Medical Device Regulations

1. Chapter Overview

Medical device regulations exist because patient harm from defective or misused technology is irreversible. Biomedical engineers do not merely design circuits and mechanisms — they must navigate a global lattice of definitions, classifications, standards, and approval pathways before any device reaches a clinic in Addis Ababa, Jimma, or Gondar.

On the MoE Revised Blueprint (2016 E.C.), Medical Device Regulations and Standards contributes 9 blueprint items — a focused regulatory topic area. Exit exams test whether you can:

1. Define what counts as a medical device under FDA and EU law.
2. Classify devices by risk and predict the regulatory route.
3. Map ISO standards to their correct function (13485 ≠ 14971 ≠ 10993 ≠ 14155).
4. Distinguish clinical trials from clinical evaluation.
5. Compare 510(k) clearance with PMA approval.
6. Explain CE marking and Notified Body involvement.
7. Apply the Ethiopian Food and Drug Authority (EFDA) import and registration framework.

This chapter integrates lecture materials (mdr-model-q-a2024.txt, medicalsafety_gettingapprovalofmedicaldevice.txt, EU MDCG classification guidance) with exit exam question patterns. Section 11 provides 50+ practice items with full solutions across six difficulty tiers.

Primary sources: materials/extracted/telegram/mdr-model-q-a2024.txt, medicalsafety_gettingapprovalofmedicaldevice.txt, eu_classification_rules.txt, data/summaries/telegram-b2-medical-device-approval.json.

2. Learning Outcomes

After completing this chapter, you should be able to:

1. State the legal definition of a medical device under US FDA (FD&C Act) and EU MDR 2017/745, including borderline products.
2. Classify devices under FDA Class I, II, III and EU Class I, IIa, IIb, III (plus IVD Classes A–D under IVDR 2017/746).
3. Describe the scope and structure of ISO 13485 (QMS) and how design controls integrate with product development.
4. Execute the ISO 14971 risk management process: hazard identification → risk estimation → risk control → residual risk evaluation → post-market surveillance.
5. Differentiate clinical investigation (trial) from clinical evaluation and identify when each is required.
6. Compare 510(k) premarket notification pathways (Traditional, Special, Abbreviated) with Premarket Approval (PMA).
7. Explain CE marking, technical documentation, and conformity assessment by Notified Bodies.
8. Navigate the EFDA registration pathway: local agent, technical dossier, WHO Prequalification for IVDs, and import permits.
9. Apply IEC 60601-1 (general), collateral, and particular standards to medical electrical equipment.
10. Interpret exam scenarios involving biocompatibility (ISO 10993), clinical ethics (ISO 14155), stability testing, and IVD-specific requirements.

3. Core Concepts

3.1 What Is a Medical Device?

A medical device is an instrument, apparatus, implement, machine, implant, reagent, software, or similar article intended by the manufacturer for use in humans for one or more of:

• Diagnosis, prevention, monitoring, treatment, or alleviation of disease
• Diagnosis, monitoring, treatment, alleviation of, or compensation for injury or disability
• Investigation, replacement, or modification of anatomy or physiological processes
• Control of conception
• Disinfection of medical devices
• Provision of information by in vitro examination of specimens (IVDs)

The device achieves its principal intended action by physical, mechanical, thermal, electrical, or similar means — not primarily by pharmacological, immunological, or metabolic action (those are usually medicines).

FDA definition (simplified)

Under the US Federal Food, Drug, and Cosmetic Act, FDA regulates devices from tongue depressors to pacemakers. FDA also regulates combination products where device and drug/biologic roles must be separated by primary mode of action.

EU MDR 2017/745 definition

The EU definition parallels FDA but emphasizes intended purpose stated by the manufacturer. Classification rules in Annex VIII apply criteria: duration of contact, invasiveness, active vs non-active, body location, and whether energy is delivered.

Borderline products

Borderline products sit at the boundary between medical devices, medicines, cosmetics, or biocides. Regulators determine classification by primary mode of action.

EXAM CALLOUT (exit-0061): Head lice products are the classic borderline answer because they combine chemical and mechanical therapeutic modes.

Accessories and software

• Accessories are regulated as devices if they enable or assist the parent device.
• Software as a Medical Device (SaMD) — standalone software that meets the device definition (e.g., CAD diagnosis aid) is classified by risk like hardware.

Healthcare activities supported by devices (lecture)

Device taxonomy by clinical role (lecture)

Classification factors (lecture — exam list)

Duration of body contact, degree of invasiveness, whether device delivers medicine or energy, biological effect on body, local vs systemic effect, reusability.

WHO medical device classification (developing-country framework)

EXAM CALLOUT (chapter-1-2 lecture): IVD examines specimens outside the body; in vivo devices examine inside the body. POC devices bring laboratory/imaging capability to the bedside.

3.2 Why Classify Medical Devices?

EXAM CALLOUT (exit-0238): Classification establishes risk-based regulatory requirements — not pricing, manufacturing convenience, or functional taxonomy alone.

Classification determines:

Stringent vs less stringent authorities: FDA, EU Notified Bodies, and increasingly EFDA require more rigorous safety and efficacy testing — not fewer trials, not ease-of-use priority, not cost-effectiveness as primary gate (exit-0240 pattern).

