LinkedIn Xing

Regulatory Outlook 2026–2027 for MedTech, BioTech and Pharma

An overview of the key regulatory developments for 2026–2027, helping companies identify upcoming requirements early and prepare for them effectively.

Samim Azizi – Senior Compliance Specialist and Consultant
Samim Azizi Head of Operations / Senior Compliance Specialist / Consultant

Regulatory Focus Areas

Regulatory Outlook 2026–2027

Three Key Regulatory Areas in Focus

Between 2026 and 2027, regulatory requirements are evolving simultaneously at European, international and digital level. These three areas bring together the most important developments for medical devices, pharmaceuticals and life sciences and show which deadlines, market requirements and emerging compliance topics companies should assess now.

Explore the Key Areas

Impact and Key Areas for Action

From Regulation to Implementation

What Companies Need to Implement Now

Between 2026 and 2027, new regulatory requirements are reshaping key quality, market access and digital processes. These include MDR/IVDR and EUDAMED, the PPWR and Machinery Regulation, international requirements relating to the FDA, UDI and market access, as well as the AI Act, Cyber Resilience Act and health data regulation. Companies should therefore assess at an early stage which processes, evidence and responsibilities need to be adapted.

Key Areas for Action

Three Regulatory Workstreams for 2026–2027

EU Regulation

Implement MDR/IVDR, PPWR and the Machinery Regulation

Several implementation phases are converging in the EU: MDR and IVDR transitional provisions and agreements with Notified Bodies, the phased mandatory use of EUDAMED, new packaging requirements under the PPWR, and preparation for the Machinery Regulation from 2027. Relevant GMP and quality requirements must also be taken into account where applicable.

Review MDR/IVDR status, transitional deadlines and agreements with Notified Bodies
Prepare EUDAMED registration, UDI and reporting processes for mandatory use
Assess the impact of the PPWR on packaging, supporting evidence and supply chains
Plan early for Machinery Regulation requirements affecting relevant products and interfaces
International Markets

Prepare Separately for the FDA, UK and Other Target Markets

Requirements outside the EU are increasingly diverging. In the United States, key areas include the FDA QMSR, cybersecurity and UDI, while the United Kingdom is developing a new international reliance model. Canada, Australia and Switzerland are also changing registration, recognition and lifecycle requirements.

Assess the impact of the FDA QMSR on the QMS, documentation and inspection readiness
Compare cybersecurity and UDI requirements for the US market against existing product documentation
Monitor UK regulation and planned International Reliance rules separately
Update registration and recognition strategies for Canada, Australia and Switzerland
Digital Compliance

Operationalise the AI Act, Cybersecurity and Health Data Requirements

Digital regulation is increasingly becoming part of quality and product management. The AI Act requires structured classification of AI systems and appropriate governance. At the same time, the Cyber Resilience Act, software assurance requirements and the European Health Data Space are raising expectations for cybersecurity, validation, data quality and clear responsibilities.

Identify and classify AI systems and use cases, and assign clear responsibilities
Align cybersecurity, vulnerability and post-market processes with the CRA and product-specific requirements
Document software validation and Computer Software Assurance using a risk-based approach
Prepare data access, data quality and governance processes for upcoming EHDS requirements
The Overlap Between Requirements Is What Matters

MDR/IVDR, EUDAMED, PPWR, international market access rules, the AI Act and cybersecurity requirements partly affect the same processes, systems and evidence. Regulatory Affairs, Quality Management, Development, IT, Production and Market Access should therefore consolidate these changes into a shared regulatory action plan.

A gap analysis makes it clear which regulatory requirements are already fulfilled and where concrete action is still required across products, processes, evidence and responsibilities.

Consulting and Implementation

Grünewald Consulting

Turning Regulatory Requirements into Practical Implementation

We support medical device, pharmaceutical and life sciences companies in assessing specific regulatory impacts, adapting documentation and quality management systems, ensuring regulatory and audit readiness, and implementing the required measures on time.

Our Services

From Gap Analysis and Market Approval to Validation and Audit Readiness

Our support ranges from regulatory gap analyses and product classification to technical documentation, QMS adjustments and software validation, as well as preparation for audits, inspections and international market approvals.

Regulatory Compliance & Market Approval

We support you with MDR and IVDR requirements, product classification, technical documentation, clinical and regulatory evidence, EUDAMED and UDI processes, as well as approval strategies and post-market requirements.

Quality Management & Audit Readiness

We assess QMS structures against ISO 13485, MDR/IVDR, FDA QMSR and other relevant requirements, identify specific gaps and prepare processes, evidence and responsible teams for audits and inspections.

Risk Management

We support risk management in accordance with ISO 14971, risk analyses for products and processes, and the integration of risk management with development, cybersecurity, post-market surveillance and technical evidence.

Research & Development

We structure development processes around regulatory requirements and support Design Controls, Requirements Engineering, validation, change management and traceable technical documentation.

Production, Qualification & Validation

We support equipment, process and cleaning qualification, process validation and the validation of computerised systems, as well as transfer activities, deviation management and robust regulatory evidence.

Digital Compliance & Software

We support you with the AI Act, cybersecurity, software lifecycle processes, GAMP 5, Computer Software Assurance, data integrity and risk-based validation of digital and AI-enabled systems.

Market Access & Internationalisation

We assess regulatory requirements for the United States, United Kingdom, Canada, Australia, Switzerland and other target markets and develop practical approval, registration and market access strategies.

Strategy & Management

We translate regulatory changes into practical decision-making frameworks for management and specialist departments, including resource planning, responsibilities, implementation roadmaps and regulatory risk management.

Grünewald GmbH team
Implementing Regulatory Requirements Together

Which Regulatory Changes Do You Need to Implement by 2027?

Whether MDR and IVDR transitional requirements, EUDAMED, FDA QMSR, international market approval, the AI Act, cybersecurity or validation: we assess the impact on your products and processes, identify regulatory gaps and develop a practical action plan with priorities, responsibilities and implementation deadlines.

Your Direct Contact

I am happy to assist you personally.

Szilárd Varga
Managing Director