Latest / DDReg Knowledge Capsule / Mandatory EUDAMED Compliance for German Medical Devices 2026

Transcript

Mandatory EUDAMED Compliance for German Medical Devices 2026 · DDReg Knowledge Capsule

• 0:00
  Speaker 1: Welcome to D-Direct Knowledge Capsule. Yeah. Imagine for a second
• 0:03
  Speaker 1: that you had to track every single pacemaker, like every
• 0:06
  Speaker 1: MRI machine, diagnostic test, and every single surgical tool across
• 0:10
  Speaker 1: the entire European continent.
• 0:12
  Speaker 2: Right, which is a mind-boggling amount of equipment.
• 0:15
  Speaker 1: Exactly. Just imagine trying to follow one single scalpel from
• 0:18
  Speaker 1: the factory floor through customs into a hospital supply room
• 0:22
  Speaker 1: and then finally into a surgeon's hands. How does a
• 0:25
  Speaker 1: massive bureaucracy actually pull that off? without just collapsing under
• 0:30
  Speaker 1: its own weight.
• 0:30
  Speaker 2: Yeah, that is the million-dollar question right now.
• 0:33
  Speaker 1: It really is. And today, we're answering exactly that question.
• 0:37
  Speaker 1: We're taking a deep dive into the realities of Udamed,
• 0:39
  Speaker 1: which is the European database on medical devices, and specifically
• 0:43
  Speaker 1: how this affects compliance in Germany under BFORM.
• 0:46
  Speaker 2: Yeah, this is a topic that is keeping a lot
• 0:48
  Speaker 2: of people awake at night.
• 0:49
  Speaker 1: I bet. So our mission today is to demystify this
• 0:52
  Speaker 1: huge regulatory shift that officially went live on May 28, 2026.
• 0:57
  Speaker 1: Because that's the day this whole system transformed from like
• 1:01
  Speaker 1: a voluntary suggestion into a hard legal requirement.
• 1:04
  Speaker 2: It really was a complete watershed moment for the industry.
• 1:07
  Speaker 2: I mean, we are talking about fundamentally rewiring how an
• 1:11
  Speaker 2: entire continent handles medical device data. Right. So for anyone
• 1:15
  Speaker 2: working in or around medical devices, regulatory affairs or global
• 1:20
  Speaker 2: supply chains, understanding the mechanics of this shift is absolutely critical.
• 1:24
  Speaker 1: Yeah, you really can't ignore it anymore.
• 1:26
  Speaker 2: Exactly. If you want to keep your products legally on
• 1:29
  Speaker 2: the market, you have to get this right. Udemyd is
• 1:31
  Speaker 2: no longer a beta test. You know, it is the
• 1:34
  Speaker 2: gatekeeper to the European health care system now.
• 1:36
  Speaker 1: So to translate this incredibly complex regulatory maze into, you know, clear,
• 1:42
  Speaker 1: actionable insights, I have our resident expert here.
• 1:45
  Speaker 2: Glad to be here.
• 1:46
  Speaker 1: Let's start by framing the reality of that May 2026 date,
• 1:50
  Speaker 1: because the way the European market and specifically Germany is
• 1:52
  Speaker 1: experiencing this well is It feels like a massive culture shock.
• 1:55
  Speaker 2: Oh, absolutely.
• 1:56
  Speaker 1: So what actually flipped from optional to mandatory overnight? Right.
• 1:59
  Speaker 2: So on May 28th, the European Commission formally declared four
• 2:02
  Speaker 2: specific modules of the eDEMED database to be fully operational
• 2:06
  Speaker 2: and mandatory.
• 2:07
  Speaker 1: Okay. Just four of them. Just four.
• 2:09
  Speaker 2: Those are actor registration, UDI, and device registration, notified bodies
• 2:15
  Speaker 2: and certificates, and finally, market surveillance.
• 2:18
  Speaker 1: Got it.
• 2:19
  Speaker 2: And what triggered a lot of the initial panic across
• 2:22
  Speaker 2: the industry was this assumption that the entire database went
• 2:25
  Speaker 2: live all at once.
• 2:27
  Speaker 1: Oh, like people thought every single feature was suddenly mandatory.
• 2:30
  Speaker 2: Exactly, but it didn't happen that way. Two major modules,
• 2:33
  Speaker 2: post-market surveillance and vigilance, along with clinical investigations and performance studies,
• 2:39
  Speaker 2: they're actually still under development.
