Post-Market Surveillance and PMCF: A Complete Guide for EU MDR
Executive Summary Under EU MDR 2017/745, post-market surveillance and Post-Market Clinical Follow-Up are not supplementary [...]
Executive Summary
Under EU MDR 2017/745, post-market surveillance and Post-Market Clinical Follow-Up are not supplementary activities. They are core lifecycle obligations that directly determine whether a medical device can remain on the European market.
Many manufacturers understand this in principle but struggle to implement it in practice. The PMS system collects data but does not translate it into meaningful analysis. The PMCF plan exists as a document but does not generate evidence. The PSUR presents findings accurately but without the benefit-risk evaluation Notified Bodies expect. And the connections between PMS, PMCF, the Clinical Evaluation Report, and the risk management file are managed informally rather than through defined processes.
This guide covers everything manufacturers need to know about post-market surveillance and PMCF under EU MDR: what the requirements are, how the key documents connect, what Notified Bodies look for, and what an effective and defensible post-market lifecycle system looks like in practice.
Key Takeaways
- Post-market surveillance under EU MDR is a continuous active obligation, not a periodic reporting exercise
- Every device must have a Post-Market Surveillance Plan; Class IIa, IIb, and Class III devices must also have a PSUR updated at defined intervals
- PMCF is mandatory for Class III and implantable devices; for other classes, a scientific justification must be provided where it is considered unnecessary
- The PMSP, PMCF plan, PSUR, CER, and risk management file must remain consistently aligned throughout the device lifecycle
- Literature surveillance is a required component of both the PMS system and PMCF and must be conducted continuously using a structured methodology
- Post-market surveillance software that integrates literature surveillance, complaint tracking, and evidence management supports PMS implementation directly
- The most common post-market surveillance failure is treating it as a documentation exercise rather than a continuously operating evidence system
- CiteMed Evidence Cloud supports continuous literature surveillance through Living Reviews and connects PMS evidence management with clinical evaluation documentation
Table of Contents
- Direct Answer: What Are Post-Market Surveillance and PMCF Under EU MDR?
- Why It Matters: The Post-Market Lifecycle Obligation
- How It Works: PMS System, PMCF, and Key Documents Explained
- Common Mistakes: Where Post-Market Surveillance Fails
- Best Practices: Building a Defensible Post-Market System
- Comparison Table
- Checklist
- Definitions
- Expert Perspective
- FAQ
- References
- Related Resources
- Call to Action
Direct Answer: What Are Post-Market Surveillance and PMCF Under EU MDR?
Post-market surveillance (PMS) is the systematic process of collecting, recording, and analysing data on the quality, performance, and safety of a medical device after it has been placed on the market. Under EU MDR Article 83, manufacturers must establish, document, implement, and maintain a PMS system proportionate to the device’s risk class and type.
Post-Market Clinical Follow-Up (PMCF) is a specific component of the broader PMS framework. It is the structured process through which manufacturers proactively collect clinical data on their device after market entry. Under Annex XIV Part B, PMCF activities must be defined in a PMCF plan, executed, and their findings documented in a PMCF evaluation report that feeds directly into the Clinical Evaluation Report.
PMS is the broader system. PMCF is one of the clinical data generation activities within it. Both are continuous obligations that do not end when a device receives CE marking.
Why It Matters: The Post-Market Lifecycle Obligation
The shift from the Medical Device Directive to EU MDR fundamentally changed what post-market obligations mean in practice. Under the MDD, post-market surveillance was primarily a reactive process focused on complaint handling and vigilance reporting. Under EU MDR, it is an active, continuous, and proactive obligation that connects directly to clinical evaluation, risk management, and Notified Body oversight.
This matters because the consequences of inadequate post-market surveillance are not just regulatory findings. They are the risk of missing safety signals, failing to detect emerging risks, and making benefit-risk conclusions based on outdated evidence. For Class IIb and Class III devices in particular, Notified Bodies assess post-market surveillance with significant rigour during annual or biennial surveillance audits.
