Post-Market Surveillance (PMS) is the systematic, ongoing process by which a medical device manufacturer collects and analyzes data about a device once it is on the market. PMS monitors real-world safety and performance, feeds risk management and clinical evaluation, and triggers corrective action when field data shows a problem.
What is Post-Market Surveillance (PMS)?
Post-Market Surveillance (PMS) sits in the post-production phase of the device lifecycle, after design, verification, and market release. It is a proactive, closed-loop activity: the manufacturer gathers experience from devices in actual use, assesses that experience against expected safety and performance, and updates the technical documentation, risk file, and clinical evaluation accordingly.
The core idea is straightforward. A device that passes design verification and clinical evaluation still meets real users, real workflows, and real failure modes that no pre-market study fully predicts. PMS is how a manufacturer keeps watch, so emerging signals reach the right process before they cause harm.
Why Post-Market Surveillance (PMS) matters in medical device development
PMS is a legal obligation, not a courtesy. Under EU MDR 2017/745 Article 10(10), every manufacturer must operate a PMS system as part of its quality management system for every device from Class I to Class III. In the United States, the FDA can order postmarket surveillance studies under Section 522 of the Federal Food, Drug, and Cosmetic Act, codified in 21 CFR Part 822.
The stakes are concrete. Weak PMS is one of the most common sources of Notified Body findings and can lead to CE certificate suspension or withdrawal. Missed or late signals delay corrective action, raise the cost of field actions, and expose patients to avoidable risk. Strong PMS does the opposite: it catches trends early, shortens the path to a fix, and produces the evidence auditors expect.
How Post-Market Surveillance (PMS) works
PMS runs on a documented plan and a defined reporting rhythm. The workflow generally follows these steps:
- Plan: write a PMS plan per EU MDR Article 84 and Annex III, defining data sources, indicators, threshold values, and the analysis methods for each.
- Collect: gather reactive data (complaints, incidents, returns, service records) and proactive data (user surveys, literature, registries, PMCF studies).
- Analyze: assess the data against thresholds, look for trends, and reassess the benefit-risk profile.
- Report: produce the required output: a Post-Market Surveillance Report (PMSR) for Class I devices under Article 85, or a Periodic Safety Update Report (PSUR) for Class IIa, IIb, and III devices under Article 86.
- Act: feed findings back into risk management, clinical evaluation, labeling, CAPA, vigilance reporting, and field safety corrective actions.
Several standards govern the mechanics. ISO 13485:2016 requires feedback and complaint-handling processes; ISO 14971:2019 requires production and post-production information to flow back into the risk file; and ISO/TR 20416:2020 gives manufacturers a practical, proactive PMS methodology. For higher-risk devices, Post-Market Clinical Follow-up (PMCF) under Annex XIV Part B supplies ongoing clinical evidence. In vitro diagnostics follow a parallel structure under IVDR 2017/746, with post-market performance follow-up (PMPF) in place of PMCF.
Common challenges and best practices
The most frequent mistake is treating PMS as reactive complaint handling. Waiting for complaints to arrive is not surveillance; regulators expect an active, planned process. Another common gap is a PMS plan that lists data sources but sets no measurable thresholds, so nothing ever trips and no trend is formally caught.
Teams also struggle to connect PMS outputs to the rest of the quality system. A PSUR that reads well but never updates the risk file or clinical evaluation defeats the purpose. Good practice ties each finding to a decision: no action with rationale, a labeling change, a design change, or a CAPA. Set thresholds during planning, review data on a fixed cadence, and keep the trail from signal to decision traceable for audit.
How SJML helps with Post-Market Surveillance (PMS)
SJML provides post-market surveillance as part of its Compliance-as-a-Service offering. The QARA team supports PMS and PMCF planning, PSUR and PMSR preparation, and the vigilance and field safety corrective action workflows that PMS feeds. Complaints handling, root cause analysis, and CAPA are managed alongside the risk and clinical files, so surveillance findings actually update the technical documentation rather than sitting in isolation. Support extends to EUDAMED readiness and QMS sustenance under ISO 13485. Teams can scale these services up or down as reporting cycles demand.
Frequently asked questions
Post-Market Surveillance (PMS) is the broad, ongoing process of collecting and analyzing all real-world data about a device. Vigilance is a narrower subset: the mandatory reporting of serious incidents and field safety corrective actions to competent authorities within defined timelines. Vigilance is triggered by PMS data, but PMS also covers routine trends that never reach reportable severity.
Yes. Under EU MDR 2017/745 Article 84, every manufacturer must maintain a PMS plan as part of the technical documentation for all device classes. The depth scales with risk: a Class I device needs a proportionate plan and a PMS Report, while Class IIa, IIb, and III devices require a PSUR that is updated on a defined cycle.
A Post-Market Surveillance Report (PMSR) applies to Class I devices under EU MDR Article 85 and is updated when necessary. A Periodic Safety Update Report (PSUR) applies to Class IIa, IIb, and III devices under Article 86 and must be updated on a set schedule, at least annually for the highest-risk devices. Both summarize PMS findings and any corrective actions.
PMS supplies the production and post-production information that ISO 14971:2019 requires manufacturers to feed back into the risk file. Real-world complaint rates, incident data, and PMCF results are checked against the assumptions made during pre-market risk analysis. If field data shows a hazard is more frequent or severe than estimated, the benefit-risk assessment and risk controls are revisited.
Related terms
- Post-Market Clinical Follow-up (PMCF)
- Periodic Safety Update Report (PSUR)
- Vigilance Reporting
- Corrective and Preventive Action (CAPA)
- Risk Management (ISO 14971)
