United States: For UDI Compliance, Data Quality Is Critical

Implementation of the FDA's long-awaited unique device identification (UDI) system for medical devices has begun, and the requirements for manufacturers are significant. Device makers must build an efficient process to generate the large volume of high-quality data they'll need for compliance.


A UDI is a two-part numeric or alphanumeric code used to identify a medical device. It has a mandatory, fixed portion called the device identifier (DI), and a conditional, variable portion called the production identifier (PI). The DI shows the labeler of the device (this is usually the manufacturer) and the specific version or model. The PI holds production control data such as:

  • Lot/batch number
  • Serial number
  • Expiration date
  • Date of manufacture

Congress in 2007 passed legislation that required the FDA to establish a UDI system for all regulated medical devices, from bandages to artificial heart valves. The legislation was intended to improve patient safety by enabling the FDA, manufacturers and healthcare providers to more quickly identify devices and correct problems. In September 2013, the FDA released its long-awaited final rule on the system, which set UDI requirements in three main areas: 

Labeling – Labelers must obtain a UDI from a federally accredited agency and include it on the label and packaging of all devices, in both plain text and a machine-readable format, such as a bar code or radio-frequency identifier.  Any dates on the label must use the format YYYY-MM-DD.

Direct marking – Multi-use devices intended to be reprocessed (cleaned, sterilized, etc.) before reuse must be directly marked with a permanent UDI.

Data submission – For all devices, the labeler must submit detailed device information to the FDA's global unique device identification database (GUDID) and update it as needed. The GUDID is publicly searchable, so end users can look up product information, verify that a device isn't a counterfeit, check on recalls, etc.

Industry feedback on an earlier proposed rule led to a number of revisions in the final version.  One of the most significant is that implantable devices do not have to be directly marked. Another change is that single-use products, such as bandages, are exempt from compliance if they are distributed and stored until use in a larger package. The individual parts of convenience kits and combination products also do not need UDIs, although the kits and combination products do.

Compliance is staggered

Different classes and types of devices have different compliance deadlines, with lower risk devices―which are the majority―having more time to comply. First up were high-risk Class III devices, such as pacemakers, which generally had to meet a September 2014 deadline for labeling and GUDID submission. Only about 10% of medical devices are Class III, according to the FDA.

The next compliance deadline is September 24, 2015. Class II, I and unclassified implantable, life-sustaining and life-supporting devices (tracheal tubes, for example) must meet the labelling and GUDID requirements by this time, and all multiuse life-supporting and life-sustaining devices that are meant to be reprocessed must meet the direct marking requirement.

The labeling and GUDID submission requirements will be phased in for all devices by September 2018, and the direct marking requirement will be fully phased in by September 2020. For existing inventory that has already been labeled, the final rule allows a grace period of three years after the device's compliance deadline. Manufacturers will have to re-label any inventory that is left over when the grace period ends.

Companies that miss their deadline won't be allowed to sell their device across state lines in the U.S. They also risk damaging their reputation. 

To create a compliance process, device makers must first figure out the overall scope and timing of UDI requirements for all their devices. This may seem simple, but it can be a time-consuming task for manufacturers with a lot of products or product variations.

Device companies also need to determine who the labeler is, and who is responsible for what data. Externally, this can mean working with contract manufacturers to clearly define which entity handles UDI-related tasks. Internally, it means figuring out which department will gather specific information, how it will be stored, who will submit it to the GUDID, and who will manage it on an ongoing basis.  

The data requirements are extensive: For each UDI, labelers need to compile approximately 60 different data points. They must create labels, and they must submit device information to the GUDID in a compliant format. Submissions can be done manually using the FDA's online interface―a time-consuming and error-prone process―or by a more efficient bulk upload, using an HL7 SPL-compliant XML file.  Whenever there is a product change, such as a device upgrade, the labeler must make any needed label changes and resubmit information to the database.

Data quality is critical. Submitters have only seven days to correct mistakes, and after that, the FDA will label incorrect submissions as noncompliant. It's also important to note that GUDID submission is continual, not periodic. This means the process must be repeatable, and the data must be reliable.

Using ERP-generated information will save manufacturers from having to manually "scrub" data to ensure that it's correct. Device makers can use their ERP system to ensure data accuracy and streamline labeling, direct marking and GUDID submission. (This may require some integration work with other systems, or a master data management system.)

To simplify data submission, an ERP package can be customized to restructure device information into the HL7 SPL format and upload it to the GUDID. Another option is to run a report in ERP and then either outsource the HL7 SPL formatting/submission or use a subscription service to do it.

An ERP system can natively generate device data in a label-ready format, which can be printed on a physical label using a third-party tool. The system can also be integrated with shop floor equipment, to allow manufacturers to call up accurate UDI information when they are printing a permanent mark directly onto a device.

UDI system will evolve

The FDA has said from the beginning that the system is meant to evolve. An efficient UDI process will likely become even more important for manufacturers as UDI data finds new uses and users.

For device makers, UDIs could provide a way to generate valuable post-market performance data. They could use this information, for example, when requesting FDA approval of a new use for a device.

Adoption of UDIs by healthcare providers―which is needed to truly improve patient safety―will be a critical variable in the next few years. Although many providers have to make costly updates to their clinical and operational information systems before they can use UDIs, most recognize the potential safety and supply chain efficiency benefits.  UDI data could also help providers track device effectiveness―which is likely to be increasingly important as the healthcare industry shifts from a focus on volume to a focus on quality of care.

Providers do not have to use UDIs, with one main exception: The FDA now requires facilities such as hospitals, nursing homes and ambulatory surgery centers to include UDI information when they report on patient deaths involving a Class III device.   The Department of Health and Human Services also may require providers to report UDI data on implantable devices in the upcoming stage 3 of its meaningful use incentive program, which promotes the use of electronic health records for Medicare and Medicaid patients. In addition, some healthcare industry groups want to see UDI information incorporated into claims data.

UDI implementation in the U.S. will also help pave the way for a global system.  Although the FDA is the furthest along, regulators in the European Union and countries such as Brazil, Canada, Australia, China and Japan are creating their own UDI guidelines for medical devices and working with the FDA to build a global regulatory framework.

Build the right process now

Compliance requires a lot of heavy lifting by device makers, and there will no doubt be more shifts in what data is required, who uses it and how. With rollout of the system underway, manufacturers need to assess their own level of UDI readiness, including their ERP and other systems, and start working toward meeting their requirements. By building an efficient UDI process now, they will be better equipped to generate and manage high-quality data as the UDI system evolves and matures.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

Similar Articles
Relevancy Powered by MondaqAI
Finnegan, Henderson, Farabow, Garrett & Dunner, LLP
In association with
Related Topics
Similar Articles
Relevancy Powered by MondaqAI
Finnegan, Henderson, Farabow, Garrett & Dunner, LLP
Related Articles
Related Video
Up-coming Events Search
Font Size:
Mondaq on Twitter
Mondaq Free Registration
Gain access to Mondaq global archive of over 375,000 articles covering 200 countries with a personalised News Alert and automatic login on this device.
Mondaq News Alert (some suggested topics and region)
Select Topics
Registration (please scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.


The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.


Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions