare professionals
This improves:
- Patient transparency
- Traceability
- Long-term device monitoring
- Incident investigation efficiency
Post-Market Surveillance (PMS) and Vigilance Reporting Changes
Strengthened Vigilance Timelines
The MHRA is reinforcing rapid incident reporting requirements.
New Reporting Deadlines
- Serious Public Health Threats → within 2 calendar days
- Death or Serious Deterioration → within 10 calendar days
- Trend Reporting → mandatory statistical analysis of incident increases
Need a Guide to Post-Market Surveillance?
Post-market surveillance is essential for monitoring the safety and performance of medical devices throughout their lifecycle. For a practical overview of PMS requirements, including PMS plans and reports, vigilance, trend reporting, PMCF, PMPF and ongoing regulatory compliance, read our Complete Guide to Post-Market Surveillance for Medical Devices and IVDs.
Trend Reporting Requirements
Manufacturers must implement statistical methodologies capable of identifying:
- Significant incident increases
- Emerging risk patterns
- Benefit-risk deterioration
- Recurring usability failures
- Software anomaly trends
This increases expectations around:
- PMS data analytics
- Complaint trending
- CAPA systems
- Signal detection processes
UKCA Marking, CE Mark Recognition, and Transition Timelines
Will CE-Marked Devices Still Be Accepted?
The MHRA consultation on indefinite CE recognition closed in April 2026.
Currently:
- CE-marked devices remain accepted under transitional provisions
- Recognition extends until 2028 or 2030 depending on device category
However, the 2026 regulations clearly establish the long-term standalone UKCA framework.
Manufacturers should not assume indefinite CE acceptance.
The June 19, 2026 MHRA Stakeholder Deadline
Why the MHRA Impact Survey Matters
The current Call for Evidence provides manufacturers with a critical opportunity to influence the final regulations before formal implementation.
The MHRA is specifically requesting industry feedback regarding:
- UDI implementation costs
- Economic impact of PER requirements
- IRP administrative burden
- Cybersecurity compliance costs
- PMS implementation challenges
Key Deadline
Stakeholder responses must be submitted by:
19 June 2026
Manufacturers that fail to engage may lose an important opportunity to shape practical implementation.
Frequently Asked Questions About the MHRA 2026 Regulations
Does the MHRA Accept CE-Marked Devices Indefinitely?
No. Transitional recognition remains in place temporarily, but the UK is moving toward a standalone UKCA-based framework.
Can Legacy Clinical Data Be Used for IRP Submissions?
Potentially yes — but only where the device remains comparable in:
- Design
- Intended purpose
- Materials
- Clinical performance
- Safety profile
The MHRA may request supplementary UK-specific evidence where clinically significant differences exist.
What Is Regulation 19D?
Regulation 19D introduces prohibitions against misleading or unsubstantiated promotional claims.
This creates stronger legal enforcement powers against:
- False safety claims
- Unsupported performance statements
- Misleading intended purpose claims
- Non-compliant marketing materials
How Manufacturers Should Prepare for the MHRA 2026 Changes
Medical device and IVD manufacturers should begin preparations immediately.
Recommended actions include:
Conduct a Full Regulatory Gap Analysis
Review:
- Technical documentation
- Clinical evidence
- PMS systems
- Risk management
- Cybersecurity controls
- Labelling
- UDI readiness
What is included in ISO 27001 implementation?
Information security frameworks, risk assessments, and cybersecurity controls aligned with regulatory expectations.
How do I prepare for a regulatory audit?
Ensure your systems, documentation, and processes are aligned, current, and consistently implemented.
Review Software Classification Rules
Assess whether your software products may be up-classified under the new framework.
Prepare for Enhanced IVD Requirements
IVD manufacturers should begin:
- PER development
- Performance evidence review
- Classification mapping
- PMS strengthening
Strengthen Post-Market Surveillance Systems
Ensure your PMS framework supports:
- Trend reporting
- Statistical analysis
- Vigilance timelines
- Signal detection
Engage with the MHRA Consultation
The June 2026 survey is one of the last opportunities to influence implementation details.
Why Early Preparation Is Essential
Approved Body and regulatory capacity constraints remain a global challenge.
Manufacturers delaying preparation risk:
- Market access delays
- Certification bottlenecks
- Increased remediation costs
- Product registration interruptions
- Supply chain disruption
Early action will be critical for uninterrupted access to the UK market.
Need Help Navigating the MHRA 2026 Regulations?
