CDSCO Medical Device Registration in India: 2026 Regulatory Guide
Navigating market entry for medical devices in India requires strict adherence to the Medical Devices Rules, 2017 (MDR 2017), administered by the Central Drugs Standard Control Organisation (CDSCO) under the Ministry of Health and Family Welfare.
Under MDR 2017, India regulates all medical devices—including in-vitro diagnostics (IVDs), standalone Medical Device Software (MDSW / SaMD), and active implantables—using a four-tier, risk-based classification system. Manufacturing, importing, distributing, or selling a medical device without the appropriate CDSCO licence or registration number violates the Drugs and Cosmetics Act, 1940, exposing businesses to customs detention, product seizures, and legal penalties.
Whether you are an Indian manufacturer, an overseas Original Equipment Manufacturer (OEM), an importer, or a regulatory manager, this guide provides a step-by-step roadmap for CDSCO compliance in 2026.
Which CDSCO Pathway Applies to My Device?
Follow this simple checklist to identify your applicable authority, forms, and technical requirements:
Confirm Product Scope: Is the product a Medical Device, IVD, or SaMD? If no, it is exempt from CDSCO MDR 2017. If yes, proceed to location check.
Determine Manufacturing Location:
Domestic (India): Check risk classification (Class A, B, C, or D).
Class A / B: Apply to the State Licensing Authority (SLA) via Form MD-3 to receive Form MD-5.
Class C / D: Apply to the Central Licensing Authority (CLA) via Form MD-7 to receive Form MD-9.
Foreign (Import): Appoint an Indian Authorised Agent (IAA).
Class A Non-Sterile / Non-Measuring: Register directly on the CDSCO portal (No formal licence required).
All Other Devices (Class A Sterile/Measuring, B, C, D): Apply via Form MD-14 to the Central Licensing Authority (CLA) to receive an Import Licence in Form MD-15.
CDSCO Regulatory Updates: 2025–2026
The Indian medical device regulatory framework undergoes continuous refinement. The table below highlights key regulatory developments affecting applications filed in 2026:
Understanding CDSCO Medical Device Classification
India categorizes medical devices and in-vitro diagnostics into four risk classes under Rule 4 of MDR 2017:
Class A (Low Risk): Tongue depressors, manual scalpels, examination lights, non-invasive items, and general surgical tools.
Class B (Low to Moderate Risk): Hypodermic needles, suction equipment, blood bags, invasive devices for short-term use, and diagnostic equipment.
Class C (Moderate to High Risk): Lung ventilators, orthopedic implants, hemodialysis systems, active implantable devices, and complex surgical equipment.
Class D (High Risk): Heart valves, coronary stents, HIV diagnostic kits, life-sustaining devices, and critical blood-testing diagnostics.
Central vs. State Licensing Authorities
State Licensing Authority (SLA): Regulates manufacturing facilities for Class A and Class B medical devices.
Central Licensing Authority (CLA): Led by the Drugs Controller General of India (DCGI) at CDSCO Headquarters (New Delhi). The CLA handles:
Manufacturing licences for Class C and Class D devices.
All import licences (Forms MD-14 / MD-15) across Class A, B, C, and D.
All clinical investigations and novel device permissions.
Class A Non-Sterile / Non-Measuring (NSNM) Exemption
Class A devices that are non-sterile and do not possess a measuring function do not require a formal manufacturing licence (Form MD-5) or import licence (Form MD-15).
Instead, manufacturers and importers complete a self-declaration registration on the CDSCO Online System to generate an automated registration number. However, the product must still satisfy standard labeling rules, quality management expectations, and post-market surveillance obligations.
Statutory Form Matrix: Applications vs. Approvals
Using incorrect forms is a common cause of administrative rejection. The table below lists the active application forms and their corresponding statutory output certificates under MDR 2017:
Critical Clarification: Form MD-14 is an application form, not a licence. Overseas manufacturers and importers receive an Import Licence in Form MD-15 once their Form MD-14 application is approved by the CLA.
Foreign Manufacturers & The Indian Authorised Agent (IAA)
An overseas manufacturer lacking a registered corporate office in India cannot submit an application directly to CDSCO.
Foreign Manufacturer (OEM)
(Holds ISO 13485, FSC, DMF)
[Executes Power of Attorney]
Indian Authorised Agent (IAA)
(Holds Indian Wholesale Drug/Device Licence)
[Applies via SUGAM Portal]
Central Licensing Authority (CDSCO - CLA)
The Indian Authorised Agent (IAA)
Under Rule 33 of MDR 2017, foreign manufacturers must appoint an Indian Authorised Agent (IAA). The IAA must be an Indian legal entity holding a valid wholesale drug licence or medical device distribution licence.