• 2:40
  Speaker 1: Okay, so they were excluded from that May 28 launch.
• 2:43
  Speaker 2: Yeah, completely excluded from the mandatory launch for now.
• 2:46
  Speaker 1: Which means companies have to navigate this weird hybrid reality
• 2:50
  Speaker 1: right now.
• 2:51
  Speaker 2: Yeah, it's very much a hybrid situation.
• 2:52
  Speaker 1: But what fascinates me is the German experience specifically. Like
• 2:57
  Speaker 1: if you operate in Germany, you have historically relied on
• 3:00
  Speaker 1: a completely different national system, right? The DI's database.
• 3:03
  Speaker 2: Yes, DMI's. The Deutsches Medizinproduktinformations- und Datenbanksystem.
• 3:08
  Speaker 1: Quite a mouthful.
• 3:09
  Speaker 2: It is, yeah. But it has been the absolute bedrock
• 3:12
  Speaker 2: of German national medical device info for years. Like, every
• 3:17
  Speaker 2: manufacturer selling in Germany knew that system inside and out.
• 3:21
  Speaker 1: Which makes this transition sound like, I don't know, moving
• 3:24
  Speaker 1: from a reliable old local hard drive to a massive
• 3:28
  Speaker 1: centralized new cloud server.
• 3:30
  Speaker 2: That's actually a really good way to picture it. Right.
• 3:33
  Speaker 1: But here's my thing. In the age of AI and
• 3:36
  Speaker 1: seamless automation, when you get a new phone, you just
• 3:39
  Speaker 1: set it next to your old one and boom, everything transfers.
• 3:41
  Speaker 2: No, if only it were that easy here.
• 3:44
  Speaker 1: Right. But looking at how this Udamed rollout is structured,
• 3:47
  Speaker 1: there's a massive warning sign flashing that D-Mind's data does
• 3:51
  Speaker 1: not automatically transfer over.
• 3:53
  Speaker 2: No, it absolutely does not.
• 3:54
  Speaker 1: So why can't the German regulatory authorities simply click a
• 3:57
  Speaker 1: migrate button and port everyone's profiles over?
• 3:59
  Speaker 2: Look, assuming an automatic sync is probably the single most
• 4:02
  Speaker 2: dangerous compliance error a company can make right now.
• 4:04
  Speaker 1: Wait, really? The most dangerous?
• 4:06
  Speaker 2: Seriously. You have to look at the underlying data architectures and,
• 4:11
  Speaker 2: you know, the completely different legal frameworks governing them.
• 4:14
  Speaker 1: Okay, break that down for me.
• 4:15
  Speaker 2: So DMEDS was a national system. It was built for
• 4:18
  Speaker 2: Germany-specific regulatory processes. But UDAM is a pan-European framework built
• 4:24
  Speaker 2: specifically to enforce the new medical device regulation, the MDR,
• 4:29
  Speaker 2: and the in vitro diagnostic regulation, the IVDR.
• 4:32
  Speaker 1: So they're speaking two completely different languages.
• 4:34
  Speaker 2: Exactly. The data fields simply aren't a one-to-one match.
• 4:38
  Speaker 1: Meaning a piece of information that UDAM demands might not
• 4:41
  Speaker 1: have even existed in the old German system.
• 4:44
  Speaker 2: Precisely. Exactly. Add to that the fact that Udamed requires
• 4:47
  Speaker 2: a completely fresh, validated entry. Like every entry acts as
• 4:51
  Speaker 2: a formal legal declaration under this new continent-wide framework.
• 4:54
  Speaker 1: Oh, so it's a liability thing too.
• 4:56
  Speaker 2: Huge liability. The legal responsibilities attached to who enters that data,
• 5:01
  Speaker 2: how it's verified, and who audits it, they are entirely
• 5:03
  Speaker 2: different now. So you cannot assume that because you are
• 5:06
  Speaker 2: fully compliant in the German national system yesterday, you are
• 5:09
  Speaker 2: somehow compliant in the European system today.
• 5:11
  Speaker 1: Because there is no easy button.
• 5:13
  Speaker 2: No easy button at all. You literally have to manually
• 5:16
  Speaker 2: build your footprint in this new arena from the ground up.
