Risk Management Documentation (ISO 14971) and Writing the IMDRF Essential Principles Checklist

1. Key takeaways

Article 6(1)(c) requires an assessment of the marketing authorization compliance in reference countries together with clinical evaluation and post-market outcomes, and subparagraph (g) requires complete information on the inner and outer packaging and the package insert in compliance with the EDE labelling guidance. The risk management documentation is precisely the middle layer that links these two: it must draw upward on the clinical evidence and downward support the warnings and contraindications on the label. Our judgment is that when risk management documentation is rejected, the cause is often not a methodological error but an inconsistency with the intended use, the classification, or the labelling.

• Article 6(1)(c) covers reference country compliance, clinical evaluation, and post-market outcomes.
• Article 6(1)(g) requires complete packaging and insert information compliant with the EDE labelling guidance.
• Risk management documentation is the connecting layer between clinical evidence and label content.
• Most rejections arise from inconsistency with intended use, classification, or labelling, not from methodology.
• The residual risk matrix and the label must map onto each other item by item.
• In practice, the risk management file should be read together with the intended use statement, the classification conclusion, and the clinical evaluation report before submission.
• Cross-checking the risk file against those three documents produces a written consistency record.
• The Decree-Law contains 181 articles and the Executive Regulations have not all been issued, leaving documentation format matters reserved.
• The version and date of every standard adopted should be stated at the front of the dossier for reviewer verification.

2. Legal basis

The regulatory basis rests on three subparagraphs of Article 6(1) of Federal Decree-Law No. 38 of 2024, which together frame the consistency duties of the risk management documentation. The table below reproduces the instruments cited in the source material and their key points.

3. Expert insights

Insight 1: Risk management documentation is a consistency document, not a standalone document. Our practice is to use it as a verification instrument: every residual risk in the risk matrix should have a corresponding warning, contraindication, or precaution in the package insert or on the label; where no corresponding item can be found, either the risk control measures have been written unrealistically or the label is missing an entry. This single cross-check exposes both classes of problem at once.

Insight 2: The IMDRF essential principles checklist carries the value of a common language in reliance review. EDE applies reliance review, taking account of approvals by the EMA, the US FDA, the UK MHRA, Australia’s TGA, Switzerland’s Swissmedic, Health Canada, and Japan’s MHLW and PMDA. Our judgment is that adopting the internationally common essential principles and conformity evidence structure materially reduces the comparison effort for the reviewer, which within the 45 working days timeline is a genuine efficiency gain.

Insight 3: The choice of standard versions calls for a conservative decision during the Executive Regulations gap. The Decree-Law contains 181 articles, the Executive Regulations have not all been issued, and subparagraph (h) of Article 6 leaves other conditions to the Executive Regulations. Our approach is to use standard versions that are currently valid and recognized in the reference countries, to state the version and date at the front of the dossier, and to obtain written confirmation from EDE on any uncertain point; superseded versions are not used, and bets are not placed in advance on new versions that have not yet taken effect.

4. Practical recommendations

• Cross-check the risk management documentation against the intended use statement, the classification conclusion, and the clinical evaluation report, and produce a consistency check table.
• Implement each residual risk as concrete wording in the label and package insert, and avoid substituting risk control with generalized phrases such as use as directed by the physician.
• Organize the conformity evidence using the internationally common essential principles checklist structure, consistent with the arrangement of the reference country approval documents.
• State the version number and publication date of every standard adopted at the front of the dossier, so the reviewer can judge currency at a glance.
• For matters reserved to the Executive Regulations, submit a written inquiry to EDE and retain the reply; do not judge on the basis of industry practice.
• When the product undergoes a design or labelling change, update the risk management documentation in step and align with the Article 15 requirement for re-approval of significant changes.

5. Verification checklist

• □ The intended use in the risk management documentation matches the application form and the classification letter exactly
• □ The risk level and the product classification corroborate each other, with no mismatch in either direction
• □ Every residual risk has a corresponding control measure in the label or the package insert
• □ The standard versions adopted are currently valid and their publication dates are stated
• □ A traceable correspondence exists between the essential principles checklist entries and the evidence files
• □ Written EDE confirmation on matters reserved to the Executive Regulations has been obtained, or an inquiry has been submitted

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the United Arab Emirates. Our team prepares MOHAP-compliant dossiers, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com