Key Responsibilities of the IAA
Legal Liability: Acts as the primary point of contact for CDSCO, customs authorities, and healthcare institutions regarding product safety, performance, and regulatory compliance.
Dossier Filing: Submits the Form MD-14 application and technical files on the SUGAM portal using its corporate digital signature.
Post-Market Surveillance (PMS): Manages adverse event reporting, product recall coordination, and field safety corrective actions (FSCAs) within India.
Licence Maintenance: Responsible for submitting periodic safety update reports (PSURs) and managing 5-year retention fee payments.
Document Requirements for Foreign Manufacturers
Power of Attorney (PoA): Formally executed and notarized/apostilled document authorizing the IAA to act on behalf of the overseas OEM.
Free Sale Certificate (FSC): Issued by the National Competent Authority of the country of origin (or recognized jurisdictions such as US FDA, EU CE under MDR, Japan PMDA, UK MHRA, Australia TGA, or Health Canada).
ISO 13485 Certificate: Valid Quality Management System certification covering the specific manufacturing site and device scope.
Device Master File (DMF): Technical dossier covering device design, material specifications, risk management, test reports, and clinical evaluation.
Plant Master File (PMF): Comprehensive description of the overseas manufacturing site layout, utilities, processes, and quality controls.
Subsequent Importer Provision
Under the Subsequent Importer framework, an Indian importer can obtain a licence to import a device that is already approved and actively imported by another company, provided it comes from the same foreign manufacturing site.
Foreign Manufacturing Site (Site X)
First-Time Importer A - Files Full MD-14 App - Receives Licence MD-15
Subsequent Importer B - Files Streamlined MD-14 App - Receives Licence MD-15
(References Approved Site X)
Key Rules for Subsequent Importers
Identical Manufacturing Site: The medical device must originate from the exact legal and physical manufacturing facility authorized under the initial Form MD-15 licence.
Streamlined Documentation: The subsequent importer submits Form MD-14 on the SUGAM portal, referencing the original licence holder's details, along with its own Power of Attorney, local distribution licence, and site authorization letters.
Independent Licence: CDSCO issues a separate, independent Form MD-15 licence to the secondary importer, allowing them to clear customs under their own corporate name.
CDSCO Registration for In-Vitro Diagnostics (IVDs)
In-vitro diagnostic devices (IVDs) follow dedicated risk rules under MDR 2017:
Class A IVD (Low Risk): Wash solutions, general specimen receptacles, diagnostic instruments.
Class B IVD (Low to Moderate Risk): Clinical chemistry tests, self-testing blood glucose meters.
Class C IVD (Moderate to High Risk): Sexually transmitted infection (STI) tests, blood glucose monitoring systems, HLA typing reagents.
Class D IVD (High Risk): Screening assays for blood donor safety (e.g., HIV, Hepatitis B/C, HTLV).
Key IVD Compliance Requirements
Performance Evaluation Reports (PER): Class B, C, and D IVD applications require independent analytical and clinical performance evaluations conducted by CDSCO-notified testing laboratories in India (e.g., NIB Noida for blood-screening kits).
Batch Release Testing: Class D IVDs require lot-by-lot verification by designated Central Medical Device Laboratories prior to commercial distribution.
Stability & Matrix Data: Reagent applications must include real-time stability studies, reconstituted stability performance, and matrix-interfering substance testing logs.
Medical Device Software & SaMD (2026 Standards)
CDSCO evaluates standalone software and mobile applications under the July 2026 Medical Device Software (MDSW) Guidance.
Key Elements of the 2026 MDSW Framework
Software Risk Classification: Classified as Class A, B, C, or D using international IMDRF framework principles, depending on the severity of the underlying healthcare condition and how critical the software's output is to clinical decision-making.
Algorithm Change Protocol (ACP): Adaptive AI/ML software models must include an ACP in their technical submission. An approved ACP defines the rules for minor algorithm adjustments, version updates, and continuous retraining, allowing those updates to be managed via simple administrative notifications rather than full re-licensing applications.
Dataset Transparency: AI-based diagnostic software applications must disclose training and validation dataset demographics, algorithm architecture, and steps taken to prevent dataset bias.
