【EXPERT Q&A】How do the approval and supervision processes of medical devices ensure their safety?

June 15, 2026  Source: drugdu 30

Drugdu.com expert's response:

 

The core logic is: risk-based classification → strict pre-market review → continuous post-market surveillance, forming a full lifecycle closed loop.

I. Classification: Risk Determines Regulatory Intensity

Under the Regulation on the Supervision and Administration of Medical Devices, devices are divided into three classes:

Class I (Low Risk): Filing system, formal review only. Examples: medical cotton swabs, surgical gowns.

Class II (Moderate Risk): Registration system, reviewed and approved by provincial drug administration. Examples: blood pressure monitors, CT scanners.

Class III (High Risk): Registration system, reviewed and approved by the National Medical Products Administration (NMPA). Examples: cardiac stents, artificial joints.

Higher risk means stricter review — classification itself is the first safety filter.

II. Pre-Market Approval: Four Core Gates

Taking Class II and III as examples:

Gate 1: Product Technical Requirements & Testing

Must complete biological evaluation, electrical safety, performance testing, etc., to prove the product itself is qualified. Class III devices also require clinical trials, using real human data to verify safety and effectiveness.

Gate 2: Registration Testing

Conducted by nationally accredited independent testing institutions — not decided by the manufacturer itself.

Gate 3: Technical Review

Drug regulatory authorities organize experts to conduct a full technical review of all submitted materials, focusing on: whether risks are controllable, whether benefits outweigh risks, and whether the instructions for use provide adequate warnings.

Gate 4: Administrative Approval

Upon passing review, a registration certificate is issued. The entire process for Class III devices typically takes 1–3 years.

The essence of these four gates: independent third parties and professional experts act as gatekeepers for patients, not corporate self-regulation.

III. Post-Market Surveillance: The Safety Net Doesn't Come Off

A registration certificate is not a guarantee:

Adverse Event Monitoring: Manufacturers must report all adverse events; regulators analyze trends regularly.

Unannounced Inspections (Flying Checks): Regulators show up at factories without notice to verify compliance with Good Manufacturing Practice (GMP).

Random Sampling & Testing: Products are randomly pulled from the market for testing; non-compliant ones trigger immediate recalls.

Re-evaluation & Recall: When new risks are identified, regulators can require re-evaluation or mandate recalls and revoke registration certificates.

IV. Why This System Can Effectively Ensure Safety

Three key design principles:

Risk-based grading — not a one-size-fits-all approach; resources are concentrated on high-risk products.

Independent review + third-party testing — reviewers and testing institutions have no conflicts of interest with manufacturers.

Ongoing post-market oversight — most device incidents occur after launch; continuous monitoring is the real safety baseline.

To be honest: this system significantly reduces risk but cannot eliminate it. Approval is based on available data, and rare adverse reactions may still emerge post-market. For implantable and high-risk devices, post-operative follow-up and voluntary reporting remain the last line of defense.

"/

By editor
Share: 

your submission has already been received.

OK

Subscribe

Please enter a valid Email address!

Submit

The most relevant industry news & insight will be sent to you every two weeks.