PSUR and PBRER Aggregate Reporting Under EU MDR

What PSURs Actually Re-Evaluate

The Periodic Safety Update Report (PSUR) under EU MDR Article 86 is one of the most consequential post-market deliverables introduced by the regulation. Manufacturers who treat it as a documentation exercise — gather the data, fill the template, file with the Notified Body — find that the report eventually triggers questions they did not expect. Notified Bodies and EU competent authorities increasingly use PSURs as live re-evaluations of whether the device's benefit-risk balance still holds.

The PSUR is not a vigilance report compilation. It is a structured re-justification of the device's continued marketability, with specific evidence requirements that go beyond what most legacy post-market surveillance programs collect.

This guide covers the practical structure, the comparison to ICH PBRER (its pharmaceutical analog), and how Korean MFDS post-market reporting cross-references EU PSUR work.

Regulatory Anchors

EU MDR Article 86 requires manufacturers to prepare a PSUR for each device or category of devices. The report:

• Summarizes the results and conclusions of analyses of post-market surveillance data
• Identifies preventive and corrective actions taken
• Updates the benefit-risk determination
• Updates the main findings of the Post-Market Clinical Follow-up (PMCF)
• Updates the volume of sales and population to whom the device has been made available

Class IIb, III, and implantable devices require annual PSURs, submitted to the Notified Body that issued the CE certificate.

Class IIa devices require PSURs at least every two years.

Class I devices require a post-market surveillance report (lighter than PSUR) maintained by the manufacturer.

ICH PBRER (Periodic Benefit-Risk Evaluation Report) is the pharmaceutical analog. While not directly applicable to medical devices, several PSUR sections borrow PBRER structure — particularly the benefit-risk analysis methodology.

PSUR Required Content

EU MDR Annex III specifies PSUR content. Practically:

Section	Content
Executive summary	Key findings, conclusions, actions
Worldwide marketing status	Where marketed, when, regulatory status per jurisdiction
Volume and exposure	Units sold, patients exposed (estimated where direct count not feasible)
Update on previous PSUR	Status of actions from prior report
Vigilance summary	Incidents, serious incidents, FSCAs by category
PMCF results	New clinical data, literature, registry data
Trend analysis	Quantitative analysis of incident rates, signals identified
Benefit-risk re-evaluation	Updated determination based on accumulated evidence
Conclusions and actions	Conclusions, planned and taken actions

The most heavily-scrutinized section is the benefit-risk re-evaluation. Notified Bodies expect a structured comparison: original benefit-risk determination (from CE technical file) vs current determination (post-market evidence). Material differences require explicit explanation.

What "Aggregate" Means Operationally

PSURs are aggregate reports — they synthesize data across the reporting period, not individual incidents. The synthesis requires four data streams:

Stream 1 — Vigilance Data

Incidents and serious incidents reported through the EU MDR vigilance system (see our EU MDR MIR & FSCA guide). The PSUR groups vigilance data by:

• Severity (incident vs serious incident)
• Causation (device-related vs user-error vs unrelated)
• Patient demographic (where systematic patterns appear)
• Geographic distribution
• Time trend (within reporting period and vs prior periods)

Stream 2 — PMCF Data

Post-Market Clinical Follow-up activities executed during the reporting period. Includes:

• PMCF studies (active surveillance, registry-based)
• Real-world evidence collection
• Literature review for the device class
• Survey data from clinical users

The PMCF plan (separate document) specifies what data is collected; the PSUR reports on it.

Stream 3 — Quality Data

Manufacturing non-conformances, customer complaints (not all rising to vigilance level), service and repair data, returns.

Stream 4 — Commercial / Market Data

Unit sales, geographic distribution, indication-level utilization where measurable.

The synthesis function — turning four streams into one coherent narrative with quantitative trend analysis and a benefit-risk re-determination — is what distinguishes a strong PSUR from a weak one.

Writing the Benefit-Risk Re-Evaluation

The most consequential section. A working approach:

1. State the original benefit-risk determination from the CE technical file (or last PSUR if not the first). Cite the original evidence basis.

