What Are the Requirements for Risk Management Documentation for Overseas Registration of Medical Dressings?

For overseas registration of medical dressings, the core requirement is not simply submitting a risk analysis table, but establishing a complete risk management evidence chain based on ISO 14971 throughout the product lifecycle. Manufacturers must first determine whether the target country regulates medical dressings as medical devices and whether the product falls into Class I, Class II, or a higher risk category, as GHWP member countries, Southeast Asian, Middle Eastern, and Latin American nations each have distinct registration paths.

Executive Summary

Registration documentation should include intended use definition, hazard identification, risk estimation and evaluation, risk control measures, residual risk evaluation, and a risk management report, with cross-references to biocompatibility, sterilization validation, stability data, and quality system records. For existing NMPA, CE, or FDA registration dossiers, companies should assess which risk analysis content can be directly reused and which must be adapted to local regulations, such as MEA/MDR or ANVISA requirements. Common risks include inconsistency between risk files and design verification, absence of local authorized representative appointment, disconnect between labeling and risk control measures, and failure to integrate post-market adverse event monitoring into the risk management system. Companies should prioritize product classification and representative responsibilities in the early project phase, organize technical documentation around the risk management thread, and establish a reusable risk documentation matrix for multi-country registrations to reduce rework and deficiency risks.

Applicable Scenarios and Core Questions

Medical dressings are one of the most diverse product categories in the medical device field, with significant classification variations across countries. The same dressing may be Class II under NMPA, Class I under the EU MDD or MDR, require a manufacturing and marketing certification in Japan, or be managed as a general health product in some Southeast Asian countries. When preparing for overseas registration, the first question to answer is not 'how to write the risk management document' but 'what regulatory category does this product fall into in the target country?'

The risk management document is not an isolated document; it serves as the thread connecting product design, performance verification, clinical evaluation, sterilization validation, and post-market surveillance. Regulatory reviewers check whether the risk analysis covers the entire product life cycle, whether it affects contraindications in the labeling, and whether it matches verification data. If the risk management file is superficial, it often leads to deficiency requests or even refusal of registration.

Typical scenarios include: an existing customer wants to register the same dressing in Indonesia, Saudi Arabia, or Brazil; a company already has a NMPA registration certificate and plans to expand into GHWP member countries; or a company has CE or FDA 510(k) documentation but does not know how to convert it to the target country format. Each scenario requires companies to reconfirm the applicability of the risk management documentation according to the target country's regulations, rather than simply translating the existing documents.

The core question is how to efficiently establish a risk management documentation set that is acceptable in multiple countries within limited budget and timelines. The answer is not to create ten completely different documents, but to build a 'master template' that keeps core chapters—such as risk analysis, risk control, and residual risk evaluation—consistent, while adapting local chapters to meet each country's regulatory requirements.

Registration Decision Logic

First, determine whether the product falls under the target country's medical device regulatory scope. Definitions and boundaries differ. For example, common dressings used to cover wounds and absorb exudate are usually medical devices, but products with active ingredients, antimicrobial agents, or drug-loaded components may be classified as drugs or combination products in some countries. The decision should be based on intended use, mechanism of action, principal components, sterilization status, and manufacturer's declaration.

Second, determine the risk classification and registration pathway. Medical dressings in most GHWP member countries adopt risk-based classification rules. Non-invasive dressings that contact intact skin are typically low-risk, while products for deep wounds or absorbable materials have a higher risk classification. Classification determines whether registration requires a self-declaration or regulatory agency approval, and whether clinical evaluation or additional biocompatibility reports are needed.

Third, determine the applicant entity. For Chinese manufacturers, the application is usually submitted through a local agent or license holder in the target country. The United States, EU, Japan, and Southeast Asian countries require a local authorized representative or registrant. This requirement affects how the responsible party and post-market surveillance responsibilities are described in the risk management document. Some countries also require the authorized representative to provide quality system audit reports or GMP certificates.

Fourth, assess whether existing documentation can be reused. Companies should list their current NMPA registration files, CE technical files, FDA 510(k) files, ISO 13485 certificates, and MDSAP certificates. Compare the scope, standard versions, and validity of test reports against target country requirements. Risk control measures based on ISO 10993 or GB/T 16886 series standards are generally acceptable in most countries, but it is necessary to confirm whether the target country accepts the standard version referenced.

