Iraq Has No Medical Device Risk Classification System

1. Key takeaways

As of 29 October 2026, in every official channel lawfully accessible directly and every officially hosted legal database, no medical device risk classification system for Iraq was found. Neither the I/IIa/IIb/III scheme nor the A/B/C/D scheme has any basis anywhere in the 106 articles of Public Health Law No. 89 of 1981 (Article 01 proved by exhaustive keyword search that medical devices never appear as a regulatory object in the law; this article deals only with the classification layer). Three popular claims travelling with it, alignment with the EU MDR/IVDR or a Gulf MDR, mandatory unique device identification (UDI), and mandatory ISO 13485, were likewise not found in any official provision; the original wording in the Registration Department’s documents on system certificates reads ISO 9001, 9002 or equivalent. Evidence boundary: the MOH website, the Ministry of Justice site, and the official legal database were unreachable this time, so the conclusion is stated as not found, not as non-existent. GRZAN’s advice: since there is no external grading to rely on, companies should build an internal grading of their own, scoring products on risk, use setting, and purchaser requirements.

• No risk classification scheme exists in any accessible official Iraqi source as of the verification date.
• The Registration Department’s most explicit wording on system certificates is ISO 9001, 9002 or equivalent; ISO 13485 is never named.
• UDI mandates and MDR/IVDR alignment claims have no official basis found.
• GRZAN’s internal three-dimension grading is a management tool, never to be presented as an Iraqi classification.

2. Legal basis

The record examined, and the claims tested against it, are tabulated below.

Source grade. Public Health Law No. 89 of 1981: primary, verified (official gazette text reproduced by FAOLEX). The Registration Department Drug Registration Regulations is a reprint hosted by an overseas industry body and the source site moh.gov.iq was unreachable, so it is secondary reprint / official publication index level, source unreachable; its D/2 wording serves as the factual reference for the loosest official position, ISO 9001/9002, phrased as according to documents published by the Registration Department. All four popular claims are not found, and no definitive assertion is made while source sites are unreachable.

Excerpts:

• Registration Department document D/2: quality assurance certificate such as ISO 9001, 9002 or equivalent; the original requires only a quality assurance system certificate and never mentions ISO 13485.
• Registration Department document D/ closing: medical appliances, disposables products and laboratory diagnostic kit, themselves are not require to be register; devices, disposables, and laboratory diagnostic kits are not themselves required to be registered product by product (this wording comes from an unnumbered, undated reprint and must be rechecked against MOH originals).
• Full-text search of the Public Health Law: no definition clause, no classification rules, no UDI wording, no quality management system standard references.

3. Expert insights

Insight 1: the classification claims originate in template migration. I/IIa/IIb/III comes from the EU MDD/MDR and A/B/C/D from the EU IVDR. When consultancies build country compliance checklists they often stretch the EU template over jurisdictions with incomplete legal systems, filling the blanks with a familiar grading. The EU MDR (EU) 2017/745 sets 22 classification rules in Annex VIII, China’s medical device regulation applies three-class management under Article 4, and US 21 CFR 860 provides classification procedures and a database; at the corresponding position Iraq is blank. This is not few classification rules; the classification layer of the system does not exist at all.

Insight 2: ISO 13485 is not Iraq’s statutory threshold. The loosest official wording stops at ISO 9001, 9002 or equivalent. That does not make ISO 13485 useless; quite the opposite, GRZAN still advises clients to hold it, but because it is the international language accepted by purchasers and evaluation committees, not because it is legally required. Turning recommended holding into regulatory compulsion is another common distortion.

Insight 3: without grading, three things become unpredictable. First, review depth cannot be anticipated, since no one knows what will be demanded. Second, pricing cannot be layered by risk, since compliance cost for high-risk products cannot be quoted in advance. Third, timelines cannot be promised, since no statutory review periods are tied to a class. Together these make Iraqi project pricing and scheduling heavily dependent on experience values. Practical estimate: no verifiable basis for registration timelines or fees was found in official documents (no official provision found).

Insight 4: the three-dimension method for building an internal grading. GRZAN scores every SKU on three dimensions. First, product risk: implantable or not, life-sustaining or not, sterile or not, measuring function or not. Second, use setting: public hospital, private clinic, laboratory, or home use, and whether professional operation and after-sales training are needed. Third, purchaser requirements: qualification clauses in KIMADIA tender documents, importer requirements in the private channel, and whether a free sale certificate from the country of origin is demanded. Each dimension scores 1–3, a total of 3–9, banded into 3–4, 5–7, and 8–9, corresponding to a standard dossier, an extended dossier, and a special-review dossier. This grading is an internal management tool, not a regulatory classification, and must never be presented externally as an Iraqi classification.

4. Practical recommendations

• State it plainly in every proposal: Iraq has no risk classification system, and the three bands given here are an internal management tool; external documents never contain Class I or Class IIa style wording.
• Still prepare dossiers to the highest band (including ISO 13485, the certificate of free sale (CFS), and complete technical documentation), on the ground of purchaser and evaluator acceptability, not legal compulsion. Practical estimate: none of these three items was found to have a mandatory basis in official documents (no official provision found).
• Quote and schedule by bands of the three-dimension total, and state in the contract that timelines are affected by ministerial document updates and offline follow-up, with no fixed commitments.
• Debrief after every tender: feed the qualification requirements actually raised by evaluation committees back into the third dimension and recalibrate the band thresholds round by round.
• In client training, present the absence of classification as an opportunity rather than an obstacle: the company can decide its own dossier depth, but must also own the consequences of misjudging.

5. Verification checklist

• □ Search the full text of the Public Health Law for the classification terms (class, degree, classification) and confirm zero hits or senses outside regulation.
• □ In the Registration Department’s current registration material list, verify the system certificate requirement and confirm whether the wording is still ISO 9001, 9002 or equivalent.
• □ Search the MOH and Ministry of Planning websites for any official document citing the EU MDR, the IVDR, or a Gulf MDR, and confirm zero or record the source.
• □ Search for any official UDI or unique device identification wording and confirm zero.
• □ Extract qualification clauses from recent KIMADIA tender documents and feed them into the third dimension of the internal grading table.
• □ Review quarterly the gap between the three-dimension grading and actual evaluation requirements, and update the band thresholds.
• □ Recheck whether the official documents cited here have been superseded by later instructions or decisions (verification date for this article: 29 October 2026).

Regulatory information verified as of 29 October 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Iraqi market. Our team manages KMOC (Kurdistan) and federal MOH registration procedures, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com