September 2026 Guideline Update: Changes across GN-01, GN-04, GN-07, GN-08 and GN-09

1. Key takeaways

On 1 September 2026 the Medical Device Division (MDD) of the Department of Health updated Guidelines GN-01, GN-04, GN-07, GN-08 and GN-09, together with the corresponding codes of practice. Applications already submitted through the Medical Device Information System (MDIS) are unaffected and need not be resubmitted. The revision contains three substantive changes: (1) the certificate validity provisions in GN-01 paragraphs 5.6.2–5.6.3; (2) the conditional approval mechanism in GN-01 paragraph 5.10 and the four corresponding provisions; (3) the site inspection and validity provisions for local manufacturers in GN-08 paragraphs 4.10, 5.6.1 and 5.8.1.

• In-flight applications are protected. The revision changes the rules for new submissions, not the treatment of applications already lodged.
• The certificate validity provisions answer a frequent practical question: whether a scanned copy is enough. The answer turns on verifiability, not on image quality.
• Conditional approval is now a mechanism across five guidelines, not a device-listing peculiarity.
• The local manufacturer provisions add inspection cooperation, a five-year validity period and a renewal window running from 12 weeks to 1 year before expiry.
• One inconsistency between the codes of practice and the guidelines should be clarified in writing rather than resolved internally.

2. Legal basis

The revision is recorded in five guidelines and announced on the MDD news page. Regulatory information was verified as of 29 October 2026; if an official document has since been updated, the latest published version prevails.

The dates in the table all fall on a single day, which is unusual for a system that normally amends one guideline at a time. The synchronised date is the clearest signal that the changes are intended to operate together, and it is the reason the transition provisions on in-flight applications deserve as much attention as the substantive text.

3. Expert insights

Insight one: the certificate validity provisions give electronic submissions a clear rule. Paragraphs 5.6.2–5.6.3 provide that a certificate must be valid at the time the application is submitted; if it expires during the assessment, an updated valid certificate must be provided on request; an electronic certificate is sufficient if it bears a valid and verifiable electronic signature of an authorised person and its authenticity can be checked on the issuing body’s designated official website; and other electronic documents must bear a verifiable authorised signature under the issuing company’s domain, together with a timestamp. This is the official answer to the frequent question of whether a scanned copy is enough: verifiability is the key, not clarity. A high-resolution scan of a paper certificate carries no verifiable signature at all, while a plainly formatted electronic certificate with a working verification link satisfies the test.

Insight two: the MDD retains three verification tools. Where there is doubt about the authenticity or accuracy of a document, the MDD may require a certified copy, check the qualification of the person certifying it, or verify directly with the issuing body. This tells companies that the source of a certificate must survive tracing. A certificate obtained through an intermediary whose authority cannot be confirmed is a liability even if the certificate itself is genuine, because the verification route ends before it reaches the issuer.

Insight three: the conditional approval mechanism has been rolled out across the system. Paragraph 5.10 sets out the three outcomes of refusal, approval and approval with conditions, records that the conditions appear in the approval letter, and states that non-compliance may lead to delisting. GN-04 paragraph 6.6, GN-07 paragraph 7.5, GN-08 paragraph 5.7 and GN-09 paragraph 4.9 apply the same structure. Five guidelines with the same architecture indicate a systemic management upgrade, not a drafting tidy-up.

Insight four: two local manufacturer provisions need particular attention. Paragraph 4.10 requires cooperation with site inspections, including the provision of records and written procedures and permission to inspect business premises and related storage or transport facilities. Paragraph 5.6.1 sets a validity period of five years. Paragraph 5.8.1 sets the renewal window at 12 weeks to 1 year before expiry, inclusive of both ends; applications outside the window are not accepted, and an expired listing requires a fresh application. The three provisions work as a package: the inspection power gives the validity period content, and the window makes the renewal date an operational deadline rather than a date on a certificate.

Insight five: the official revision record flags one easily misread point. The validity provision is new in this revision, but the renewal mechanism had already appeared in the revision of December 2025. The whole renewal mechanism should not be described as newly created in September 2026. Separately, paragraph 2.12.1 of Code of Practice COP-03 uses a three-year formulation in relation to listed local manufacturers and points to the distributor list, which is inconsistent with the five-year formulation in GN-08 paragraph 5.6.1. The recommendation is to follow GN-08 and to seek written clarification from the MDD (practical estimate).

4. Practical recommendations

• Do not resubmit applications in flight. Applications already lodged through MDIS continue to be processed under the requirements that applied to them.
• Prepare new applications to the new rules. Add certificate validity, electronic signature verifiability and the handling of additional conditions to the pre-submission checklist.
• Enter approval letters into the compliance register. Record each additional condition individually, using the method described in the article on delisting triggers in this series.
• Rehearse the inspection with local manufacturers. Self-check records, procedures, business premises and storage and transport facilities against the scope of paragraph 4.10.
• Clarify the code and guideline difference in writing. Raise the inconsistency between COP-03 and GN-08 with the MDD and retain the reply on file.

5. Verification checklist

• □ The effective date of this revision, 1 September 2026, has been confirmed
• □ Applications in flight have been confirmed as not requiring resubmission
• □ All certificates in a new application are valid on the submission date
• □ Electronic certificates carry verifiable electronic signatures and a verification route is recorded
• □ Additional conditions in approval letters have been entered into the compliance register
• □ Local manufacturers have completed an inspection rehearsal against paragraph 4.10
• □ The inconsistency between the code of practice and the guideline has been raised with the MDD in writing
• □ The five updated guidelines have been obtained in their current versions

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for Hong Kong, China. Our team manages adverse incident reporting and recall coordination with the Department of Health, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com