PMS Documentation Retention Under UK MDR 2002 Part 4A

1. Key takeaways

Under reg 44ZQ, the retention period for post-market surveillance documentation is 10 years from the date the device was placed on the market, and 15 years for implantable devices. This structure matches the retention rules of reg 9 of SI 2021/905 on the Northern Ireland side (implantable devices 15 years, other cases 10 years, counted from the date the last device was placed on the market) in the length of the periods, but the starting point of each period must be checked item by item.

Retention looks like the most passive obligation in the Part 4A regime, yet it is the one that most directly shapes how the whole document system must be organised. The reason is the companion rule on production of documents: when MHRA asks for a PMS report or a PSUR, the answer must be produced within a 3-working-day window, and a document that cannot be located inside that window is, for practical purposes, a document that does not exist. Retention therefore has to be designed around retrievability — with indexed storage, named custodians and expiry dates that are visible without opening each file. Companies that store PMS records across legacy systems, departed distributors’ mailboxes and personal drives will not meet that standard on the day it is tested.

2. Legal basis

• UK MDR 2002 (SI 2002/618, as amended): reg 44ZQ (retention of PMS documentation under Part 4A) and reg 44ZR (production of documents on request, within 3 working days).
• SI 2024/1368 (made on 16 December 2024, in force on 16 June 2025): reg 4 inserted Part 4A into UK MDR 2002.
• The Medical Devices (Northern Ireland Protocol) Regulations 2021 (SI 2021/905): reg 9(2) — information relating to implantable devices is kept for 15 years after the last device was placed on the market, and for 10 years in other cases; reg 9(1) sets out the retention obligations of a liquidator or trustee in bankruptcy.

3. Expert insights

Insight one: retention and response to requests are two separate obligations. reg 44ZQ governs how long documents are kept, and reg 44ZR governs how quickly they can be produced. The latter requires a PMS report or PSUR to be provided within 3 working days of an MHRA request. Three working days are not enough to write a report from scratch — they are only enough to locate a report that already exists, which is the substantive requirement that the retention system imposes on the document architecture. The test is not whether the document was ever created, but whether it can be found and delivered by a named person within that window.

Insight two: on the Northern Ireland side the starting point is the placing of the last device on the market. The wording of SI 2021/905 reg 9(2) runs from ‘after the last device was placed on the market’, which differs from the starting point used in Part 4A and must be applied separately. Companies operating across both territories should therefore mark two retention expiry dates against the same document, one under each rule, because a single supply event can start the longer clock on one side while the shorter clock runs on the other. Confusing the two start points systematically understates how long records must live.

Insight three: the retention duty extends into insolvency. SI 2021/905 reg 9(1) makes clear that the liquidator or trustee in bankruptcy must retain the documentation for the required period and comply with requests from the Secretary of State for the documentation within that period. This means the retention obligation is not extinguished when the company itself terminates. Successor entities and insolvency practitioners inherit an active duty, which makes the location and handover of PMS records a matter that should be addressed before, not after, a business winds down.

Insight four: retention is a whole-portfolio question, not a per-product habit. Because the clock is tied to market events rather than to the calendar of the quality system, a portfolio that is still being supplied keeps extending its own retention horizon: each new supply event can move the effective end date forward. Records for discontinued products therefore need the same indexing discipline as records for current ones, and in some cases more, since the people who remember where the files are have usually left by the time a request arrives. The inventory of the response pack should explicitly cover discontinued devices, transfers of business and archived product families, so that a question about an old device does not depend on institutional memory that no longer exists.

4. Practical recommendations

GRZAN recommends labelling every PMS document with three metadata: the applicable provision (44ZQ or SI 2021/905 reg 9), the starting event and its date, and the retention expiry date. The document management system should support reminders by expiry date, and should trigger an assessment before expiry of whether the date must be extended because the last placing on the market has moved later. In addition, a 3-working-day response pack inventory should be prepared for MHRA request scenarios, stating for each class of document where it is stored and who is responsible for producing it. As a practical estimate, the response pack is only credible if a retrieval test is run at least once a year: pick a current PMS report at random and measure whether it can actually be produced within the window, using only the documentation in the pack. Where the test fails, the fix is usually indexing and ownership rather than more storage, and the results should be recorded as evidence for inspection.

5. Verification checklist

• □ Retention expiry dates have been marked according to the 10-year / 15-year rules
• □ The starting event and date have been recorded for each document
• □ Documents spanning both territories carry two separately marked expiry dates
• □ A 3-working-day response pack inventory has been established
• □ Retention arrangements in insolvency or liquidation scenarios have been taken into account

Regulatory information verified as of 29 October 2026.

• Appointment of the UK Responsible Person (UKRP) and support with signing the letter of authorisation
• Full-process MHRA registration (DORS) filing and account lifecycle management
• Device classification determination, GMDN code selection and annual registration fee calculation
• Dual-route design for Great Britain and Northern Ireland, including UK(NI) solutions
• Establishment of post-market surveillance (PMS) systems, preparation of PMSR/PSUR and submission of vigilance reports
• Emergency handling of serious adverse incidents and field safety corrective actions (FSCA)
• Monitoring of UK regulatory changes and compliance gap assessment

For post-market compliance support in the UK market — vigilance reporting, recall management and MHRA inspection response — contact GRZAN at info@grzanglobal.com.