Indian Clinical Validation: Foreign software platforms trained on overseas datasets may need to submit supplementary validation studies demonstrating performance across representative Indian patient populations and clinical workflows.
Step-by-Step Registration Process
Follow this sequence to obtain a manufacturing or import licence:
Confirm Device Status: Verify that the product meets the definition of a medical device, IVD, or MDSW under Section 3(b) of the Drugs and Cosmetics Act, 1940.
Determine Risk Class: Check current CDSCO classification lists to confirm whether the product is Class A, B, C, or D.
Appoint Indian Authorised Agent (For Imports): Execute a notarized Power of Attorney establishing a legally compliant local representative.
Complete Product Testing: Obtain passing test reports or Performance Evaluation Reports (PER) from a BIS-recognized or CDSCO-notified laboratory.
Assemble Technical Dossier: Compile the Device Master File (DMF), Plant Master File (PMF), risk management file, ISO 13485 certificate, FSC, and labeling materials.
Submit Application via Portal: Upload the dossier and pay statutory fees using the SUGAM Portal (cdscoonline.gov.in) or the State portal for domestic Class A/B devices.
Manage Technical Queries: Monitor the online portal dashboard. Address any deficiency letters or technical queries promptly.
Critical Portal Rule: Applications with unresolved technical queries that sit unanswered for 90 days are automatically rejected by the portal system, forfeiting statutory application fees.
Complete On-Site Audit (Where Applicable):
Domestic Class B: Audited by a Notified Body or State Inspector.
Domestic Class C/D: Audited by CDSCO Central Inspectors.
Foreign Manufacturers: CDSCO may conduct a physical or remote audit of foreign manufacturing plants for high-risk Class C/D lines under the Foreign Manufacturers Certification framework.
Obtain Licence Grant: Receive your final approval certificate—Form MD-5, Form MD-9, or Form MD-15.
Document Checklist for CDSCO Applications
This checklist details the core documentation required for CDSCO submissions across categories:
Application Form (MD-3/7/14): Mandatory for Domestic Manufacturing, Foreign Imports, IVDs, and SaMD.
Power of Attorney (Apostilled): Mandatory for Foreign Imports, IVDs, and SaMD (Not applicable for domestic mfg).
Free Sale Certificate (FSC): Mandatory for Foreign Imports, IVDs, and SaMD (Not applicable for domestic mfg).
ISO 13485 Certificate: Mandatory across all device streams.
Device Master File (DMF): Mandatory across all device streams.
Plant Master File (PMF): Mandatory for Domestic Manufacturing, Foreign Imports, and IVDs (Optional for standalone SaMD).
Risk Management File (ISO 14971): Mandatory across all device streams.
Testing Reports / PER: Mandatory across all device streams.
Proposed Labels & IFU: Mandatory across all device streams.
Algorithm Change Protocol (ACP): Mandatory specifically for AI/ML Medical Device Software (SaMD).
CDSCO Medical Device Registration Fees (Second Schedule)
Statutory fees are set by the Second Schedule of MDR 2017. Payments must be made online via the Bharatkosh portal (bharatkosh.gov.in).
Statutory Fee Schedule (MDR 2017 - Second Schedule)
Note: Additional expenses may include laboratory testing fees charged by NABL-accredited facilities, Notified Body inspection fees, and legal charges for notarizing/apostilling overseas Power of Attorney documents.
Approval Timelines: Statutory vs. Practical
Understanding the difference between statutory review targets and real-world processing times helps set realistic market launch schedules:
Common Causes of Review Delays
Inadequate Query Responses: Submitting vague responses to CDSCO deficiency letters triggers secondary review cycles.
Lab Testing Backlogs: Testing delays at specialized laboratories for complex mechanical or chemical testing protocols.
Audit Scheduling Bottlenecks: Coordinating inspection dates for international facilities or specialized Class C/D manufacturing units.
Licence Validity & 5-Year Retention Rules
Licences issued under MDR 2017 (such as Form MD-5, MD-9, or MD-15) do not carry traditional expiry dates. Rules 29 and 37 state that CDSCO medical device licences remain valid in perpetuity, provided the licence holder submits the required retention fees every 5 years.
Licence Granted (Year 0)
[Maintain QMS & Post-Market Data]
Pay 5-Year Retention Fee
Licence Remains Active in Perpetuity
The 5-Year Retention Fee Schedule
Payment Window: Retention fees must be paid before the completion of the 5-year period, calculated from the original licence issue date.