3.3 FDA Classification — Class I, II, III

The FDA uses three classes based on risk and regulatory control needed:

Exam trap: FDA uses Class I, II, III only — no IIa or IIb. If a stem mentions IIa/IIb, think EU, not FDA (exit-0001).

General controls include: establishment registration, device listing, Good Manufacturing Practice (GMP / QSR 21 CFR 820), labeling, and prohibition of adulteration/misbranding.

Special controls for Class II may include device-specific guidance documents, special labeling, patient registries, or mandatory performance standards.

3.4 EU MDR Classification — Class I, IIa, IIb, III

EU MDR 2017/745 uses four classes derived from Annex VIII rules considering:

• Duration of contact (transient, short-term, long-term)
• Invasiveness (non-invasive, invasive body orifice, surgical invasive, implant)
• Active vs non-active
• Local vs systemic effect
• Use on heart, central circulatory system, or central nervous system

EXAM CALLOUT (exit-0062): Bone fixation plates = Class IIb (invasive, long-term implant influencing bone integrity). Wheelchair = Class I. Heart valve = Class III.

Class I sub-types requiring Notified Body:

• Class Is — sterile device
• Class Im — measuring function
• Class Ir — reusable surgical instrument

EXAM CALLOUT (exit-0647): All need conformity assessment by Notified Body EXCEPT Class I (plain) and Class A (IVD).

3.5 IVD Classification — EU Class A, B, C, D

Under IVDR 2017/746, in vitro diagnostic devices are classified separately:

EXAM CALLOUT: IVDs have distinct registration requirements because wrong diagnostic results create indirect but severe patient risk — analytical sensitivity and specificity matter (mdr-model Q19).

WHO Prequalification (PQ) for IVDs: WHO — not ISO, FDA, or EMA — establishes global standards for prequalification of IVDs used in UN procurement and national programs (mdr-model Q1). EFDA often references WHO PQ lists to fast-track essential diagnostics.

3.6 Standards vs Regulations vs Conformity Assessment

EXAM CALLOUT (exit-0014): A standard provides requirements and characteristics used consistently; conformity assessment is the verification process; clearance is the outcome.

3.7 Informed Consent and Research Ethics (ISO 14155 Context)

Clinical investigations of devices must satisfy Good Clinical Practice. Beyond the protocol document, ethical foundations include:

• Voluntary participation without coercion
• Adequate information in understandable language
• Capacity to consent — special protections for vulnerable populations (children, prisoners, cognitively impaired)
• Right to withdraw without penalty
• Risk-benefit proportionality — institutional review board / ethics committee approval before enrollment

For pregnant women, fetal risk assessment is mandatory: the protocol must justify inclusion, minimize exposure, and monitor both maternal and fetal outcomes. Excluding all pregnant women by default may be scientifically unnecessary; including them without fetal safeguards is unethical.

3.8 Essential Principles of Safety and Performance

Under MDR and global harmonization (IMDRF), essential principles include:

1. Chemical, physical, and biological compatibility (biocompatibility)
2. Effectiveness for intended use (clinical performance)
3. Minimized risk to patients and users (risk management per ISO 14971)

User-friendliness (usability per IEC 62366) supports safe use but is NOT listed as a core essential principle in the same tier as biocompatibility and risk minimization (mdr-model Q5).

For implantable drug-delivery devices, classification prioritizes biocompatibility and sterility because the device contacts tissue and must not introduce infection or toxicity (mdr-model Q4).

4. Technical Deep Dive

4.1 ISO 13485 — Quality Management System

ISO 13485:2016 specifies requirements for a Quality Management System (QMS) where an organization must demonstrate ability to provide medical devices and related services that consistently meet customer and regulatory requirements.

EXAM CALLOUT (exit-0013): ISO 13485 = Quality Management System — not biological evaluation, not risk estimation alone.

Scope

Applies to organizations involved in:

• Design and development
• Production
• Storage and distribution
• Installation and servicing
• Final decommissioning and disposal

Key QMS elements

Design controls (ISO 13485 §7.3)

Design controls mirror the product development lifecycle from Chapter 8:

Design Planning → Design Inputs → Design Outputs → Design Review
       → Design Verification → Design Validation → Design Transfer
       → Design Changes (controlled)

• Verification: Does the output meet the input? (built it right)
• Validation: Does the device meet user needs and intended use? (built the right thing)

Management specification in procurement language maps to QMS process requirements — how the company operates to ensure quality (exit-0002).

4.2 ISO 14971 — Risk Management

ISO 14971:2019 provides a framework for identifying hazards, estimating and evaluating risks, controlling risks, and monitoring effectiveness throughout the device lifecycle.

EXAM CALLOUT (exit-0244): ISO 14971 establishes a framework for identifying and mitigating device risks — not material composition recipes, not clinical trial protocols, not manufacturing QC alone.

Risk management process

1. Risk management planning
2. Hazard identification (HAZOP, FMEA, fault tree)
3. Risk estimation (severity × probability)
4. Risk evaluation (against acceptability criteria)
5. Risk control (inherent safety → protective measures → information for safety)
6. Evaluation of overall residual risk
7. Risk management review
8. Production and post-production activities (vigilance, PMCF)

Risk control hierarchy (exam favorite)

1. Inherent safety by design — eliminate hazard
2. Protective measures — guards, alarms, redundancy
3. Information for safety — labeling, IFU, training

Risk control is never complete at launch — post-market surveillance may reveal new hazards requiring file updates.

