CE marking on a medical device means the manufacturer has demonstrated that the product meets EU safety, health, and performance requirements and can be legally sold throughout the European Economic Area (EEA). The letters “CE” stand for Conformité Européenne, and the mark is mandatory for medical devices sold in the EU. It is not a quality seal awarded by a government agency. Instead, it represents the manufacturer’s own declaration that the device has passed a formal evaluation process called a conformity assessment.
What CE Marking Actually Signals
The CE mark appears on many types of products sold in the EEA, from electronics to construction materials. For medical devices specifically, it signals that the product has been evaluated against the requirements of the EU Medical Device Regulation (MDR), which took effect in May 2021. The mark tells hospitals, clinics, distributors, and patients that the device has been assessed for safety and performance before reaching the market.
By affixing the CE mark, the manufacturer takes legal responsibility. They are declaring that the device meets all applicable regulatory requirements and that they can back up that claim with technical documentation, clinical evidence, and a functioning quality management system. If a notified body (an independent auditing organization) was involved in the assessment, the notified body’s four-digit identification number appears next to the CE mark on the label.
How Devices Are Classified by Risk
The EU groups medical devices into four risk classes, and the class determines how rigorous the certification process will be.
- Class I: Low-risk, typically non-invasive devices like bandages, tongue depressors, or hospital beds. Most Class I devices can be self-certified by the manufacturer without involving a notified body, unless they are sterile or have a measuring function.
- Class IIa: Low-to-medium risk devices, often those placed inside the body for short periods (between 60 minutes and 30 days). Examples include surgical clamps and hearing aids.
- Class IIb: Medium-to-high risk devices, generally those implanted for 30 days or longer, or that deliver energy to the body. Ventilators and some infusion pumps fall here.
- Class III: The highest risk category, covering devices like heart valves, implantable pacemakers, and drug-eluting stents. These require the most extensive scrutiny, including consultation with expert panels by the notified body.
For anything above Class I (and for sterile or measuring Class I devices), an independent notified body must be involved in the conformity assessment.
The Conformity Assessment Process
Getting a CE mark is not a single test. It is a multi-stage evaluation that covers both the device itself and the systems the manufacturer uses to design, produce, and monitor it. The process generally follows these steps.
First, the manufacturer submits an application to a notified body, an organization accredited by an EU member state to conduct these assessments. Well-known notified bodies include organizations like TÜV SÜD and BSI. The notified body reviews the application to confirm the device qualifies as a medical device, verify its risk classification, and check that the documentation is complete enough to proceed.
Next comes the technical documentation assessment. The manufacturer must compile detailed files covering how the device works, what materials it uses, how it is manufactured, and what clinical evidence supports its safety and performance. The notified body scrutinizes all of this against the general safety and performance requirements laid out in the MDR. For software-driven devices, cybersecurity measures are also evaluated.
The notified body then audits the manufacturer’s quality management system, typically on-site at the manufacturer’s facilities. This audit checks everything from design controls and supplier oversight to complaint handling and how the company manages corrective actions when problems arise. The audit happens in two stages: the first reviews the system on paper, and the second evaluates how it functions in practice.
Product testing may also be required. This can include electrical safety testing, electromagnetic compatibility checks, biocompatibility testing for devices that contact the body, and functional performance verification. Once the notified body is satisfied that any issues identified during the audit and review have been resolved, it issues an EU certificate. Only then can the manufacturer legally affix the CE mark and place the device on the market.
What Happens After the Mark Is Applied
CE marking is not a finish line. The MDR requires manufacturers to actively monitor their devices for the entire time they remain on the market. This obligation is called post-market surveillance, and it is a continuous process, not an occasional check-in.
Manufacturers must establish a formal post-market surveillance system as part of their quality management system. This means systematically collecting data on how the device performs in real-world use, tracking complaints, monitoring adverse events, and reviewing published literature for relevant safety signals. The insights gathered feed back into the manufacturer’s risk assessments, clinical evaluations, labeling, and design decisions.
If surveillance data reveals a safety concern, the manufacturer must take corrective action, which could range from updating instructions for use to issuing a field safety notice or pulling the device from the market. Manufacturers also cooperate with national authorities responsible for vigilance reporting. For higher-risk devices, post-market clinical follow-up studies may be required to generate ongoing evidence that the device continues to perform as intended in the patient population.
In Vitro Diagnostic Devices
Diagnostic tests, such as blood glucose monitors and COVID-19 tests, fall under a separate but parallel regulation called the In Vitro Diagnostic Regulation (IVDR). These devices still carry the CE mark, but their classification system and conformity assessment pathways differ from those of standard medical devices. The IVDR significantly expanded the role of notified bodies for diagnostics. Under the previous directive, most IVDs could be self-certified by manufacturers. Now, a much larger proportion require independent review.
Laboratories that develop their own diagnostic tests for in-house use follow a different pathway. These in-house IVDs are not reviewed by notified bodies and are not registered in the EU’s central medical device database (EUDAMED). They are instead monitored by national authorities.
Transition Deadlines for Legacy Devices
When the MDR replaced the older Medical Devices Directive in 2021, millions of devices already on the market held certificates under the old rules. The EU set up a staggered transition to avoid pulling safe, established products off hospital shelves while manufacturers worked through the new, more demanding certification process.
To benefit from these extended timelines, manufacturers had to meet several conditions: they needed to have lodged an MDR conformity assessment application by May 2024, have a compliant quality management system in place, and sign a written agreement with a notified body by September 2024. Devices that did not meet these conditions lost their right to be sold under legacy certificates by May 2026. For those that did qualify, the deadlines depend on risk class. Class III and Class IIb implantable devices must complete the transition by December 31, 2027. Other Class IIb, Class IIa, and Class I devices requiring notified body involvement have until December 31, 2028.
CE Marking and the UK Market
Since Brexit, the UK has introduced its own product marking system called UKCA (UK Conformity Assessed) for devices sold in England, Wales, and Scotland. However, the UK government has allowed CE-marked devices to continue being placed on the Great Britain market under transitional arrangements. Devices certified under the older EU directives (MDD and AIMDD) with a valid declaration and CE marking can be sold in Great Britain until the earlier of the certificate’s expiry date or June 30, 2028.
Manufacturers based outside the UK who want to sell in Great Britain must appoint a UK responsible person to handle registration and act on their behalf with the Medicines and Healthcare products Regulatory Agency (MHRA). All medical devices, including IVDs, custom-made devices, and procedure packs, must be registered with the MHRA before they can be placed on the Great Britain market. Northern Ireland, meanwhile, continues to follow EU rules under the terms of the Windsor Framework, so CE marking remains the standard route to market there.
The CE Mark on the Label
The physical CE mark has specific formatting rules. It must be at least 5 mm tall, visible, legible, and permanently affixed to the device or its packaging. If a notified body was involved in the conformity assessment, the body’s four-digit identification number appears directly beside the CE symbol. The proportions of the two letters are fixed by regulation, so manufacturers cannot redesign or stylize the mark. If the device is too small to carry the mark, it can appear on the packaging or accompanying documents instead.