Finally, ensure a complete closed loop among technical documentation, performance verification, risk management, clinical evaluation, labeling, local representation, and post-market maintenance. The risk management document must not only describe hazard sources and probability levels, but also explain the control methods—such as design changes or labeling warnings—and reference the corresponding verification reports. If any element is missing, the document may be considered insufficient.

For multi-country registrations in the Middle East, Latin America, and Southeast Asia, companies should establish a 'baseline risk document' and convert it to formats required by agencies such as MHRA, ANVISA, or TGA. Multi-country registration is not a collection of isolated submissions but a localized extension of the same product risk profile.

Documentation and Evidence

The risk management documentation should include at least a risk management plan, risk analysis, risk evaluation, risk control, evaluation of overall residual risk, and a risk management report. Confirm whether the documentation is structured according to ISO 14971. If the company currently only has risk materials compliant with domestic guidelines, additional chapters such as 'overall residual risk' and 'risk management review release' may need to be added.

Risk analysis should cover intended use and reasonably foreseeable misuse, and list sequences of hazard, hazardous situation, and harm. Common hazards for medical dressings include: infection due to microbial contamination, skin damage from adhesive residue, maceration due to insufficient waterproofing or breathability, release of cytotoxic or sensitizing substances, and loss of sterility due to packaging failure. These risks should be linked to design inputs and performance specifications.

Risk estimation and evaluation should provide qualitative and quantitative information. If probability levels are used, state whether the source is clinical data, literature, or expert judgment. Some reviewers require explicit risk acceptance criteria, such as 'unacceptable risks must be reduced as low as reasonably practicable.' Therefore, define acceptability criteria in the risk management plan rather than explaining them at the end of the report.

Risk control measures must have bidirectional traceability to design documentation. Each risk control measure should correspond to a design specification or manufacturing process parameter. For example, if a control is 'use a medical-grade pressure-sensitive adhesive with proven biocompatibility,' the measure should reference the ISO 10993 biological evaluation report and include the material supplier. If the measure is 'label a warning not for use on infected wounds,' the label draft must be submitted simultaneously.

Biocompatibility test reports are a critical component of the risk management file for medical dressings. Some low-class dressings may be exempt from certain tests through material analysis, but higher-risk dressings should provide cytotoxicity, sensitization, and irritation reports. Confirm that the reports are based on standards consistent with the target country's regulations, such as ISO 10993, USP, or JIS T 0993.

Sterilization validation and shelf-life data also need to be linked to the risk file. The company must demonstrate that the sterilization method does not introduce new chemical residues and that product performance does not degrade during the packaging shelf life. The risk management document should identify risks introduced by the sterilization process and reference accelerated or real-time aging reports.

For clinical evaluation, not all dressings require clinical data. However, if risk analysis reveals that certain harms are difficult to verify through non-clinical testing, or if the product uses a new material or mechanism, clinical literature, clinical experience reports, or trial data for the target population may be required. Provide a rationale for using clinical evidence in the risk file.

Information about the local agent or authorized representative is not an end-page attachment, but a prerequisite for the applicability of the risk management file. The authorized representative is usually responsible for post-market surveillance and corrective actions, so the risk management report should include a post-market data collection plan and procedures for submitting safety and performance issues to regulators.

Common Errors

• Treating the risk management document as a single risk analysis table, listing only hazards and risk levels without defining risk acceptance criteria or forming a closed-loop risk management report.
• Risk control measures that are inconsistent with actual design or labeling. For example, the risk report states 'avoid eye contact,' but the labeling does not include the corresponding warning, so the evidence chain cannot be established during review.
• Directly translating existing materials without localizing them to the target country's regulations. For example, using Chinese classification and standards without referencing target country classification rules and standard lists causes the document to be rejected.
• Ignoring the chain effects of classification changes. The same dressing may have different risk classifications in different countries, yet companies may apply high-risk validation requirements across the board, leading to excessive project timelines and costs.
• Biocompatibility, sterilization, or aging test reports are expired or based on standard versions not accepted in the target country, rendering references in the risk management file invalid.
• Not clarifying the responsibilities of the local agent or authorized representative, resulting in missing post-market surveillance documents or compliance gaps when the manufacturer assumes responsibilities directly.
• Multi-country registration relies only on translation without difference analysis, leading to repeated deficiencies and wasted time and cost.