Relationship to ISO 13485

ISO 13485 requires risk management per ISO 14971 integrated into design controls. Risk management file is part of technical documentation for CE marking and EFDA submission.

4.3 ISO 10993 — Biological Evaluation

ISO 10993 series addresses biological evaluation of medical devices — cytotoxicity, sensitization, irritation, systemic toxicity, genotoxicity, implantation, hemocompatibility, etc.

EXAM CALLOUT (exit-0243, exit-0246): ISO 10993 = biological evaluation. Use it to identify potential allergic reactions and adverse tissue responses when selecting materials.

Test selection depends on:

• Nature of body contact (surface, external communicating, implant)
• Contact duration (limited, prolonged, permanent)
• Material composition (polymers, metals, ceramics, composites)

ISO 10993 does not define sterilization methods, packaging, or shelf life — those are separate validation activities.

4.4 ISO 14155 — Clinical Investigations

ISO 14155 governs good clinical practice for clinical investigations of medical devices — ethical conduct, investigator responsibilities, informed consent, monitoring, and adverse event reporting.

EXAM CALLOUT (exit-0245): ISO 14155 defines ethical considerations for clinical trials — not cost-effectiveness, not UI design, not device-specific performance limits.

Clinical Trial Protocol

EXAM CALLOUT (exit-0250): The Clinical Trial Protocol outlines design, methodology, and procedures — the master "who, what, where, how" document. Deviations can disqualify trial data.

Informed consent

Primary purpose: ensure participants understand risks and benefits (mdr-model Q17) — not sponsor financial protection, not enrollment speed, not demographics alone.

For pregnant women in trials: minimize risks to both mother and fetus (mdr-model Q18).

4.5 Clinical Trials vs Clinical Evaluation

This distinction is high-yield for exit exams and real regulatory work.

Clinical evaluation answers: Does sufficient clinical evidence prove the device is safe and performs as intended for its claimed purpose?

It is not about reducing manufacturing cost, packaging design, or sales strategy (exit-0842 pattern).

For 510(k), clinical data may be unnecessary if substantial equivalence to a predicate is demonstrated with bench and animal data. For PMA, prospective clinical trials are typically mandatory.

4.6 US FDA Premarket Pathways — 510(k) vs PMA

From medicalsafety_gettingapprovalofmedicaldevice.txt:

The choice between 510(k) and PMA depends on the device's classification under CFR.

Decision tree

Device classified?
    │
    ├─ Class I → General controls (often exempt from 510(k))
    │
    ├─ Class II → 510(k) Premarket Notification
    │              (demonstrate substantial equivalence to predicate)
    │
    └─ Class III → PMA Premarket Approval
                   (demonstrate safety AND effectiveness with clinical evidence)

510(k) — Premarket Notification

Substantial equivalence (SE): same intended use; same technological characteristics OR different characteristics that do not raise new safety/effectiveness questions.

FDA 510(k) Paradigm (1998) — three types:

PMA — Premarket Approval

Most stringent FDA pathway:

• Requires valid scientific evidence (usually clinical trials)
• FDA makes independent safety and effectiveness determination
• Applicable to Class III devices (life-supporting, life-sustaining, substantial importance in preventing health impairment)

4.7 CE Marking and EU Conformity Assessment

CE marking indicates conformity with applicable EU regulations (MDR 2017/745 or IVDR 2017/746). It is not a quality stamp from the EU government — it is the manufacturer's declaration backed by evidence.

Steps to CE marking (simplified)

1. Determine device classification (Annex VIII rules)
2. Implement QMS (ISO 13485)
3. Conduct risk management (ISO 14971)
4. Prepare technical documentation (Annex II/III)
5. Perform clinical evaluation (MDR Article 61)
6. Conformity assessment per Annex IX, X, or XI
7. Issue EU Declaration of Conformity
8. Affix CE mark + register in EUDAMED
9. Post-market surveillance and PMCF

Notified Body role

A Notified Body is an independent third party designated by an EU member state to conduct conformity assessment for medium- and high-risk devices. The manufacturer cannot self-certify Class IIa, IIb, or III (except plain Class I).

4.8 IEC 60601 Family — Medical Electrical Equipment

EXAM CALLOUT (mdr-model Q12–15): IEC 60601-1 = general safety. Particular standards address specific device types. Collateral standards address cross-cutting concerns like electrical leakage. Infusion pump design requires all of the above.

Electrical equipment class (shock protection) — distinct from FDA/EU risk class:

• Class I — basic insulation + protective earth
• Class II — double/reinforced insulation, no earth required (exit-0012)

Do not confuse IEC electrical Class I/II with FDA device Class I/II/III.

4.9 Stability Testing for Registration

EXAM CALLOUT (exit-0254): Stability evaluation covers shelf life, in-use stability, and shipping stability — not electrical safety alone, not risk analysis documents.

Regulators require proof the device performs within specifications throughout its labeled lifetime and under realistic transport/storage conditions.

