Headquarters:
regenold GmbH
Zöllinplatz 4
79410 Badenweiler
Germany
Phone: +49 7632 82 26-0
Email: info@regenold.com
The EU regulatory landscape for drug-device combination products is evolving rapidly. With the new variation regulation now in place and the anticipated variation categorisation guideline expected in Q2 2025, another crucial piece of the puzzle is falling into place.
At regenold GmbH, we've been at the forefront of these changes, guiding our clients through the complex approval journey for combination products. To illustrate the procedure from start to finish, we have created a DDC process map outlining four distinct steps:
The first and most crucial step in the regulatory pathway is determining the correct classification of your product—whether it qualifies as an integral drug-device combination (iDDC), a co-packaged product, or both. Ideally, this decision should be made early in development and double-checked again for accuracy, as it defines the applicable regulatory route: either the EU Medical Device Regulation (MDR 2017/745) or Directive 2001/83/EC for medicinal products.
In the section that follows, we'll explore key aspects of this classification, including:
These foundational elements are essential for a smooth and compliant development pathway.
The EU regulatory framework for drug-device combination products follows a hierarchical approach, making early classification essential for compliance. Below are key distinctions:
Note:
Borderline cases can present challenges. The MDCG 2022-5 guidance provides clarity by outlining criteria related to physical integration, exclusive use with a specific drug, and reusability.
To support your regulatory strategy, the following decision tree offers step-by-step guidance in identifying the correct classification and regulatory pathway for your combination product.
Once the classification of your combination product is determined, the next step is verifying the regulatory status of the medical device component—particularly its CE marking and the involvement of a Notified Body (NB).
Start by evaluating whether the device component already holds a valid CE mark under the Medical Device Regulation (MDR). It's essential to ensure that its intended purpose aligns with the therapeutic or medical function of the combination product.
The need for NB involvement depends on the device classification, which is determined based on factors such as the intended use, invasiveness, duration of contact, and the potential risk to users or patients—defined in detail in MDR Annex VIII.
Understanding and fulfilling these requirements early in development ensures smoother regulatory progress and helps avoid costly delays.
Successfully navigating the EU regulatory pathway for drug-device combination products requires a clear understanding of classification rules, applicable legislation, and the involvement of regulatory bodies.
The classification of the device component is critical and depends on: intended use, sterility, and functional features (e.g., presence of graduation markings).
For example, a prefilled syringe containing a medicinal product is considered an iDDC and regulated primarily as a medicinal product. However, its device component (the syringe) must still comply with MDR. If it is sterile or includes graduations, Notified Body (NB) involvement is mandatory.
Essential References:
From top to bottom the tasks of step 2 and the substeps 2.1 and 2.2 are evaluated separately for the following products:
1. iDDC with and without NB
2. iDDC with CE-marked device component
3. Co-packed/ referenced
Step 2.1
Objective: For the iDDCs with and without a NB compliance to the applicable GSPRs, Annex I, MDR is to be demonstrated.
The GSPRs – the General Safety & Performance requirements are a set of requirements covering the whole range of medical devices. Annex I is divided into three main chapters:
Table 1 GSPR overview
| CHAPTER I GENERAL REQUIREMENTS | CHAPTER II REQUIREMENTS REGARDING DESIGN AND MANUFACTURE | CHAPTER III REQUIREMENTS REGARDING THE INFORMATION SUPPLIED WITH THE DEVICE |
|---|---|---|
| 1 Safe; perform as intended | 10 Chemical, physical and biological properties | 23 Label and instructions for use |
| 2 Risk reduction, risk-benefit ratio | 11 Infection and microbial contamination | |
| 3 Risk Management System | 12 Devices incorporating a substance considered to be a medicinal product | |
| 4 Risk control measures | 13 Devices incorporating materials of biological origin | |
| 5 Eliminating & reducing risks related to use error | 14 Construction of devices and interaction with their environment | |
| 6 Lifetime | 15 Devices with a diagnostic or measuring function | |
| 7 Transport & Storage | 16 Protection against radiation | |
| 8 Minimising foreseeable risks, and any undesirable side-effects | 17 Electronic programmable systems | |
| 9 Devices without a medical purpose | 18 Active devices and devices connected to them | |
| 19 Particular requirements for active implantable devices | ||
| 20 Protection against mechanical and thermal risks | ||
| 21 Protection against the risks posed to the patient or user by devices supplying energy or substances | ||
| 22 Protection against the risks posed by medical devices intended by the manufacturer for use by lay persons |
Documenting the tasks in a tabulated form results in the so-called GSPR Checklist (see annex II MDR, 4), see example below.