Manufacturers who treat PMS as a documentation exercise rather than a continuously operating evidence system consistently face the same problems: PSURs that cannot be supported by the data they are supposed to summarise, CERs that are inconsistent with post-market findings, and PMCF plans that exist but generate no evidence. These gaps are identified during Notified Body review and require significant remediation effort to resolve.
How It Works: PMS System, PMCF, and Key Documents Explained
The Post-Market Surveillance System
Under Article 83 of EU MDR, the PMS system must proactively and systematically gather information generated during the post-market phase. The system must be capable of collecting and processing data from a range of sources including complaints and adverse event reports, vigilance data and field safety corrective actions, literature surveillance and post-market clinical data, PMCF findings, registry data, and user feedback.
The key word is system. PMS is not a collection of separate activities that are reported periodically. It is a connected evidence ecosystem where data from multiple sources is continuously collected, analysed, and translated into conclusions about the device’s ongoing safety and performance profile.
The Post-Market Surveillance Plan
The Post-Market Surveillance Plan (PMSP) is the document that defines how the PMS system operates. Under Article 84, the PMSP must define the data sources to be monitored, the collection methods and processes, analysis processes and escalation thresholds, procedures for investigating complaints and analysing adverse event trends, and methods for managing post-market reporting obligations.
The PMSP must be proportionate to the device’s risk class and actively implemented. A PMSP that lists data sources without defining collection methods, analysis processes, or escalation thresholds is incomplete. A PMSP that has been written but not implemented is a compliance failure. For a full breakdown of what a defensible PMSP must contain see our article on Post-Market Surveillance Plan requirements.
Post-Market Reporting: PMSR and PSUR
The findings of the PMS system must be periodically summarised in a formal reporting document. Which document is required depends on device classification.
Class I devices require a Post-Market Surveillance Report (PMSR) under Article 85. The PMSR provides an overview of PMS findings and is maintained as internal documentation available for competent authority inspection.
Class IIa, IIb, and Class III devices require a Periodic Safety Update Report (PSUR) under Article 86. The PSUR is a more comprehensive document that includes a benefit-risk evaluation, PMCF findings, sales volume, and an estimate of the population using the device. For Class IIa devices it must be updated at least every two years. For Class IIb and Class III devices it must be updated at least annually. For many higher-risk devices, PSURs are reviewed directly by Notified Bodies.
The PSUR benefit-risk evaluation is the most commonly challenged element during Notified Body review. A PSUR that presents surveillance data accurately but does not critically analyse what that data means for the device’s ongoing benefit-risk profile will generate findings regardless of how complete the data appears. For a full breakdown of PSUR and PMSR requirements see our article on PSUR vs PMSR under EU MDR.
Post-Market Clinical Follow-Up
PMCF is the structured process through which manufacturers proactively collect clinical data on their device after market entry. It is a required component of the continuous clinical evaluation under Annex XIV and, for Class III and implantable devices, it is mandatory.
PMCF activities are defined in a PMCF plan that must address specific objectives connected to evidence gaps in the CER, the methods that will be used to address those objectives, the rationale for each method, and timelines and expected outcomes. Accepted PMCF methods include post-market clinical investigations, patient registries, epidemiological studies, literature surveillance, and user surveys.
The findings of PMCF activities are documented in a PMCF evaluation report that forms part of the CER and must be updated at least annually for Class III and implantable devices. For a full breakdown of PMCF plan requirements see our dedicated article on what a PMCF plan must contain.
Literature Surveillance as a Core PMS and PMCF Activity
Literature surveillance is both a required component of the PMS system and a recognised PMCF method. It involves the systematic and continuous monitoring of published clinical and scientific literature for new evidence relating to the device, comparable technologies, and related clinical areas.
To function effectively in a regulatory context, literature surveillance must be conducted with a structured methodology including predefined search strategies with documented databases, search terms, and inclusion and exclusion criteria; structured screening with documented exclusion rationale; critical appraisal of included publications; and PRISMA-aligned documentation. Continuous monitoring is expected for higher-risk devices rather than annual searches.
