The Person Responsible for Regulatory Compliance (PRRC) under MDR Article 15 is the named individual whose sign-off backs the EUDAMED record. The PRRC’s Article 15(3) scope covers five categories: device conformity, the technical documentation, the EU declaration of conformity, post-market surveillance, and vigilance reporting. The sign-off happens before any of that data lands in EUDAMED. The PRRC is either an internal employee or an external appointee under the micro and small enterprise carve-out. This page is not the role explainer. It walks the EUDAMED data fields inside the PRRC’s Article 15(3) sign-off scope, field by field. It also notes what the audit trail must show if that sign-off is later challenged.
The PRRC’s Article 15(3) sign-off applies to the content of the EUDAMED data, not to who uploads it. The manufacturer (or the appointed PRRC) signs off the data, then uploads through the EC portal. The sign-off scope, the audit-trail expectation, and the field map are the same whether the PRRC is internal or appointed under the micro and small enterprise carve-out.
1. The PRRC, in short: Article 15(1), MDCG 2019-7, and the micro and small carve-out
MDR Article 15(1) requires every manufacturer placing medical devices on the EU market to have at least one PRRC available within its organisation, per MDCG 2019-7 Rev. 1 sections 1 and 4. Two qualification paths apply: a recognised formal qualification plus one year of relevant experience (Article 15(1)(a)), or four years of relevant experience without a formal qualification (Article 15(1)(b)). Article 15(2) protects the PRRC from disadvantage within the organisation arising from the proper fulfilment of those duties.
Micro and small enterprises are not required to have a PRRC in-house. Under Commission Recommendation 2003/361/EC the threshold is fewer than 50 employees and an annual turnover or balance sheet under €10 million, both criteria, not either. The carve-out lets the manufacturer appoint an external PRRC who is permanently and continuously at its disposal under contract, per MDCG 2019-7 Rev. 1 section 4. The carve-out changes who signs. Every Article 15(3) responsibility persists. So does the audit trail.
2. The qualification gate: what counts as evidence
MDR Article 15(1) gives two paths to the PRRC role. Path (a) is the qualification route. The appointee holds a diploma, certificate, or other evidence of formal qualification awarded on completion of a university degree (or equivalent course recognised by the member state). The discipline must be law, medicine, pharmacy, engineering, or another relevant scientific discipline. The appointee adds at least one year of professional experience in regulatory affairs or QMS for medical devices. Path (b) is the experience route: at least four years of professional experience in regulatory affairs or QMS for medical devices, with no formal qualification requirement.
MDCG 2019-7 Rev. 1 section 3 clarifies that qualification recognition is the member state’s call. For the QMS evidence pack, the manufacturer’s documented information should hold:
- Diploma or certificate of formal qualification (for the 15(1)(a) path), or documented work history (for the 15(1)(b) path).
- The employment contract or service contract that names the PRRC role and references Article 15.
- An organisation chart that shows where the PRRC sits and how the no-disadvantage requirement under Article 15(2) is operationalised.
- A documented designee for absences (covered in section 6).
- Records of any continuing training the PRRC has completed.
ISO 13485:2016 sections 4.2 and 7.5 set the documented-information requirements the QMS already needs to meet. The PRRC qualification pack is one of the documents the QMS holds.
3. The five Article 15(3) responsibilities, MDR and IVDR side by side
Article 15(3) of the MDR lists five responsibilities the PRRC ensures inside the manufacturer. IVDR Article 15(3) mirrors them, with cross-references pointing at IVDR-equivalent articles for post-market surveillance, vigilance, and performance studies. The comparison table consolidates the cross-references.
| 15(3) | What the PRRC ensures | MDR cross-reference | IVDR cross-reference | Where it surfaces in EUDAMED |
|---|---|---|---|---|
| (a) | The conformity of devices is appropriately checked in accordance with the QMS, before any device is released. | MDR Article 10, Annex IX | IVDR Article 10, Annex IX | UDI and Devices module (conformity-backed device record) |
| (b) | The technical documentation and the EU declaration of conformity are drawn up and kept up to date. | MDR Annexes II and III, Article 19 | IVDR Annexes II and III, Article 17 | UDI and Devices module (DoC reference and technical-documentation linkage) |
| (c) | The post-market surveillance obligations are met. | MDR Article 10(10) | IVDR Article 10(9) | PMS plan and PSUR linkage feeding the Vigilance and Market Surveillance modules |
| (d) | Reporting obligations for serious incidents and field safety corrective actions are fulfilled. | MDR Articles 87 to 91 | IVDR Articles 82 to 86 | Vigilance module (serious incident reports, FSCAs, trend reports) |
| (e) | In the case of investigational devices, the statement referred to in Annex XV Chapter II Section 4.1 is issued. | MDR Annex XV Ch. II §4.1 | IVDR Annex XV Ch. II §4.1 | Clinical Investigations module (CI and Performance Studies) |
For the IVDR reader: the Article 15(1) qualification thresholds are identical in shape to the MDR. The only sub-article where the cross-reference renumbers between the two regulations is post-market surveillance: MDR Article 10(10) maps to IVDR Article 10(9).