At Patient Guard Ltd, we help medical device and IVD manufacturers translate complex regulations into practical compliance strategies.
Our regulatory specialists support:
- UK Responsible Person (UKRP) services
- UKCA compliance
- IVD Performance Evaluation Reports
- Clinical Evaluation Reports
- PMS and Vigilance systems
- Technical Documentation remediation
- Gap Analyses
- AI and software device compliance
- MDR/IVDR transition projects
Whether you need strategic guidance or full regulatory implementation support, our team is ready to help.
Contact Patient Guard Ltd to discuss your UK medical device compliance strategy before the new regulations take effect.
The UK medical device regulatory framework is undergoing its biggest transformation since Brexit. The MHRA’s draft Medical Devices (Amendment) Regulations 2026 introduce major changes including the International Reliance Pathway (IRP), stricter IVD classifications, AI and software oversight through PCCPs, and enhanced post-market surveillance obligations. This guide explains what the new regulations mean for manufacturers, UK Responsible Persons, and regulatory teams preparing for the future of UKCA compliance.
References
This guide is based on the following UK legislation, official MHRA guidance, regulatory consultations and international standards relating to the future regulation of medical devices in Great Britain, including UK market access, international reliance, IVD regulation, post-market surveillance, medical device software and quality management systems.
| Organisation | Reference | Why it's relevant |
|---|---|---|
| UK Government | Medical Devices Regulations 2002 (UK MDR) | Provides the principal statutory framework governing medical devices and in vitro diagnostic medical devices placed on the market in Great Britain. |
| UK Government / MHRA | Implementation of Medical Devices Future Regime | Provides the MHRA's current implementation programme for the future medical device regulatory framework, including the regulatory roadmap, pre-market reforms, international reliance and other planned changes. |
| UK Government / MHRA | Consultation on Medical Devices Regulations: Routes to Market and In Vitro Diagnostic Devices | Covers proposals and government responses relating to international reliance, UKCA marking, routes to the Great Britain market and reform of the regulatory framework for IVDs. |
| UK Government / MHRA | Medical Devices Regulations: Targeted Consultation on the Indefinite Recognition of CE Marked Devices | Sets out 2026 MHRA proposals concerning continued recognition of CE-marked medical devices in Great Britain and the interaction with future international reliance arrangements. |
| UK Government / MHRA | Consultation on the Future Regulation of Medical Devices in the United Kingdom | Provides the original policy proposals and government response underpinning the development of the UK's future medical device regulatory framework. |
| UK Government / MHRA | Regulating Medical Devices in the UK | Provides the MHRA's core guidance on placing medical devices on the Great Britain market, including MHRA registration, UK Responsible Persons, UKCA marking, conformity assessment and CE-marked devices. |
| UK Government / MHRA | Medical Devices: Post-Market Surveillance Requirements | Provides official MHRA guidance on the strengthened post-market surveillance and vigilance requirements applying to medical devices and IVDs in Great Britain. |
| International Organization for Standardization (ISO) | ISO 13485:2016 – Medical Devices – Quality Management Systems – Requirements for Regulatory Purposes | Establishes internationally recognised quality management system requirements relevant to medical device manufacturers and regulatory compliance. |
| International Organization for Standardization (ISO) | ISO 14971:2019 – Medical Devices – Application of Risk Management to Medical Devices | Provides the internationally recognised framework for identifying, evaluating, controlling and monitoring risks associated with medical devices throughout their lifecycle. |
| International Electrotechnical Commission (IEC) | IEC 62304 – Medical Device Software – Software Life Cycle Processes | Defines software lifecycle processes relevant to medical device software development, maintenance, risk management and configuration control. |
| International Organization for Standardization (ISO) | ISO/IEC 27001 – Information Security Management Systems | Provides an internationally recognised information security management framework relevant to connected medical devices, medical device software and digital health technologies. |
UK medical device legislation, MHRA guidance and the timetable for implementation of the future regulatory framework continue to evolve. Manufacturers should always consult the latest applicable legislation and official MHRA guidance when determining the requirements applicable to their devices.
David Small BSc (Hons), MSc, MTOPRA
Reviewed by
David Small, BSc (Hons), MSc, MTOPRA
Founder & CEO |
20+ years in medical device regulatory affairs, MDR/IVDR compliance and quality systems.
