Importer and User Facility MDR Obligations under 21 CFR Part 803

1. Key takeaways

Under 21 CFR Part 803, importers must report, within 30 calendar days, events of which they become aware in which a device may have caused or contributed to a death or serious injury (deaths and serious injuries are reported to both FDA and the manufacturer; malfunctions are reported to the manufacturer). User facilities must report deaths within 10 working days (to FDA and the manufacturer) and serious injuries (to the manufacturer). The division of duties among these parties differs, and the obligations must not be conflated. Each entity reports from its own position in the distribution chain, on its own clock, and to its own designated recipients, so a compliance program that treats importer, user facility, and manufacturer duties as interchangeable will misdirect reports and miss deadlines. Reports and forwarding records should be archived so the full chain remains traceable. The practical estimate for any organization in the middle of the chain is that it wears at least two hats at once, and each hat carries its own filing path.

2. Legal basis

The importer and user facility obligations described here rest on the following provisions and FDA guidance documents, in force as of the verification date noted at the end of this page. They are read together with the manufacturer obligations under the same Part, since the three regimes interlock.

3. Expert insights

Insight one: the reporting recipient changes with the event type; it is not always report to FDA.

Importers report deaths and serious injuries to FDA and the manufacturer; malfunctions are reported to the manufacturer. User facilities report deaths to FDA and the manufacturer; serious injuries go to the manufacturer. Who receives the report depends on the event type, and this is the core of the matrix. A workflow that defaults to sending everything to FDA alone will both over-report some events to FDA and under-notify the manufacturer, and both errors create gaps in the reporting chain that regulators expect to see closed. The recipient mapping should therefore be written into the intake form itself, so that the routing decision is made at the moment the event is recorded rather than reconstructed afterward.

Insight two: importer duties extend beyond reporting to event files and complaint forwarding.

Under the FDA importing guidance, importers must maintain an MDR event file for each adverse event, and all product complaints, whether MDR or non-MDR events, must be forwarded to the manufacturer. This means the importer is a key channel through which the manufacturer receives market feedback. A complaint that never reaches the manufacturer is not merely a paperwork defect: it removes from the manufacturer the signal it needs for its own MDR decisions and trending, so the forwarding mechanism must be documented and traceable for every complaint received. In our practical estimate, the event file and the forwarding record together form the complete evidence trail an importer should be able to produce on demand.

Insight three: user facility deadlines use working days, while manufacturer and importer deadlines use calendar days.

Under 21 CFR 803.10, user facilities have 10 working days, while manufacturers and importers have 30 calendar days. Behind the difference in wording lies a different deadline calculation logic, and the two must be calculated separately in practice. The practical estimate for a working-day clock should account for weekends and non-working days, because a 10-working-day window can span a substantially longer calendar period than the same number in calendar days, and staff accustomed to calendar-day calculations will otherwise apply the wrong arithmetic. Conversely, a 30-calendar-day window that crosses public holidays offers no relief at all, since calendar days never pause.

Insight four: the three sets of obligations run in parallel and do not substitute for one another.

If the same event is known to the manufacturer, the importer, and the user facility, all three report separately according to their own deadlines and recipients. The manufacturer’s report does not relieve the importer of its obligation. This parallel structure is deliberate: each reporting entity observes the event from a different position, and FDA relies on the multiple vantage points to construct a complete picture. Any internal assumption that one filing covers all parties should be removed from procedures and training. Where a single organization holds more than one role, for example an importer that is also the manufacturer of record, the two obligations still run side by side and are tracked separately in the quality system.

4. Practical recommendations

• Importers should build an event-type-to-recipient reference table and assess each event individually against it before any report is released.
• Establish a directory of MDR event files, one per event, indexed so files can be retrieved on demand.
• Establish a documented mechanism for forwarding all complaints, including non-MDR complaints, to the manufacturer.
• User facilities should calculate deadlines in working days, avoiding any mixing of calendar days and working days.
• Manage the three sets of obligations in parallel, avoiding the assumption that one party’s report discharges the duties of the others.

5. Verification checklist

• □ An event-type-to-recipient reference table has been established
• □ Importer MDR event files, one per event, have been established
• □ A documented mechanism for forwarding all complaints to the manufacturer has been established
• □ User facility deadlines are calculated on the 10 working day basis
• □ The three sets of obligations are managed in parallel
• □ Reports and forwarding records have been archived

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, US Agent and local testing support for the United States market. Our team manages FDA establishment registration and listing, 510(k)/De Novo/PMA submissions, and supports post-market reporting obligations. Business enquiries: info@grzanglobal.com