• 5:19
  Speaker 1: OK, so if the old data is essentially dead and
• 5:22
  Speaker 1: companies have to build this footprint from scratch, who actually
• 5:26
  Speaker 1: has to do the heavy lifting here? Like who is
• 5:28
  Speaker 1: legally obligated to log in and start typing?
• 5:31
  Speaker 2: Well, that falls entirely under the first mandatory module we
• 5:34
  Speaker 2: talked about, which is actor registration. If you are an
• 5:37
  Speaker 2: economic operator placing a product into the European market, meaning
• 5:41
  Speaker 2: you're a manufacturer, an authorized representative, an importer, or a
• 5:46
  Speaker 2: producer assembling system and procedure packs, you are legally obligated
• 5:51
  Speaker 2: to register as an actor in Udamed.
• 5:53
  Speaker 1: Wait, what about the middlemen?
• 5:55
  Speaker 2: What do you mean?
• 5:55
  Speaker 1: Like if I own a logistics company and I'm just
• 5:58
  Speaker 1: driving trucks full of scalpels across borders within the EU,
• 6:01
  Speaker 1: am I bogged down in this actor registration too?
• 6:04
  Speaker 2: Uh, no. Distributors generally do not need to register as
• 6:08
  Speaker 2: actors in UBEN.
• 6:08
  Speaker 1: Okay, lucky them.
• 6:10
  Speaker 2: Yeah, they get a pass for now. The regulatory focus
• 6:13
  Speaker 2: is really pinpointed on the entities initially putting the product
• 6:17
  Speaker 2: into the European market.
• 6:18
  Speaker 1: The ones legally responsible for the safety.
• 6:20
  Speaker 2: Exactly. Not necessarily the logistics networks moving the boxes around
• 6:24
  Speaker 2: once they're already cleared.
• 6:25
  Speaker 1: Makes sense.
• 6:26
  Speaker 2: And the ultimate goal of this entire actor registration process
• 6:29
  Speaker 2: for those operators is securing an SRN, a single registration number.
• 6:34
  Speaker 1: Ah, right. That acts as your golden ticket to the market, essentially.
• 6:38
  Speaker 2: It is the foundational EU-wide identifier. The SRN links your
• 6:43
  Speaker 2: specific organization to Every single other record you will ever
• 6:47
  Speaker 2: create in UTAM.
• 6:48
  Speaker 1: Everything ties back to it.
• 6:49
  Speaker 2: Everything. Your devices, your safety reports, your certificates, they all
• 6:53
  Speaker 2: tie back to that one number. Without an active SRN,
• 6:56
  Speaker 2: you are effectively invisible to the European market. You just
• 6:59
  Speaker 2: cannot legally function.
• 7:00
  Speaker 1: But getting that golden ticket in Germany comes with a
• 7:03
  Speaker 1: very specific bureaucratic trap, doesn't it?
• 7:05
  Speaker 2: Oh, yeah. A big one.
• 7:07
  Speaker 1: Because when you dig into the mechanics of the application process,
• 7:10
  Speaker 1: the national authority BRWMFM, They don't automatically validate every single
• 7:15
  Speaker 1: SRN application. No, they don't. So if a manufacturer submits
• 7:18
  Speaker 1: their paperwork and just waits for BRM to stamp it,
• 7:21
  Speaker 1: they might be waiting forever.
• 7:23
  Speaker 2: That is a classic bottleneck we are seeing right now. Yeah,
• 7:26
  Speaker 2: because in Germany, the validation of your registration information is
• 7:30
  Speaker 2: often done by your organization's specific regional competent surveillance authority.
• 7:34
  Speaker 1: Oh, not the central B4M office.
• 7:36
  Speaker 2: Right, not the central office. So companies are submitting applications
• 7:40
  Speaker 2: into the void, failing to coordinate with their regional authority,
• 7:43
  Speaker 2: and their entire European market access just stalls out.
• 7:48
  Speaker 1: Because they didn't know who was actually holding the stamp.
• 7:50
  Speaker 2: Exactly. It's a huge oversight.
• 7:53
  Speaker 1: Okay, let's escalate the complexity here a bit. What if
• 7:55
  Speaker 1: you don't even have a regional German authority?
• 7:58
  Speaker 2: Okay, yeah.
• 7:59
  Speaker 1: Let's say I'm a medical device maker based in Japan
• 8:01
  Speaker 1: or the United States, and I want to sell my
• 8:04
  Speaker 1: devices in Europe. Right. I can't just open a web browser,
• 8:07
  Speaker 1: log into Udamed, and set up an account like it's
• 8:09
  Speaker 1: a social media platform, right? There is a gatekeeper mechanism
• 8:13
  Speaker 1: for non-EU manufacturers.