CiteMed’s Living Reviews functionality supports continuous literature surveillance by monitoring PubMed, Embase, and other databases automatically against defined search criteria and alerting teams when new matching publications are available. This eliminates the manual re-run cycle that causes literature surveillance to fall behind between PMS and PMCF update cycles.
How PMS and PMCF Connect to the CER
Post-market evidence generated through PMS and PMCF activities must feed directly into the Clinical Evaluation Report. The CER must be updated to reflect new evidence emerging from PMS, PMCF, and literature surveillance activities. Where post-market findings affect the benefit-risk conclusion, the risk management file must also be updated.
This means the CER, PSUR, PMCF evaluation report, risk management file, and PMSP must all tell a consistent and coherent story about the device’s safety and performance throughout its market life. Where these documents are developed in isolation and their conclusions are inconsistent, Notified Bodies identify the gaps during conformity assessment. For a full breakdown of the most common reasons Clinical Evaluation Reports are rejected during Notified Body review see our dedicated article on this topic.
The Post-Market Document Ecosystem
Understanding how the key post-market documents connect helps manufacturers build a system that produces consistent and aligned documentation across the full technical file.
| Document | Purpose | Feeds Into | Update Frequency |
|---|---|---|---|
| PMSP | Defines the PMS system | PMSR or PSUR | Reviewed when changes occur |
| PMCF Plan | Defines proactive clinical data collection | PMCF Evaluation Report | Reviewed when objectives or methods change |
| PMCF Evaluation Report | Documents PMCF findings | CER and PSUR | At least annually (Class III and implantables) |
| PMSR | Summarises PMS findings for Class I | Internal documentation | Updated as needed |
| PSUR | Comprehensive safety update for Class IIa, IIb, III | Notified Body | Annually (IIb, III) or biennially (IIa) |
| CER | Clinical evaluation documentation | Technical file and Notified Body | Continuously as new evidence emerges |
Common Mistakes: Where Post-Market Surveillance Fails
Treating PMS as a periodic documentation exercise
The most consistent post-market surveillance failure is approaching PMS as a periodic reporting exercise rather than a continuously operating evidence system. The PSUR is not an annual document production task. It is the output of a surveillance system that must generate and analyse data throughout the year. A PSUR assembled once a year from data that has not been actively monitored throughout the year will not accurately reflect the device’s current safety and performance profile.
PMCF plans that do not generate evidence
A PMCF plan that commits to activities but does not result in actual data collection is a compliance gap that Notified Bodies identify consistently during surveillance audits. The plan must be operationalised. Activities must be initiated, data must be collected, and findings must be documented in the PMCF evaluation report.
PSURs with data but no analysis
A PSUR that presents complaint rates, vigilance reports, and PMCF findings accurately but does not critically evaluate what those findings mean for the device’s benefit-risk profile will generate a Notified Body finding regardless of how complete the data appears. The analytical layer is not optional. It is what the PSUR is for.
Literature surveillance gaps
Literature surveillance conducted at infrequent intervals without a structured methodology fails to meet the standard expected under EU MDR for both the PMS system and PMCF. New evidence that emerges between review cycles and is not captured can affect the benefit-risk conclusion in ways that only become apparent when a Notified Body asks why the evidence was not reflected in the PSUR or CER update.
Inconsistency across the technical file
Where the PSUR, CER, PMCF evaluation report, and risk management file are developed by different teams without adequate coordination, inconsistencies in safety conclusions, benefit-risk justification, and evidence interpretation emerge. These are among the most frequently cited findings during Notified Body conformity assessment for higher-risk devices.
Confusing the PMSP and PMCF plan
The PMSP defines the full PMS system. The PMCF plan defines proactive clinical data collection activities. Combining them or treating them as interchangeable creates confusion about the distinct obligations each addresses and typically means neither is adequately fulfilled.