Article 15(3) does not require the PRRC to personally check every device released. It requires the PRRC to ensure the QMS has the conformity-check process in place, and that the process has run before release. The distinction is between operational execution, which the QMS organisation owns, and sign-off accountability, which the PRRC owns. MDCG 2019-7 Rev. 1 section 5 treats this distinction explicitly.
4. Where Article 15(3) sign-off lands in the EUDAMED data flow
This is the section the EUDAMED submission preparer arrived for. The PRRC’s sign-off scope does not sit in EUDAMED as a single field. It sits across four modules, in the data whose accuracy the PRRC’s Article 15(3) responsibilities back. MDR Article 31 (with IVDR Article 31 in parity) requires the manufacturer’s actor registration to include the PRRC’s name and contact details. MDR Article 29 puts the device-side conformity records into EUDAMED. The PRRC signs off on the substance behind both.
The field map below covers the four EUDAMED modules where the PRRC’s Article 15(3) responsibilities surface. The Notified Body and Certificates module and the Market Surveillance module carry data the PRRC’s sign-off references rather than signs off; the table notes that distinction.
| EUDAMED field | EUDAMED module | Article that puts it there | Inside PRRC Article 15(3) sign-off scope? |
|---|---|---|---|
| Actor SRN (Single Registration Number) | Actor registration | MDR Article 31, Annex VI Part A | Partial. The PRRC is not the SRN issuer; the PRRC’s name and contact details are registered against the actor record. |
| PRRC name, address, contact email | Actor registration | MDR Article 31(1)(c), Annex VI Part A | Yes. The PRRC identity record itself. |
| Basic UDI-DI | UDI and Devices | MDR Article 29, Annex VI Part C | Yes for conformity backing (15(3)(a) and (b)). The Basic UDI-DI is issued by GS1, HIBCC, IFA, or ICCBBA, not by the PRRC. |
| UDI-DI | UDI and Devices | MDR Article 27, Annex VI Part C | Same as above. The PRRC signs off the conformity behind the identifier, not the identifier issuance. |
| Device risk class | UDI and Devices | MDR Article 51, Annex VIII | Yes. Classification is part of the conformity check under 15(3)(a). |
| EMDN code | UDI and Devices | MDR Article 26, EMDN nomenclature | Partial. The EMDN code is selected from the EC’s published nomenclature; the PRRC’s conformity sign-off backs the device characterisation, not the code issuance. |
| EU Declaration of Conformity reference | UDI and Devices | MDR Article 19, Annex IV | Yes. 15(3)(b) explicitly. |
| Notified Body certificate metadata | NB and Certificates | MDR Article 56 | No. NB-issued, not PRRC-signed. The PRRC’s technical-documentation sign-off backs the file the NB assessed. |
| Serious incident report | Vigilance | MDR Article 87 | Yes. 15(3)(d). |
| Field Safety Corrective Action notice | Vigilance | MDR Article 89 | Yes. 15(3)(d). |
| Trend report | Vigilance | MDR Article 88 | Yes. 15(3)(d). |
| Periodic Safety Update Report linkage | UDI and Devices (Class IIa, IIb, III) | MDR Article 86 | Yes. 15(3)(c) post-market surveillance hook. |
| Investigational device statement | Clinical Investigations | MDR Annex XV Ch. II §4.1 | Yes. 15(3)(e). |
NB and Certificates module entries are NB outputs, anchored in the technical documentation the PRRC signs off under Article 15(3)(b). If a certificate’s scope or expiry is later challenged, the audit trail walks back through the NB’s assessment file. That file walks back through the technical documentation the PRRC released. The PRRC is not in the Certificates module; the PRRC’s sign-off is upstream of it.