• 8:16
  Speaker 2: There absolutely is. Non-EU manufacturers face a hard stop built
• 8:20
  Speaker 2: directly into the software.
• 8:21
  Speaker 1: Wait, it literally stops you in the system.
• 8:23
  Speaker 2: Yes. You absolutely must secure an active EU authorized representative first.
• 8:29
  Speaker 2: You cannot bypass this step.
• 8:30
  Speaker 1: Oh, wow.
• 8:31
  Speaker 2: And we aren't just talking about like a handshake agreement
• 8:34
  Speaker 2: or a signed contract sitting in a filing cabinet somewhere.
• 8:38
  Speaker 2: You have to submit a formal mandate summary document digitally
• 8:42
  Speaker 2: alongside your actor registration request.
• 8:45
  Speaker 1: How does that actually work in the system, though? Does
• 8:48
  Speaker 1: the authorized representative have to Approve my request in real time?
• 8:52
  Speaker 2: Pretty much, yeah. The authorized representative must already be registered
• 8:56
  Speaker 2: in Udamed with their own SRN.
• 8:58
  Speaker 1: Okay, so they're already in there.
• 9:00
  Speaker 2: Right. So when the non-EU manufacturer attempts to register, they
• 9:04
  Speaker 2: select that representative in the system. Udamed then initiates an
• 9:08
  Speaker 2: electronic handshake.
• 9:09
  Speaker 1: Like a digital ping.
• 9:10
  Speaker 2: Exactly. The authorized rep must log into their own portal,
• 9:15
  Speaker 2: review the mandate, and digitally accept the responsibility for your
• 9:18
  Speaker 2: products before your registration can even move to the European
• 9:21
  Speaker 2: authorities for review.
• 9:23
  Speaker 1: Wow, so you literally cannot move forward.
• 9:24
  Speaker 2: You cannot. This fundamentally changes the timeline of a global
• 9:27
  Speaker 2: product launch.
• 9:28
  Speaker 1: I can imagine.
• 9:29
  Speaker 2: Like, selecting an authorized rep used to be a step
• 9:32
  Speaker 2: you might finalize later in the commercialization process. But now...
• 9:36
  Speaker 2: It is a day one regulatory necessity. The system physically
• 9:40
  Speaker 2: blocks you from existing in Europe without it.
• 9:42
  Speaker 1: That is wild. OK, so once you have successfully navigated
• 9:46
  Speaker 1: that electronic handshake and you finally have your SRN, you
• 9:49
  Speaker 1: are allowed to register the physical products, right?
• 9:51
  Speaker 2: Yeah.
• 9:52
  Speaker 1: The pacemakers, the diagnostic kits.
• 9:53
  Speaker 2: Yes. Finally, you can register the products.
• 9:56
  Speaker 1: But when you look at the sheer volume of device
• 9:59
  Speaker 1: master data required to actually stock those digital shelves, it
• 10:02
  Speaker 1: immediately looks like a logistical nightmare for a company with
• 10:05
  Speaker 1: a massive legacy portfolio.
• 10:07
  Speaker 2: It is an absolute data mountain. I mean, the platform
• 10:10
  Speaker 2: requires incredibly specific identifiers that companies just may not have
• 10:14
  Speaker 2: perfectly organized yet.
• 10:16
  Speaker 1: Like what?
• 10:17
  Speaker 2: Take the UDIDI, the Unique Device Identification Device Identifier.
• 10:21
  Speaker 1: Okay.
• 10:21
  Speaker 2: Think of it like a global barcode combined with the
• 10:24
  Speaker 2: device's exact genetic makeup detailing its core specifications. And then
• 10:28
  Speaker 2: you have the EMDN, the European Medical Device Nomenclature. This
• 10:33
  Speaker 2: is a highly specific standardized language UDEMED uses to categorize
• 10:37
  Speaker 2: what a device actually does and how it interacts with
• 10:40
  Speaker 2: the human body.
• 10:41
  Speaker 1: So it's very rigid.
• 10:42
  Speaker 2: Extremely. If you don't speak that exact language or if
• 10:46
  Speaker 2: you input a code that doesn't perfectly match your product's function,
• 10:49
  Speaker 2: the system just rejects you.