2. Identify changes in the evidence base during the reporting period:

   • New incidents (and their causation)
   • New PMCF data
   • New literature (positive or negative)
   • Changes in standard of care
   • Updated comparator products

3. Assess whether the changes alter the determination. Explicit yes/no per evidence category, with rationale.

4. Conclude: original determination remains valid, or determination has shifted (with magnitude and direction).

5. Identify actions if the determination has shifted: labeling updates, indication restriction, design change, FSCA, withdrawal.

Notified Bodies push back on PSURs that conclude "no change" without showing the analysis. The analysis matters more than the conclusion.

ICH PBRER Comparison

For organizations with combination products or those leveraging pharmaceutical experience, the PBRER structure offers useful patterns:

• Benefit-risk re-evaluation as a structured comparison — explicit prior vs current
• Signal evaluation methodology — disproportionality analysis, observed vs expected
• Population exposure estimation — methods for estimating exposure where direct measurement is infeasible
• Cumulative summary tabulations — incident counts by category, time period, and geography

PBRER's structured signal evaluation is particularly relevant for higher-risk medical devices and SaMD/AI devices where signal detection is more analytically intensive.

Korean MFDS Cross-Reference

Korean MFDS does not require PSUR submissions in the EU format. Korean post-market reporting requirements are covered in our PMS, Vigilance, and License Maintenance and MFDS Vigilance 2026 Update guides.

However, several operational alignments save effort for manufacturers running both EU and Korean operations:

Shared post-market data. The PMS data collected for EU MDR PSUR purposes is largely the same data collected for Korean MFDS post-market reporting. Manufacturers running parallel programs can use a single underlying data warehouse with jurisdiction-specific reporting layers.

Aligned vigilance reporting cycles. EU MDR vigilance timelines (incident: 15 days; serious incident: 2-10 days depending on severity) overlap with Korean MFDS timelines (death: 7 days; serious injury: 15 days under the 2026 framework). A unified vigilance procedure with jurisdiction-specific deadlines is more efficient than separate procedures.

Benefit-risk evidence reuse. The benefit-risk re-evaluation produced for EU PSUR purposes can support Korean license maintenance reviews. The Korean MFDS does not require a formal benefit-risk filing on the same cadence, but reviewers value the analysis when changes to Korean registration are filed.

PMCF and Korean clinical evidence. PMCF activities — particularly literature reviews and real-world evidence collection — can include Korean-relevant evidence where the device is marketed in Korea. This evidence supports both the PSUR and Korean post-market filings.

PSUR Cadence and Submission Mechanics

For Class IIb, III, and implantables: annual PSUR.

Timing. Reporting period typically aligns with the CE certificate anniversary. The PSUR for period Y must be submitted to the Notified Body within a defined window after period end — typically 30-90 days, defined in the Notified Body agreement.

Submission method. EUDAMED PSUR module is the intended submission channel as EUDAMED rolls out fully. Until then, direct submission to the Notified Body.

Notified Body review. The NB reviews the PSUR and either accepts it, requests clarifications, or escalates to assessment activities. Escalation can trigger surveillance audit additions or, in serious cases, certificate suspension review.

Public availability. EU MDR Article 86 envisions PSURs becoming publicly available via EUDAMED. As this becomes operational, PSUR content visibility expands beyond the manufacturer + NB pair.

Six Practical Recommendations

1. Treat the PSUR as a re-justification, not a documentation exercise. The benefit-risk re-evaluation is the substantive content.
2. Build the four data streams continuously, not retrospectively in the 30 days before the PSUR is due.
3. Adopt PBRER signal evaluation methods for higher-risk devices and SaMD/AI. Disproportionality and observed/expected analysis stand up better to NB review.
4. Run a single unified PMS data warehouse if marketing in both EU and Korea. Jurisdiction-specific reporting layers are cheaper than parallel data collection.
5. Document the benefit-risk analysis explicitly, even when concluding "no change." The analysis matters more than the conclusion to reviewers.
6. Plan for EUDAMED public availability. PSURs will increasingly be readable by competitors, customers, and regulators in other jurisdictions. Draft accordingly.

Where Leanabl Plugs In

The PMS and Vigilance services together cover the PMS data collection, vigilance reporting, and aggregate reporting infrastructure for EU MDR scope. For organizations running parallel EU and Korean operations, the unified data warehouse approach is implemented through Platform RIM integration with PMS workflows.