EU MDR PSUR under Article 86: Periodic Safety Update Report Requirements

1. Key takeaways

Under Article 86 of the MDR, manufacturers of Class IIa, IIb and III devices must prepare a periodic safety update report (PSUR) for each device and, where appropriate, for each category or group of devices. PSURs for Class IIb and Class III devices must be updated at least annually; PSURs for Class IIa devices must be updated when necessary and at least every two years. PSURs for Class III devices or implantable devices must be submitted through the electronic system referred to in Article 92 to the notified body involved in the conformity assessment, which reviews the PSUR and adds its evaluation opinion.

The PSUR is where the results of post-market surveillance, post-market clinical follow-up, vigilance and sales data are brought together in a single periodic document. Because the update frequencies and submission routes differ by risk class, a disciplined reporting calendar and a unified data pipeline are the two practical prerequisites for consistent compliance.

In audit practice the PSUR sits at the intersection of every post-market data stream: complaints, vigilance reports, PMCF results, sales figures and literature monitoring all converge into it. That convergence is both its value and its vulnerability. Where the underlying streams are fragmented across departments, the PSUR becomes a manual assembly exercise that consumes weeks in each cycle, whereas companies with connected data pipelines produce it as a routine export. Investment in the data pipeline therefore pays back at every reporting interval for the lifetime of the device.

2. Legal basis

The core obligations arise from Article 86 of Regulation (EU) 2017/745, supported by the annexes and the Commission guidance listed below.

3. Expert insights

Insight 1: The three mandatory contents of the PSUR determine how hard it is to produce.

Article 86(1) requires the PSUR to specify, over the entire lifetime of the device: first, the conclusions of the benefit-risk determination; second, the main findings of the PMCF; and third, the sales volumes of the device together with an estimated evaluation of the size and characteristics of the population using the device and, where practicable, the frequency of use. The third requirement forces companies to bring sales data and clinical safety data into the same document, which is usually the hardest part of the exercise from a data system integration perspective (a practical estimate). Companies that discover this only at the first PSUR deadline typically deliver late or with gaps. In practice, the sales volume and user population section also serves external purposes: competent authorities use it to assess exposure when they review safety signals, so the estimates need a defined and documented method rather than rough internal figures. A reproducible estimation method, approved once and reused in every cycle, is worth more than a bespoke calculation each time.

Insight 2: The frequency differs by a factor of two between Class IIa and Class IIb/III, and the submission routes differ too.

On frequency: Class IIa is at least every two years, while Class IIb and III are at least annually. On submission: under Article 86(2), PSURs for Class III devices or implantable devices must be submitted via the Article 92 electronic system to the notified body involved in conformity assessment; the notified body reviews them and adds its evaluation opinion to the system, and competent authorities can consult them through the system. Under Article 86(3), PSURs for other devices must be made available to the notified body involved in conformity assessment and provided upon request by a competent authority. Mixing up the two routes delays reviews and can invalidate assessment schedules.

Insight 3: The PSUR is a periodic snapshot of PMS activity, not PMS itself.

The PSUR summarises the conclusions generated by the operation of the PMS plan; it does not replace the continuous operation of the PMS system. A common error is to treat PSUR preparation as the entirety of PMS work, which leaves PMS activity idle between two reporting dates. Auditors and notified bodies look specifically for evidence that data collection, signal evaluation and corrective actions continue throughout the reporting interval, with the PSUR simply closing the loop on paper.

Insight 4: PSURs for custom-made devices go into the Annex XIII documentation.

Under the final paragraph of Article 86(1), the PSUR for a custom-made device must form part of the documentation referred to in Section 2 of Annex XIII. Custom-made devices are therefore not exempt from PSUR obligations; only the filing location differs. Companies with custom-made product lines should mirror their PSUR calendar for these devices and expect notified body scrutiny of the Annex XIII file to include the PSUR content.

4. Practical recommendations

The measures below address the calendar, the data chain and the escalation path, which are the three points where PSUR programmes most often fail.

1. Establish a PSUR calendar with update frequencies set by category (annually or every two years), with named owners and designated backups.
2. Connect sales data, complaint data, vigilance data and PMCF data into a single source chain that feeds PSUR preparation.
3. Follow the structure of MDCG 2022-21 and keep the report structure consistent across all products of the same manufacturer.
4. For Class III and implantable devices, confirm in advance the submission path through the Article 92 electronic system and the notified body review arrangements.
5. Do not wait for the PSUR cycle when a significant safety issue emerges; handle it separately within the vigilance deadlines of Article 87.

5. Verification checklist

Use the checklist below to confirm that the PSUR programme covers the frequencies, the content, the submission routes and the escalation duties described on this page.

• □ PSUR update frequency has been set by category (Class IIb/III annually; Class IIa every two years)
• □ PSUR contains the benefit-risk conclusions, the main PMCF findings, and sales volumes with user population estimates
• □ PSUR forms part of the Annex II and Annex III technical documentation
• □ Submission path through the Article 92 electronic system confirmed for Class III and implantable devices
• □ Mechanism established for other categories: made available to the notified body and provided on request by the competent authority
• □ Significant safety issues handled independently of the PSUR cycle under Article 87

Regulatory information verified as of 29 October 2026.

GRZAN regulatory support. GRZAN assists medical device manufacturers with post-market compliance in the European Union market under Regulation (EU) 2017/745, covering vigilance reporting, field safety corrective action (FSCA) recalls, PSUR preparation and review support, and responses to competent authority inspections. If you need support with your EU MDR post-market obligations, contact info@grzanglobal.com.