• 10:51
  Speaker 1: I was actually thinking about this data entry process like
• 10:54
  Speaker 1: an intricate chain of dominoes.
• 10:56
  Speaker 2: Okay. How so?
• 10:57
  Speaker 1: Because Udamed is a deeply relational database. So if a
• 11:01
  Speaker 1: company's internal technical documentation says they are Acme Medical Inc.,
• 11:07
  Speaker 1: but the person typing the Udamed entry writes Acme Medical Incorporated,
• 11:11
  Speaker 1: Could that tiny inconsistency theoretically cause the entire chain to
• 11:16
  Speaker 1: fall over?
• 11:16
  Speaker 2: Oh, not theoretically. It absolutely will cause it to fall over.
• 11:19
  Speaker 1: Seriously? Just over ink versus incorporated?
• 11:21
  Speaker 2: Yes, because the database links your device data to your
• 11:25
  Speaker 2: notified body certificate data, which is inextricably linked to your
• 11:28
  Speaker 2: actor registration.
• 11:29
  Speaker 1: Everything is connected?
• 11:30
  Speaker 2: Right. So if a single character is off, the system
• 11:33
  Speaker 2: flags a mismatch. The notified body won't be able to
• 11:36
  Speaker 2: attach their safety certificate to your device, and suddenly that
• 11:39
  Speaker 2: product is grounded.
• 11:41
  Speaker 1: Unbelievable.
• 11:41
  Speaker 2: It's a zero tolerance environment for data discrepancies.
• 11:44
  Speaker 1: Which brings us to arguably the most stressful part of
• 11:47
  Speaker 1: this entire deep dive, the ticking clock.
• 11:50
  Speaker 2: Yes, the clock is ticking loudly.
• 11:53
  Speaker 1: We established that May 28, 2026 was the day this
• 11:56
  Speaker 1: went live. But there is a second, arguably more critical
• 12:00
  Speaker 1: deadline looming on November 28, 2026, right? Right. So May 28,
• 12:02
  Speaker 1: 2026 was the hard deadline for brand new devices.
• 12:08
  Speaker 2: If you were placing the very first unit of a
• 12:10
  Speaker 2: newly developed MDR or IVDR-regulated device on the market on
• 12:15
  Speaker 2: or after that date, it had to be in Udamed
• 12:17
  Speaker 2: before it hit the hospital supply room.
• 12:19
  Speaker 1: Okay, so new stuff is straightforward.
• 12:21
  Speaker 2: Exactly. The November deadline, though, deals with the millions of
• 12:24
  Speaker 2: legacy devices that were already sitting on shelves on May 27th.
• 12:28
  Speaker 1: So for existing products where a manufacturer is just continuing
• 12:31
  Speaker 1: to supply new units of the same model, they were
• 12:33
  Speaker 1: given a six-month transition period to get their records updated.
• 12:37
  Speaker 2: Yeah, that grace period ends on November 28, 2026. Walk
• 12:42
  Speaker 2: me through what that actually looks like in a corporate boardroom.
• 12:45
  Speaker 1: Because if a company has a portfolio of, say, 5,000
• 12:49
  Speaker 1: different surgical instruments and device variations, they cannot just type
• 12:54
  Speaker 1: in 5,000 perfect EMDN codes and genetic barcodes overnight.
• 12:58
  Speaker 2: No, it's impossible.
• 12:59
  Speaker 1: So how does a regulatory team triage that mountain of
• 13:02
  Speaker 1: data before November?
• 13:04
  Speaker 2: You have to execute a ruthless gap analysis. And frankly,
• 13:08
  Speaker 2: this is where utilizing specialized regulatory services in Germany, like DDREG,
• 13:13
  Speaker 2: becomes a highly strategic move.
• 13:15
  Speaker 1: Because you need outside help.
• 13:16
  Speaker 2: You really do. You cannot treat every single scalpel as
• 13:19
  Speaker 2: a five-alarm fire. A regulatory team has to sit down
• 13:22
  Speaker 2: and separate their massive portfolio into distinct buckets.
• 13:25
  Speaker 1: Okay. What do those buckets look like?
• 13:26
  Speaker 2: First, you identify what is already correctly registered or transitioned
• 13:30
  Speaker 2: during the voluntary phase. You lock those down and just
• 13:32
  Speaker 2: leave them alone.
• 13:33
  Speaker 1: Done and done.