In line with the latest EMA Q&A, the outcome of this assessment must be a conclusion of full compliance with all relevant GSPRs for the intended purpose of the device component used in the iDDC. Partial compliance conclusions or opinions that leave relevant GSPRs unaddressed are no longer acceptable. This applies both to Notified Body Opinions (NBOp) and, for eligible class I devices, to MAH GSPR compliance statements, which must clearly list the applicable GSPRs and confirm full conformity.
EMA FAQ: https://www.ema.europa.eu/en/documents/regulatory-procedural-guideline/...
Step 2.2
While Annex I defines the WHAT (safety and performance requirements), Annex II specifies the HOW (documentation structure and data organization), detailing the technical documentation requirements necessary to demonstrate compliance to the applicable GSPRs.
For non‑sterile, non‑measuring, non‑reusable class I devices, the EMA Q&A allows the MAH to provide a MAH's statement of compliance with the relevant GSPRs of MDR Annex I as an alternative, where a Declaration of Conformity is not available.
Table 2 Summary of Annex II MDR
| CH. | Description | Main Content | Key Points/Examples |
|---|---|---|---|
| 1 | Device description and specification, including variants and accessories | - General description - Intended purpose and users - Risk class and justification - Principles of operation - Novel features - Accessories and variants - Reference to previous generations |
- General description - Intended purpose and users - Risk class and justification - Principles of operation - Novel features |
| 2 | Information supplied by the manufacturer | - Labels - Instructions for Use (IFU) - Other information | - All labeling and IFU as supplied to users |
| 3 | Design and manufacturing information | - Design and manufacturing processes - Manufacturing environment controls - Suppliers and subcontractors | - Design drawings - Manufacturing process details - List of critical suppliers |
| 4 | General safety and performance requirements | - Evidence of conformity with GSPRs (Annex I) - Declaration of conformity - Applicable standards | - How the device meets safety/performance requirements - Applied harmonized standards |
| 5 | Risk management | - Benefit-risk analysis - Risk management process and results - Compliance with ISO 14971 | Risk Management file including Plan, report, analysis |
| 6 | Product verification and validation | - Pre-clinical and clinical data - Biocompatibility, electrical safety, software validation - Sterilization, stability, packaging | Test reports/test summaries; Biocompatibility plan & report, clinical evaluation, transport, packaging, sterilization… |
Why is that information about Annex II, I helpful?
Some examples from Module 3.2.:
P.2 Pharmaceutical Development
This section of the dossier should summarise the information relevant to development of the specific medical device (part) integrated into the medicinal product, including the rationale for its selection in the specific sections of 3.2.P.2.
P.3.5 Process validation and/or evaluation
Process validation for the integral medicinal product manufacturing process should be performed, as appropriate, in line with relevant European guidelines, including the assembly and sterilisation of the device (part) (if applicable) and any filling steps.
P.8 Stability
Stability studies for the integral medicinal product (or variant, where justified) should include functionality tests determined as stability-indicating CQAs for the medicinal product (refer to P.2.4).
Table 3 Correlation between Annex II, I, & EMA guideline (excerpt)
| Annex II MDR sections | Annex I MDR | Dossier / CTD |
|---|---|---|
| 3 Summary of development 3a) information to allow the design stages applied to the device to be understood; | 1 "… devices shall be designed & manufactured…" See also, e.g. 7, 10 | 3.2.P.2 This section of the dossier should summarise the information relevant to development of the specific medical device (part) integrated into the medicinal product, |
| 3 Process verification & validation ("3b (…) complete information and specifications, including the manufacturing processes and their validation") | e.g. 1, 7, 10 | 3.2.P.3.5 |
| 6 Stability testing ("detailed information regarding test design, complete test or study protocols (…) for stability, including shelf life;" | 6, 11.3, 11.4 | 3.2.P.8 |
Even if it is considered as a single integral product, it will be unavoidable to divide the data in principle into three buckets, as these are used for different purposes.