Best Practices: Building a Defensible Post-Market System
Build the system before you need the reports
The PMS system should be established and operational before the device reaches the market, not assembled under deadline pressure when the first PSUR is due. Data collection processes, literature surveillance workflows, complaint handling procedures, and PMCF activities should all be in place from market entry.
Connect PMCF objectives to CER evidence gaps
Every PMCF objective must be traceable to a specific evidence gap identified in the CER. Generic objectives about confirming safety and performance are not sufficient. The connection between PMCF activities and the clinical questions they are designed to answer must be explicitly documented in both the PMCF plan and the CER.
Make literature surveillance genuinely continuous
For higher-risk devices, literature surveillance should be a continuous background process rather than a scheduled annual exercise. CiteMed’s Living Reviews monitors defined databases automatically and alerts teams when new matching publications are available, eliminating the manual re-run cycle and ensuring new evidence is captured as it is published rather than at the next annual review.
Invest in the PSUR benefit-risk analysis
The PSUR benefit-risk evaluation must be a reasoned assessment of whether the available post-market evidence continues to support the device’s benefit-risk profile. It must address what complaint trends indicate about real-world safety, whether PMCF findings change the clinical evidence picture, whether new literature has identified emerging risks, and whether the state of the art has changed in ways that affect the benchmark for acceptable risk.
Align documentation across the technical file
Establish clear processes for ensuring that PMS findings feed into CER updates, that PSUR conclusions are consistent with CER conclusions, and that the SSCP reflects the current clinical evidence picture. These connections should be maintained as routine operational processes rather than addressed retrospectively before each Notified Body interaction.
Use post-market surveillance software to support continuous operations
Post-market surveillance software that integrates literature surveillance, complaint and vigilance management, and clinical evidence documentation in a single connected system makes PMSP implementation significantly more manageable than coordinating these activities across separate tools. CiteMed’s Evidence Cloud supports this integrated approach, combining continuous literature surveillance through Living Reviews with clinical evidence management and audit-ready documentation across the full post-market surveillance lifecycle.
Comparison Table: PMS vs PMCF
| Dimension | Post-Market Surveillance | Post-Market Clinical Follow-Up |
|---|---|---|
| Definition | Systematic collection and analysis of all post-market data | Proactive collection of clinical data after market entry |
| Regulatory basis | Articles 83 and 84 EU MDR | Annex XIV Part B EU MDR |
| Scope | All post-market data sources | Clinical performance and safety evidence generation |
| Plan document | Post-Market Surveillance Plan | PMCF Plan |
| Output document | PMSR (Class I) or PSUR (Class IIa, IIb, III) | PMCF Evaluation Report |
| Mandatory for all classes | Yes | Mandatory for Class III and implantables; justified for others |
| Feeds into | PSUR, CER, risk management file | CER, PSUR benefit-risk assessment |
| Literature surveillance | Required component | Recognised PMCF method |
| Notified Body review | Yes | Yes, as part of clinical evaluation review |
Checklist: Post-Market Surveillance and PMCF Readiness
PMS system:
- Post-Market Surveillance Plan is documented and defines all required elements including data sources, collection methods, analysis processes, and escalation thresholds
- Complaint monitoring and trend analysis processes are operational
- Vigilance reporting procedures are established with defined timelines
- Literature surveillance is conducted continuously using a structured methodology
- PMS findings feed into CER updates and risk management reviews on a defined timeline
PMCF:
- PMCF plan defines specific objectives connected to identified evidence gaps in the CER
- PMCF activities are being executed and generating data
- PMCF evaluation report is updated at least annually for Class III and implantable devices
- PMCF findings are reflected in CER updates and PSUR benefit-risk assessments
Reporting documents:
- PMSR or PSUR is current and updated at the required frequency for the device classification
- PSUR benefit-risk evaluation is analytically supported and addresses what post-market evidence means for the device’s safety profile
- PSUR conclusions are consistent with CER benefit-risk conclusions
- Sales volume and population exposure data are captured and current (PSUR)
Technical file alignment:
- CER reflects the latest PMS and PMCF findings
- Risk management file is consistent with current post-market evidence
- SSCP is current and consistent with CER and technical documentation (Class III and implantable Class IIb)
- PMSP and PMCF plan are distinct documents addressing their respective regulatory bases
Definitions
Post-Market Surveillance (PMS)
The systematic process of collecting, recording, and analysing data on the quality, performance, and safety of a medical device after it has been placed on the market. Required under Article 83 of EU MDR for all device classes. PMS is a continuous active obligation, not a periodic reporting exercise.
