SFDA Inspections and Market Sampling: The MDS-REQ 10 Inspection Logic

1. Key takeaways

The mandatory basis for inspections and market sampling is MDS-REQ 10 V1.0 (Requirements for Inspections and Quality Management System for Medical Devices, MDS-REQ-010-V1/220622, version date 2022-06-22). Together with MDS-REQ 9 (establishment licensing) it forms the continuous compliance foundation of licence holders: MDS-REQ 9 decides who may hold a licence, MDS-REQ 10 decides how licence holders are inspected afterwards. Inspections cover two levels, the quality management system and products on the market, and sampling involves sample collection (MDS-G13). For applicants, the operable conclusion is that the compliance file must be in a ready-for-inspection state at all times, because inspection notices come without preparation time. The definitions in Law M/54 Article 1 of a fraudulent device (a device whose identity or origin has been deliberately falsified for fraudulent purposes) and of reprocessing are the key yardstick for deciding whether a finding in market sampling is an ordinary violation or a major one.

• MDS-REQ 10 governs inspections and QMS requirements; MDS-REQ 9 governs who may hold the licence.
• Inspection runs on twin tracks: system conformity and physical product on the market.
• The fraudulent device definition separates system defects from fraud by intent.
• Sampling effectiveness rests on traceability, not sampling ratios.
• Annual increases in inspection frequency and digital oversight are a practical estimate; official SFDA bulletins prevail.

2. Legal basis

The inspection regime rests on MDS-REQ 10 with MDS-REQ 9 as its licensing counterpart, anchored by the definitions of the parent law and the implementing regulation; frequency data are a practical estimate pending verification against official bulletins.

3. Expert insights

1. Inspection is a twin track of system inspection and product inspection. MDS-REQ 10 places the quality management system and inspections in the same document, showing that the SFDA inspection logic runs two tracks in parallel: one examines the system (conformity with ISO 13485:2016 or the latest version adopted by the SFDA, document control, CAPA, complaint and vigilance handling), the other examines the product (physical stock on the market and its labelling, MDMA status, UDI, Arabic instructions for use). System inspection results affect the survival of the MDEL and MDMA; product inspection results trigger incident reporting and FSCA under MDS-REQ 11. Chinese manufacturers often prepare for the two separately, with quality owning the system and registration owning the product, and the inspection then finds the contradiction of system documents saying one thing while market stock shows another. The workable countermeasure is an annual system-versus-product cross audit.

2. The definition of a fraudulent device draws the line between problem natures. Law M/54 Article 1 defines a Fraudulent Medical Device or Supply as a device whose identity or origin has been deliberately falsified for fraudulent purposes. The key in this definition is deliberateness: with the same objective fact, a manufacturer name on the label that does not match reality, the nature is a system defect if supplier management breakdown can be proven; if forged approval documents or a misappropriated identity are involved, it falls into fraud, and the consequences far exceed an ordinary violation. The other relevant definition is reprocessing, the safe re-use procedures applied to used devices (cleaning, disinfection, sterilisation, testing and restoration of technical function). Single-use devices reprocessed downstream and circulated again are a typical market-sampling problem, and MDS-REQ 11 already lists this as a standalone obligation. Chinese manufacturers should lock down the liability allocation for both types of conduct in distribution agreements.

3. The core of sampling is traceability, not the sampling ratio. The real bite of market sampling is that once a sample is judged non-conforming, the company must answer immediately how many units of the same batch remain and who holds them. The answer comes from the traceability system required by MDS-REQ 11, whose minimum field set in turn comes from the UDI-DI of MDS-REQ 7. Three requirements form one chain: sampling, then traceability, then UDI. Sample collection for sampling is supported by a separate guideline, MDS-G13 (Guidance on Medical Devices Samples Collection). In the EU, market surveillance is executed by the competent authorities of the member states on EUDAMED data; in China, registrants likewise bear traceability and recall duties. The Saudi difference is that building the traceability system is written as one of the general requirements of MDS-REQ 11, an item inspectable from the moment of market entry, not a capability assembled after an event.

Inspection response and the organisation of the compliance file are covered at https://www.grzan.cn/regulations/saudi/pms-and-udi-data-maintenance-47 , and the overall framework of vigilance duties at https://www.grzan.cn/regulations/saudi/post-market-surveillance-ncmdr-and-saudi-vigilance-41 .

4. Practical recommendations

• Run an annual system-versus-product cross audit checking the consistency of system documents with market stock on labelling, UDI and instruction language.
• Build an inspection response pack: MDEL and MDMA certificates, ISO 13485 certificate, technical file index, PMS procedures and records, vigilance ledger and traceability ledger, stored centrally and instantly retrievable.
• Appoint the designated SFDA contact person (required separately for manufacturers, ARs, importers and distributors) and keep the contact details current in GHAD.
• Write anti-fraud and no unauthorised reprocessing clauses into distribution agreements, naming the liability allocation and breach consequences.
• Keep the traceability ledger updated in real time so a batch distribution list can be produced within hours if sampling fails.
• Pre-write the non-conforming sampling disposition process, covering quarantine, assessment, incident tiering (against the 2-day, 10-day and 30-day tiers of article 42) and FSCA initiation where necessary.
• Watch SFDA annual bulletins and website announcements for changes in inspection frequency and digital oversight requirements (the related increase figures are a practical estimate).
• Close inspection non-conformities through CAPA with corrective evidence retained for the next inspection to review.

5. Verification checklist

• □ Current versions of MDS-REQ 10 V1.0 and MDS-REQ 9 V1.0 have been obtained and archived
• □ The annual system-versus-product cross audit has been executed
• □ The inspection response pack has been built and a custodian named
• □ The designated SFDA contact person is registered in GHAD with valid contact details
• □ Distribution agreements contain anti-fraud and no reprocessing clauses
• □ The traceability ledger can export a same-batch distribution list in real time
• □ The non-conforming sampling disposition process has been pre-written
• □ CAPA closure evidence for inspection findings has been retained
• □ Conclusions on inspection frequency are marked as a practical estimate and follow official bulletins

Regulatory information verified as of October 29, 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Saudi Arabian market. Our team manages adverse event reporting and recall coordination with the SFDA National Center, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com