Base Licence Date Dominance: Subsequent product endorsements added to a base licence do not reset the 5-year clock. All endorsed products follow the primary licence's retention due date.
Grace Period & Late Fees:
Import Licences (Rule 37): Offers a 90-day grace period following the due date, subject to a late penalty fee of 2% per month (or part thereof).
Manufacturing Licences (Rule 29): Offers a 180-day grace period, subject to a late penalty fee of 2% per month.
Consequence of Default: Failing to pay retention fees within the allowed grace window results in automatic licence suspension or cancellation, requiring a full re-application.
Post-Approval Compliance Obligations
Obtaining a CDSCO licence is an ongoing compliance obligation rather than a one-time approval.
Change Control Management (Sixth Schedule):
Major Changes: Structural design alterations, site relocations, changes in intended purpose, or material modifications require prior approval from CDSCO via a formal amendment application.
Minor Changes: Re-labeling adjustments, minor packaging changes, or non-critical component updates require administrative notification to CDSCO within 30 days of implementation.
Materiovigilance Programme of India (MvPi):
Serious Adverse Events (SAE): Any adverse incident occurring in India that results in death or serious health deterioration must be reported to CDSCO within 15 days.
Field Safety Corrective Actions (FSCA): Product recalls, batch withdrawals, or safety notices must be communicated to CDSCO immediately before execution.
20 Common CDSCO Registration Mistakes (And How to Avoid Them)
Conflating Form MD-14 with a Licence: Assuming that submitting Form MD-14 authorizes immediate importing before Form MD-15 is officially issued.
Using Incorrect Classification Categories: Relying on outdated classification lists instead of checking current 2026 CDSCO notifications.
Selecting the Wrong Licensing Authority: Submitting a Class C manufacturing application to a State authority instead of Central CDSCO Headquarters.
Allowing Portal Queries to Exceed 90 Days: Allowing technical query letters to sit unanswered until the portal system auto-rejects the application.
Unnotarized Power of Attorney Documents: Submitting Power of Attorney documents that lack proper notarization and apostille/consular legalization from the country of origin.
Inconsistent Device Trade Names: Listing different trade names or model numbers across the Free Sale Certificate, ISO 13485, and application forms.
Submitting Expired Free Sale Certificates: Submitting FSCs with less than 6 months of remaining validity at the time of dossier review.
Selecting Non-Compliant Testing Labs: Conducting product testing at facilities that lack specific NABL accreditation or CDSCO recognition for the target Indian Standard.
Misinterpreting Class A NSNM Rules: Assuming Class A Non-Sterile/Non-Measuring devices require a full Form MD-15 import licence instead of completing the online portal registration.
Treating Software as Exempt Healthcare Tech: Marketing diagnostic AI or clinical decision-support software without checking the 2026 Medical Device Software guidelines.
Overlooking Foreign Manufacturing Plant Audits: Unprepared overseas facilities facing inspection failures during physical CDSCO audits for high-risk Class C/D devices.
Missing the 5-Year Retention Window: Failing to track base licence issue dates, leading to licence cancellation due to unpaid retention fees.
Ignoring Subsequent Importer Opportunities: Spending months on redundant factory documentation instead of leveraging the subsequent importer pathway for an already-approved foreign site.
Omitting Performance Evaluations for IVDs: Submitting Class C or D IVD applications without attaching PER reports from recognized Indian testing laboratories.
Non-Compliant Product Labels: Printing product labels that lack the designated CDSCO licence number, IAA details, or medical device symbol formats.
Failing to Register Device Changes: Executing major manufacturing design changes without filing a Sixth Schedule amendment application.
Appointing an Unlicensed Indian Authorised Agent: Nominating an agent that lacks an active medical device wholesale distribution licence in India.
Unprepared In-House Quality Management Systems: Domestic manufacturing facilities failing initial inspector audits due to incomplete ISO 13485 quality documentation.
Submitting Incomplete Risk Management Files: Omitting risk control evaluation files that meet ISO 14971 requirements.
Delayed SAE Reporting: Failing to report serious adverse events to CDSCO within the mandatory 15-day MvPi reporting window.
Real-World Compliance Scenarios
Scenario 1: Overseas Manufacturer Importing a Class B Patient Monitor
Device Profile: Multi-parameter patient monitor (Class B).
Pathway: Import Licence via Form MD-14.
Execution Steps: The OEM appointed a licensed Indian distributor as its Indian Authorised Agent (IAA) via an apostilled Power of Attorney. The IAA compiled the Device Master File, Plant Master File, ISO 13485 certificate, and US FDA Free Sale Certificate. They submitted Form MD-14 on the SUGAM portal along with the $1,050 statutory fee.
