insulin pens (drug + delivery device)

Drug-eluting coronary stents (device + drug)

Autoinjectors with epinephrine

Companion diagnostics paired with targeted cancer therapies

These hybrid products introduce regulatory complexity as agencies must decide which component (drug, device, or biologic) has the primary mode of action (PMOA) and assign the lead review center accordingly.

Regulatory Classification of Medical Devices

Device classification impacts the regulatory pathway, clinical data requirements, and quality system obligations. Different countries use different schemes:

• FDA (USA): Class I (low risk), Class II (moderate risk), Class III (high risk). Approval pathways include 510(k), PMA, and De Novo.
• EU MDR: Class I, IIa, IIb, III based on risk and invasiveness. CE marking is mandatory after conformity assessment by a Notified Body.
• India: Class A to D under the Medical Devices Rules, 2017. Class C and D require CDSCO registration.
• Australia (TGA): Similar classification with ARTG listing and conformity assessment certification.

Software as a Medical Device (SaMD) is also regulated in many countries under separate digital health or cybersecurity frameworks, adding further complexity to compliance.

FDA Regulation of Combination Products

The US FDA regulates combination products through the Office of Combination Products (OCP). The classification is based on PMOA, which determines which FDA center (CDER, CBER, or CDRH) will lead the review.

• Single-entity combination product: Drug-device combination in a single unit (e.g., autoinjector)
• Co-packaged product: Separate components packaged together (e.g., drug + delivery system)
• Cross-labeled product: Two distinct products labeled for use together

Submission types include NDAs, ANDAs, BLAs with device components, or dual submissions requiring coordinated review between centers. Sponsors must comply with drug cGMP and device QSRs (21 CFR Part 820). A SOP that integrates GMP and QSR expectations is critical for internal harmonization.

EU MDR and Combination Products Under EMA Oversight

Under EU MDR 2017/745, devices containing medicinal substances are treated as combination products. If the drug component plays an ancillary role, the product is regulated as a device, requiring CE marking with a consultative opinion from the EMA or a national medicines agency.

Key EU MDR compliance requirements include:

• Clinical Evaluation Reports (CER)
• Technical Documentation conforming to Annex II and III
• Post-Market Surveillance and Vigilance
• UDI labeling and EUDAMED database registration

Medicinal product/device combinations regulated under EMA’s centralized procedure follow Module 3 specifications with additional information on device characteristics, risk management, and usability studies.

Quality and GMP Considerations for Devices and Combinations

Device GMPs differ from pharmaceutical GMPs. Devices follow the Quality System Regulation (QSR) in the US and ISO 13485 globally. For combination products, sponsors must implement a quality system that meets the expectations of both frameworks.

Examples of overlapping requirements include:

• Design Controls: Critical for device components and delivery systems
• Risk Management: ISO 14971 application across the product lifecycle
• Process Validation: Critical for assembly, filling, or sterilization steps
• Packaging and Labeling: Serialization, tamper-evidence, and human factor validation

Companies often use harmonized quality manuals and change control systems to manage these hybrid GMP expectations efficiently. Aligning with GMP and device standards simultaneously ensures inspection readiness.

Human Factors, Usability Engineering, and Risk Assessment

For devices and combinations that interface directly with patients, human factors testing is mandated. FDA and EMA require sponsors to demonstrate that labeling, design, and instructions minimize use errors. Key elements include:

• User interface risk analysis
• Simulated-use validation studies
• Instructions for use (IFU) usability feedback
• Human Factors Summary Reports

Human factor data must support the overall risk-benefit profile and be included in submission dossiers, especially for self-administered products like insulin pens or inhalers.

Post-Market Surveillance and Vigilance Requirements

Once approved, combination products are subject to dual reporting obligations. In the US, sponsors must comply with 21 CFR Part 803 (MDR reporting) and pharmacovigilance obligations under 21 CFR 314.80/81. In the EU, post-market surveillance follows the MDR’s vigilance system including:

• Periodic Safety Update Reports (PSUR) for devices
• Field Safety Corrective Actions (FSCA)
• Incident reporting to Notified Bodies and National Authorities

Integrating device and drug safety surveillance into a unified system allows better risk detection and response. Companies must update their safety databases and train PV teams to handle device-related adverse events.

Regulatory Strategy and Global Launch Planning

Launching a device or combination product globally requires a harmonized yet localized regulatory strategy. Steps include:

• Defining PMOA and primary classification
• Mapping regulatory requirements per region (US, EU, India, Japan, etc.)
• Designing development programs to meet both drug and device standards
• Pre-submission meetings with FDA, EMA, or CDSCO to clarify pathways

Using regulatory intelligence platforms and maintaining a centralized product regulatory file enables consistent messaging across markets. Sponsors should also prepare mock-ups, usability files, and clinical trial data for simultaneous review by multiple agencies when feasible.