Complaint Handling and MDR Reporting: Building a Compliant Postmarket Surveillance System

Why Postmarket Surveillance Is Where Regulatory Programs Succeed or Fail

Most medical device companies invest heavily in getting to market. The 510(k), the design controls, the clinical data. But postmarket surveillance is where FDA finds out who you really are as a quality organization. Complaint handling and MDR reporting are not administrative tasks you delegate to a junior QA analyst. They are mission-critical systems that directly affect patient safety, regulatory standing, and your ability to scale.

If you are a startup founder who just cleared FDA, or a VP of Quality managing a growing product portfolio, this is the moment to build your postmarket infrastructure correctly. Here is what that actually looks like.

The Regulatory Framework You Cannot Ignore

Two primary regulations govern this space for device manufacturers operating in the US market.

• 21 CFR Part 820.198 requires manufacturers to maintain a complaint handling procedure, investigate every complaint, and determine whether the complaint is an MDR-reportable event.
• 21 CFR Part 803 governs Medical Device Reporting, establishing timelines, responsible parties, and the types of events that trigger mandatory reporting to FDA.

Under Part 803, manufacturers must report adverse events that have caused or could cause serious injury or death within 30 calendar days of becoming aware of the event. If a malfunction could cause or contribute to serious injury if it were to recur, that is also reportable. Deaths require reporting within 30 days. If you discover information that suggests an event that you did not previously report was actually reportable, you may have supplemental reporting obligations as well.

FDA also expects your complaint handling system to align with ISO 13485:2016 Section 8.2.2, which requires documented procedures for handling customer feedback and complaints throughout the product lifecycle. If you sell into the EU or Canada, this standard is not optional.

What a Compliant Complaint Handling System Actually Looks Like

There is a significant gap between companies that have a complaint SOP and companies that have a functioning complaint system. A compliant system includes the following core elements.

Intake and Triage

Every communication from a customer, distributor, clinician, or patient that alleges a deficiency in your device must be captured and evaluated. This includes phone calls, emails, social media messages, and field service reports. Your intake process must ensure that nothing slips through a channel that is not connected to your quality system. Define who is responsible for capturing complaints, what constitutes a complaint versus a general inquiry, and how complaints are logged within your EQMS or tracking system.

Investigation and Root Cause

FDA expects that you investigate complaints in a meaningful way. That means applying appropriate analytical tools, not simply documenting that the device was returned and found to be within spec. Use structured methodologies such as fishbone analysis, fault tree analysis, or 5-Why depending on event severity. Your investigation should answer whether the complaint represents an isolated occurrence or a signal of a systemic issue.

MDR Determination

This is where most companies get into trouble. The determination of whether a complaint is MDR-reportable must be documented, defensible, and made by qualified personnel. FDA guidance documents including the 2016 guidance on 'Medical Device Reporting for Manufacturers' provide worked examples of reportable versus non-reportable events. Do not rely on informal decision-making here. Build a written MDR evaluation process with clear criteria, escalation paths, and required approvals.

Timelines and Submissions

Under 21 CFR 803.50, you have 30 days from the date you become aware of an event. Do not start the clock from when you finish your investigation. FDA counts awareness from when any employee, contractor, or agent of your company first receives information suggesting a reportable event. Build your internal process with a buffer. If you are submitting eMDRs through FDA's MedWatch Plus system, confirm your account access and submission workflow before you need it urgently.

Building the Surveillance Layer Above Complaints

Complaint handling is reactive. A mature postmarket surveillance system is also proactive. FDA expects manufacturers to monitor postmarket performance data, published literature, and adverse event databases such as MAUDE to identify safety signals that may not show up in your own complaint files. For higher-risk devices, particularly those subject to PMA conditions of approval or breakthrough device commitments, FDA may expect formal postmarket surveillance studies under 21 CFR Part 822.

Build periodic postmarket review cycles into your quality calendar. Trend complaint data by product line, failure mode, and geographic market. Connect your surveillance outputs to your CAPA system so that signals drive corrective action, not just documentation.

Common Findings That Trigger FDA Action

During inspections, FDA investigators frequently cite manufacturers under 21 CFR 820.198 for failures including late MDR submissions, inadequate complaint investigations, and failure to recognize a reportable event in the first place. A Warning Letter or Form 483 observation in complaint handling is a serious signal that your quality system has gaps that reach beyond paperwork.

The most preventable of these findings is the failure to submit an MDR because the team did not recognize the event as reportable. Training your quality and regulatory personnel on MDR criteria, and building a structured triage workflow, eliminates the majority of this risk.

Ready to Build a System That Holds Up to FDA Scrutiny?

At ADB Consulting and CRO Inc., Andre Butler and the team work directly with medical device startups and growing companies to design and implement complaint handling and MDR reporting systems that are built for both compliance and operational efficiency. Whether you are standing up your quality system for the first time or cleaning up findings from a recent inspection, we bring the regulatory depth and practical experience to get it done right.

Book a free discovery call today at adbccro.com and let us assess where your postmarket surveillance program stands and what it will take to make it inspection-ready.