Outcome: Following a 3-month dossier review and technical query response, CDSCO issued an Import Licence in Form MD-15.
Scenario 2: Indian Startup Launching an AI-Based Diagnostic Software (SaMD)
Device Profile: Standalone AI software analyzing chest X-rays for lung nodule screening (Class B SaMD).
Pathway: Domestic Software Registration / Manufacturing Licence via Form MD-3.
Execution Steps: The company classified its software under the July 2026 Medical Device Software Guidance. They drafted an Algorithm Change Protocol (ACP), prepared software verification/validation reports, and conducted clinical dataset validation on representative Indian patient populations. They submitted Form MD-3 to the State Licensing Authority.
Outcome: Following a review of the QMS and software technical dossier, the SLA granted a Manufacturing Licence in Form MD-5.
Scenario 3: Secondary Importer Leveraging the Subsequent Importer Framework
Device Profile: Orthopedic hip replacement system (Class C).
Pathway: Subsequent Importer Application via Form MD-14.
Execution Steps: A secondary Indian medical distributor wanted to import an orthopedic system already licensed by a primary importer from a facility in Germany. Instead of re-submitting full Plant Master Files, the secondary importer submitted Form MD-14 referencing the original manufacturer's site registration and existing approval numbers.
Outcome: CDSCO issued an independent Form MD-15 licence within 8 weeks, avoiding redundant overseas plant audits.
Frequently Asked Questions (FAQs)
Q1: Is CDSCO registration mandatory for all medical devices in India?
Yes. Under the Medical Devices Rules, 2017, all products meeting the statutory definition of a medical device, IVD, or medical software must hold a valid CDSCO licence or registration number before being manufactured, imported, or sold in India.
Q2: What is the difference between Form MD-14 and Form MD-15?
Form MD-14 is the official application submitted on the SUGAM portal to request permission to import medical devices. Form MD-15 is the actual import licence granted by CDSCO once the application is approved.
Q3: Who can act as an Indian Authorised Agent (IAA)?
An IAA must be an Indian legal entity holding an active wholesale drug or medical device distribution licence. They are appointed by an overseas manufacturer via a notarized and apostilled Power of Attorney to manage CDSCO regulatory affairs.
Q4: How long is a CDSCO medical device licence valid?
Licences issued under MDR 2017 remain valid in perpetuity, provided the licence holder pays the required 5-year retention fee before the due date.
Q5: What happens if a portal query is not answered in time?
Applications with unresolved technical queries that sit unanswered on the portal dashboard for 90 days are automatically rejected by the system, forfeiting the statutory application fee.
Q6: Do Class A Non-Sterile / Non-Measuring devices require a full licence?
No. Class A NSNM devices are exempt from formal licensing. Importers and domestic manufacturers complete an online self-declaration registration to obtain an automated registration number.
Q7: Can a foreign company apply directly to CDSCO without a local representative?
No. Overseas manufacturers must appoint a qualified Indian Authorised Agent (IAA) based in India to submit applications and manage regulatory liabilities.
Q8: What is a Device Master File (DMF)?
A DMF is a comprehensive technical file that describes a device's design, intended use, material specifications, risk analysis, testing data, shelf life, and clinical evidence.
Q9: How are AI-based medical software products regulated?
Medical Device Software (MDSW) is regulated under CDSCO's 2026 software guidance. Software that performs a medical diagnostic or therapeutic function is assigned a risk class (Class A–D) and requires technical validation, cybersecurity testing, and an approved Algorithm Change Protocol.
Q10: What is the penalty for selling unlicensed medical devices in India?
Under the Drugs and Cosmetics Act, 1940, manufacturing or importing regulated medical devices without a licence can lead to product seizures, severe financial penalties, and imprisonment.
Expert Regulatory Assistance
Navigating CDSCO compliance under the Medical Devices Rules, 2017 requires precise device classification, robust technical dossier preparation, and active portal query management.
Need guidance on your CDSCO market entry strategy?
Our regulatory advisory group assists Indian manufacturers, foreign OEMs, and importers with risk classification reviews, Indian Authorised Agent (IAA) representation, technical file preparation (DMF/PMF), and complete SUGAM portal filing management.
To discuss your product's compliance pathway, contact our regulatory affairs team to schedule a preliminary dossier review.
Comments
Post a Comment