Registration Holder Post-Market Duties: Post-Market Research and Risk Control Plans

1. Key takeaways

Article 20, paragraph 1 of the Medical Device Supervision and Administration Regulation (State Council Order No. 739) sets five statutory duties for the registration holder; post-market research and risk control is item (2). The wording is shall throughout, so the duty is mandatory, not advisory.

• The trigger is not limited to a product failing. Products on accelerated routes — conditional approval (Article 19), innovative special review (Announcement No. 83 of 2018) — normally have research set at approval as one of its conditions.
• A risk control plan is worth only what can be verified. A plan reading enhance monitoring cannot be shown at inspection to have run; a verifiable plan carries five elements: trigger, owner, action, time limit, review frequency.
• Conclusions lead to three routes: change registration (Article 21), filing within 30 days of the change (Article 79 of the Measures), recall (Article 20, paragraph 1, item (4)). The order of determination sets cost and exposure.
• An overseas holder is not released by distance: Article 20, paragraph 2 requires the designated Chinese legal entity to assist, and Article 14, paragraph 2 of the Measures requires the agent to assist in giving effect to liability.
• The certificate runs five years, renewed six months before expiry (Article 22, paragraph 1). Research evidence is the key support at renewal: it shows safety and effectiveness still hold.

2. Legal basis

Administrative regulation. Medical Device Supervision and Administration Regulation (State Council Order No. 739), promulgated 9 February 2021, effective 1 June 2021.

• Article 5: risk management, whole-process control, scientific supervision, social co-governance. Article 13: Class I filed, Class II and III registered, lifecycle liability for holder and filer.
• Article 19: conditional approval; emergency use. Article 21: substantive change requires change registration, other changes filed or reported.
• Article 20, paragraph 1: five duties, item (2) being post-market research and risk control; paragraph 2: the Chinese legal entity designated by an overseas holder assists in these duties.
• Article 22, paragraph 1: validity five years, renewal filed six months before expiry; paragraph 3 sets refusal of Class III renewal. Article 34: in-house or entrusted manufacture, and responsibility allocation.

Departmental rules. Measures for the Administration of Medical Device Registration and Filing (SAMR Order No. 47), promulgated 26 August 2021, effective 1 October 2021.

• Article 14, paragraph 2: an overseas applicant or filer designates a Chinese legal entity as agent, to assist in the Article 20 duties and in giving effect to liability. Articles 15, 22, 24: quality system, communication, risk management.
• Article 79: substantive change requires change registration; other changes filed within 30 days of the change; certificate matters fall within change registration, holder and agent names and addresses within filing.
• Article 107: failure to file brings an order to correct, then a fine of RMB 10,000 to 30,000.

Normative document. Special Review Procedure for Innovative Medical Devices (Announcement No. 83 of 2018), promulgated 2 November 2018, effective 1 December 2018.

Practical estimate. No uniform quantitative standard exists for protocol elements, sample size, follow-up or reporting template; practice designs the study by risk class and exposure and agrees the protocol through the communication mechanism (Article 22). On the number of reporting days, no verifiable official position is held here; the requirement in force must be confirmed with the accepting department.

3. Expert insights

The five duties form one data loop, not five checklists. Article 20, paragraph 1 lists the quality system, research, monitoring and recall side by side. As a data flow they share one input: case reports, complaints, literature and emerging evidence are both the output of monitoring and the signal input for research and risk control. Split across departments with separate ledgers, a signal is recorded on one side and triggers nothing on the other.

One test decides it: can the same signal be traced to the same handling record in three documents. By trigger, research is approval-attached, self-initiated or passively driven: the first a rigid cost before approval, the last the most underestimated, usually starting only after a signal has formed.

A risk control plan must survive retrospective review. The usual inspection failure is not the absence of a plan but a plan nobody can show ran. A reviewable plan holds at least five elements.

What matters is that each figure is written, executed and traceable.

Three routes, and the order of determination decides cost. Once research concludes the product needs adjustment, the choice opens up.

The sequence must run: whether safety or effectiveness is affected, then whether the product has reached the market, then the procedure. Reversing it, starting from which route is quicker, is the commonest pitfall. Article 79 also makes the agent name and address filing items, so moving an agent’s office still falls inside the 30-day window.

The domestic landing chain. Article 20, paragraph 2 and Article 14, paragraph 2 create two layers: the obligor stays the overseas holder, and the Chinese entity assists rather than substitutes. Liability cannot be moved by contract, but execution must sit in China.

The agent’s capability sets the holder’s compliance ceiling: an agent that only receives documents cannot carry a continuing duty such as post-market research.

4. Practical recommendations

• Govern the duties under one master document. Attach protocol, risk file and vigilance ledger to one document number, and switch duties on one set of thresholds.
• Fix approval-attached research before approval. Put protocol, sample size and schedule into the project plan and budget, not a deferrable list.
• Write numbers into the risk control plan. Fill all five elements with recordable content; avoid strengthen, timely and necessary measures.
• Put a determination gate ahead of procedure. One gate each in development, production and quality, so every change answers the safety question first.
• Start renewal twelve months out. With a five-year certificate and a six-month deadline, data clean-up needs a twelve-month runway (practical estimate).
• Write post-market terms into the agent agreement, covering actions, response times and handover on a change of agent.
• Run one closed-loop drill a year, tracing a real case from monitoring to the recall decision.

5. Verification checklist

• □ Each of the five duties in Article 20, paragraph 1 assigned to a named post
• □ Risk control plan carries all five verifiable elements
• □ Research conclusions returned to the risk file under version control
• □ Every change has passed the safety and effectiveness test
• □ Filing-scope changes completed within 30 days (Article 79)
• □ Agent name and address changes listed as filing triggers
• □ Agent’s assistance tasks and time limits written into the agreement
• □ Renewal window six months before expiry in the project calendar
• □ Renewal file contains complete research data and conclusions
• □ Manufacturing agreement sets the deadline and format for adverse event and quality information
• □ One closed-loop drill a year, with records kept

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Chinese market. Our team manages adverse event monitoring and recall filings with NMPA, maintains UDI compliance, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com