• 13:33
  Speaker 2: Right. Second, you filter out the products that are being
• 13:36
  Speaker 2: retired or phased out of the European market entirely.
• 13:39
  Speaker 1: Oh, so don't waste hundreds of man hours inputting UDIDIs
• 13:44
  Speaker 1: for a product you were discontinuing in December anyway.
• 13:46
  Speaker 2: Exactly the point. Let it go. Then the third bucket
• 13:50
  Speaker 2: becomes your absolute priority list.
• 13:52
  Speaker 1: The critical stuff.
• 13:52
  Speaker 2: Yes. The active, high-value legacy devices that continue to generate
• 13:57
  Speaker 2: revenue and absolutely must be registered by that November 28
• 14:01
  Speaker 2: deadline to avoid a market lockout.
• 14:03
  Speaker 1: Make total sense.
• 14:04
  Speaker 2: And finally, the fourth bucket contains the entirely new products
• 14:07
  Speaker 2: in the R & D pipeline that will be registered
• 14:09
  Speaker 2: natively under the new rules.
• 14:11
  Speaker 1: So it's about being strategic, not just frantic.
• 14:14
  Speaker 2: Exactly. The goal of this triage isn't just to blindly
• 14:17
  Speaker 2: type data into Udamed to beat a clock. The goal
• 14:21
  Speaker 2: is to ensure you have one unified, controlled data set.
• 14:24
  Speaker 1: Because of the domino effect we talked about.
• 14:26
  Speaker 2: Right. If you try to rush 5,000 entries, you will
• 14:29
  Speaker 2: hit that ink versus incorporated mismatch. The Udamed entry must
• 14:33
  Speaker 2: perfectly mirror the physical product label, the internal quality management system,
• 14:37
  Speaker 2: and the technical documentation.
• 14:39
  Speaker 1: Wow. So we've established the immense pressure on the manufacturers
• 14:43
  Speaker 1: to get their data perfect. But they aren't grading their
• 14:46
  Speaker 1: own homework here.
• 14:47
  Speaker 2: No, they certainly are not.
• 14:48
  Speaker 1: That Udamed data has to match the independent audits, which
• 14:52
  Speaker 1: brings the notified bodies into the spotlight.
• 14:55
  Speaker 2: Yeah, so notified bodies are the independent auditing organizations designated
• 14:59
  Speaker 2: by European countries. Their job is to assess whether a
• 15:02
  Speaker 2: medical device actually meets the rigorous safety and performance standards
• 15:06
  Speaker 2: of the MDR or IVDR.
• 15:09
  Speaker 1: Okay.
• 15:09
  Speaker 2: And under UDEM, they have their own dedicated mandatory module
• 15:14
  Speaker 2: just for certificates.
• 15:15
  Speaker 1: Now, we are talking about standard business licenses here, right?
• 15:18
  Speaker 2: Yeah.
• 15:19
  Speaker 1: What exactly are they uploading into this system?
• 15:22
  Speaker 2: They are responsible for entering the formal conformity assessment certificates.
• 15:26
  Speaker 2: These are the heavy-duty documents that prove a device is
• 15:29
  Speaker 2: safe for human use. things like EU quality management system
• 15:32
  Speaker 2: certificates or EU-type examination certificates.
• 15:36
  Speaker 1: Got it.
• 15:36
  Speaker 2: But the critical mechanism for manufacturers to understand here is
• 15:39
  Speaker 2: that they do not upload these certificates themselves.
• 15:42
  Speaker 1: They don't?
• 15:42
  Speaker 2: No. The notified body does the actual data entry. The
• 15:46
  Speaker 2: manufacturer's only job is to ensure their underlying foundational data,
• 15:50
  Speaker 2: like that UDI barcode we discussed, is perfectly accurate.
• 15:54
  Speaker 1: Oh, I see. So the notified body can digitally attach
• 15:57
  Speaker 1: the certificate to the right product.
• 15:59
  Speaker 2: Exactly. If the manufacturer's data is messy, the notified body
• 16:03
  Speaker 2: can't make the connection.
• 16:04
  Speaker 1: But the notified bodies actually get a bit more breathing
• 16:07
  Speaker 1: room to migrate their mountains of data, though, right? Their
• 16:10
  Speaker 1: transition period to register existing certificates runs all the way
• 16:14
  Speaker 1: until May 28th, 2027.
