New Zealand post-market obligations for medical device sponsors

1. Key takeaways

New Zealand has no single post-market supervision rule for medical devices. What a Sponsor (New Zealand sponsor) must do after products enter the market is scattered across five unrelated positions; the duties fall into the layers below.

• Information maintenance. Reg 8 of the 2003 Regulations requires a correction notice within 10 working days of a database record ceasing to be accurate or complete; reg 9 requires procedures securing compliance with regs 5, 6 and 8; reg 10 prohibits statements implying that database entry amounts to official endorsement. Breach of any of these, or of reg 6, is an offence with a fine of up to NZ$500 under reg 14.
• Safety evidence. Section 38 lets the Director-General, on reasonable grounds to believe a device may be unsafe, require the importer or manufacturer in writing to submit safety evidence within 45 days. Selling before the requirement is met or a satisfactory notice received is an offence under s 38(8) carrying up to 6 months imprisonment or a NZ$5,000 fine — the heaviest penalty in the device regime.
• Withdrawal and inspection. Reg 50 of the 1984 Regulations lets the Director-General order withdrawal from sale ((a)(b)) and disposal or destruction — of medicines and related products under (c), of devices under (d); reg 50(2) requires the recipient to state how and when the order will be met, then give written notice afterwards. Section 63 lets officers inspect premises and vehicles, open packages, copy records, seize devices (i), seize advertising or labelling materials (j) and photograph (k) — three distinct thresholds not to be conflated: (i) and (k) require reasonable belief an offence has been committed, unavailable for provisions such as reg 10, reg 12(4) and reg 25 that are not on the reg 64 offence list; (j) requires only breach of or non-compliance with a requirement, no offence — a label font below 1.5 mm suffices. Section 66 allows demands for books and records on importation, purchase, storage, transport, sale or supply; s 66(3) makes refusal an offence.
• A non-compulsory but powerful instrument. Section 98 lets the Director-General make qualified-privilege-protected public statements on any class of device or advertising content — no duty, no order, no offence, yet often outweighing fines.
• Obligations that do not exist. No mandatory adverse event reporting duty for devices (s 41 covers medicines only), and no manufacturing, packing or wholesale licensing or GMP audit requirement — medicines have s 17 and s 46; devices have no counterpart (article 42).

2. Legal basis

The instruments below form the legal basis, cited with compiled versions current at verification.

3. Expert insights

Insight 1: the duties are assembled, not codified. Place NZ$500 beside NZ$5,000 and the layering is clear: the workhorse information offences under reg 14 cap at NZ$500, while s 38(8) is capped at NZ$5,000 with imprisonment. GRZAN’s reading: the information duties govern the everyday, s 38 governs the event.

Insight 2: s 38 converts a pre-market safety case into a post-market triggered one. The Act never required pre-supply proof of safety, yet gives the Director-General a switch throwable at any time: if convincing safety evidence cannot be produced within 45 days, further sales carry criminal risk. Section 38(5) adds that non-exercise of the power is no assurance of safety. Manufacturers must hold a submittable safety case at all times.

Insight 3: s 98 and reg 10 form an asymmetric pair of information rights. Reg 10 forbids the Sponsor from implying official endorsement, while s 98 lets the Director-General publish statements on any class of device, protected by qualified privilege. The distinction: s 98 is a public warning and information power, not an enforceable enforcement tool — no duty, no order, no offence; qualified privilege removes defamation liability. The directions are not equal: the Sponsor’s expression is restricted, the regulator’s protected.

Insight 4: strict liability plus principal liability draws individuals in. Under s 80 the prosecution need not prove mens rea; the defence must prove absence of fault and all reasonable steps, with written notice reaching the prosecution within 7 days of the summons. Section 79 must be read precisely: it extends liability but creates no standalone offence; directors’ personal liability arises only under s 79(3), while s 79(1) covers principals answering for employees or agents; and the s 79(2) defence applies only to proceedings under subsection (1). Both subsections cover offences against the Act and any regulations made under it, so convictions under reg 14, breach of a reg 50(1) order (offence under reg 64(1)(b)) and reg 62 can all reach individuals — NZ$500-level second-tier offences can pull in individuals.

4. Practical recommendations

• Deliver a post-market responsibility matrix with every project: the 10 working day correction, reg 9 procedure maintenance, reg 10 messaging red lines, recall order response, books production and the 45-day evidence duty, each with a named owner and backup.
• Build and keep current a 45-day evidence pack: product description and intended use, risk classification rationale, applicable ISO standards and declarations of conformity, overseas approvals, adverse event statistics since launch.
• Pre-draft reg 50 response templates covering the intended course of action, timetable and post-compliance written notice — the two reg 50(2) elements.
• File books and records by the s 66 categories; s 66(3) makes refusal an offence.
• Assign a named role to monitor Medsafe safety communications and the recalls database, documenting how overseas recalls reach Medsafe as soon as practicable (practical estimate).
• Put s 79 and s 80 into board-level compliance training, making clear the 7 day notice window, once missed, cannot support the defence.

5. Verification checklist

• □ Is a reg 8 correction owner named, with clarity on which changes trigger correction within 10 working days?
• □ Are the reg 9 procedures documented, with records for regs 5, 6 and 8?
• □ Have the website, e-commerce pages and marketing materials been screened for reg 10 statements?
• □ Is the 45-day evidence pack submittable as it stands, and updated within 12 months (frequency is a practical estimate)?
• □ Are reg 50 response templates ready, covering the how-and-when notification and the post-compliance written notice?
• □ Are the ten categories of books under s 66 classified and available for on-the-spot production?
• □ Is it understood that breaching regs 6, 8, 9 or 10 of the 2003 Regulations caps at NZ$500, and breaching s 38(8) at NZ$5,000 or imprisonment?
• □ Do directors know that s 79(1)(3) also covers reg 14 and reg 50 and reg 62 of the 1984 Regulations, and that the s 80 defence notice window is 7 days?
• □ Does a named person monitor Medsafe safety communications, the recalls database and devices@health.govt.nz, circulating findings internally?

Regulatory information verified as of 29 October 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the New Zealand market. Our team manages adverse event reporting and recall coordination with Medsafe, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com