Post-Market Clinical Follow-Up (PMCF)
The structured process through which manufacturers proactively collect clinical data on their device after market entry. A required component of continuous clinical evaluation under Annex XIV Part B of EU MDR. Mandatory for Class III and implantable devices.
Post-Market Surveillance Plan (PMSP)
The document that defines the manufacturer’s PMS system, including data sources, collection methods, analysis processes, and escalation thresholds. Required under Article 84 of EU MDR for every device.
PMCF Plan
The document that defines the objectives, methods, timelines, and rationale for PMCF activities. Must address specific evidence gaps identified in the CER and be distinct from the PMSP.
PMCF Evaluation Report
The document that presents the findings and conclusions of PMCF activities. Must be updated at least annually for Class III and implantable devices and must feed into the CER and PSUR.
Periodic Safety Update Report (PSUR)
A comprehensive post-market safety document required for Class IIa, IIb, and Class III devices under Article 86 of EU MDR. Includes benefit-risk evaluation, PMCF findings, sales volume, and population exposure data. Subject to Notified Body review.
Post-Market Surveillance Report (PMSR)
A summary post-market document required for Class I devices under Article 85 of EU MDR. Maintained as internal documentation available for competent authority inspection.
Literature surveillance
The systematic and continuous monitoring of published scientific and clinical literature for new evidence relating to the device, comparable technologies, and related clinical areas. A required component of the PMS system and a recognised PMCF method under EU MDR.
Post-market surveillance software
Platforms that support the ongoing collection, analysis, and reporting of post-market data including literature surveillance, complaint trending, vigilance reporting, and PMCF monitoring. CiteMed’s Evidence Cloud is purpose-built post-market surveillance software for medical device manufacturers operating under EU MDR and IVDR.
Living Reviews
A continuous monitoring feature within CiteMed Evidence Cloud that automatically tracks defined databases against search criteria and notifies reviewers when new matching articles are published. Supports ongoing PMS and PMCF literature surveillance without manual re-runs.
Expert Perspective
The manufacturers who manage post-market surveillance most effectively under EU MDR share one characteristic: they treat it as an intelligence system, not a documentation system. The question they are continuously asking is not what do I need to document but what does the available data tell me about how this device is performing and whether anything has changed that affects its safety profile. That orientation produces PSURs where the benefit-risk analysis is genuine and well-supported, PMCF plans that are designed to answer real clinical questions, and CERs that accurately reflect the current state of the evidence. The manufacturers who struggle are the ones who collect data passively and assemble documents under deadline pressure. The output reflects the process, and Notified Bodies can tell the difference.
Frequently Asked Questions
What is the difference between post-market surveillance and PMCF?
Post-market surveillance (PMS) is the broader system for collecting and analysing all post-market data, including complaints, vigilance reports, literature, and PMCF findings. Post-Market Clinical Follow-Up (PMCF) is a specific component of the PMS framework focused on proactively collecting clinical data after market entry. PMCF is one of the activities within the broader PMS system, not a separate parallel process. The two have distinct regulatory bases, distinct plan documents, and distinct output reports, but PMCF findings feed directly into the PMS reporting cycle.
Is PMCF mandatory under EU MDR?
PMCF is mandatory for Class III and implantable devices. For other device classes, manufacturers must either conduct PMCF activities or provide a documented scientific justification for why PMCF is considered unnecessary. This justification must be well-founded and is scrutinised carefully by Notified Bodies for higher-risk devices. For a full breakdown of PMCF requirements see our article on what a PMCF plan must contain.
How often must the PSUR be updated?
