This article explains why CER updates regularly become a bottleneck in practice – even though they could be planned – where the months are lost, and how to make the CER a living document instead of reinventing it with every cycle.

Abbreviations

abbreviation	Meaning
CEP	Clinical evaluation plan
CERIUM	Clinical Evaluation Report
MDR	Medical Device Regulation (EU Ordinance 2017/745)
Pmcf	Post-market clinical follow-up
Pms	Post-Market Surveillance
Sota	State-of-the-art

Underlying regulations, standards and guidelines

EU Regulation 2017/745 (MDR)

MEDDEV 2.7/1 Rev. 4 – Clinical evaluation: A guide for manufacturers and notified bodies

1 Introduction

"We update our CER regularly." Most manufacturers know this, yet delayed CER updates are among the most common compliance issues we encounter in new projects.

The word "update" suggests a manageable task: less work than the first CER, less time, less complexity. In practice, the opposite is often true. What was planned as a two-week refresher becomes a two-month project, under time pressure, with a higher risk of gaps and a review by the notified body that reflects this.

The causes rarely lie in a lack of professional competence. They almost always lie in the process. And that's the good news: structural problems have structural solutions.

This article shows where time is lost and how you can transform the CER update from a recurring crisis into a predictable process.

2. Where the months are lost

When a CER update is delayed, the most visible consequence is a compliance gap. But the real costs go further.

The typical time wasters

• No trigger system: Without a defined system for monitoring update triggers, urgency arises unnoticed and suddenly.
• Unclear responsibility: If everyone is partially responsible, the update between teams fails.
• Underestimated scope: Updates are planned as quick refreshers. In reality, new PMCF data must be integrated, new literature screened, and the benefit-risk analysis revised.
• Documentation legacy issues: If the original CER was not designed for easy updating, inconsistent formatting, missing search documentation, unclear evidence links mean that every update begins with a cleanup effort before the actual work starts.
• No dedicated resource: CER updates compete with product development, audit preparation, and the daily regulatory workload. Without protected time, they get postponed.

The hidden costs

An update that should have taken eight weeks but is compressed into three under time pressure costs significantly more in external fees and internal resource time. Rushed updates create gaps, gaps create defect reports, and defect reports create another round of work.

In addition, there are the indirect costs: A delayed or expired certificate not only affects new business, but in some markets can also jeopardize the supply to existing customers.

 3. The misconception: treating updates as individual projects instead of as a cycle

Many of these problems share a common root cause: The update is treated as an isolated, standalone project and not as a recurring step in a lifecycle. This is precisely why an update is often more difficult than the original CER, not easier.

Why updates are heavier than the original

• The foundation isn't always solid: An update builds upon what already exists. If the original CER had structural weaknesses, the update inherits these problems. Before new work can begin, old gaps must be closed.
• The evidence base has shifted: An update not only adds new information, it requires a reassessment of whether existing conclusions are still valid. This is more challenging than building conclusions from scratch.
• Consistency is harder than innovation: An update must be methodologically and terminologically consistent with the original while also meeting current expectations of the Notified Bodies, which may have shifted.
• Increased regulatory expectations: Notified bodies are now reviewing CERs much more critically than they did three years ago. An update to the original standard may no longer be sufficient.

The consequence: A CER update deserves the same structured approach as the original. 

4. Update vs. new CER – choosing the right scope

Not every literature review needs to be built from scratch. The crucial factor is choosing the right scope, as this determines the timeline and resources required.

A CER update has a different goal than a rebuild: to identify new evidence that has emerged since the last search and to assess whether it changes existing conclusions. The following comparison shows what changes—and what must deliberately remain the same.

Unlike the calendar, MDR updates are triggered by events, not solely by the annual cycle. Regular updates are a minimum requirement, not a strategy.

Triggers that force an update – regardless of the last date

• New risks: New adverse events, vigilance alerts, or security corrective actions in the field.
• Significant design or labeling changes: Any change that affects the intended purpose, clinical performance, or risk profile.
• Regulatory updates: New guideline documents, updated standards or changed interpretation of the MDR.
• Findings of the Notified Body: Deficiencies noted or observations from the last inspection must be addressed in the next update – not left open.