4.10 Ethiopian EFDA Regulatory Pathway

Ethiopia's Food and Drug Authority (EFDA), under Proclamation No. 1112/2019, regulates medical device import, registration, and market surveillance. EFDA sits within the national health regulatory architecture alongside the Ministry of Health — for health services, MoH/EFDA is the body responsible for ensuring medical products meet safety and performance expectations before they reach patients.

Key pathway elements

EFDA registration workflow (conceptual)

Manufacturer → Appoint local agent → Compile technical dossier
       → Submit EFDA application → Technical review
       → Query/response cycles → Registration certificate
       → Import permit per shipment → Post-market vigilance

The technical dossier parallels EU Annex II/III structure even when the device already bears CE marking. EFDA reviewers evaluate whether labeling, stability data, and clinical evidence remain valid for the Ethiopian context — including tropical storage, voltage fluctuations, and available clinical user skill levels.

Harmonization and stringent authorities

EFDA is progressively aligning with IMDRF (International Medical Device Regulators Forum) principles. Devices approved by stringent regulatory authorities — FDA, EU Notified Bodies, Health Canada, TGA — may receive streamlined review, but national registration remains mandatory. A CE mark alone does not authorize import; the EFDA registration number must appear on import documentation.

For donated equipment, hospitals frequently assume foreign clearance suffices. BME departments must verify EFDA status before installation — unregistered devices create liability exposure during inspections and may lack manufacturer support for calibration consumables.

EFDA and hospital practice

• Maintenance logs and calibration records matter during EFDA inspections — undocumented repair = legally "never happened"
• Laboratory analyzer calibration ensures accurate test results — regulatory quality depends on metrological traceability (exit-0386)
• Equipment procurement must justify clinical effectiveness, patient safety, and total cost of ownership — not lowest price or brand prestige alone (exit-0599)

4.11 Post-Market Surveillance and Vigilance

Regulation does not end at market authorization. Post-market surveillance (PMS) collects real-world safety and performance data after commercial release.

ISO 14971 requires production and post-production risk review — new hazards discovered in the field must flow back into the risk management file and may trigger regulatory reporting within mandated timelines (often 10–30 days for serious events depending on jurisdiction).

5. Equipment and Device Focus

5.1 Classification Examples — Worked Table

5.2 Implantable Drug-Delivery Device

Regulatory focus areas:

1. Biocompatibility (ISO 10993 implant contact)
2. Sterility (ISO 11135/11137 sterilization validation)
3. Dose accuracy and alarm systems (particular standard)
4. Risk management for drug overdose, occlusion, infection
5. Clinical investigation if novel combination product

5.3 Laboratory and IVD Equipment

• Calibration traceable to national standards — ensures diagnostic reliability (exit-0386)
• IVD analytical performance: sensitivity, specificity, precision, linearity
• WHO PQ for public-health diagnostics (malaria, HIV, TB)
• EFDA separate IVD registration track

5.4 Active Implantable Devices

6. Practical Biomedical Engineering Perspective

6.1 Role of the BME in Regulatory Compliance

In Ethiopian hospitals and industry, BMEs encounter regulations at multiple points:

6.2 Technical Documentation Package (Ethiopia)

When supporting a manufacturer or local agent, expect to compile:

1. Device description and intended purpose
2. Classification rationale (FDA + EU + EFDA)
3. Risk management file (ISO 14971)
4. Design and manufacturing information
5. Verification and validation reports
6. Clinical evaluation report or clinical investigation data
7. Labeling and IFU
8. Declaration of Conformity / FDA clearance letter
9. Stability and sterilization validation
10. Post-market surveillance plan

6.3 Common Industry Mistakes

6.4 Low-Resource Setting Considerations

• Prefer devices with WHO PQ or established EFDA registration
• Evaluate stability under tropical transport (shipping stability)
• Ensure IFU available in workable language; train beyond manual
• Plan calibration and spare parts before accepting donation equipment

7. Frequently Tested Concepts

High-yield regulatory topics from the exit exam blueprint. Each includes mechanism, trap, and answer.

7.1 exit-0061 — Borderline Product

Stem: Which one of the following is a borderline product?

Answer: Head lice product (option d in bank).

Mechanism: Treatment chairs, liposuction devices, and brain stimulators have clear mechanical or electrical primary actions. Head lice kits combine chemical pediculicide with comb/applicator — regulators must determine whether pharmacological or physical mode dominates.

Trap: Picking brain stimulator because it "sounds complex" — it is unambiguously a device.

7.2 exit-0238 — Why Classify Medical Devices?

Stem: Why is it important to classify medical devices?

Answer: To establish risk-based regulatory requirements.

Trap: "Categorize by function" or "determine manufacturing processes" — those are outcomes, not the regulatory purpose.

7.3 exit-0243 — ISO 10993

Stem: Which ISO standard focuses on biological evaluation of medical devices?

Answer: ISO 10993.

Mnemonic: 10993 = Bio (long number, biology series). 13485 = QMS. 14971 = Risk. 14155 = Clinical.

7.4 exit-0245 — ISO 14155

Stem: Why is ISO 14155 important?

Answer: To define ethical considerations for clinical trials.

Trap: Confusing with ISO 14971 (risk) or ISO 13485 (QMS).

7.5 exit-0246 — ISO 10993 in Material Selection

Stem: How can ISO 10993 be used when selecting materials?

