MDSAP Certificates in Australia: What They Do and Do Not Cover

1. Key takeaways

In Australia, an MDSAP certificate answers the evidence need for the quality management system column; it is not product evaluation evidence. Apart from specific scenarios (for example, Class IIa devices already exempted by the FDA from 510(k) requirements, per F2024L01328), an MDSAP certificate must be paired with product-side evidence. The distinction matters at application stage: column 3 and column 4 of the relevant table must each be satisfied, and one certificate cannot do both jobs. Facts verified as of 29 October 2026.

• Regulation 5(c) of the Overseas Regulators Determination lists MDSAP recognised or authorised auditing organisations as designated overseas regulators.
• The audit must cover Australian regulatory requirements, and the certificate must show the manufacturer was assessed as complying with the relevant aspects of the Medical Devices Regulations.
• In the Information Determination tables, column 3 is quality management system documentation and column 4 is product evaluation documentation; the MDSAP certificate sits in column 3 only.
• MDSAP Regulatory Authority Council members: TGA, US FDA, Brazil ANVISA, Health Canada, Japan MHLW and PMDA.
• For FDA 510(k)-exempt Class IIa devices, F2024L01328 allows the application to rely on the MDSAP certificate alone.

2. Legal basis

The status of MDSAP certificates in Australia flows from the overseas regulator recognition framework and from the structure of the Information Determination’s evidence tables. Read together, they show both who may issue the certificate and the precise column it occupies in each application table.

• Therapeutic Goods (Overseas Regulators) Determination 2018 (F2018N00145, compilation version 3 F2025C01149, effective 1 December 2025): regulation 5(c) lists MDSAP recognised or authorised auditing organisations as designated overseas regulators; the legal source is sections 41BIB(1)–(2) of the Therapeutic Goods Act 1989; regulation 4 defines such organisations as those recognised by the MDSAP Regulatory Authority Council.
• Members of the MDSAP Regulatory Authority Council include the TGA, the US FDA, Brazil’s ANVISA, Health Canada, and Japan’s MHLW and PMDA; the membership explains why a single audit can serve sponsors selling into several of these markets.
• Conditions of use: the audit must cover Australian regulatory requirements, and the certificate must show that the manufacturer has been assessed as complying with the relevant aspects of the Therapeutic Goods (Medical Devices) Regulations 2002.
• Therapeutic Goods (Medical Devices—Information that Must Accompany Application for Inclusion) Determination 2018 (F2018L01410, compilation version 13 F2025C01150, effective 1 December 2025): the tables in each item have two operative columns — column 3 for quality management system documentation, column 4 for product evaluation documentation; the MDSAP certificate corresponds to column 3.
• Single-certificate scenario: F2024L01328 (registered 18 October 2024) — for Class IIa devices already exempted by the FDA from the 510(k) requirements, only an MDSAP certificate needs to accompany the application.

3. Expert insights

Insight 1: the two-column structure defines the value boundary of MDSAP. The tables of the Information Determination split evidence into a “quality management system” column and a “product evaluation” column. MDSAP fills only the first; the second still requires evidence such as an FDA 510(k), a Health Canada licence, Japanese system certification, or an EU technical documentation assessment. Assuming that “an MDSAP certificate is enough” is the most common reason applications are returned with requests for further information. The error usually surfaces at assessment, when the cheapest window to correct it has already closed, so the table check belongs before lodgement. Auditing the table against the actual classification before submission costs little; remediating a deficient application afterwards costs weeks.

Insight 2: the coverage clause is a hidden threshold. The MDSAP audit must cover Australian regulatory requirements, and the certificate must expressly state compliance with the relevant aspects of the Regulations. A routine MDSAP audit that did not tick Australia leaves the certificate unusable in Australia — and this is legible on the face of the certificate text, so it can and should be checked before submission rather than after. Where the current certificate does not mention Australia, the fix is a targeted audit with Australia in scope, scheduled with the certification body early.

Insight 3: the TGA also uses MDSAP reports for post-market intelligence. Annual reports from MDSAP auditing organisations are shared through the REPs platform, and the TGA draws on them in post-market review and investigation. In other words, MDSAP is not merely a pre-market door-opener; it simultaneously becomes a source of regulatory intelligence after the device is on the market, which raises the stakes on what those annual reports record. For manufacturers, this means audit findings and corrective actions carry post-market weight as well, and deserve the same rigour as regulator correspondence.

4. Practical recommendations

• When scheduling the MDSAP audit, expressly require coverage of Australia, and check the certificate for the Australia wording and the statement of compliance with the Regulations before the audit plan is signed off.
• Prepare evidence column by column against the relevant table item of the Information Determination: column 3 with MDSAP, column 4 with separately prepared product-side evidence, each with a named owner in the project plan.
• For Class IIa products holding an FDA 510(k) exemption decision, use the F2024L01328 single-certificate route, and document the eligibility rationale, to save the cost of preparing product evaluation evidence.
• File MDSAP annual audit reports in the post-market compliance dossier, because the TGA may retrieve them in the course of adverse event investigations, and keep them retrievable for the life of the device.

5. Verification checklist

• □ The MDSAP certificate expressly covers Australian regulatory requirements
• □ Column 3 and column 4 evidence have been prepared separately against the relevant table item
• □ The Class IIa with FDA exemption scenario has been assessed for the single-certificate route
• □ The issuing body has been confirmed as a recognised or authorised auditing organisation under regulation 5(c)
• □ Annual audit reports have been filed in the post-market compliance dossier

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Australian market. Our team manages TGA ARTG inclusion across all classes, prepares conformity assessment dossiers, and supports post-market vigilance obligations. Business enquiries: info@grzanlang.com