• 16:16
  Speaker 2: Yeah, they get an extra year. And that extended timeline
• 16:19
  Speaker 2: really reflects the sheer complexity and volume of the certification
• 16:23
  Speaker 2: data they are legally responsible for migrating across the entire
• 16:26
  Speaker 2: European health care ecosystem.
• 16:27
  Speaker 1: It's massive. Okay, let's shift gears to another huge segment
• 16:30
  Speaker 1: of the market that operates slightly differently, IVDs, or in
• 16:34
  Speaker 1: vitro diagnostics.
• 16:35
  Speaker 2: Okay, yeah, let's talk IVDs.
• 16:36
  Speaker 1: We're talking about everything from simple pregnancy tests to complex
• 16:40
  Speaker 1: genetic sequencing panels and, like, hospital blood analyzers. Now, they
• 16:45
  Speaker 1: are plugging into the exact same UDEM and central database, right?
• 16:51
  Speaker 1: But they play by a different set of rules.
• 16:53
  Speaker 2: They utilize the exact same digital infrastructure, yes. But the
• 16:56
  Speaker 2: legal reality is that IVDs are regulated under the IVDR,
• 17:00
  Speaker 2: not the MDR.
• 17:01
  Speaker 1: So what does that actually mean for the data entry?
• 17:04
  Speaker 2: It means the actual data points they feed into Udamed
• 17:06
  Speaker 2: look entirely different. Think about it. A mechanical pacemaker's risk
• 17:10
  Speaker 2: profile is based on hardware failure inside the human body. Right.
• 17:14
  Speaker 2: But a COVID-19 diagnostic test's risk profile is based on
• 17:18
  Speaker 2: the public health consequences of a false negative or a
• 17:21
  Speaker 2: false positive.
• 17:21
  Speaker 1: Oh, that makes total sense.
• 17:23
  Speaker 2: Yeah. So the performance evaluation documentation, the clinical evidence, and
• 17:27
  Speaker 2: the specific risk classifications required for an IBD, they just
• 17:30
  Speaker 2: follow a completely different legal framework when being uploaded.
• 17:33
  Speaker 1: Like using the same filing cabinet, but completely different types
• 17:36
  Speaker 1: of files.
• 17:37
  Speaker 2: Exactly.
• 17:37
  Speaker 1: But there is one outlier in this entire rollout that
• 17:40
  Speaker 1: I found truly wild when I was looking at the
• 17:43
  Speaker 1: mechanics of the system. And that is clinical sponsors.
• 17:46
  Speaker 2: Oh, boy. Yeah, the sponsors. Right.
• 17:48
  Speaker 1: If you were sponsoring a clinical trial in Europe right now,
• 17:51
  Speaker 1: the regulations seem to trap you in a massive contradiction.
• 17:55
  Speaker 2: They really do?
• 17:56
  Speaker 1: Like, to use the clinical investigations module, a sponsor must
• 18:00
  Speaker 1: have an actor ID. But we established right at the
• 18:04
  Speaker 1: beginning that the clinical investigations module is still under development,
• 18:08
  Speaker 1: and it isn't mandatory yet.
• 18:09
  Speaker 2: Correct.
• 18:10
  Speaker 1: So sponsors are being told they need an ID for
• 18:12
  Speaker 1: a digital room that isn't fully built, and they aren't
• 18:14
  Speaker 1: legally required to enter yet anyway. How does a clinical
• 18:18
  Speaker 1: sponsor actually navigate this catch-22?
• 18:21
  Speaker 2: It is easily one of the most confusing aspects of
• 18:24
  Speaker 2: the current landscape, for sure. But the regulatory guidance does
• 18:27
  Speaker 2: provide a rational path forward if you separate the legal roles.
• 18:31
  Speaker 1: Okay, how so?
• 18:32
  Speaker 2: If an organization is strictly a clinical sponsor, meaning they
• 18:34
  Speaker 2: do not manufacture devices, they solely fund and manage the
• 18:37
  Speaker 2: clinical trials, they simply wait.
• 18:39
  Speaker 1: Oh, they just wait.
• 18:40
  Speaker 2: Yeah. Sponsor registration is not part of the May 2026 mandate.
• 18:45
  Speaker 1: So they can completely ignore HudaMed for now.
• 18:47
  Speaker 2: For their trial activities, yes. They just continue using the
• 18:50
  Speaker 2: national Germany-specific procedures. They continue submitting their trial applications and
• 18:55
  Speaker 2: safety reporting through the old DMEDS system.