Answer: To identify potential allergic reactions to materials.

Trap: Sterilization, packaging, and shelf life are validated under different standards.

7.6 exit-0250 — Clinical Trial Protocol

Stem: What document outlines design, methodology, and procedures for a clinical trial?

Answer: Clinical Trial Protocol.

Trap: Informed consent form is participant-facing; protocol is the scientific master plan.

7.7 exit-0254 — Stability Evaluation

Stem: What aspects of stability are evaluated for registration?

Answer: Shelf life, in-use stability, and shipping stability.

Trap: Electrical safety and risk analysis are separate dossier sections.

7.8 exit-0386 — Calibration in Laboratory Machines

Stem: Why is calibration important in a medical laboratory machine?

Answer: To ensure accurate test results.

Mechanism: IVD regulatory performance (ISO 15197, IVDR) assumes metrological traceability. Wrong calibration → wrong diagnosis → patient harm. EFDA and ISO 17025-aligned labs require scheduled calibration with reference standards.

Note: Mapped to Regulations because IVD metrology is a regulatory requirement, not merely HTM convenience.

7.9 exit-0426 — Osmosis (Cross-Cutting Trap)

Stem: Osmosis is the movement of:

Answer: Solvent across a semipermeable membrane.

Note: This item is miscategorized in your regulation misses — it belongs to bio-fluid mechanics (Chapter 3). Included here because the index maps it to Ch 11. Do not study osmosis under regulations except when reviewing dialysis fluid management in device IFU.

7.10 exit-0599 — Equipment Selection Criterion

Stem: Most appropriate criterion when selecting medical equipment?

Answer: Clinical effectiveness, patient safety, and total cost of ownership (not lowest price, brand prestige, or aesthetics alone).

Mechanism: EFDA and HTM audits expect documented justification beyond marketing. TCO includes maintenance, calibration, training, consumables, and downtime.

8. Comparison Tables

8.1 FDA vs EU Classification

8.2 510(k) vs PMA

8.3 ISO Standards Quick Map

8.4 Clinical Trial vs Clinical Evaluation

8.5 Conformity Assessment by Class

9. Exam-Oriented Memory Aids

9.1 ISO Number Mnemonic — "1-4-9-10-14"

• 13485 → QMS (Quality)
• 14971 → Risk (RM)
• 10993 → Bio (longest number in the trio)
• 14155 → Clinical (investigations)
• 15197 → Glucose (IVD performance)

9.2 FDA Class Mnemonic — "Low → Middle → Life"

• I = Incidental risk (tongue depressor)
• II = Infusion, intermediate (510(k))
• III = Implant/life (PMA)

9.3 EU Class Mnemonic — "a before b before 3"

I < IIa < IIb < III — alphabet and number climb with risk.

9.4 510(k) Types — "T-S-A"

Traditional — full file
Special — own device's modification
Abbreviated — standards/guidance exist

9.5 CE Marking Steps — "C-R-T-N-D-P"

Classify → Risk (14971) → Technical file → NB audit (if needed) → Declaration of Conformity → Post-market surveillance

9.6 EFDA Import — "A-D-T"

Agent → Dossier (design, risk, tests) → Traceability (registration + import permit)

9.7 IEC 60601 Pyramid

Base: 60601-1 general
Middle: 60601-1-X collateral (leakage, EMC, usability)
Top: 60601-2-X particular (pump, defibrillator)

10. Chapter Summary

Medical device regulation is a risk-proportionate evidence system. Definitions and classification drive everything downstream: which ISO standards dominate your technical file, whether you need a Notified Body, whether you file 510(k) or PMA, and whether you run a clinical trial or synthesize a clinical evaluation.

FDA uses three classes (I, II, III) with 510(k) for most Class II and PMA for Class III. EU MDR uses four classes (I, IIa, IIb, III) with CE marking and mandatory Notified Body involvement from IIa upward. IVDs follow IVDR Classes A–D with WHO Prequalification as a global procurement gate.

ISO 13485 governs the company QMS; ISO 14971 governs risk; ISO 10993 governs biocompatibility; ISO 14155 governs clinical investigation ethics. IEC 60601-1 anchors electrical safety with collateral and particular standards for specific equipment.

In Ethiopia, EFDA requires a local agent, technical documentation (design specs, risk assessments, test reports), and considers stringent-authority approvals while maintaining national registration. BMEs support compliance through procurement verification, calibration traceability, maintenance documentation, and design-stage risk files.

Next step: Complete Section 11 practice, then revisit regulation MCQs in the app.

11. Exam Practice Section

All questions include full solutions. Difficulty progresses from recall to scenario judgment.

Basic Questions (10 MCQs)

B1. The FDA classifies medical devices into:

• A) Class I, II, III, and IV
• B) Class I, IIa, and IIb
• C) Class I, II, and III
• D) Class I, IIa, IIb, III

Solution: C. FDA uses three classes only. IIa/IIb are EU MDR designations (exit-0001).

B2. ISO 13485 is primarily concerned with:

• A) Biological evaluation of materials
• B) Risk estimation methods
• C) Quality management systems
• D) Clinical trial ethics

Solution: C. ISO 13485 = QMS. ISO 10993 = biocompatibility; ISO 14971 = risk; ISO 14155 = clinical investigations (exit-0013).

