Conformity Assessment Module Selection for EU CE Marking: A Practical Guide

EU product rules rarely say 'pick any module.' They set a menu. The menu comes from Decision No 768/2008/EC, and the applicable directive or regulation tells you which items are available for your product. Effective conformity assessment module selection is therefore a legal reading exercise first and an engineering exercise second.

What Conformity Assessment Module Selection Means

Conformity assessment is the process that demonstrates a product meets applicable EU requirements before it is placed on the market. The module is the prescribed procedure: who tests, who inspects, who audits, and what evidence must be kept. It describes the manufacturer's decision to use one or more modules permitted by the relevant EU legislation. It is not a free choice. A directive or regulation may offer only Module A, or it may offer a combination such as Module B plus Module C. The Blue Guide 2022/C 247/01 explains that the module system is a common framework, not a one-size-fits-all rule.

The EU Module Framework in Plain Language

Decision No 768/2008/EC sets out the modules. They range from self-declaration to full third-party certification. The applicable product law decides which modules are available. For low-risk products, Module A (internal production control) may be enough. For higher-risk products, the law may require a notified body. The module letter tells you the conformity assessment activity, not the product's risk class by itself.

Common Modules at a Glance

• Module A: internal production control. The manufacturer draws up technical documentation and issues the EU declaration of conformity. No notified body.
• Module A1: internal production control plus supervised product testing. A notified body may be involved in testing.
• Module A2: internal production control plus supervised product checks at random intervals.
• Module B: EU-type examination. A notified body examines the design and issues an EU-type examination certificate.
• Module C: conformity to type based on internal production control. Follows Module B.
• Module D: conformity to type based on quality assurance of the production process. A notified body audits the production quality system.
• Module E: conformity to type based on product quality assurance. A notified body audits final product inspection and testing.
• Module F: conformity to type based on product verification. A notified body verifies conformity to the approved type.
• Module G: conformity based on unit verification. A notified body verifies each unit.
• Module H: conformity based on full quality assurance. A notified body audits the full quality system, including design.
• Module H1: full quality assurance plus design examination.

These modules can be combined. For example, Module B plus Module C is common for machinery, PPE, and radio equipment. Some laws use Module B plus Module D, E, or F. The exact combination is in the legal text.

How to Choose the Right Module

Start with the product legislation. Identify the directive or regulation that applies. Read the conformity assessment annex or article. It will list the modules or combinations available. Then check whether the product is in a risk category that requires a notified body. If the law gives a choice, compare the cost, time, and technical capacity of each route. A defensible conformity assessment module selection process includes a written rationale. It should cite the legal provision, the chosen module, and the evidence the module requires.

Do not assume ISO 9001 certification is enough. ISO 9001 is a quality management system standard. It can support a Module H or Module D audit, but it does not automatically satisfy the module. The notified body must still assess the specific product requirements. For documentation discipline, see The ISO 9001 documentation requirements guide: A Practical O. If your product is a steel article, material test reports may be part of the technical file. ASTM A36 chemical composition limits and ASTM A36 tensile strength requirements are examples of evidence that can support a technical file, but they are not EU harmonised standards. Use ASTM A36 chemical composition limits: A Practical Guide fo and ASTM A36 Tensile Strength Requirements: A Practical Complian as reference points.

Documentation, Technical Files, and Data Protection

Every module requires documentation. The technical file usually includes design drawings, risk assessment, test reports, instructions, and the EU declaration of conformity. The module determines who signs what and which certificates must be attached. Record the conformity assessment module selection in the technical file. That record should state why the chosen module is legally available and how the manufacturer meets its conditions.

If a notified body, consultant, or cloud provider processes personal data during the assessment, GDPR may apply. Put a data processing agreement in place. GDPR Data Processing Agreement Clauses: A Practical Guide explains the clauses to check. For the technical file structure, see EU CE Marking Technical File: A Practical Guide. Keep the file for the period required by the applicable law; ten years after the last unit is placed on the market is common, but sector rules can differ.

Common Pitfalls and Practical Checks

One common error is choosing a module that the product law does not allow. Another is assuming a voluntary notified body certificate replaces a mandatory module. A third is mixing modules from different legal instruments. Check the following:

• Does the legal text list the module or combination you plan to use?
• Is a notified body required, and is it designated for that legislation and scope?
• Does the EU declaration of conformity cite the correct module and legal act?
• Are certificates, audit reports, and test data current and traceable?
• Is the technical file complete before CE marking is affixed?
• Does the supply chain contract allocate responsibility for the module?

Market surveillance authorities can ask for the technical file and the declaration. Regulation (EU) 2019/1020 gives them powers to check compliance. If the module is wrong, the CE marking is not valid. Revisit conformity assessment module selection whenever the product design, applicable law, or production process changes.

Key Takeaways

• The applicable EU directive or regulation defines the available modules.
• Module A is self-assessment; modules B, D, E, F, G, H, and their variants involve a notified body.
• Document the legal basis for the module and keep the evidence in the technical file.
• ISO 9001 can help, but it does not replace a required conformity assessment module.
• GDPR obligations can apply to assessment data and must be handled separately.