Mindset XR Module 1: How is immersive technology for mental health regulated in the UK and EU?

Welcome to the Mindset Extended Reality (XR) for digital mental health programme learning resources, which include three series: medical regulation, clinical evidence and lived experience involvement. Mindset-XR is helping to catalyse the growth of immersive digital mental health solutions in the UK, through funding, tailored support and training. It is delivered by Innovate UK and the Health Innovation Network South London (HIN).

 

This series focuses on medical regulation, with key insights from Hardian Health. Across 10 modules, we provide an accessible introduction to people and companies that want to learn more about medical device regulation, with a focus on XR devices. Each module offers a high level overview of a different topic, including medical device regulation in the UK and EU, core medical device standards and overseas regulation. Each module includes additional resources to support your learning and a quiz to test your understanding.



Outline


Welcome to Module 1: Meet the Regulators. In this section, we’re focusing on medical devices regulation in the UK and European Union (EU). Topics include:


What is the purpose of regulations?


Regulation is not unique to medical devices, as many complex systems in our society are regulated. This includes the food and drink industry, medicines and health care professionals.

 

The key purpose of regulation is safety. If you were to purchase some food from a supermarket or take a tablet medication, you would expect it to have been produced in a safe and regulated way. Medical devices must equally be regulated to ensure the safety of consumers and patients.

 

The main aim of medical device regulations is to protect the public by ensuring that all devices meet the agreed standards. These standards are:

 

  • Safe
  • Effective
  • Cybersecure

 

In doing so, we can ensure a consistently high level of health and safety protection for citizens using these products, as well as the free and fair trade of the medical devices.

 

Each jurisdiction, such as the UK or the European Union (EU), have their own set of medical device regulations in law. These are overseen by their unique regulatory infrastructures. 


What is the regulatory infrastructure in the UK and EU?


UK regulatory infrastructure

UKCA marking symbol

In order to place a medical device on the market in the UK, you must meet the requirements of the regulations for that device. After this, you are awarded a certificate of conformity and the right to place that UKCA marking symbol on your device. Please note, different rules apply in Northern Ireland due to the Protocol on Ireland/Northern Ireland.

Following the Medicines and Medical Devices Act of February 2021, the UK regulatory infrastructure is covered under the following legislation:

 

1. The Medical Device Regulations (MDR) 2002

The MDR 2002 are the current regulations in the UK. These were amended from the EU medical device directives, which were enforced across the EU before 2021.

 

2. Data Protection Act 2018 (UK GDPR)

Data protection in the UK is governed by the UK GDPR, which is very similar to GDPR legislation in the EU. 

EU regulatory infrastructure

The EU regulatory infrastructure is made up of four key legalisations:

 

1. EU Medical Device Regulations (EU MDR) 

The new EU MDR formally came into force in 2017, with a transition period up to 2021.

 

2. EU GDPR regulations

Data protection is covered under the EU GDPR regulations, which came into force in 2018.

 

3. CE marking symbol

When you have been deemed to meet the requirements of the EU MDR, you are awarded a certificate of conformity and the right to use the CE marking symbol on your device.

 

4. EU Artificial Intelligence (AI) Act

The EU AI Act is a new legislation formally adopted by the European Council in May 2024, with the final act due to be published in the summer of 2024. This will come into force 20 days after publication. Specific sections of the act will be introduced as part of transitional arrangements over the following 36 months, though it is good practice to be prepared for compliance sooner. This act applies to a range of devices involving artificial intelligence, not only medical devices. It categorises devices by risk of harm on the following scale:

 


  • Unacceptable


  • High


  • Limited


  • Minimal

Please note: products and medical devices deemed unacceptable are banned.


UK regulatory authorities

The UK regulatory authorities include the following connected bodies:

 

UKCA > National Governance > Approved Bodies > Vendors

 

Let’s explore each in body more detail:

 

UKCA

Having a valid UKCA mark on your product demonstrates that you have met the requirements of The Medical Device Regulations (MDR) 2002. This allows you to place your device on the market in the UK.

 

National Governance

The Medicines and Healthcare Products Regulatory Agency (MHRA) is responsible for regulating the UK medical devices market. The MHRA also performs market surveillance of medical devices on the UK market and is able to take decisions over the marketing and supply of devices in the UK.

 

Approved Bodies 

Medical devices are classified by risk (find out more in module 3). Moderate and high risk devices are required to undergo a conformity assessment by a UK approved body. The MHRA is responsible for the designation and monitoring of UK approved bodies. Medical device manufacturers are responsible for engaging an appropriate approved body who will assess their medical device file documentation and issue a certificate of conformity. Once UKCA marking has been achieved, manufacturers are required to register on the MHRA Public Access Registration Database (PARD).

 

Expected changes to UK regulation

Following Brexit, the UK government announced that CE marked devices will continue to be accepted on the UK market until at least 2028. The UK government also recently announced proposed plans to allow international recognition of certification from certain comparable countries and regions. These include the EU, Australia, Canada and the USA. Notably the premarket 510 (k) process, from the the Food, Drug, and Cosmetic Act, was not included. It is expected that UK medical device regulations will become more in line with the EU Medical Device Regulations (MDR) by 2025.

EU regulatory authorities

The EU regulatory authorities include the following connected bodies:

 

EU Governance > National Governance > Notified Bodies > Vendors

 

Let’s explore each body in more detail:

 

EU Governance

The EU Medical Device Regulations (MDR) covers all EU member states. Any manufacturer wishing to place a medical device on the EU market must comply with these regulations. 

 

National Governance

Each EU member state has its own competent authority in charge of market surveillance and responsible for designation and monitoring of notified bodies.

 

Notified Bodies

Notified bodies are the EU equivalent to approved bodies in the UK. Competent authorities are often the Ministry of Health of the EU member state. For example, the competent authority of the Netherlands is the Ministry of Health, Welfare and Sport.

 

A notified body is an independent third party organisation approved by the competent authority to determine if a system or product meets applicable requirements and has the power to issue conformity certificates for CE marking. There is currently a well recognised backlog within both notified bodies and approved bodies. This often results in a 12 to 18 month delay in undergoing a conformity assessment.


Summary


In this module, Meet the Regulators, we introduced the purpose and infrastructure of medical device regulations in the UK and EU. After using this resource, you should have a understanding of the following:

  • Medical device regulations are in place to protect patients by ensuring the safety, effectiveness and cybersecurity of medical devices on the market.

  • In the UK, the Medicines and Healthcare Products Regulatory Agency (MHRA) is responsible for overseeing and enforcing the medical device regulations. Approved bodies carry out conformity assessments and issue UKCA certificates.

  • In the EU, each EU member state has a competent authority enforcing the EU Medical Device Regulations (MDR). These notified bodies are responsible for performing conformity assessments and issuing CE certifications.


Quiz



Regulating medical devices in the UK and EU

It’s time to test your knowledge of medical device regulation in the UK and EU!



1 / 3

Which organisation is responsible for overseeing and enforcing the Medical Device Regulations in the UK?



2 / 3

What is the key purpose of medical device regulations?



3 / 3

The EU AI Act only applies to medical devices?



Your score is

0%






Got questions, comments or feedback?Get in touch with the teamhin.mindset@nhs.net | felicity@hardianhealth.com


Meet the Regulators PowerPoint – click to download


Hardian Health logo. Hardian bold black text with blue and purple dot about the 'i'. Health in black regular text.


Image
Health Innovation Network South London


Next module – Module 2: What is a medical device?


Back to eLearning resources main menu.