B3. Which organization prequalifies IVDs for global health procurement programs?

• A) ISO
• B) WHO
• C) FDA
• D) EMA

Solution: B. WHO Prequalification (PQ) for IVDs — mdr-model Q1.

B4. ISO 14971 contributes to patient safety by:

• A) Specifying material composition
• B) Establishing a framework for identifying and mitigating device risks
• C) Outlining clinical trial protocols
• D) Defining manufacturing QC procedures only

Solution: B. Risk management lifecycle — mdr-model Q9, exit-0244.

B5. Which ISO standard addresses biological evaluation of medical devices?

• A) ISO 13485
• B) ISO 14971
• C) ISO 10993
• D) ISO 14155

Solution: C. exit-0243.

B6. Class III FDA devices typically require:

• A) General controls only
• B) 510(k) clearance
• C) PMA approval
• D) No premarket submission

Solution: C. Class III = highest risk = PMA with clinical evidence.

B7. A document providing requirements and characteristics used consistently to ensure products and processes are fit for purpose is called a:

• A) Governmental clearance
• B) Standard
• C) Clinical testing report
• D) Import permit

Solution: B. exit-0014.

B8. The primary function of IEC 60601-1 is to:

• A) Define device-specific performance for infusion pumps only
• B) Establish general safety requirements for medical electrical equipment
• C) Set labeling requirements only
• D) Replace ISO 14971

Solution: B. General standard — mdr-model Q12.

B9. Which EU device classes can typically be self-certified without Notified Body review (plain devices)?

• A) Class III and Class D IVD
• B) Class I (non-sterile, non-measuring) and Class A IVD
• C) Class IIb and Class C IVD
• D) All classes require Notified Body

Solution: B. exit-0647 pattern.

B10. CE marking on a medical device indicates:

• A) FDA approval
• B) Conformity with applicable EU regulatory requirements
• C) WHO Prequalification
• D) EFDA registration in Ethiopia

Solution: B. CE = EU conformity assessment outcome, not US or Ethiopian authorization.

Intermediate Questions (10 MCQs)

I1. Why is medical device classification important?

• A) To set device pricing tiers
• B) To establish risk-based regulatory requirements
• C) To categorize devices alphabetically
• D) To determine hospital department ownership

Solution: B. exit-0238, mdr-model Q2.

I2. For a foreign manufacturer registering a device in Ethiopia, the local agent primarily:

• A) Designs the device
• B) Manufactures the device domestically
• C) Liaises with EFDA on behalf of the manufacturer
• D) Conducts clinical trials independently

Solution: C. mdr-model Q7.

I3. Technical documentation for EFDA registration most likely includes:

• A) Marketing brochures and testimonials
• B) Design specifications, risk assessments, and test reports
• C) Financial statements only
• D) Social media reviews

Solution: B. mdr-model Q6.

I4. Which is NOT an essential principle of medical device safety and performance under MDR?

• A) Biocompatibility
• B) Effectiveness for intended use
• C) User-friendliness as a standalone core principle
• D) Minimized risk to patients

Solution: C. Usability supports safety but "user-friendliness" alone is not a core essential principle — mdr-model Q5.

I5. ISO 14155 is important because it:

• A) Defines ethical considerations for clinical trials
• B) Sets sterilization dose limits
• C) Replaces ISO 13485
• D) Classifies EU devices

Solution: A. exit-0245, mdr-model Q10.

I6. A manufacturer selecting implant materials should apply ISO 10993 to:

• A) Identify potential allergic reactions and biological hazards
• B) Determine shelf life only
• C) Select packaging graphics
• D) Write the financial business case

Solution: A. exit-0246, mdr-model Q11.

I7. Collateral standards in IEC 60601 (e.g., 60601-1-2 EMC) contribute by:

• A) Replacing particular standards
• B) Addressing cross-cutting safety topics like electrical leakage and EMC
• C) Eliminating need for risk management
• D) Defining drug-interaction limits

Solution: B. mdr-model Q14 — electrical leakage and horizontal safety concerns.

I8. An implantable drug-delivery device classification should prioritize:

• A) Portability and color options
• B) Biocompatibility and sterility
• C) Marketing channel selection
• D) Patent filing jurisdiction

Solution: B. mdr-model Q4 — tissue contact + infection risk.

I9. IVD devices have distinct registration requirements from general medical devices primarily because:

• A) IVDs never need a QMS
• B) Wrong diagnostic results pose significant indirect patient risk
• C) IVDs are always Class I
• D) IVDs are exempt from stability testing

Solution: B. mdr-model Q19.

I10. The choice between FDA 510(k) and PMA depends on:

• A) Company revenue
• B) Device classification under CFR
• C) Hospital preference
• D) Color of device housing

Solution: B. medicalsafety extract — classification drives pathway.

Advanced Questions (10 MCQs)

A1. Which of the following is a borderline product?

• A) Treatment chair
• B) Liposuction device
• C) Brain stimulating device
• D) Head lice treatment product

Solution: D. exit-0061 — drug/device boundary.

A2. Under EU MDR, a bone fixation plate is typically classified as:

• A) Class I
• B) Class IIa
• C) Class IIb
• D) Class III

Solution: C. exit-0062 — invasive long-term implant influencing bone.