Enterprise Preparation Checklist

• Confirm the target country's medical device definition and product classification, and document the classification rationale in the registration plan.
• Establish a risk management plan that defines risk acceptability criteria, personnel responsibilities, and review milestones.
• Review existing ISO 14971 risk management documentation and check each chapter against target country requirements.
• Develop a hazard list covering material, sterilization, packaging, labeling, intended use, and misuse scenarios.
• Map risk control measures to design specifications, manufacturing processes, test reports, and label drafts.
• Collect biocompatibility, sterilization validation, shelf-life, and packaging integrity verification reports.
• Assess whether clinical evaluation documents can be reused or need to be generated, and collect literature or clinical data if necessary.
• Appoint a local authorized representative and sign a service agreement outlining adverse event reporting and corrective action procedures.
• Develop a post-market surveillance plan that connects to periodic risk reviews in the risk management report.
• For multi-country registration, prepare a risk documentation difference matrix indicating which content is universal and which requires localization.

AIMEILI Regulatory Interpretation and Business Impact

The most common misjudgment in overseas registration of medical dressings is failing to 'review the current status of risk management documentation prior to registration.' We frequently see companies spend money on testing and even submit applications before discovering that the risk management file is completely disconnected from the clinical evaluation or labeling. In fact, the risk management document should be the first thread to build, not an annex written at the last moment.

At the project start, perform a regulatory gap analysis. Only by determining the deviations between current documents and target country requirements can you decide which tests to add and which chapters to rewrite. Some materials can be reused, such as the basic ISO 14971 risk analysis and most biocompatibility reports, which are generally transferable across countries. However, risk acceptance levels, labeling warnings, local clinical trial requirements, and the division of responsibilities with authorized representatives must be localized.

We recommend that companies retain control of the risk management documentation with their own regulatory team or an external consultancy, rather than handing it entirely to an overseas agent. Agents typically handle submission and communication only; they cannot replace the manufacturer in preparing technical documents with design substance. The same applies to certificate control. If an agent holds the certificate, subsequent changes, renewals, and corrective actions become problematic.

For multi-country registration, the best way to reduce rework and deficiency risk is to establish a reusable 'risk master template' and create country-specific versions from that template. The master template should record classification differences, standard differences, and regulatory requirement differences across countries. When a new review comment arises in one country, it can be quickly assessed for impact on other countries' documents, avoiding repeated translation and modification on a country-by-country basis.

Common Follow-up Questions

Is clinical evaluation documentation always required for overseas registration of medical dressings?

Not necessarily. Low-risk dressings can usually complete conformity assessment through biocompatibility and performance testing without a stand-alone clinical trial. However, if the product uses a new chemical composition, new structural design, or the intended use involves deep wound healing, regulators may require clinical literature or clinical data. Companies should make a judgment based on the risk analysis results and intended use, and confirm the conditions for clinical evaluation exemption with the local agent.

Can the risk management report be directly translated from NMPA registration materials?

No, it cannot be directly translated and used. NMPA submission materials may differ in format from the ISO 14971 structure, and some countries do not accept GB/T 16886 as a substitute for ISO 10993. Companies must check standard versions, risk acceptance criteria, clinical evaluation systems, and post-market regulatory requirements, and 'convert' the original materials into the language and format accepted by the target country, rather than performing literal translation.

Does the local agent need to be involved in the risk management documentation?

Yes. The local agent receives technical questions from regulators and relays them to the manufacturer. Therefore, they need to understand the key control measures and post-market surveillance plans in the risk management file. The agent also handles adverse event reporting, and if the risk management file does not define the reporting procedure, the agent cannot effectively fulfill its duties. Manufacturers should sign an agreement with the agent that includes data transfer timelines and responsibilities.

Source: Compiled from the AIMEILI registration practice database, international medical device registration knowledge base, and public regulatory information. Specific projects should be based on the latest requirements of the target country regulatory authority and the product's technical documentation.