Distribution Records and GDPMDS Requirements in Singapore

1. Key takeaways

In Singapore, medical device dealers are required to keep traceable distribution records and to follow the Good Distribution Practice for Medical Devices (GDPMDS). The record requirements are set by GN-06 R3, Guidance on Distribution Records (November 2022), and the implementation of GDPMDS is governed by GN-33 R2, Guidance on the Application of Singapore Standard GDPMDS (September 2023). Distribution records are the infrastructure of effective recalls and FSCAs — without them, the flow of affected batches cannot be determined, and every downstream obligation built on that determination inherits the gap.

• Records must support two-way traceability: from batch to customer, and from customer back to batch.
• GDPMDS (Singapore Standard SS 620) serves both as acceptable QMS evidence for dealer licences and as an operating standard for daily practice.
• Under GN-02 R8, importer and wholesaler licence applications may accept a GDPMDS certificate (issued by a SAC-accredited body, with an audit report attached).
• Storage and transport conditions, especially for temperature-controlled or fragile devices, fall within GDPMDS scope.

2. Legal basis

The instruments governing distribution records and GDPMDS are summarised below. Together they define what must be recorded, how the standard is applied in practice, and how a GDPMDS certificate can substitute within the licensing framework.

3. Expert insights

Five points explain how distribution records behave as a compliance asset rather than an administrative burden.

Insight 1: distribution records are not a ledger; they are recall capability. This is the point we repeat most to clients: the value of distribution records only shows on the day something goes wrong. An FSCA requires you to determine which customers received the affected batch, in what quantities, and whether the units have been used — all of it depends on distribution records. Where records are incomplete, the recall scope must be widened, and both cost and reputational damage grow with it. A recall that cannot be scoped precisely also takes longer to close, and as noted elsewhere an unclosed FSCA carries consequences of its own.

Insight 2: GDPMDS is both a standard and an optional passport. GDPMDS (Singapore Standard SS 620) appears in two places: as QMS evidence, where an importer or wholesaler licence application may use a GDPMDS certificate in place of ISO 13485 (GN-02 R8); and as an operating standard, guiding daily storage, transport, traceability and record management (GN-33 R2). For pure distribution businesses, a single GDPMDS certification solves both the licence evidence and the operating standard at once, and is more cost-effective than a full ISO 13485 system. Companies that operate both a distribution arm and manufacturing activities should still map their full activity set against the QMS options before choosing.

Insight 3: GN-06 R3 is about being able to trace, not merely about having archives. The key property of the records is two-way traceability: you can go from a batch to its customers, and from a customer back to the batch. One-directional records — a shipping log without batch linkage — will be treated as insufficient in an audit, even if they look tidy and complete on the surface. The test we apply is simple: pick any batch number and any customer name at random, and check that both directions resolve within a few minutes from the records alone.

Insight 4: storage and transport conditions are also GDPMDS content. For devices requiring temperature control, moisture protection or shock protection, the recording and monitoring of storage and transport conditions fall within GDPMDS scope. In particular, Section 14(2) of the Health Products Act requires that storage premises be within the scope authorised by the licence. Moving warehouses or adding third-party logistics points without updating the licence falls directly onto that provision. Temperature-excursion monitoring, mapping of storage areas and documented transport validation are the usual evidence set here.

Insight 5: retention periods should match the product lifecycle. Traceability needs for implants and long-term implantable devices are far higher than for single-use consumables. When we design record strategies for clients, we set differentiated retention periods according to the device risk class and its expected service life, so that records outlive the products they describe. A record deleted too early is as damaging as a record never kept: the traceability chain breaks at the point where an investigator happens to look.

4. Practical recommendations

We recommend the following measures when building or reviewing distribution record systems for Singapore.

1. Design record fields for two-way traceability: batch to customer and customer to batch, with batch linkage captured at every movement.
2. For pure distribution businesses, evaluate GDPMDS first: one certification solves two problems, covering licence evidence and daily operations.
3. Set differentiated retention periods by device risk class, matched to expected service life.
4. Include storage and transport conditions in records and monitoring, especially for temperature-controlled devices.
5. Run regular mock recall drills: verify that the records actually work when needed, and fix gaps while nothing is on fire.

Regulatory information verified as of: 26 October 2026

Source level: Tier 2 (GN-06 R3; GN-33 R2; GN-02 R8), Tier 1 (Health Products Act 2007, Section 14(2) and Part VIII)

5. Verification checklist

• □ Distribution records support two-way batch-to-customer traceability
• □ GDPMDS is implemented per GN-33 R2 (or assessed as QMS evidence)
• □ Record retention periods are set by risk class
• □ Storage and transport conditions are included in records and monitoring
• □ Storage premises are within the scope authorised by the licence
• □ Mock recall drills are conducted regularly

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Singapore. Our team prepares dossiers to ASEAN CSDT structure, manages submissions and deficiency responses with HSA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com