Risk Management and Clinical Evidence for Kenya Device Registration

Content verified as of 30 October 2026.

1. Key takeaways

• The 12 items common to Class B/C/D require a risk analysis and clinical evidence, the latter including complete reports of the publications and studies cited in the clinical evaluation report (CER).
• The phrase complete reports of the studies cited is an explicit Kenya escalation: a CER with only summaries or a literature list does not constitute a complete submission.
• The CSDT sets up separate modules for risk management, clinical evaluation, and post-market surveillance and post-market clinical follow-up (PMS and PMCF), forming a continuous evidence chain from pre-market to post-market.
• Labels and promotional claims are approved or revised by PPB under Rule 5(2) of LN 100 of 2022; the revisable content comprises six items: claims, route of administration, dosage, storage conditions, contraindications/side effects/precautions, and pack size. Where claims exceed the evidence range corresponding to the device’s inherent performance, supplementary data are required (practical estimate).
• Renewal is applied for on Form 4 with vigilance and product safety reports, including product complaints and market surveillance, forming an iterative relationship with the clinical evidence.

2. Legal basis

3. Expert insights

Insight 1: The risk management file and the CER corroborate each other; they are not two parallel documents. The outputs of ISO 14971 risk management — risk acceptability determinations, disclosure of residual risks, risk-benefit analysis — must cross-reference the conclusions of the clinical evaluation. The review logic is: whichever risk points the risk management file identifies as needing clinical data, the CER should supply evidence point by point. The break GRZAN sees most often in review is a risk management file that lists hazards and residual risks item by item while the CER offers one overall benefit conclusion, with no mapping between them. The correct organisation is a table in the CER of risk point, clinical evidence source and conclusion, showing the reviewer that every residual risk has an origin.

Insight 2: The phrase complete reports of the studies cited changes the submission volume for literature-based CERs. Many CERs are built on literature searches and submit a reference list plus evaluative conclusions. The Kenya wording pushes the depth one step further: every study cited in the CER must be backed by a complete report. This bites hardest on products relying on equivalence to a predicate device — the clinical literature on the comparator device must be obtained in full text, and abstracts often cannot support the evaluation. GRZAN’s operating principle is to select first and collect later: fix the final citation list before the CER is finalised and obtain complete reports only for the included studies, avoiding fruitless effort on hundreds of first-pass references.

Insight 3: The boundary between claims and evidence is the discretion Rule 5(2) leaves to PPB. Rule 5(2) authorises PPB to approve or revise the sales name, labelling and promotional claims, with the revisable content comprising six items: claims, route of administration, dosage, storage conditions, contraindications/side effects/precautions, and pack size. Every claim on the label must therefore be traceable to clinical evidence. Where the label wording exceeds the evidence range corresponding to the device’s inherent performance — for example extrapolating benefit observed in one population to an unstudied population, or presenting an adjunct diagnostic function as a diagnostic basis — PPB may require supplementary data or amend the text directly. GRZAN recommends a sentence-by-sentence claim-to-evidence comparison before submission, mapping each performance statement on the label and brochure to a CER section number and amending whatever does not map (this comparison mechanism is a practical estimate).

Insight 4: PMCF is not optional; it sets the difficulty of the next renewal. The CSDT keeps PMS and PMCF as separate modules, and renewal requires vigilance and product safety reports including product complaints and market surveillance. Across the five-year certificate period these are the same data presented at different points. If no systematic clinical follow-up and complaint analysis mechanism is built after market entry, the renewal file five years later will have nothing to organise. GRZAN recommends landing the PMCF plan in the year the certificate is granted, sharing one data structure with the vigilance ledger.

4. Practical recommendations

1. Build a risk-to-evidence mapping table. With GRZAN support, set up a three-column table of risk point, clinical evidence source and conclusion in the CER and close each item.
2. Finalise the citation list before collecting complete reports. Avoid fruitless evidence collection on first-pass references and control the submission volume.
3. Run a sentence-by-sentence claim-to-evidence comparison. Map every performance statement in the label, IFU and brochure to a CER section, amending whatever does not map.
4. Use the six revisable items of Rule 5(2) as a checklist. Self-check claims, route of administration, dosage, storage conditions, contraindications/side effects/precautions and pack size item by item.
5. Start PMCF in the year the certificate is granted. Share a data structure with the vigilance ledger to pre-build the renewal file five years ahead.
6. Reserve time for supplementary data. Where label wording exceeds the evidence range of inherent performance, prepare supplementary studies rather than textual explanation.

5. Verification checklist

• □ Has an item-by-item mapping been built between the risk management file and the CER?
• □ Has a complete report — not merely an abstract or list — been obtained for every study cited in the CER?
• □ Has the citation list been finalised, avoiding fruitless collection on first-pass references?
• □ Does every performance claim in the label, IFU and brochure map to a CER section?
• □ Has the self-check been completed against the 6 revisable content items of Rule 5(2)?
• □ Was the PMCF plan landed in the year the certificate was granted and connected to the vigilance ledger?
• □ Are the vigilance and product safety reports required for renewal (including complaints and market surveillance) being compiled annually?
• □ Where label wording exceeds the evidence range of inherent performance, is a supplementary data plan ready?

Regulatory information verified as of 30 October 2026.

In African markets, the GRZAN regulatory team focuses on jurisdictions such as Kenya, Nigeria, South Africa and Egypt and maintains a verification mechanism built on primary regulatory sources. Every regulatory conclusion it issues rests solely on official gazettes, the original text of competent authority guidelines and public legal databases, with the verification date stated; any figure, timeline or amount that cannot be located in an official source is marked as a practical estimate and is never presented as presumption.

GRZAN services cover market access strategy and risk classification; preparation and review of registration dossiers in CSDT, STED and CTD formats; selection and management of local authorized representatives (LARs); quality management system and GMP/GSDP compliance support; post-market vigilance, change management and recall response; import clearance and PVoC coordination; regulatory intelligence subscriptions and corporate compliance ledgers.

For a Kenya market access plan for a specific product, contact the GRZAN regulatory team at info@grzanglobal.com.