5. Structure the update process – step by step

The difference between a CER update that runs smoothly and one that turns into a crisis is usually not the expertise. It's the structure. The following process framework has proven effective in our projects.

The process in nine steps

1. Trigger monitoring (ongoing): Don't wait until the annual audit. Simple monitoring identifies new literature, safety signals, PMCF results, and regulatory changes as soon as they occur.
2. Scope assessment (once a trigger is identified): Before starting any work, assess what the update actually requires. Is a targeted literature update necessary? Does the benefit-risk analysis need to be revised? Has the state of the art changed? The scope determines the timeline and resources.
3. Gap analysis of the existing CER (early): Review the existing CER against the current expectations of the notified body before updating it. Identify structural gaps early to prevent later rework.
4. Literature update search: Conduct the update search from the cut-off date of the original, using the same databases and search terms, fully documented.
5. Data integration: Systematically incorporate new evidence, literature, PMCF results, PMS data. Each source feeds into a specific section of the CER.
6. Re-evaluation of conclusions: Review existing clinical conclusions against the updated evidence base.
7. Benefit-risk update: Adapt the benefit-risk analysis to the new evidence. This section cannot simply be continued – it must reflect the current state of knowledge.
8. Review and approval: Independent review by a qualified evaluator. Clearly document all changes and decisions.
9. Version control and audit trail: Update version history, ensure traceability of all changes, archive previous versions.

A literature search alone is not a CER update!

One of the most common misconceptions is that a CER update is merely a literature refresher. Under the MDR, the CER must integrate all relevant clinical data, meaning every new data source since the last version. This includes new publications from the literature, PMCF data, PMS data, updated clinical guidelines and the state of the art, as well as new evidence on similar products.

6. The most common errors in CER updates

Project experience repeatedly reveals the same weaknesses, which trigger inquiries from notified bodies. Here are the three most common weaknesses and what to do instead.

Error 1: The update search has no documented relationship to the previous search

The search was conducted, but without any verifiable connection to the original – no documented cut-off date, no reference to the original strategy. Therefore, it cannot be demonstrated that the evidence base is cumulative and coherent.

What we do instead: The update search begins the day after the original's cut-off date, uses the same databases and terms, and is explicitly documented as an update search with reference to the original, in the same quality as the original search.

Error 2: Search terms and criteria are applied inconsistently

Databases or search strings are modified compared to the original, or the inclusion and exclusion criteria are interpreted differently. This introduces variability, which destroys comparability.

What we do instead: Consistency is the guiding principle of our update search. Only the timeframe changes. Every change is justified and documented.

Error 3: New evidence is not reflected in the benefit-risk assessment

The new studies are listed, but the path from the new evidence to the updated conclusion is not traced. The benefit-risk analysis was effectively continued rather than reassessed.

What we do instead: Every clinical conclusion is explicitly linked to the evidence that supports it. The benefit-risk analysis is actively adapted to the new state of knowledge, not simply carried over from the previous version.

7. Conclusion – and how we can help you

What is repeatedly demonstrated in practice is that delayed CER updates are a process problem, not a competence problem. And each of these problems is structural – and therefore structurally solvable.

The update is not a project, but a process. Those who approach the CER as a living document will gain months of time.

A robust update practice is based on a few clear principles:

• Continuous trigger monitoring instead of calendar-driven urgency
• Choose the right size
• Consistency with the previous search is the overriding principle of the update search
• Integrate all data sources – literature, PMCF, PMS
• Link each conclusion to evidence

An MDR-compliant CER update process is complex – and a critical bottleneck in many projects. We support you in setting it up in a structured, efficient, and audit-proof manner. Our focus is on:

• Update strategy: Setting up a monitoring and trigger system as well as realistic update planning.
• Data integration: Systematic integration of new data into the CER
• Linkage: Clear traceability of claims to evidence and current benefit-risk assessment

The goal is a CER update that is not only completed on time, but also methodologically sound and regulatory compliant.

Want to know more? Contact us for a free initial consultation!

You can get a free initial consultation here: free initial consultation