The Role of the Notified Body: What They Do, How They Work, and What to Expect

What a Notified Body actually is

A Notified Body is a private organisation — usually a testing, inspection, or certification company — that has been designated by an EU member state to assess conformity for regulated products. The designation is specific: a Notified Body is authorised to assess conformity only for specific device types and regulatory frameworks listed in its scope. When you see a four-digit number on a CE mark, that is the Notified Body's identification number.

Notified Bodies are not part of the government. They are commercial organisations that charge fees for their services. But they have regulatory authority in a specific sense: when a Notified Body issues a certificate under MDR, that certificate is the basis for CE marking and legal market access across the entire EU. A Notified Body withdrawal of a certificate — which does happen — is a serious event with direct market consequences.

Under MDR, Notified Bodies operate under significantly stricter supervision than they did under MDD. National designating authorities monitor them, and the European Commission runs joint assessments. The intent was to address the variability in Notified Body quality that was a recognised problem under the previous framework.

When you need a Notified Body

Class I devices that are non-sterile, non-measuring, and not reusable surgical instruments can follow a self-certification route — the manufacturer declares conformity without Notified Body involvement. Everything else requires a Notified Body.

Class Is (sterile), Class Im (measuring), and Class Ir (reusable surgical instruments) devices are still Class I but require a Notified Body to review the specific aspects relating to sterility, metrological function, or reuse requirements respectively. Class IIa, IIb, and III devices require full Notified Body involvement in the conformity assessment.

One detail worth knowing: if you have a Class I device with a software component that qualifies as a medical device under Rule 11, the software classification may take precedence and pull the overall device into a higher class. Check your classification carefully before assuming self-certification is available.

What a Notified Body actually reviews

For a typical Class IIa or IIb device, the Notified Body will review your Quality Management System (QMS) against Annex IX, and your technical documentation against Annex II (technical documentation) and Annex III (post-market surveillance documentation). For Class III and certain Class IIb implantable devices, the review is more intensive and includes clinical evaluation scrutiny.

The QMS review looks at whether your organisation has a functioning quality system that can reliably deliver safe and performing devices. It is not a pure documentation audit — Notified Bodies are expected to assess whether the system actually works, which means they will ask your staff questions and probe your processes.

The technical documentation review looks at whether the device meets the General Safety and Performance Requirements of Annex I, whether your clinical evidence is adequate for the intended purpose, whether your risk management is sound, and whether your post-market plans are credible. For Class III devices, the Notified Body must consult expert panels for novel devices or devices for which clinical data is sparse — this adds time and can add requirements.

What to expect from the timeline

Getting a Notified Body certificate for a new device under MDR takes longer than many manufacturers expect. A realistic estimate for a Class IIa device with solid documentation is 9–15 months from initial submission to certificate. Class IIb can be 12–18 months or longer. Class III with clinical evaluation scrutiny and potential expert panel consultation can run beyond two years.

Several factors affect this. Notified Body capacity has been constrained since MDR came into force — there were fewer Notified Bodies designated under MDR initially than there were under MDD, and the workload from the transition added to the backlog. Getting a slot for initial review can itself take months. The quality of your submission matters a lot: a complete, well-organised technical file with clear cross-referencing typically moves faster than a submission that generates rounds of questions.

Working with a Notified Body effectively

A few things that experienced regulatory teams do differently: they engage a Notified Body early, before the technical file is finished, to get a read on the Notified Body's expectations for their specific device type. Many Notified Bodies offer pre-submission meetings or preliminary reviews. This costs time and money but often saves more of both.

They treat the Notified Body as a reviewer they need to communicate clearly with, not an adversary to be managed. When the Notified Body raises a finding, the response should address the substance of the concern — not just patch the documentation. Notified Bodies can tell when a response is addressing the letter of a question while avoiding its substance, and it tends to generate more questions.

They also track their Notified Body's updated guidance and expectations. Notified Bodies publish position papers, application notes, and updates to their submission requirements. These documents tell you what the Notified Body has learned from reviewing other manufacturers' submissions — which means they often signal where the next set of scrutiny is coming from.