Patient Guards Recent Posts

Cosmetic Product Safety Report (CPSR): A Complete Guide to UK Cosmetic Compliance
Before a cosmetic product can legally be placed on the UK market, manufacturers and Responsible Persons must demonstrate that it is safe for human use under normal or reasonably foreseeable conditions. The Cosmetic Product Safety Report (CPSR) is one of the most important regulatory documents required under the UK Cosmetics Regulation. This guide explains what a CPSR is, who can prepare one, what information it must contain, how it relates to the Product Information File (PIF) and how it supports legal cosmetic compliance.

IVDR PMPF Explained: A Complete Guide to Post-Market Performance Follow-up
Post-Market Performance Follow-up (PMPF) is a fundamental requirement under the EU In Vitro Diagnostic Regulation (IVDR), ensuring that manufacturers continually monitor the scientific validity, analytical performance and clinical performance of their in vitro diagnostic medical devices after CE marking. This guide explains IVDR PMPF requirements, PMPF Plans, PMPF Reports, Annex XIII expectations and how ongoing performance monitoring supports continued regulatory compliance throughout the device lifecycle.

IVDR Scientific Validity Explained: A Complete Guide for Manufacturers
Scientific Validity is the first pillar of IVDR Performance Evaluation and provides the scientific foundation demonstrating that an analyte or biomarker is associated with a specific clinical condition or physiological state. This guide explains Scientific Validity under Regulation (EU) 2017/746, including literature reviews, Scientific Validity Reports, Annex XIII requirements, evidence appraisal and how Scientific Validity supports successful CE marking.
Patient Guards Related Services
Need Training?
Do you need training on Quality Management Systems or EU MDR/ EU IVDR? then check out our training courses.
Posted on Google![]()
Munna P52 days agoTrustindex verifies that the original source of the review is Google.
Working with the Patient Guard team has been a great experience throughout our MHRA and ISO 13485 documentation journey. Their expertise, structured approach, and practical guidance helped our team build a robust quality management system while keeping us aligned with regulatory expectations. The collaboration was professional, responsive, and focused on finding solutions rather than simply identifying issues. A special thank you to Alex and Steve for their outstanding coordination, responsiveness, and continuous support throughout the project. They were always approachable, provided valuable feedback, and worked closely with our team to resolve challenges efficiently. Their commitment made a significant difference in keeping our documentation effort on track. I highly recommend Patient Guard to any healthcare or MedTech organization looking for experienced regulatory and quality system partners for MHRA, ISO 13485, and broader medical device compliance initiatives. Thank you again to the entire Patient Guard team for being such reliable partners.Posted on Google![]()
Peter Reeve79 days agoTrustindex verifies that the original source of the review is Google.
STEPPER design, manufacture & distribute eyewear across the globe. With the increasingly complex landscape concerning the placing of Mecial Devices onto the market, we realised we needed professional guidance. We found Patient Guard via a simple internet search and are delighted we did! They provide a pragmatic solution to our needs, are totally reliable & always available to answer our (often simplistic) questions. They are highly efficient & responsive to what is a changing picture in our world and nothing is too much trouble. We have a much better understanding of regulatory affairs and our responsibilities as manufacturers & distributors and they support us in navigating the requirements in different territories. Updating our Declaration of Conformity, ensuring our labelling is compliant and acting as our PRRC are the key areas of their service for us.Posted on Google![]()
Derek Timm79 days agoTrustindex verifies that the original source of the review is Google.
For those companıes lookıng to comply to ISO standards and ın partıcular ISO13485 whıch to be honest ıs a nıghtmare I would strongly suggest goıng to the professıonals as ındeed we dıd by joınıng forces wıth Patıent Guard Ltd The staff are fantastıc nothıng ıs too much trouble and as a medıcal supply company we sımply cannot lıve wıthout them Thanks ın partıcular to Alex and Steve for all the hard work and our best regards from Dan Medıca South LımıtedPosted on Google![]()
BMSCriticalCare116 days agoTrustindex verifies that the original source of the review is Google.
Great service, very helpful and always willing to answer any questions we have,Posted on Google![]()
Thomson Software787 days agoTrustindex verifies that the original source of the review is Google.
Alex Lewis of PatientGuard guided us through the ISO13485 process in a thorough, systematic and efficient manner. He was friendly, patient and willing to go the extra mile. Excellent service.Verified by TrustindexTrustindex verified badge is the Universal Symbol of Trust. Only the greatest companies can get the verified badge who has a review score above 4.5, based on customer reviews over the past 12 months. Read more