Serious Incident Reporting Timelines Under UK MDR 2002 Part 4A

1. Key takeaways

Under reg 44ZH, manufacturers must submit an initial report immediately after establishing that the device caused, or may reasonably have caused, a serious adverse incident, and in any event no later than: 2 days for a serious public health threat, 10 days for a death or an unexpected serious deterioration in a person’s state of health, and 15 days for other serious adverse incidents — in each case counted from the point at which the manufacturer becomes aware of the incident. The 30-day deadline that applied under the previous regime has been superseded.

These deadlines are among the tightest in the Part 4A regime, and they run on the basis of calendar days rather than working days. The clock starts inside the manufacturer’s own organisation, through whatever channel awareness first arrives — a customer service call, a distributor message, a complaint relayed by the UK Responsible Person — not on the day the incident file is formally reviewed by the quality department. Manufacturers that have not mapped their internal awareness points, or that rely on a single weekly review meeting to escalate incidents, will find the 2-day tier impossible to meet in practice. The reporting duty also does not end with the initial report: a separate obligation to investigate the incident and submit a final report continues under reg 44ZI, and a field safety corrective action assessment follows under reg 44ZJ where required.

2. Legal basis

• UK MDR 2002 (SI 2002/618, as amended): reg 44ZH(2)–(6) (content and deadlines of the initial report), reg 44ZI (investigation and final report) and reg 44ZJ (FSCA and FSN).
• SI 2024/1368 (made on 16 December 2024, in force on 16 June 2025): reg 4 inserted the provisions above into UK MDR 2002.
• reg 44ZH(3)(a): the report must be submitted immediately after the causal relationship is established; reg 44ZH(3)(b): save where (4) or (5) applies, no later than 15 days after awareness; reg 44ZH(4): 2 days for a serious public health threat; reg 44ZH(5): 10 days for a death or an unexpected serious deterioration in a person’s state of health; reg 44ZH(6): with the agreement of the Secretary of State, periodic summary reports may be submitted in place of individual reports.

3. Expert insights

Insight one: the clock starts on awareness, not on confirmation. The wording of reg 44ZH refers to the point ‘after the manufacturer becomes aware of the serious incident or threat’. This means that the moment the company learns of the event internally starts the clock — including through any channel such as customer service, sales or the UKRP. Under its statutory duties, the UKRP must inform the manufacturer ‘immediately’ of complaints and suspected incidents reported by healthcare professionals, patients and users, which makes the UKRP a significant source of awareness in its own right. Manufacturers should therefore treat the date a complaint reaches any listed channel as the awareness date by default, and record the reasoning where a later date is claimed.

Insight two: the report content has statutory minimum items. reg 44ZH(2) lists, according to the legislative text, the description of the device (including the UDI), the description of the serious adverse incident, an assessment of the causal relationship, the preventive measures taken, and whether an FSCA is needed to prevent or reduce the risk of the incident recurring, together with details of the preventive or corrective measures already taken by the manufacturer. A submission that omits any of these items is incomplete even if it arrives on time, and completeness cannot be retrofitted once the deadline has passed.

Insight three: the three tiers must be written into SOPs without being confused with the working day periods. Unlike the 3 working days in reg 44ZI(3)(b) and reg 44ZR, and the 3 working days in reg 44ZK, the three tiers of reg 44ZH are expressed as ‘days’. SOPs should list calendar-day deadlines and working-day deadlines as two separate classes, with worked examples for each, to avoid miscalculation across time zones, weekends and public holidays.

Insight four: investigation and final reporting are independent obligations. reg 44ZI(1) requires that, after submitting the initial report, the manufacturer as soon as possible investigates the incident and the device concerned, reviews its risk analysis in the light of the incident and the proposed measures, and submits a final report to the Secretary of State covering the investigation methodology and conclusions, whether an FSCA is necessary, details of any FSCA taken or proposed, and any similar incidents involving other devices of the same type or earlier versions. Treating the initial report as the end of the process is one of the most common findings in post-market audits.

4. Practical recommendations

GRZAN recommends building a dual-track timer combining the three tiers with the three-working-day rule: whenever any suspected incident enters the logging system, an awareness timestamp is generated automatically, and a 2-, 10- or 15-day countdown is assigned automatically according to whether the case is a suspected public health threat, involves a death or serious deterioration, or falls into any other category. A separate 3-working-day countdown should run in parallel for any request from MHRA for information or documents, because that clock is shorter in practice and is easily lost inside a long calendar-day case file. All timing rules must be written into the SOP and trained out to the three interface functions — customer service, quality and regulatory — so that the person who first hears about an incident knows that they have started a statutory clock, not merely opened a ticket. As a practical estimate, the changeover from a single 30-day mindset to the tiered scheme takes at least one full training cycle before it is reliable under pressure.

5. Verification checklist

• □ Reporting SOP distinguishes the three tiers of 2 / 10 / 15 days
• □ Internal rules for determining ‘awareness’ and timestamping have been defined
• □ The UKRP relay channel has been included among the sources of awareness
• □ Report content covers all statutory items of reg 44ZH(2)
• □ A separate 3-working-day countdown has been set up for MHRA requests

Regulatory information verified as of 29 October 2026.

• Appointment of the UK Responsible Person (UKRP) and support with signing the letter of authorisation
• Full-process MHRA registration (DORS) filing and account lifecycle management
• Device classification determination, GMDN code selection and annual registration fee calculation
• Dual-route design for Great Britain and Northern Ireland, including UK(NI) solutions
• Establishment of post-market surveillance (PMS) systems, preparation of PMSR/PSUR and submission of vigilance reports
• Emergency handling of serious adverse incidents and field safety corrective actions (FSCA)
• Monitoring of UK regulatory changes and compliance gap assessment

For post-market compliance support in the UK market — vigilance reporting, recall management and MHRA inspection response — contact GRZAN at info@grzanglobal.com.