EU MDR Legal Hierarchy: Five Tiers from Regulation to Standards

1. Key takeaways

EU medical device law is arranged in a five-tier structure: the Regulations (the MDR and its amending regulations), followed by implementing regulations and implementing decisions, then delegated acts, then Commission decisions and MDCG guidance, and finally consensus standards and industry compilations. The MDR is a Regulation, not a directive, and therefore applies directly without any need for transposition into the national law of the Member States. MDCG guidance, by contrast, is interpretive: wherever a guidance document conflicts with the Regulation, the Regulation prevails. For any manufacturer, this hierarchy is not academic. It determines which documents can be relied upon as binding requirements, which documents merely explain how regulators and notified bodies currently read the law, and how much room each Member State actually has to add requirements of its own.

2. Legal basis

3. Expert insights

Insight 1: The difference between a regulation and a directive explains why there is no transposition legislation in the EU.

What the MDR replaced were two directives: Council Directive 90/385/EEC and Council Directive 93/42/EEC. Directives must be transposed into national law by each Member State; a regulation applies directly. The official explanatory material of the European Commission states explicitly that, in comparison with directives, a regulation is directly applicable and does not require transposition into national law, thereby reducing the risk of divergent interpretation across the internal market. This is the starting point for judging whether a Member State can add extra obligations on top of the MDR: Member States may only legislate within the limits that the Regulation expressly allows. A claim that a national authority can impose additional device requirements outside those limits should always be checked against the text.

Insight 2: The MDR has already been amended three times, so the 2017 printed version is not enough.

After entering into force, the MDR has been amended by three regulations: Regulation (EU) 2020/561 (2020-04-23, postponing the date of application to 2021-05-26); Regulation (EU) 2023/607 (adopted 2023-03-15, in force 2023-03-20, restructuring the transitional period in Article 120); and Regulation (EU) 2024/1860 (adopted 2024-06-13, in force 2024-07-09, adding Article 10a and adjusting the mechanism for bringing EUDAMED into use). The two dates in Article 120(3a), 2027-12-31 and 2028-12-31, exist only in the consolidated text after 2023/607 and cannot be found in the original 2017 text. Any citation of a transition deadline taken from an unamended copy of the MDR is therefore wrong on its face.

Insight 3: Implementing regulations and delegated acts form the detail layer, numerous and updated year by year.

The official pages of the European Commission list these instruments by year: in 2021 (EU) 2021/2226 on electronic instructions for use, amended in 2025 by (EU) 2025/1234; in 2022 (EU) 2022/2346 on common specifications for products without an intended medical purpose, amended in 2023 by (EU) 2023/1194; in 2024 Implementing Decision 2024/2120 on the UDI system; in 2025 Implementing Decision 2025/1324 establishing expert panels; and in 2026 Implementing Regulation (EU) 2026/977 on common requirements for conformity assessment and notified bodies. This layer is where technical requirements actually land. A compliance programme that tracks only the parent Regulation will miss binding acts that directly govern documentation, reclassification and assessment procedures.

Insight 4: The weight of MDCG guidance comes from consensus, not from legal rank.

The MDCG was established under Article 103. Its guidance is cited extensively in notified body audits, but its legal rank is below the Regulation. A typical example is MDCG 2019-11: its interpretation of Rule 11 is stricter than the wording of the rule itself, and in practice hardly any notified body will depart from it. Even so, when arguing a position in technical documentation, the citation should read that the position follows the interpretation of MDCG 2019-11, not that it follows a provision of the MDR. This discipline keeps the argument honest about its source and makes it easier to adapt if the guidance or the Regulation changes.

4. Practical recommendations

1. Label every item in the internal document list with its source tier in the five-level hierarchy, and never present guidance as if it were statutory text.
2. Check the update date of the consolidated MDR text every year and confirm whether another amending regulation has been adopted.
3. Maintain a register of implementing and delegated acts by year, covering instruments such as (EU) 2021/2078, (EU) 2021/2226, (EU) 2022/2346 and (EU) 2026/977.
4. Whenever MDCG guidance is cited, state the document number and version together, for example MDCG 2019-11 Rev.1.
5. For in-flight proposals such as COM(2025) 1023, mark them internally as proposals not yet in force, and never adjust completed technical documentation on their basis.

5. Verification checklist

• □ The MDR text cited internally is the consolidated version including (EU) 2023/607 and (EU) 2024/1860
• □ A five-tier hierarchy table of legal sources has been established and annotated item by item
• □ The list of implementing and delegated acts for 2021 to 2026 has been collected
• □ The register of MDCG documents records both number and version
• □ The in-flight proposal COM(2025) 1023 is marked as not yet in force
• □ The source of the two dates in Article 120(3a) (2027-12-31 / 2028-12-31) is confirmed as (EU) 2023/607

Regulatory information verified as of 29 October 2026.

About GRZAN. GRZAN helps manufacturers navigate the full EU MDR legal hierarchy when pursuing CE marking in the European Union. We maintain the consolidated-text discipline your project needs, track amending regulations, implementing acts and MDCG guidance, and translate them into actionable documentation and conformity assessment routes before you approach a notified body. Whether you are classifying a new device, managing a transition deadline or building a quality management system that maps to Article 10, GRZAN provides structured compliance support for the EU MDR market from first assessment to CE marking and beyond. Contact info@grzanglobal.com to discuss your route.