For the broader workflow that this PRRC sign-off sits inside, see the EUDAMED registration overview.
5. The audit trail: what evidence supports the PRRC’s sign-off if challenged
The Article 15(3) responsibilities create a documentary trail by implication, not by direct prescription. ISO 13485:2016 sections 4.2 and 7.5 carry the documented-information requirements the QMS already operates under. MDCG 2019-7 Rev. 1 section 5 points at the responsibility split. Read together, the audit-trail expectation has a consistent shape across Article 15(3)(a) to (e):
- The source document the PRRC reviewed, identified by version and date.
- The conformity check, post-market surveillance review, vigilance event, or investigational-device statement the PRRC signed off, with the substantive content.
- The PRRC’s signature or e-signature, identified by name and Article 15 role.
- The timestamp of the sign-off.
- The QMS document control entry that ties the sign-off to the record it released (device, technical-documentation revision, declaration of conformity revision, PMS report, vigilance entry, IFU revision).
An outsourced PRRC arrangement (covered in section 6) does not change the audit-trail content. It changes who signs, what contract evidence the QMS holds about the appointment, and where the designee for absences is documented.
How EUDAPrep fits into the trail. The tool removes the rebuild-the-spreadsheet step before the PRRC signs. EUDAPrep extracts EUDAMED-required data from IFUs, labels, declarations of conformity, and safety data sheets. It surfaces candidate EMDN codes from the EC’s published nomenclature. It runs deterministic XSD validation and EC business-rule checks against the EUDAMED schema. It emits bulk-upload-ready XML. The manufacturer (or the appointed PRRC) reviews each suggestion, accepts or edits or rejects it, and then downloads the XML and uploads it through the EC portal. EUDAPrep does not transmit to EUDAMED on the user’s behalf.
The structured audit log EUDAPrep retains per submission session captures, for each mapping, the per-record evidence chain illustrated below.
{
"session_id": "sess_a3f9",
"source_document_hash": "sha256:7f2b...",
"model_versions": ["extract-v4.2", "translate-v2.1"],
"matching_tier": "candidate",
"user_action": "edit",
"final_value": "CW0301010101",
"xml_output_hash": "sha256:b91e..."
}Retention is ten years. The PRRC’s sign-off goes in the QMS document control system, alongside the relevant device, declaration, or vigilance record. The EUDAPrep audit log supplements that trail with the per-mapping evidence chain behind the data the manufacturer uploaded.
A note on AI use in the tool, consistent with AI Act Article 50 voluntary-transparency principles: translation suggestions, code candidates, and text-formatting suggestions are AI-generated. They are surfaced for manual review. The PRRC’s sign-off applies to the final value, not to the candidate.
6. PRRC sign-off under outsourcing (micro and small enterprise): what changes, what does not
The Commission Recommendation 2003/361/EC threshold is two criteria, both required: fewer than 50 employees AND an annual turnover or balance sheet total under €10 million. A manufacturer that meets both can appoint an external PRRC under MDR Article 15(1) without having one in-house. A manufacturer that meets only one criterion cannot.
MDCG 2019-7 Rev. 1 section 4 carries the operational expectation. The external PRRC must be permanently and continuously at the manufacturer’s disposal. The guidance does not specify hours-of-availability rules. The conservative interpretation, which holds up under audit, is that the appointed PRRC is reachable within a documented response-time commitment, and that a designee covers absences.
One specific prohibition: the same external person cannot act as PRRC for both a non-EU manufacturer and that manufacturer’s EU authorised representative. The EU authorised representative is required by MDR Article 11(3) to have its own PRRC. The AR’s PRRC cannot be the manufacturer’s PRRC. MDCG 2019-7 Rev. 1 section 4 names this explicitly.
The contractual evidence the QMS must hold:
- the engagement contract that names the PRRC role and references Article 15;
- the qualification documentation for the appointee;
- the named designee for absences;
- the documented response-time commitment;
- the evidence of permanent and continuous availability.
What changes: the signature line and the contract folder. What does not change: every Article 15(3)(a) to (e) responsibility, the audit-trail content from section 5, and the EUDAMED field-map sign-off scope from section 4. The carve-out is a structural permission, not a content reduction.
Suggestions in EUDAPrep are not regulatory advice. The manufacturer (and its appointed PRRC under MDR Article 15(3)) remains responsible for the accuracy of all data submitted to EUDAMED.