Under Article 86 of EU MDR, Class IIa devices require a PSUR updated at least every two years. Class IIb and Class III devices require annual updates. These are minimum timelines. Where significant new safety data emerges, the PSUR should be reassessed regardless of the scheduled update cycle.
What data sources must the PMS system cover?
The PMS system must cover complaints and adverse event reports, vigilance data and field safety corrective actions, literature surveillance and post-market clinical data, PMCF findings, registry data where available, and user feedback. Each data source must have defined collection methods, analysis processes, and escalation thresholds documented in the Post-Market Surveillance Plan.
How does post-market surveillance connect to the CER?
Post-market surveillance findings must feed directly into CER updates. The CER must be updated to reflect new evidence from PMS, PMCF, and literature surveillance activities. Where PMS findings affect benefit-risk conclusions, the risk management file must also be updated. Inconsistency between the PSUR, CER, and risk management file is one of the most frequently cited findings during Notified Body conformity assessment. For a full breakdown see our article on reasons Clinical Evaluation Reports are rejected.
What is the PMCF evaluation report and when must it be updated?
The PMCF evaluation report documents the findings and conclusions of PMCF activities. For Class III and implantable devices, it must be updated at least annually with the findings of PMCF activities. Its findings must be reflected in CER updates and the PSUR benefit-risk assessment. A PMCF evaluation report that has not been updated within the required timeframe creates a compliance gap across the technical file.
What post-market surveillance software supports PMS and PMCF implementation?
Post-market surveillance software that supports PMS and PMCF implementation should integrate continuous literature surveillance without manual re-runs, complaint and vigilance data management, structured evidence documentation, and a complete audit trail connecting post-market findings to CER updates and the PSUR benefit-risk assessment. CiteMed’s Evidence Cloud is purpose-built for this purpose, combining Living Reviews continuous surveillance with clinical evidence management and audit-ready documentation across the full post-market surveillance lifecycle. Book a demo to see Evidence Cloud in action.
References
- EU MDR Article 83: https://meddeviceguide.com/regulations/eu-mdr/pms
- EU MDR Article 84: https://meddeviceguide.com/regulations/eu-mdr/pms
- EU MDR Article 85: https://meddeviceguide.com/regulations/eu-mdr/pms
- EU MDR Article 86: https://meddeviceguide.com/regulations/eu-mdr/pms
- EU MDR full text (Articles 83 to 86 all contained within): https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32017R0745
- EU MDR Article 61: https://advisera.com/13485academy/mdr/post-market-surveillance-system-of-the-manufacturer/
- EU MDR Annex XIV: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32017R0745
- MEDDEV 2.7/1 Revision 4: https://health.ec.europa.eu/system/files/2022-09/md_mdcg_2020_6_meddev-2.7-1_rev4_en.pdf
- PRISMA 2020 Statement: https://www.prisma-statement.org/
Related Resources
- Post-Market Surveillance Under EU MDR — Building a proactive PMS system aligned with EU MDR expectations
- PMCF Surveys Solution — Structured PMCF activities supporting ongoing clinical evidence generation
- Medical Device Vigilance — Vigilance monitoring and reporting support
- EU MDR Literature Review Services — Structured literature surveillance supporting PMS and PSUR preparation
- CER Checklist for EU MDR — A practical framework for pre-submission CER review
- Why Clinical Evaluation Reports Are Rejected — Common reasons CERs fail Notified Body review
- PSUR vs PMSR Under EU MDR — Understanding post-market surveillance reporting requirements
- PRISMA and EU MDR Literature Review — Structured literature review methodology supporting PMS literature surveillance
- EU MDR Consulting Services — Expert support for post-market surveillance strategy
- CiteMed Activation — How CiteMed gets EU MDR teams up and running in three weeks
Call to Action
If you are building or reviewing your post-market surveillance system, preparing a PMCF plan, or want support ensuring alignment across your PSUR, CER, and PMCF documentation under EU MDR, Citemeds can help. Get in touch to discuss your requirements.