A3. A company modifies its own FDA-cleared infusion pump firmware to improve alarm logic without changing intended use. The most appropriate 510(k) type is:

• A) Traditional 510(k) only
• B) Special 510(k)
• C) PMA supplement
• D) De novo only

Solution: B. Special 510(k) — manufacturer's own cleared device modification with design controls — medicalsafety extract.

A4. A novel transcatheter heart valve with no predicate in the US market would most likely require:

• A) Class I listing only
• B) 510(k) substantial equivalence
• C) PMA with clinical trials
• D) Exemption from premarket review

Solution: C. Class III high-risk implant — PMA with clinical evidence.

A5. For EU MDR Class IIa device CE marking, which activity is mandatory?

• A) Self-declaration only with no technical file
• B) Notified Body conformity assessment
• C) FDA 510(k) clearance first
• D) WHO PQ certification

Solution: B. Class IIa requires Notified Body involvement.

A6. Clinical evaluation under EU MDR differs from clinical investigation because clinical evaluation:

• A) Never uses literature data
• B) Synthesizes all available clinical evidence for safety and performance
• C) Is optional for Class III devices
• D) Replaces ISO 14971

Solution: B. CER synthesizes trials, literature, equivalence, PMCF — required for all classes.

A7. Designing a new infusion pump, which IEC 60601 standards apply?

• A) General standard only
• B) Particular standard only
• C) Collateral standard only
• D) General, relevant collateral, and particular standards

Solution: D. mdr-model Q15 — all layers of the pyramid.

A8. Stability data for regulatory submission should include:

• A) Shelf life, in-use stability, and shipping stability
• B) Risk management plan only
• C) User interface mockups
• D) Competitor pricing analysis

Solution: A. exit-0254, mdr-model Q20.

A9. Stringent regulatory authorities differ from less stringent ones by:

• A) Requiring fewer clinical trials
• B) Prioritizing ease of use over safety
• C) Focusing primarily on cost-effectiveness
• D) Having more rigorous safety and efficacy testing

Solution: D. mdr-model Q3.

A10. An Ethiopian hospital procures a hematology analyzer. The MOST appropriate selection criterion is:

• A) Lowest purchase price
• B) Foreign brand prestige
• C) Clinical effectiveness, patient safety, and total cost of ownership
• D) Aesthetic design matching ward paint

Solution: C. exit-0599 — TCO and clinical justification for EFDA/HTM alignment.

Short Answer Questions (10)

S1. Define a medical device in one sentence.

Solution: An article intended by the manufacturer for human use in diagnosis, prevention, monitoring, or treatment of disease or injury, achieving its principal action by physical/mechanical/electrical means rather than primarily pharmacological action.

S2. List the three FDA device classes and one example each.

Solution: Class I (tongue depressor), Class II (infusion pump), Class III (pacemaker).

S3. What are the three types of FDA 510(k) submissions?

Solution: Traditional, Special (own-device modification), Abbreviated (standards/guidance available).

S4. State the purpose of ISO 13485.

Solution: To specify QMS requirements for organizations that design, produce, install, and service medical devices consistently meeting regulatory and customer requirements.

S5. List four steps in the ISO 14971 risk management process.

Solution: Any four of: planning, hazard identification, risk estimation, risk evaluation, risk control, residual risk evaluation, review, post-production surveillance.

S6. What is the difference between design verification and design validation?

Solution: Verification confirms design outputs meet design inputs (built right). Validation confirms the device meets user needs and intended use in the target population (built the right thing).

S7. What does CE marking signify?

Solution: Manufacturer's declaration that the device conforms to applicable EU MDR/IVDR requirements following appropriate conformity assessment.

S8. Name three documents required in an EFDA technical dossier.

Solution: Any three of: design specifications, risk assessment, test reports, labeling/IFU, clinical evaluation data, sterilization validation, stability data, proof of foreign approval.

S9. What is the Clinical Trial Protocol?

Solution: The master document defining trial objectives, design, methodology, statistical considerations, and procedures to ensure consistent, valid data collection.

S10. Distinguish electrical Class I and Class II per IEC 60601-1.

Solution: Class I relies on basic insulation plus protective earth. Class II relies on double or reinforced insulation without protective earth.

Scenario-Based Questions (10)

SC1. A startup develops a wearable pulse oximeter for home use. FDA classifies it Class II. Which premarket pathway and key standard apply?

Solution: 510(k) demonstrating substantial equivalence to a predicate pulse oximeter. Apply IEC 60601-1 general safety, 60601-1-2 EMC collateral, and relevant particular standard if cited. Implement ISO 14971 risk management and ISO 13485 QMS. SpO₂ accuracy validation per recognized performance standards. For Ethiopia, appoint EFDA local agent and submit technical dossier.

SC2. An EU manufacturer wants CE marking for a sterile surgical kit (Class Is). Can they self-declare?

Solution: No for the sterile aspect. Plain Class I can self-declare, but Class Is requires Notified Body assessment of sterilization processes. Full QMS, risk file, and clinical evaluation still required.

SC3. A hospital receives a donated CT scanner without EFDA registration. What should the BME advise?

