This guide explains how to handle inconsistencies between NMPA quality system certificates and TGA requirements when registering medical devices in Australia, covering classification, registration pathways, gap analysis, supplementary evidence, and practical preparation steps.
When a manufacturer registers a medical device in Australia, issues often arise because quality system certificates held from other jurisdictions, such as China's NMPA GMP or ISO 13485, do not fully align with the requirements of the Therapeutic Goods Administration (TGA). The core solution is: first, confirm whether the product falls within the scope of Australian medical device legislation and identify its classification (Class I, IIa, IIb, or III), then determine the applicable registration pathway (conformity assessment or declaration of conformity). If the existing quality system evidence does not cover TGA-specific requirements (e.g., sterilization validation, software lifecycle, UDI), supplementary documentation—such as MDSAP certificates, technical file gap analyses, or a quality management system description—must be provided to demonstrate equivalence.
Key Summary
When registering a medical device in Australia, manufacturers often face inconsistencies between domestic quality system certificates (e.g., ISO 13485) and TGA requirements. The core solution is: first, confirm whether the product is an Australian medical device category (such as Class I, IIa, IIb, or III), and then determine the registration pathway (conformity assessment or declaration of conformity). If the existing quality system evidence does not cover TGA-specific requirements (e.g., sterilization validation, software lifecycle, UDI), equivalence must be demonstrated through supplementary materials, such as MDSAP certificates, technical file gap analysis, and quality management system descriptions. Common risks include ignoring the TGA requirement for a New Zealand or Australian agent for overseas manufacturers, failing to submit a copy of the GMP certificate, and failing to explain system differences or provide equivalence arguments. Manufacturers should first conduct a gap analysis between TGA regulations and the existing system, prioritize the reuse of ISO 13485 or MDSAP certificates, and separately prepare special requirements such as sterilization and software. In addition, it is necessary to appoint a local Australian Sponsor and ensure the post-market surveillance system (e.g., PMS, PSUR, adverse event reporting) complies with TGA requirements. In multi-country registrations, CE and FDA documentation may be combined, but attention should be paid to TGA's unique requirements for label language (English), instructions for use content, and risk classification.
Applicable Scenarios and Core Issues
Australian medical device registration is regulated by the TGA. The TGA requires manufacturers to provide quality system evidence that matches the product classification and registration pathway. When a manufacturer holds quality system certificates—such as a domestic NMPA GMP or ISO 13485—whose scope, wording, or audit criteria differ from TGA requirements, an “inconsistency” in quality system evidence arises. Typical scenarios include: the certificate does not reflect TGA-specific clauses (e.g., sterilization validation for sterile products, software certification for active devices), the certificate's certified scope does not include the model intended for Australian registration, or the standard version held is different from that recognised by the TGA.
The core issue is: Does the TGA accept the existing certificate? Do supplementary evidence or a new audit need to be provided? The manufacturer must demonstrate the adequacy and equivalence of its quality management system rather than simply submitting a copy of a certificate.
Registration Decision Logic
Step 1: Determine whether the product falls under the TGA's definition of a medical device. Check that it is not an exempt product (e.g., certain in vitro diagnostics) and that its risk level is within the scope for which custom-made devices might be considered.
Step 2: Determine the product classification (Class I, IIa, IIb, or III). Different classifications correspond to different conformity assessment routes. For example, Class I devices may be self-declared, while Class IIa and above require third-party certification (by the TGA or a notified body).
Step 3: Assess whether an existing quality system certificate (e.g., ISO 13485:2016, MDSAP, NMPA GMP) is accepted by the TGA. The TGA generally accepts ISO 13485 and MDSAP certificates, provided they are issued by a recognised certification body and cover the device being registered.
Step 4: If the certificate is not sufficient, perform a gap analysis. For instance, the TGA has specific requirements for sterile manufacturing (such as EN ISO 11135). An ISO 13485 certificate alone may not suffice; it is necessary to supplement with sterilization process validation reports.
Step 5: Determine whether a quality management system description (QMS Description) or an audit report of the quality management system must be submitted. If the certificate is inconsistent, the manufacturer may provide an equivalence argument: list each TGA requirement and indicate evidence from the current system to show how it is met.
Step 6: Appoint a local Australian Sponsor, who will assist in submitting the registration application and be responsible for post-market surveillance.
Required Documents and Evidence
To address inconsistencies in quality system evidence, the following documents should be prepared:
- Current quality system certificates (e.g., ISO 13485, MDSAP, SFDA GMP) including the scope of certification.
- A mapping table showing how the quality management system aligns with TGA requirements, with each requirement linked to supporting evidence.
- Product technical files (including design and development documentation, risk management report, performance verification report, clinical evaluation data).
- Labels and instructions for use in English, compliant with TGA labelling guidelines.
- Authorisation documentation for the Australian agent (Sponsor) and the agency agreement.
- Post-market surveillance plan (including PMS, PSUR, adverse event reporting procedures).
- If equivalence is being demonstrated, a system gap analysis report and any corrective or compensating measures (e.g., additional internal audit records).
- For active devices, software validation documentation (e.g., IEC 62304) and cybersecurity information.
- For devices involving sterilization, measuring function, or biological materials, special-process validation reports must also be provided.
Common Errors
- Submitting a domestic GMP certificate without explaining how it differs from TGA requirements, resulting in a request for supplementary information or rejection.
- Neglecting TGA controls on changes to manufacturer address or device name, and using an expired or scope-mismatched certificate.
- Failing to provide an English version or certified translation of a quality system certificate, leading to review delays.
- Underestimating the value of MDSAP: while MDSAP already covers TGA requirements, the certificate must list the manufacturing site and be current.
