EU Notified Body Involvement Checklist: When And How To Engage

A notified body is an independent conformity assessment organization designated by an EU member state. It checks whether certain products meet the applicable EU harmonisation legislation before the manufacturer can affix the CE marking. Not every product needs one. The decision depends on the legislation, risk class, conformity assessment module, and whether the manufacturer uses harmonised standards. This EU notified body involvement checklist explains when involvement is mandatory, what evidence to prepare, and how to keep the certificate valid.

What A Notified Body Actually Does

Notified bodies are not regulators. They are organizations notified to the European Commission and listed in NANDO. Their scope is defined in the notification. They assess conformity for specific product groups and specific Union legislation. For medical devices, Regulation (EU) 2017/745 (MDR) and Regulation (EU) 2017/746 (IVDR) set the rules. For other products, sectoral directives or regulations apply. A notified body may review a quality management system, a technical file, or both. It issues certificates that support the manufacturer's declaration of conformity. It does not replace market surveillance authorities. Under Regulation (EU) 2019/1020, authorities can still check products, request documents, and take corrective action. A certificate from a body outside its notified scope is not valid. Check NANDO before signing a contract.

When A Notified Body Must Be Involved

The trigger is legal, not commercial. Start with product classification and the applicable conformity assessment procedure. For medical devices under MDR, many Class I devices can use self-declaration, but Class Is, Im, Ir, IIa, IIb, and III usually require a notified body. For IVDs under IVDR, most devices are higher risk than under the old directive; Class A sterile devices and Classes B, C, and D generally need a notified body. For machinery, pressure equipment, PPE, and other regulated products, the relevant directive or regulation states whether a notified body is optional or mandatory. If the manufacturer applies harmonised standards that cover all essential requirements, some routes allow self-assessment. If not, or if the standard does not cover a requirement, a notified body is often required. Use the Conformity Assessment Module Selection Guide For EU CE Marki to map the legislation to the correct module. This EU notified body involvement checklist starts with that mapping.

Quick Decision Points

• Is the product within the scope of a directive or regulation that requires third-party assessment?
• Does the chosen conformity assessment module require a notified body?
• Is the manufacturer using harmonised standards for all applicable requirements?
• Is the device class or risk category one that requires notified body review?
• Does the notified body's NANDO scope cover the product and the legislation?

If any answer is yes or uncertain, document the legal basis before proceeding.

The Notified Body Involvement Checklist

Use this EU notified body involvement checklist to prepare a complete submission. First, confirm the legal route. Identify the regulation or directive, the annex, and the module. Second, confirm the notified body's scope in NANDO. Third, prepare the quality management system documentation. ISO 9001 certification can support a quality system, but it does not prove compliance with MDR or IVDR. Fourth, prepare the technical file. The EU CE Marking Technical File: A Practical Guide explains the structure. Fifth, complete clinical or performance evaluation, risk management, and post-market surveillance plans. Sixth, prepare a declaration of conformity and label samples. Seventh, plan the audit. The notified body may conduct a documentation review, a quality system audit, or both. For devices with software or data processing, include GDPR records. The GDPR Data Processing Agreement Clauses: A Practical Guide helps align contracts with Article 28 GDPR. If packaging or transport validation matters, ASTM D4169 can support test planning, but it is not a substitute for the legal conformity route. If structural materials are part of the product, ASTM A36 is a material specification, not a CE marking route. Environmental or OH&S certificates such as ISO 14001 or ISO 45001 may be useful for other purposes, but they do not replace notified body assessment.

Documents To Prepare Before You Contact A Notified Body

A complete package reduces delays. Prepare:

• Product description, intended purpose, and classification rationale.
• Applicable legislation and conformity assessment annex.
• Quality manual, procedures, and process maps.
• Risk management file, including ISO 14971 where applicable.
• Clinical evaluation or performance evaluation report.
• Test reports, including electrical safety, EMC, biocompatibility, and usability where relevant.
• Labeling, instructions for use, and translations.
• Post-market surveillance plan and periodic safety update report plan.
• Supplier and subcontractor controls.
• Declaration of conformity draft.
• GDPR records if personal data is processed.
• Previous certificates, audit reports, and corrective action records.

Keep a gap list. If a test report is missing, state the plan and timeline. Notified bodies assess the system, not promises.

Common Mistakes And How To Avoid Them

Mistake 1: Assuming ISO 9001 is enough. It is not. Mistake 2: Choosing a notified body without checking NANDO scope. Mistake 3: Treating a voluntary certificate as mandatory CE evidence. Mistake 4: Ignoring changes after certification. Under MDR and IVDR, significant changes may require a new assessment. Mistake 5: Leaving GDPR until the audit. Data protection is separate from CE marking, but it affects software, clinical data, and contracts. Mistake 6: Using a non-EU test report without a gap assessment. Mistake 7: Forgetting language requirements for instructions and labels. Mistake 8: Assuming a notified body decision is final. Market surveillance authorities can still act.

After The Certificate: Surveillance And Changes

A notified body certificate is not permanent. It usually has a validity period and conditions. The manufacturer must maintain the quality system, report serious incidents, and notify the notified body of substantial changes. Unannounced audits may occur for medical devices. The notified body can suspend, withdraw, or restrict a certificate. Keep records for the period required by the legislation. For MDR, technical documentation and certificates must be available for at least 10 years after the last device is placed on the market, or 15 years for implantable devices. For IVDR, similar retention rules apply. Review the EU notified body involvement checklist annually or when the product, process, or legislation changes. Update the technical file and the declaration of conformity before the change goes live.

Notified body involvement is a legal decision. Document the route, verify the body's scope, and keep the evidence current. A disciplined checklist reduces audit findings and protects the CE marking.