Redundancies cannot be avoided, but can be reduced through a clever structure, which ultimately can also simplify data maintenance.
Step 2.1
Objective: Demonstrate compatibility and reconfirm the suitability of the device for use with the drug.
Data Assessment/Creation Steps:
Step 2.2
Objective: Drug-device compatibility data
Key Considerations:
Step 2.1
Target: Demonstration of compatibility of the device with the drug.
Data Assessment/Creation:
Step 2.2
Target: Drug-device compatibility data.
Key Considerations
1. Regulatory Compliance and CE Marking
2. Documentation and Dossier Integration
Summary
Depending of the product, the following should be available:
| iDDC with NB | iDDC without NB | iDDC with CE marked device | Co-packed/ referenced | |
|---|---|---|---|---|
| Deliverable | GSPR Checklist Technical documentation acc. Annex II CTD |
GSPR Checklist Technical documentation acc. Annex II MAH's statement of compliance with the relevant GSPRs of the MDR Annex I (only for class I devices) CTD |
GSPR Checklist (part of CE certificate/ Declaration of conformity for the device component, in a best case scenario) Suitability & compatibility data for the device component CE certificate/ Declaration of conformity for the device component CTD |
Suitability & compatibility data for the device component CE certificate/ Declaration of conformity for the device component CTD |
| Next step | NBOp | Authority approval | ||
For the iDDC requiring an Notified Body, Art 117 MDR mandates that manufacturer of the drug product (Marketing Authorization holder – MAH) must obtain a Notified Body Opinion (NBOp) on the device component before submitting their Marketing Authorization Application (MAA) to the competent authority, such as the European Medicines Agency (EMA). The NBOp process is not a certification or CE marking procedure; rather, the Notified Body conducts an independent assessment of the provided data demonstrating compliance to the applicable GSPRs. After this review, the Notified Body issues a Notified Body Opinion report, which must be included in the MAA.
The EMA Q&A now makes clear that the NBOp must confirm full compliance with the relevant GSPRs for the device component as used in the specific iDDC, including its intended purpose, user population and use setting. Opinions that only conclude on partial GSPR compliance or explicitly exclude relevant GSPRs are not acceptable to the medicines authorities.
The steps leading up to the submission may include the following:
a) Identifying a suitable Notified Body;
b) Submitting an application to the selected Notified Body;
c) Receiving and approving a quotation;
d) Planning the submission process.
The identification and selection of the Notified Body is the responsibility of the Marketing Authorization Holder (MAH). You can find a complete and regularly updated list of all Notified Bodies in the EU on the NANDO (New Approach Notified and Designated Organisations) website maintained by the European Commission. Art 117 is not in scope of each notified body – early engagement is highly advisable.
Each Notified Body does have a more or less similar application process – completion of forms by the MAH or representative followed by an offer related to the requested services.
Prior proceeding with the next step, it is highly recommended engaging with your NB early and aligning on expectations, if not yet done, like submission format, timelines, etc.
The specific details on what data to provide and how to structure it are outlined in Step 2 ("Data Creation & Documentation").
The Notified Body (NB) conducts its review and may issue questions or requests for clarification. If, after three rounds of questions, unresolved gaps remain, the procedure is concluded with a negative outcome. Conversely, if all questions are satisfactorily addressed, the NB issues a positive NBOp report to the applicant.
Timelines (might vary due to complexity/ resources etc.):
- From identification to submission: 1-3m
- Submission to NBOp report: 3-6m
For the other combination product types:
There's no need for an additional review by a Notified body. The data relevant to the device component is to be provided with the submission to the authorities, see step 2 for further details.
Legal basis of an EU MAA
Marketing Authorisation Applications (MAA) in the EU/EEA are submitted in accordance with the relevant legal basis specified in Directive 2001/83/EC, as amended:
Regulatory Procedures
Within the EU/EEA there are four regulatory procedures for MAA:
For mutual recognition, decentralised procedures and line extensions of existing iDDCs, the need for updated device documentation depends on whether the device part has undergone significant change. If the same device is used without major changes to its design, performance or intended use, existing MDD‑based certificates and earlier device evidence may still be acceptable under the MDR transitional provisions.
Drug-device combination products—whether integral (iDDC) or non-integral/co-packaged—are fundamentally composed of three elements: the drug component, the device component, and the combination product as a whole.
Maintenance represents just one aspect of comprehensive lifecycle management. Market feedback (such as complaints), evolving regulatory requirements, or supplier changes may trigger a formal change management process, typically involving the following steps:
The EMA Q&A now explicitly links such change assessments to Article 117 in the post‑approval phase. For all authorised iDDCs, major changes to the device part that may significantly impact its safety, performance or intended use trigger the need for a new or updated EU Declaration of Conformity, EU certificate or NBOp/MAH GSPR statement.
During the lifecycle of an approved drug‑device combination product, the device component may need to be changed, replaced or newly added. The MAH is responsible for evaluating whether such changes could affect the delivery, quality, safety or efficacy of the combination product.
As a general rule, a new or revised NBOp or MAH GSPR compliance statement is:
Depending on the type of change either a Variation or an Extension application becomes applicable.
Variation
Variations to the dossier should be submitted in accordance with Regulation (EC) No 1234/2008 (Variation Regulation), as amended. In general, the Variation Regulation defines variations as minor (Type IA, Type IB) or major (Type II).
Extension
Certain changes to an approved marketing authorisation have to be considered to fundamentally alter the terms of this authorisation and therefore cannot be granted following a variation procedure. The three main categories of 'changes requiring an extension of marketing authorisation' are:
iDDC - Example 1
Let's assume the following. For an iDDC (e.g. prefilled syringe), the patient population is to be extended covering children. According to the TEAM NB Guidance, a change of the device component of the medicinal product is understood to be substantial or significant if it may affect the device conformity with the General Safety and Performance Requirements.
Example 2:
A material modification required for a device component, such as the outer shell of an autoinjector. Although this outer shell typically does not come into direct contact with the drug substance, from a device perspective, it maintains direct contact with the patient or user. Consequently, this change could impact compliance with the applicable GSPRs and should therefore be evaluated as a substantial change.
Examples for Co-packed Products
For a co-packed product, the pivotal question will be if the new patient population is covered by the certificate/declaration of conformity of the device or not.
Co-packed Example 2
In case of a material change of the co-packed device, the impact on the drug/ medicinal substance is also to be evaluated.
In a nutshell, the 4 steps are key to obtaining regulatory compliance of drug-device combination products.
Step 1: Pre-Evaluation
Step 2: Data Creation & Documentation
Step 3: Notified Body Opinion (NBOp) & Approval
Step 4: Maintenance
Under the EU Medical Device Regulation (MDR), a "manufacturer" isn't always the one physically making the product. MDR changes the way roles and responsibilities are defined — and these distinctions have real compliance consequences.
Knowing exactly who is responsible for what is essential for meeting regulatory requirements, avoiding delays, and ensuring product safety. This is especially true for integral and co-packaged drug-device combination products, where different parties may carry overlapping duties.
Manufacturer
A person or company that manufactures, refurbishes, or has a device manufactured/refurbished and markets it under their name or trademark (MDR Art. 2(30)).
For iDDCs, the overall legal responsibility lies with the Marketing Authorisation Holder (MAH) of the medicinal product.
Co‑packed drug–device combination products consist of a medicinal product and a medical device packaged together but remaining separate components. Each component retains its own regulatory framework.
Case 1 MAH as Distributor
If the device part is already CE marked, the CE mark remains valid, the intended purpose is unchanged, and no modifications affecting compliance are made, then according to EMA guidance, the MAH's obligations for the device part are those of a distributor (MDR Art. 14).
Distributor obligations include:
Case 2 MAH as Legal Manufacturer
A MAH may choose to designate itself as the legal manufacturer for the device part. This means taking on full MDR manufacturer responsibilities under Art. 10.
Using a Non CE Marked Device in a Co-pack
If the device lacks CE marking, it must undergo full MDR conformity assessment before using as in co-packed device. The MAH bears the compliance burden.
Documentation, Traceability & Post Market Responsibilities
We're more than happy to answer any of your inquiries. Whether you need clarity on classification, help with your NBOp process, or ongoing lifecycle support — regenold is here to help.
CONTACT US TODAY BOOK A FREE CONSULTATION
Whether you're planning your first EU submission or preparing to scale your presence, regenold gives you the insight and operational support to succeed.
CONTACT US TODAYTel. +49 7632 82 26-0 Email: info@regenold.com