PSUR for No-Predicate Devices in India: 6-Monthly Reporting
Updated: 2026-11-11 · GRZAN Regulatory Team · Verification date 2026-10-20
1. Key takeaways
Under Rule 65(b) and (d) of the Medical Devices Rules, 2017, holders of a Form MD-27 licence — the licence for devices with no predicate — must submit a Periodic Safety Update Report (PSUR) from the date the device is placed on the market: every 6 months for the first 2 years, and annually for the following 2 years. In parallel, the same holders must report suspected unexpected serious adverse events within 15 days. The PSUR cadence is therefore fixed, finite and fully schedulable from the day of market entry, and it exists specifically because no-predicate devices carry the thinnest evidence base at approval.
- Rule 65(b) sets the PSUR frequency: every 6 months for the first 2 years from the date of placing on the market, then annually for the next 2 years.
- Rule 65(d) requires SUSAE reporting, aligned with the 15-day formulation of Rule 26(ii) and Rule 38.
- The obligation applies to no-predicate devices, which must first obtain an MD-27 licence under Rule 36(6).
- The industry-compiled PSUR content list runs from the safety summary through signal analysis to conclusions and recommendations.
- The industry-compiled record retention periods are: adverse event reports for the device lifetime plus 2 years; complaint files at least 5 years; PSURs indefinitely; distribution records at least 5 years.
2. Legal basis
The PSUR obligation sits inside a cluster of rules that connect the licence form, the reporting frequency and the event reporting duty. Some elements come directly from the rules; the content list and retention periods come from industry compilation of third-level sources and are marked as such below.
| PSUR frequency | MDR 2017, Rule 65(b) | A PSUR must be submitted every 6 months for 2 years from the date of placing on the market, and then annually for 2 years |
| SUSAE reporting | MDR 2017, Rule 65(d) | SUSAEs must be reported (linked to the 15-day formulation of Rule 26(ii) and Rule 38) |
| Who is covered | MDR 2017, Rule 36(6) | No-predicate devices, which must first obtain an MD-27 licence |
| PSUR content (industry compilation) | Third-level source | Device safety summary; cumulative sales and patient exposure; adverse event summaries by type and severity; event trends and signal analysis; updated benefit-risk evaluation; summary of field safety measures; changes to the risk management file; regulatory actions in other countries; proposed labelling changes; conclusions and recommendations |
| Record retention (industry compilation) | Same source | Adverse event reports: device lifetime plus 2 years; complaint files: at least 5 years; PSURs: indefinite; distribution records: at least 5 years |
The separation between the statutory rows and the compiled rows matters for planning. The frequency and the 15-day event duty are binding; the content list and retention figures are a practical estimate of what the authority expects, useful for building the template but not to be cited as rule text.
3. Expert insights
Insight one: the PSUR is an obligation exclusive to no-predicate devices. Holders of ordinary MD-15 licences do not carry this 6-monthly PSUR duty. It is an enhanced surveillance instrument created specifically for devices approved without a predicate — the category with the weakest evidence base at the time of authorisation. The logic is straightforward: where the approval rested on less prior clinical experience, the regulator compensates by demanding more frequent structured updates from the market. Companies transitioning between licence types should check whether the duty follows the device or the licence, and plan accordingly.
Insight two: the total is 6 reports within 4 years. Two years at two reports per year yields 4 PSURs, and the following two years at one per year yields 2 more, for a total of 6. This is a fixed workload that can be entered into the project calendar on the day the MD-27 licence is granted, years before the first report falls due. Companies that discover the cadence mid-cycle are forced into compressed data collection; companies that diarise it at licence stage spread the effort evenly across the whole period.
Insight three: the value of the PSUR lies in signal analysis, not in document submission. Within the industry-compiled content list, event trends and signal analysis and the updated benefit-risk evaluation are the core. A PSUR written as a running log of complaints wastes its most useful function — it is, in substance, the company’s periodic self-inspection. The trend sections are where a drift in failure modes, a shift in user population or an emerging use error first becomes visible to the company itself, often before it becomes visible to the regulator.
