Not every MDR starts with the manufacturer

Medical Device Reporting, in most shorthand, is a manufacturer’s obligation: an event happens, the manufacturer has thirty days to tell FDA. That shorthand describes one reporting duty among several the rule actually creates — and skips an entire class of reporter that owes FDA a report on its own clock, independent of whatever the manufacturer eventually files.

A user facility is a defined list, not a description

21 CFR 803.3 defines device user facility by naming the categories that count: a hospital, an ambulatory surgical facility, a nursing home, an outpatient diagnostic facility, or an outpatient treatment facility. The same section draws the boundary by naming what doesn’t count: a physician’s office is explicitly excluded, and so are school nurse offices and employee health units. The obligation below attaches to the facility type, not to whether a device-related event happened somewhere care is delivered.

Two events, two different addressees

21 CFR 803.30 splits the user facility’s duty by what happened, and the two branches don’t go to the same place. A device-related death has to be reported to both FDA and the manufacturer, if the manufacturer is known, no later than ten work days after the facility becomes aware of information reasonably suggesting the device caused or contributed to it. A device-related serious injury follows a narrower path: the report goes to the manufacturer within the same ten work days, and only goes to FDA directly if the manufacturer is unknown. A death reaches FDA from the facility itself, on the facility’s own ten-day clock, whether or not the manufacturer has learned about the event yet. A serious injury, in the ordinary case, reaches FDA only after — and only through — the manufacturer’s own report.

A count FDA gets even in a quiet year

Individual event reports aren’t the only thing a user facility owes FDA. 21 CFR 803.33 requires every device user facility to file an annual report, on Form FDA 3419, identifying the facility and summarizing the individual reports it submitted that year. It is a separate filing from any single event report, on its own calendar, not triggered by any one adverse event.

A manufacturer’s thirty-day clock starts when the manufacturer becomes aware. A user facility’s ten-day clock starts when the facility becomes aware — and those are not always the same day.

The practice

A MAUDE record that traces back to a user facility reached FDA through a reporting duty that doesn’t wait on the manufacturer’s own awareness or its own thirty-day clock. For a death event specifically, the facility’s independent, ten-day obligation to FDA means the agency can have a report on file before a manufacturer’s own account of the same event arrives, or even before the manufacturer knows the event occurred. Reading MAUDE volume or timing as purely a function of manufacturer diligence overlooks the reporter sitting upstream of it — a distinction for a regulatory or quality professional to weigh against a specific device’s own file, never a conclusion this post draws for them.

MAUDE sits outside FDA Radar’s current source coverage — noted, with the reason, on what we monitor and what we don’t. The reporting duty described here runs whether or not any tool is watching it.