How Do Hospitals Ensure Medical Device Compliance?

Hospital device compliance is usually described as a documentation burden, and that framing is what makes it fail. Compliance is not a set of papers that sits behind the equipment; it is a small number of questions that each have a public answer, and the paperwork exists to record which answer applies. A hospital that can answer the questions has the documentation as a by-product. One that cannot will not fix it by hiring more administrators.

Last updated: October 4, 2026

The four questions, and where each is answered

For any device in service, four questions decide its compliance position, and each is answered from a public record rather than from a certificate in a folder.

The fourth question is the one hospitals own entirely, and it is where most findings originate. The first three are lookups; the fourth is a process.

How the classification question works

The FDA assigns every device to Class I, II or III by risk, and the class determines the premarket submission the manufacturer had to make: Class I covers the lowest-risk devices under general controls, Class II adds special controls, and Class III requires premarket approval. A Class I or II device that is not exempt needs a 510(k) before it can be marketed.

Devices@FDA searches premarket notifications and approvals together, which is what makes the claim checkable: match the model in your register against the submission that names it. A device cleared for one intended use is not cleared for another, so the register should carry the intended use it was purchased for, not just the model number.

Identity, recall and the servicing boundary

The UDI System identifies devices from manufacturing through distribution to patient use, and the label identifier resolves in AccessGUDID. That is what converts a compliance file from a list of models into a list of units, and it is the difference between a recall response that takes an afternoon and one that takes a week.

Correction and removal actions are published in the FDA’s recall and early-alert database. The practical requirement is not that a facility monitors it continuously, but that the register carries a field where the status of each unit can be recorded and reviewed.

Then there is the boundary that third-party servicing crosses. The FDA’s Remanufacturing of Medical Devices guidance, finalised in May 2024, separates servicing — returning a device to the specification it was cleared with — from remanufacturing, which changes the device’s performance, safety characteristics or intended use and places the responsibilities of a manufacturer on the entity doing the work. For a hospital this decides whether a repair record says “serviced to specification X” or describes a modified device, and the two are not interchangeable at inspection.

Reusable devices add one more record. The FDA describes reprocessing as a detailed, multistep process to clean and then disinfect or sterilise a reusable device, and states that when the labelling instructions are followed completely and correctly after each use, the result is a device that can be safely used more than once. The manufacturer’s validated instructions are therefore part of the compliance file, not a training footnote.

What the common failures actually are

Three recur. Fragmented tracking, where device histories sit across spreadsheets and departmental systems so that no single record is complete. Manual certification handling, where teams re-verify the same documents repeatedly and introduce error in the process. And limited supply-chain visibility, where the origin and service history of a globally sourced device cannot be traced from the file.

All three are symptoms of the same design fault: the compliance record was assembled after the fact rather than produced by the process. Fixing it means making the register the system of record, with the four fields above, and letting the evidence accumulate.

The underlying rules — classification, premarket clearance, UDI and recall status — are set out in FDA guidelines for medical devices.

A worked example: what an audit-ready register saves

References

• FDA: Classify Your Medical Device — the three classes and the controls attached to each.
• FDA: Medical Device Databases — Devices@FDA and quarterly registration and listing.
• FDA: Unique Device Identification System (UDI System).
• FDA: Remanufacturing of Medical Devices — final guidance, May 2024.
• FDA: Reprocessing of Reusable Medical Devices.

FAQ

What does medical device compliance actually require of a hospital?

Four things, held per device: the class and the premarket record confirming the intended use, the unit’s UDI, the current recall status, and a maintenance record against a stated specification. The first three are public lookups; the fourth is the hospital’s own process.

Do we need to re-verify manufacturer certificates every year?

The volume of paper is not the objective. What matters is that the classification, UDI and recall status of each unit are current and retrievable, and that the service record names the specification the work was performed to. A register with those fields replaces most certificate re-checking.

How does third-party servicing affect compliance?

It depends which side of the FDA’s servicing-and-remanufacturing line the work fell on. Servicing returns a device to its cleared specification; remanufacturing changes its performance, safety characteristics or intended use and shifts the manufacturer’s responsibilities to whoever did the work.

What about reusable instruments?

The manufacturer’s validated reprocessing instructions belong in the compliance file. The FDA describes reprocessing as a multistep clean-then-disinfect-or-sterilise process and states that following the labelling completely and correctly after each use is what makes the device safe to use more than once.

Where should a hospital start?

With the register. Add the four fields to the asset record for the devices that carry clinical risk, and populate them from the public databases. Everything else in a compliance programme is easier once each unit has an answer to those four questions.

Part of the Medical Equipment Compliance & Quality guide.