The UK regulatory landscape in 2026 — what is actually happening

Post-Brexit UK medical device regulation has been a moving target. The UK MDR 2002 — based on the old EU Directives — has been amended multiple times, CE mark acceptance has been extended repeatedly, and the promised "new UK framework" has been delayed. In July 2025, the MHRA published its response to the consultation on routes to market, setting out a clear policy direction. Here is where things stand as of early 2026:

Northern Ireland exception: Northern Ireland follows EU MDR and IVDR under the Windsor Framework. CE marking is mandatory for the NI market. UKCA marking is not recognised in NI. If you sell in both GB and NI, you need a dual compliance strategy — CE for NI (and optionally GB during transitional period) plus a plan for UKCA or international reliance for GB post-transition.

MHRA SaMD classification — what the UK expects

Whether software qualifies as a medical device under UK regulation follows the same general principles as EU MDR — the software must have an intended purpose that constitutes a medical purpose. MHRA guidance on qualifying SaMD as a medical device closely mirrors EU MDR MDCG 2019-11.

The AI and Digital Regulations Service for health and social care (hosted by NHS England and NHSX) provides specific guidance on whether digital health technologies qualify as medical devices in the UK, including a decision support tool. This is particularly relevant for clinical decision support software, which occupies a grey zone in both EU and UK classification.

The new UK classification rules for software (expected 2026)

The new UK framework is expected to introduce classification rules for software more aligned with EU MDR Rule 11. This could result in some SaMD that was Class I under the old UK rules being reclassified into higher classes — requiring UK Approved Body involvement for products that previously self-declared. SaMD companies should assess their devices against the expected new classification rules now, not after the legislation takes effect.

UKCA certification — the process for medical software

For SaMD that requires third-party assessment (Class IIa equivalent and above), UKCA certification requires working with a UK Approved Body — the UK equivalent of an EU Notified Body. The process follows these steps:

  1. Determine the applicable UK classification under UK MDR 2002 (or the new framework once in force)
  2. Select a UK Approved Body — BSI Group UK, DEKRA Certification UK (AB 8505), IMNB UK, Intertek, and several others are designated Approved Bodies. Check the UK AB register on gov.uk
  3. Prepare technical documentation — similar to MDD-era technical files, but with MHRA-specific requirements. Companies with existing EU MDR technical files can adapt these for UKCA, though some UK-specific differences apply
  4. Submit to the UK Approved Body for conformity assessment
  5. Register with MHRA — all manufacturers placing medical devices on the GB market must register with MHRA, regardless of device class
  6. Appoint a UK Responsible Person (UKRP) — non-UK manufacturers must appoint a UKRP, similar to an EU Authorised Representative. The UKRP must be based in Great Britain (not Northern Ireland)
Critical deadline: The deadline for updating UK Responsible Person accounts in the MHRA Device Online Registration System (DORS) was 30 March 2026. If your UKRP has not updated their DORS account, there is a risk of market suspension. Check with your UKRP immediately.

Post-market surveillance requirements in GB — new from June 2025

New post-market surveillance legislation for GB took effect on 16 June 2025. Manufacturers of all medical devices placed on the GB market — including CE-marked devices benefiting from transitional provisions — must now comply with GB vigilance and post-market surveillance requirements.

This means: maintaining a GB-specific PMS process, submitting vigilance reports to MHRA for serious incidents, managing field safety corrective actions through MHRA, and having a documented complaint handling process. Companies that were previously focusing only on EU MDR post-market obligations now have a parallel GB obligation that must be managed.

Strategy: how to handle GB and EU together

For SaMD companies selling in both the EU and GB, the current optimal strategy is:

Official sources & references