Solution: Do not commission for clinical use until EFDA registration and import documentation verified. Unregistered devices violate Proclamation 1112/2019; liability and patient safety risk. Request registration certificate, maintenance manuals, and radiation compliance (IEC 60601-1-3). Document advice in writing.

SC4. A lab manager skips quarterly calibration of a blood glucose meter. A diabetic patient receives a false low reading. Which regulatory concepts failed?

Solution: IVD performance maintenance — ISO 15197 assumes calibrated device. ISO 14971 post-market controls and ISO 13485 servicing if manufacturer-maintained. EFDA adverse event reporting may be required. Clinical risk from untreated hyperglycemia. Root cause: failure of metrological traceability (exit-0386).

SC5. A company claims its new orthopedic plate is "equivalent" to a competitor's CE-marked plate but has different titanium alloy. What must they evaluate?

Solution: Biocompatibility per ISO 10993 for new alloy contact duration. Mechanical performance (fatigue, yield) per ASTM/ISO orthopedic standards. EU classification likely Class IIb. Clinical evaluation must address whether material change affects equivalence claim. Risk file update mandatory.

SC6. Pregnant women will enroll in a trial for a fetal monitor. What ethical additions are required?

Solution: Minimize risk to mother and fetus (mdr-model Q18). Ethics committee review, enhanced informed consent explaining fetal risks, fetal monitoring safeguards, exclusion/inclusion criteria justified, ISO 14155 compliance, possible early stopping rules.

SC7. A Jimma BME graduate joins a firm submitting Abbreviated 510(k) for a blood pressure cuff. What supports "abbreviated" status?

Solution: Existence of FDA guidance or recognized consensus standards (e.g., ANSI/AAMI SP10) allowing summary submission. Device is Class II with well-established controls. Still need ISO 14971 risk file and performance testing against standard.

SC8. EFDA requests proof of stability for an imported reagent kit during hot-climate transport. What do you present?

Solution: Shipping stability studies at elevated temperature/humidity, shelf life real-time and accelerated data, in-use stability after first opening. Label storage conditions aligned with data.

SC9. A software-only algorithm diagnoses diabetic retinopathy from fundus photos without new hardware. How is it regulated?

Solution: Likely Software as a Medical Device (SaMD) — classified by risk (possibly Class II/III depending on autonomy and condition). Requires clinical validation study, ISO 14971 for false negative/positive risks, IEC 62304 software lifecycle, FDA 510(k) or De Novo/PMA; EU Class IIa+ with clinical evaluation.

SC10. Notified Body audits a Class IIb ventilator manufacturer. What do they review?

Solution: ISO 13485 QMS implementation, technical documentation (design, risk, V&V), clinical evaluation report, application of IEC 60601-1, 60601-1-2 EMC, 60601-2-12 particular ventilator standard, post-market surveillance and PMCF plan.

Calculation and Analysis Problems

C1. A risk matrix assigns severity S=4 (critical) and probability P=3 (occasional). If acceptability threshold is Risk Priority Number (RPN) ≤ 10, is this acceptable if RPN = S × P?

Given: S = 4, P = 3
Calculation: RPN = 4 × 3 = 12
Solution: Not acceptable without risk control (12 > 10). Implement design controls per ISO 14971 hierarchy and re-evaluate residual risk.

C2. A company's 510(k) predicate was cleared in 2015. The new device has identical intended use but adds wireless telemetry. Under Special 510(k), can they rely solely on the 2015 clearance letter?

Solution: No — wireless adds EMC and cybersecurity risks requiring IEC 60601-1-2 and FDA guidance testing. Likely need Traditional or Special 510(k) with new verification data for radio module. Substantial equivalence must address new technological characteristics.

C3. Hospital budgets for Device A: capital 500,000 ETB, annual maintenance 80,000 ETB × 5 years. Device B: capital 350,000 ETB, maintenance 150,000 ETB × 5 years. Which has lower TCO over 5 years?

Device A: 500,000 + 5(80,000) = 500,000 + 400,000 = 900,000 ETB
Device B: 350,000 + 5(150,000) = 350,000 + 750,000 = 1,100,000 ETB
Solution: Device A has lower 5-year TCO despite higher capital cost — illustrates exit-0599 TCO reasoning.

C4. EU classification: non-invasive device in contact with intact skin for < 24 hours, no measuring function. Which Annex VIII rule bucket and class?

Solution: Typically Rule 1 — non-invasive devices → Class I. Confirm no special characteristics (sterile, measuring) that would raise class.

C5. An IVD HIV rapid test self-test for home use — IVDR class?

Solution: Typically Class D or Class C depending on whether it is life-threatening transmissible disease self-test — Notified Body mandatory. WHO PQ often required for public programs.

C6. A manufacturer's risk acceptability matrix uses severity categories 1–5 and probability A–E mapped to numeric scores 1–5. Hazard "electric shock from enclosure" is rated Severity 5, Probability C (score 3). After adding an earth conductor (protective measure), probability drops to E (score 1). What is the residual RPN if RPN = S × P?

Given: Post-control S = 5, P = 1
Calculation: RPN = 5 × 1 = 5
Solution: Residual risk acceptable if threshold is 10. Document in risk management file per ISO 14971 hierarchy — protective measure (Class I earthing) reduced probability tier.

Rapid Review — Blueprint Item Map

End of Chapter 11 — Medical Device Regulations and Standards