Insight four: cumulative sales and exposure data must match Indian reality. Global figures cannot substitute for India-specific exposure. If the company has no local distribution records for India, the exposure chapter of the PSUR becomes distorted, and every rate calculated against that denominator loses meaning. The exposure section is only as good as the flow-of-goods data behind it, which is why the distribution record-keeping duty and the PSUR duty are practically inseparable.
4. Practical recommendations
- Create the PSUR calendar on the very day the client receives the MD-27 licence: schedule the due dates of all 6 reports at once, so that no deadline depends on anyone remembering the cadence.
- Start data collection for each report 45 days before its due date, which leaves room for the signal analysis and the benefit-risk update rather than leaving only enough time for formatting.
- Require the Indian agent to provide flow-of-goods data quarterly — which hospitals the devices went to and in what quantities — as the basis for the exposure estimate.
- Structure each PSUR around the trend and signal sections, using the complaint data to answer whether the device’s risk profile has changed, rather than assembling the report as a chronological log.
- Maintain the 15-day SUSAE reporting duty in parallel, and keep the adverse event records, complaint files and distribution records for at least the industry-compiled retention periods listed above.
Without the quarterly flow data, the PSUR has no real content: the exposure numbers become guesses, and a report built on guessed denominators cannot support the signal analysis that gives the document its value. Securing the data feed is therefore the first operational step, ahead of any template work.
5. Verification checklist
- ☐ It has been confirmed that the product is a no-predicate device holding an MD-27 licence
- ☐ The PSUR calendar schedules the due dates of all 6 reports
- ☐ A data collection reminder is set 45 days before each due date
- ☐ The Indian agent has agreed to provide quarterly flow-of-goods data
- ☐ The parallel 15-day SUSAE reporting duty has been established
Regulatory information verified as of 27 October 2026.
How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across South Asia, including India. Our team prepares dossiers to CDSCO expectations, manages SUGAM submissions and deficiency responses, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com
Disclaimer
Prepared by GRZAN from publicly available regulation. It is provided for general information only and does not constitute legal advice. Legislation and official fees are subject to change by the competent authority.
About GRZAN
GRZAN (Global Regulatory Zone Access Navigator) — the global market-access navigator for medical devices and IVDs.
GRZAN is a specialist consultancy for medical device and IVD market access, providing end-to-end regulatory solutions across the product lifecycle and making international market entry simpler and faster.
Key figures. More than 25 wholly owned subsidiaries worldwide covering 50+ countries and regions; chosen by 100+ listed and leading Chinese device manufacturers, with 4,000+ successful cases; 12+ years in the sector and 200+ regulatory training sessions and seminars delivered.
What we do. Global market access: multi-country registration programmes, technical documentation, regulatory advice. Clinical evidence: clinical evaluation reports (CER), usability studies, overseas clinical investigations. Quality systems: ISO 13485, MDSAP, FDA QMSR and BGMP implementation and audit readiness. Authorised representative and licence-holder services across Southeast Asia, Latin America, the Middle East, Africa, Europe and North America.
Why GRZAN. A real operating entity, with the certificate held by the manufacturer: our direct overseas subsidiaries act as the compliant local holder, so the regulatory relationship stays clear and you keep control rather than being tied to a distributor. Direct access to the team: no time-zone gap, no language barrier, no cultural gap. Review points anticipated: we know what FDA 510(k), EU MDR, Southeast Asian, Latin American and Middle Eastern reviewers look for, which shortens timelines and reduces deficiency letters. Pathway planning: pre-decision analysis and risk assessment before you commit.
Every engagement rests on three commitments: efficiency through pre-submission review, certainty through a clear pathway, and stability through a licence-holder that stays in place.
Take your devices global with GRZAN
We work with manufacturers worldwide to open new markets with a clear regulatory pathway.
Contact us