Standards and regulatory requirements provide the foundation for the safety, quality and performance of medical devices. Different frameworks apply at different stages of a medical device's lifecycle – from quality and risk management to electrical safety, recurrent testing and cybersecurity.
ISO 14971 describes the internationally recognised process for risk management throughout the entire lifecycle of a medical device. Its purpose is to systematically identify potential hazards, assess risks, define appropriate risk reduction measures and monitor their effectiveness. The standard also requires continuous monitoring after devices have been placed on the market (post-market surveillance), allowing newly identified risks to be incorporated into the risk management process. It provides a key foundation for conformity assessment under the MDR.
ISO 13485 specifies the requirements for a quality management system for manufacturers and other organisations in the medical device industry. It focuses on the safe development, manufacture, installation and servicing of medical devices, as well as compliance with regulatory requirements. The standard covers documentation requirements, supplier management, traceability, process validation, corrective and preventive actions, and risk management.
IEC 60601 is the principal international series of standards for the safety and essential performance of medical electrical equipment and systems. It defines basic requirements for protection against electrical, mechanical, thermal and functional hazards. In addition to the general standard IEC 60601-1, numerous product-specific particular standards define additional requirements for specific types of equipment.
IEC 62353 describes testing procedures for medical electrical equipment after repair and during recurrent testing. Unlike IEC 60601, it is aimed at operators and service technicians and describes simplified testing procedures for practical use in hospitals and medical practices. Typical tests include protective earth, insulation and leakage current measurements, as well as functional checks. In Germany, together with the MPBetreibV, it provides the basis for regular safety inspections.
VDE 0751 describes requirements for testing the electrical safety of medical electrical equipment. It is particularly relevant to testing after repair or modification and during recurrent testing. Practical implementation is often based on IEC 62353 and VDE 0751 for electrical safety testing, while also taking the manufacturer's requirements into account.
IEC 81001-5-1 defines requirements for secure software lifecycle management for health software and connected medical devices. The standard addresses cybersecurity risks from the development stage onwards and requires measures for secure software architecture, vulnerability assessment, patch management and protection against unauthorised access. As medical systems become increasingly digital, this standard is gaining considerable importance, particularly for connected medical devices and hospital infrastructure.
Healthcare standards framework – how relevant standards and regulatory requirements work together in medical technology (AI-generated image)| Area | Relevant Standards / Regulations | Focus |
|---|---|---|
| Quality Management | ISO 13485 | Quality management systems |
| Risk Management | ISO 14971 | Product and patient safety |
| Development of Electrical Medical Devices | IEC 60601 | Electrical safety and essential performance |
| Recurrent Safety Testing | IEC 62353 | Operation, maintenance and safety inspections (STK) |
| Testing After Repair | VDE 0751 | Electrical safety testing after repair |
| Cybersecurity | IEC 81001-5-1 | Secure development of health software and connected medical devices |
| European Regulation | MDR | Placing devices on the market and conformity assessment |
| Operation of Medical Devices | MPBetreibV | Safe operation, maintenance and operators' obligations |
Together, these standards provide a comprehensive framework for the entire lifecycle of a medical device – from development and manufacture through approval to safe operation, maintenance and decommissioning. While ISO 13485 and ISO 14971 establish the organisational and risk-based foundations, IEC 60601, IEC 62353, VDE 0751 and IEC 81001 define the technical requirements. The MDR and MPBetreibV ensure that these standards are applied within a regulatory framework that supports compliance by both manufacturers and operators.
| Lifecycle Stage / Trigger | Required Check / Activity | Standard / Regulation | Scope | Responsible Party |
|---|---|---|---|---|
| Procurement | Compliance check | Medical Device Regulation (MDR) | CE marking, declaration of conformity, instructions for use, UDI, classification | Procurement / Biomedical engineering |
| Before Initial Commissioning | Functional testing and visual inspection | German Medical Devices Operator Ordinance (MPBetreibV) | Completeness, integrity, documentation, installation | Operator / Biomedical engineering |
| Initial Commissioning of Devices Requiring User Training | User training and documentation | German Medical Devices Operator Ordinance (MPBetreibV) | User training, documentation, training records | Manufacturer or designated person |
| Electrical Safety Testing After Installation or Repair | Safety testing | VDE 0751 | Protective earth, insulation resistance, leakage currents, functional testing | Service technician / Biomedical engineering |
| Recurrent Electrical Safety Testing | Recurrent testing | IEC 62353 | Electrical safety and functional testing | Qualified person |
| Safety Inspection (STK) | STK | German Medical Devices Operator Ordinance (MPBetreibV) Manufacturer's instructions |
Checking safety-related functions | Qualified person |
| Metrological Inspection (MTK) | MTK | German Medical Devices Operator Ordinance (MPBetreibV) | Checking the measurement accuracy of medical devices with a measuring function | Qualified person |
| Servicing | Inspection and preventive maintenance | Manufacturer's instructions ISO 13485 |
Checking for wear, calibration, replacement of wear parts | Biomedical engineering / Manufacturer |
| Software Update / Connected Devices | Validation and cybersecurity assessment | IEC 81001-5-1 | IT security testing, update validation, vulnerability assessment | IT / Biomedical engineering |
| After Repair | Safety and functional testing | VDE 0751 IEC 62353 |
Verification that the device is ready for safe operation | Service technician |
| Ongoing Operation | Visual checks | Manufacturer's instructions Internal work instructions |
Damage, contamination, accessories, markings | User |
| Decommissioning | Documentation and safe disposal | Medical Device Regulation (MDR) MPBetreibV |
Documentation, data deletion, disposal | Operator |
| Test / Activity | Purpose | Typical Standard / Reference |
|---|---|---|
| Incoming Goods Inspection | Checking delivery compliance | MDR |
| Visual Inspection | Identifying external damage | MPBetreibV |
| Functional Testing | Verifying functionality | Manufacturer's instructions IEC 60601 |
| Electrical Safety Testing | Protection against electric shock | IEC 62353 VDE 0751 |
| Safety Inspection (STK) | Maintaining operational safety | MPBetreibV |
| Metrological Inspection (MTK) | Ensuring measurement accuracy | MPBetreibV |
| Servicing | Maintaining availability | ISO 13485 Manufacturer |
| Calibration | Ensuring measurement accuracy | Manufacturer's procedures or accredited methods |
| Cybersecurity Testing | Protecting connected medical devices | IEC 81001-5-1 |
| Documentation Review | Demonstrating conformity | MDR ISO 13485 |
| Role | Responsibilities |
|---|---|
| Operator (Hospital / Clinic) | Ensuring compliance with the MPBetreibV, organising STK, MTK and servicing |
| Biomedical Engineering | Performing or organising technical testing, documentation and equipment management |
| User | Visual inspection before use, use in accordance with the intended purpose, reporting defects |
| Manufacturer / Service Provider | Servicing, repairs, software updates and specialised testing |
| Quality Management | Monitoring processes for compliance with applicable standards, preparing for audits and document control |
Welche Mess- und Prüflösung passt zu Ihren Prüfaufgaben?
Fordern Sie über das Formular Ihren persönlichen Rückruf an. Wir melden uns zeitnah und unverbindlich bei Ihnen.