- Confusing ISO 13485 with the TGA's GMP concepts. A TGA GMP certificate is a separate audit result and is not mutually recognised by all countries.
- Choosing the wrong registration pathway due to incorrect product classification, causing mismatched quality system requirements.
- Failing to appoint or update a Sponsor, leading to communication problems with the TGA.
Company Preparation Checklist
- Confirm product classification (check TGA classification rules).
- Evaluate existing quality system certificates: Is the issuing body recognised by the TGA? Does the scope cover the product? Is it within its validity period?
- Obtain an English version or notarised translation of the current certificate.
- Prepare technical documentation (risk, performance, clinical).
- Write a gap analysis report showing how each TGA requirement is satisfied.
- Create a remediation plan (e.g., if sterilization validation is missing, commission testing).
- Engage a local Australian Sponsor, sign the agreement, and obtain TGA recognition.
- Prepare post-market surveillance system documents.
- Before submitting the application, conduct an internal audit confirming that the quality system complies with TGA regulations.
AIMEILI Insights
Manufacturers most commonly misjudge the situation by assuming that an ISO 13485 certificate can entirely replace TGA GMP audits. In reality, the TGA has independent requirements for on-site manufacturing audits, particularly for Class IIb/III devices and certain sterile products. At the early stage of a project, a regulatory gap analysis should be performed; blind registration should be avoided. ISO 13485 and MDSAP certificates are a good starting point, but localisation adjustments are needed to address TGA-specific clauses—such as the requirement for an Australian local agent, English label language, and biocompatibility expectations. Control of the certificate is critical: Australian registration is tied to the certificate. If the certificate expires or is withdrawn, the registration will become invalid. Therefore, ensure the certificate remains valid and retain all audit records. In multi-country registration, it is advisable to build the quality system around MDSAP, as it simultaneously satisfies requirements in the United States, Canada, Japan, Australia, and other countries, reducing duplication and the risk of deficiency questions. The local Sponsor is not just a registration assistant; it is the post-market responsible entity. Choosing an experienced Sponsor is essential.
Frequently Asked Questions
My ISO 13485 certificate was issued by a CNAS-accredited domestic certification body. Will the TGA accept it?
The TGA accepts ISO 13485 certificates, but requires that the issuing body be a certification body recognised by the International Accreditation Forum (IAF). CNAS is an IAF member, so acceptance is generally expected. Nevertheless, you should confirm that the certificate scope covers the product intended for Australian registration and that the certificate is in English or supplied with an accurate translation. If the certificate does not include TGA-specific requirements (e.g., special processes for sterile products), additional evidence will be needed.
Can an MDSAP certificate be used directly for Australian registration?
Yes. MDSAP incorporates Australian regulatory requirements, but you must verify that the certificate is valid and that the product being registered falls within the manufacturing site listed on the certificate. You will still need to provide information about the Australian agent (Sponsor) and the post-market surveillance plan.
What if I do not have an ISO 13485 certificate but only hold an NMPA GMP certificate?
You can still apply. However, you will need to provide an English translation of the GMP certificate and demonstrate that its clauses are equivalent to ISO 13485. The TGA does not usually accept NMPA's GMP alone; a quality management system description or a TGA on-site audit may be required, depending on the risk class. It is advisable to obtain an ISO 13485 or MDSAP certificate first to reduce uncertainty.
Implementation Recommendations
In an actual project, a company should break this issue into five tasks: regulatory assessment, document preparation, reuse of existing evidence, localisation, and post-market maintenance. It should not only be left to one department to compile documents on an ad-hoc basis. This approach helps identify data gaps earlier and aligns sales, R&D, quality, and regulatory teams on target-country requirements.
If the company plans to enter multiple markets simultaneously, it should first create a unified set of core technical documents, then add country-specific authorisations, labels, translations, forms, and local agent information. The efficiency of multi-country registration often depends more on having a unified document framework from the beginning than on submission speed in a single country.
Key action steps:
- First confirm whether the product falls within the target country's medical device regulatory scope.
- Then confirm the risk class, registration pathway, and applying entity.
- Check that technical files, quality systems, and clinical evidence support each other.
- Clarify the local Sponsor, authorised representative, and certificate control responsibilities.
- Establish mechanisms for post-market changes, renewal, and vigilance reporting.
Continue Reading
- How to Prepare Performance Verification Data for Medical Device Registration in Australia
- How to Prepare Registration Documents for Overseas Registration of IVD Products
- Can Test Reports Be Reused for Medical Device Registration in Australia?
- How to Use ISO 13485 Certificates for Medical Device Registration in Australia?
- How to Choose a Local Agent for Medical Device Registration in Australia?
- How Are Responsibilities of an Authorised Representative Defined for Medical Device Registration in Australia?
- Why Does the Medical Device Registration Cycle in Australia Get Extended?
- What Are the Common Reasons for Requesting Supplementary Information in Australian Medical Device Registration?
Content Review and Applicability
Content author: AIMEILI Regulatory Editorial Team. Professional review: AIMEILI Medical Device International Registration Project Group. Source principles: Priority is given to official regulatory authorities, international organisations, standards organisations, and published regulatory information; industry media and project experience are used only as supplementary reference.
Applicability: This article is provided for preliminary understanding, document preparation, and project planning. It does not replace the official requirements of the target country's regulator, testing conclusions, or legal advice.
Published: 2026-07-28 17:27 | Updated: 2026-07-28 17:27
Need a registration pathway assessment?
Send product type, intended use, target countries and existing certificates. AIMEILI can help evaluate registration pathway, documentation gaps and compliance risks.
Contact AIMEILI