• 18:58
  Speaker 1: So the old local hard drive survives for clinical trials.
• 19:01
  Speaker 2: Exactly, for the time being. However, the Catch-22 traps organizations
• 19:06
  Speaker 2: that play dual roles.
• 19:08
  Speaker 1: Wow.
• 19:09
  Speaker 2: If a company is both a device manufacturer and a
• 19:11
  Speaker 2: clinical sponsor, which is incredibly common, their status as a
• 19:16
  Speaker 2: manufacturer forces their hand immediately.
• 19:18
  Speaker 1: Because they can't hide behind the sponsor delay. Right.
• 19:20
  Speaker 2: They cannot use the delayed sponsor module as an excuse
• 19:24
  Speaker 2: to delay their entire corporate registration. They must register as
• 19:27
  Speaker 2: an actor right now to cover their manufacturing activities. even
• 19:31
  Speaker 2: while their specific clinical trial functionality remains in Udamed's waiting room.
• 19:35
  Speaker 1: So the database doesn't care how your company is internally structured?
• 19:39
  Speaker 2: Not at all. It demands compliance based on the distinct
• 19:42
  Speaker 2: legal hats you wear under the regulations.
• 19:44
  Speaker 1: Wow. So as we zoom out and look at this
• 19:47
  Speaker 1: massive digital migration, May 2017, 28, 2026 has come and gone.
• 19:53
  Speaker 1: The November transition deadline for legacy products is looming large.
• 19:57
  Speaker 1: For anyone navigating this, the core takeaway is that Udemand
• 20:00
  Speaker 1: is no longer some theoretical IT project debated in Brussels.
• 20:04
  Speaker 1: It is the living, breeding reality of the European market.
• 20:07
  Speaker 2: Absolutely. And surviving in this new reality requires treating regulatory
• 20:11
  Speaker 2: data as a deeply interconnected strategic asset.
• 20:15
  Speaker 1: It's not just paperwork anymore.
• 20:16
  Speaker 2: No, it's no longer a passive administrative chore where you
• 20:19
  Speaker 2: just fill out a form and shove it in a
• 20:20
  Speaker 2: filing cabinet. In a relational database, precision is everything.
• 20:24
  Speaker 1: Yeah, because of the dominoes.
• 20:26
  Speaker 2: Exactly. A single typo in an EMDN code isn't just
• 20:28
  Speaker 2: an administrative error. It is a hard barrier to market access.
• 20:32
  Speaker 1: You really have to maintain absolute control over a unified
• 20:35
  Speaker 1: regulatory data set that connects your physical shipping labels, your
• 20:39
  Speaker 1: internal quality systems, and your public Udemy records.
• 20:42
  Speaker 2: 100%.
• 20:43
  Speaker 1: Which brings me to a final thought for you to
• 20:44
  Speaker 1: mull over. Now that Udand is forcing all of this
• 20:48
  Speaker 1: previously siloed national data from Germany, France, Italy, into one hyper-connected,
• 20:55
  Speaker 1: fully transparent European database... What happens when the very first
• 21:00
  Speaker 1: major pan-European device recall happens under this new architecture? Oh, wow.
• 21:06
  Speaker 2: That's a fascinating question.
• 21:08
  Speaker 1: Right. Think about that pacemaker from the beginning of our
• 21:10
  Speaker 1: deep dive. If a subtle safety signal flashes in a
• 21:14
  Speaker 1: small clinic in Germany, it is now instantly digitally visible
• 21:18
  Speaker 1: across the entire continent in real time. Will this unprecedented
• 21:23
  Speaker 1: level of centralized high-speed transparency fundamentally change how quickly agencies
• 21:29
  Speaker 1: around the rest of the globe, like the FDA and
• 21:30
  Speaker 1: the United States, are forced to react to those same
• 21:32
  Speaker 1: SASE signals.
• 21:33
  Speaker 2: It definitely puts the pressure on.
• 21:35
  Speaker 1: Because when Europe moves at the speed of fiber optics,
• 21:36
  Speaker 1: the rest of the world won't be able to rely
• 21:38
  Speaker 1: on dial-up. Definitely something to think about as you perform
• 21:40
  Speaker 1: that gap analysis on your device portfolios. Thanks for joining
• 21:44
  Speaker 1: us on this deep dive. We'll catch you next time.