Medical Device Rules 2017 Amendments: What’s Changed for Clinics Buying Equipment
The Medical Devices Rules, 2017 remain the core legal framework governing every medical device sold in India, but the rules a clinic administrator checked against three years ago look meaningfully different from the current version. A steady stream of amendments through 2024, 2025, and into 2026 has expanded mandatory licensing coverage, introduced dedicated software regulation, and reformed licensing timelines, all of which change what a clinic should verify before purchasing equipment.
The Core Framework That Has Not Changed
MDR 2017 continues to classify devices into four risk-based categories, Class A through Class D, and applications for new devices continue to be filed through Form MD-14 for Class A/B or Form MD-15 for Class C/D via the online SUGAM portal, with licences issued on Form MD-5 or MD-6 and remaining valid for five years. This underlying structure, along with CDSCO’s role as the central regulatory authority under the Directorate General of Health Services, remains the stable foundation the amendments have built on rather than replaced.
What has changed is the scope of what falls under mandatory licensing, the treatment of software-based devices, and the procedural timelines governing how quickly a licence application moves through the system, each covered by a distinct wave of amendment activity.
Mandatory Licensing Now Covers Far More Devices
Since October 1, 2023, all Class C and Class D medical devices, covering high and moderate-high risk categories, require a valid CDSCO licence, even device types that had previously operated as non-notified and therefore unregulated. This 2024-2025 amendment cycle has been described by regulatory consultants as particularly consequential precisely because it closed gaps that had allowed a meaningful number of higher-risk devices to remain outside formal CDSCO oversight for years after the original 2017 rules took effect.
In 2025, CDSCO issued finalised risk-classification lists specifically for interventional radiology and radiotherapy devices, categories that previously lacked clear classification guidance, and in October 2025 issued a directive reaffirming that the Central Licensing Authority retains classification authority across Class A through D devices, closing ambiguity that had allowed some classification disputes to persist.
Software Regulation Is the Single Biggest New Addition
CDSCO’s October 2025 draft Guidance Document on Medical Device Software, finalised in 2026, is widely regarded as the most significant regulatory clarification affecting digital health tools since MDR 2017 first took effect. It introduces a risk-based classification system specifically for software, consistent with the existing physical device framework, and requires a Quality Management System aligned with ISO 13485 for software developers, alongside expectations around cybersecurity and post-market performance monitoring that did not previously exist in any explicit form for standalone software.
Clinics purchasing or integrating any software-based diagnostic, monitoring, or clinical decision support tool, including AI-driven diagnostics, should now expect to verify a separate software-specific licensing status distinct from any hardware component the software might accompany, since this represents an entirely new compliance category that simply did not exist under the original 2017 rules.
Faster, More Predictable Licensing Timelines Are Coming
Proposed 2026 amendments introduce fixed procedural timelines at each stage of the licensing process: application scrutiny and Notified Body assignment within 30 days, Notified Body audit completion within 30 days, audit report submission within 15 days of inspection, and a new 20-day compliance verification period for quality management system deficiencies. These reforms, framed under the government’s ease-of-doing-business agenda, are intended to make licensing more predictable for manufacturers, which indirectly benefits clinics by potentially shortening the wait for newly developed devices to reach the Indian market with full CDSCO approval.
For high-risk devices such as cardiac stents and orthopaedic implants, central licensing by CDSCO under Rule 23 continues to apply, and the proposed timeline reforms specifically target reducing inspection-stage duration, from 60 days down to 55 days for one inspection category, reflecting a broader modernisation push across the licensing pipeline rather than an isolated change.
What Clinics Should Actually Check Before Purchasing
Given the expanded mandatory licensing scope, clinics buying any Class C or Class D device should independently verify current CDSCO licence status through the SUGAM portal rather than relying solely on vendor documentation, since a device that was legitimately unregulated before October 2023 may now require licensing the vendor has not yet obtained. For any device with an accompanying software component, whether embedded firmware or a standalone companion application, clinics should separately confirm whether that software has been classified and licensed under the newer Medical Device Software guidance, since hardware licensing alone no longer necessarily covers the software layer.
Clinics should also treat CDSCO licensing as an evolving compliance area rather than a one-time check, given the pace of amendment activity through 2025 and into 2026; a device or software tool that was compliant when purchased may face new classification or documentation expectations as CDSCO continues refining implementation of these expanded rules.
Conclusion
MDR 2017’s core structure has held steady, but the practical compliance landscape around it has shifted substantially through successive 2024-2026 amendments, particularly around mandatory licensing scope and the entirely new category of software regulation. Clinics that treat device and software licensing verification as an ongoing checklist item, rather than a one-time purchase decision, are best positioned to stay compliant as CDSCO continues actively expanding and refining these rules.
Researched Resources
1. CDSCO Medical Device Registration in India: What’s Changed in 2026 (And What Still Applies)
2. Medical Device Registration in India with CDSCO Guide 2026
3. CDSCO Medical Device Licensing Timeline Changes 2026
4. Medical Device Regulations India 2026: CDSCO, MDR 2017, Compliance Guide
Disclaimer: This article is for general informational and educational purposes and reflects Medical Device Rules 2017 amendments as understood at the time of writing; classification lists, licensing timelines, and software regulation continue to evolve. It is not regulatory or legal advice, and clinics should confirm current device and software licensing status directly through CDSCO’s SUGAM portal or a qualified regulatory consultant.
Vivek Chaudhary is a Technical Content Developer specializing in healthcare, health technology, and digital healthcare business solutions. He creates research-driven, SEO-focused content for doctors, clinics, hospitals, healthcare professionals, and patients, covering topics such as healthcare technology, patient engagement, clinic management, digital communication, and online visibility.
