Medical Device UDI Requirements: An Exporter’s Guide to FDA vs EUDAMED

Every carton of surgical equipment that leaves a Chinese factory now carries more than a brand name and a model number — it carries a machine-readable identity. If you export operating room devices to the United States or the European Union, medical device UDI requirements are no longer a nice-to-have line on a regulatory checklist. US Customs officers, hospital receiving departments, and EU market surveillance authorities can all scan a label and cross-check it against a public database in seconds. When the scanned code does not match the database record, it is the shipment that gets stopped — not the paperwork.

I have watched distributors lose entire containers because the label artwork used a retired lot code format, or because the device identifier printed on the export carton did not match the record submitted to the regulator. The frustrating part is that none of these failures require exotic technology to prevent. They require a working understanding of two different regulatory systems — the US FDA UDI rule and the EU MDR UDI framework that feeds into EUDAMED — and one internal process that satisfies both at the same time.

This guide walks through how both systems work in 2026, the compliance timelines that apply to each device class, and the practical steps an operating room equipment exporter needs to take. Whether you sell LED surgical lights, operating tables, medical pendants, hospital beds, or trolleys under your own brand — or you run private-label OEM and ODM programs for overseas distributors — the labeler obligations below apply to you.

What Medical Device UDI Requirements Actually Cover

A Unique Device Identification (UDI) is not a single barcode. Both the US and EU systems define it as a two-part code. The first part, the Device Identifier (DI in the US, UDI-DI in Europe), is static: it identifies the labeler, the specific device model, and the packaging level. The second part, the Production Identifier (PI in the US, UDI-PI in Europe), is dynamic: it captures the lot or batch number, the serial number, the manufacturing date, and the expiration date — whichever of these apply to your device.

Beyond the code itself, both regimes require the same three things from a manufacturer:

• A machine-readable carrier on the label and each packaging level — automatic identification and data capture (AIDC) technology, typically a GS1-128 barcode or a GS1 Data Matrix, plus a human-readable interpretation (HRI) of the same data.
• A database submission — the static device attributes behind each DI must be uploaded to the regulator’s database: GUDID in the United States, the EUDAMED UDI/Device module in the European Union.
• Direct marking for reusable devices — instruments and equipment intended for multiple uses and reprocessing between uses must carry the UDI on the device itself, usually by laser etching or dot peening.

For an operating room equipment exporter, that third point matters more than it does for disposable-device makers. A ceiling-mounted LED surgical light or a stainless steel instrument trolley will be reprocessed hundreds of times over a ten-year service life, so the identifier has to survive cleaning, disinfection, and years of wear. UDI sits alongside other export compliance work — electrical safety testing to the IEC 60601-1 standard, for example — but it is the only requirement that follows every single unit from the factory floor to the patient record.

Treat UDI as a data project, not a labeling task. The barcode is the easy part; the discipline is keeping the database record behind it accurate every time engineering changes a component, a packaging level, or a trade name.

US FDA UDI Rules: Who Must Comply and by When

The FDA published its UDI final rule on September 24, 2013 (78 FR 58786), codified at 21 CFR Parts 801 and 830, and phased it in over seven years according to device class. The original compliance dates are now history for higher-risk devices, but they still define your obligations today, and the enforcement-discretion policies layered on top of them are where most exporters get confused.

Two policy details deserve close attention. First, under the FDA’s final guidance of July 22, 2022, the agency does not intend to enforce UDI labeling, direct marking, or GUDID submission requirements for most Class I and unclassified devices — other than implantable, life-supporting, or life-sustaining ones. Second, since September 24, 2023, legacy FDA identification numbers (National Drug Code and National Health Related Item Code numbers) may no longer appear on device labels at all.

Do not read the Class I enforcement-discretion policy as permission to skip UDI. Most hospital group purchasing organizations and US distributors contractually require scannable UDI on everything they buy, including manual medical trolleys that the FDA would not chase you over. If your Class I device carries no UDI, you can be legally compliant and commercially locked out at the same time.

Enforcement discretion is a shield against the regulator, not a selling point to the buyer. Every US hospital I have supplied scans at receiving — UDI or no UDI on the rulebook, the purchase order will demand it.

For GUDID submissions, the FDA offers two paths: manual entry through the GUDID web application (practical for a catalog of a few dozen devices) and bulk upload in HL7 SPL format through the FDA Electronic Submissions Gateway (the right choice once your SKU count grows). The submitted data — device name, model, MRI safety status, premarket submission numbers, and more — becomes publicly searchable through AccessGUDID, which means your customers can verify your records before they ever request a quote.

EU MDR UDI and EUDAMED: The May 28, 2026 Mandatory Turn

In Europe, UDI obligations come from Article 27 and Annex VI of the Medical Device Regulation (EU) 2017/745 (MDR), and the database behind them is EUDAMED. The EU structure adds one layer the US system does not have: the Basic UDI-DI. This is a code assigned at the device-model family level that never appears on the label — it exists purely as the access key that links all of a device’s UDI-DIs to its certificates, technical documentation, and registration records inside EUDAMED.

The story of 2025–2026 is the switch from voluntary to mandatory use. EUDAMED was originally supposed to go live only when all six of its modules were finished, but years of development delays forced a change of plan. Regulation (EU) 2024/1860, which entered into force in July 2024, amended the MDR to allow a gradual, module-by-module roll-out. Then, on November 26, 2025, the European Commission published Decision (EU) 2025/2371 in the Official Journal, formally declaring four modules functional:

• Actor registration — economic operators (manufacturers, authorized representatives, importers) register for a Single Registration Number (SRN). Voluntarily available since December 2020.
• UDI/Device registration — the UDI database where manufacturers submit the UDI-DI data set for every device placed on the EU market. Voluntarily available since October 2021.
• Notified Bodies and Certificates — certificate records linked to devices through the Basic UDI-DI.
• Market Surveillance — the module used by competent authorities.

That publication triggered a six-month transition period. As of May 28, 2026, use of these four modules is mandatory. Two modules — Vigilance and Post-Market Surveillance, and Clinical Investigations and Performance Studies — remain under development and will be released only when mandatory, with no voluntary-use window. Until then, vigilance reporting continues through national processes. If you need the wider regulatory context for equipment imports, our comparison of CE MDR versus FDA for OR equipment covers the conformity-assessment side.

One EU-specific task that catches exporters off guard is nomenclature. When registering devices in EUDAMED, manufacturers must classify each device using the European Medical Device Nomenclature (EMDN). Getting the EMDN code wrong does not just look sloppy — it routes your device into the wrong transparency category and can surface as a discrepancy during market surveillance checks. Budget real time for EMDN mapping the first time; it is finer-grained than most exporters expect.

FDA UDI vs EUDAMED: Side-by-Side Comparison

The two systems were built to interoperate conceptually — both descend from the same IMDRF principles — but the operational differences are exactly where export projects go wrong. Here is the working comparison our regulatory team keeps on the wall:

The practical takeaway: a single DI hierarchy can serve both markets. A GS1 GTIN registered as your FDA DI can also serve as your EU UDI-DI, which is why the vast majority of exporters standardize on GS1. The EU simply asks for more on top — the Basic UDI-DI layer, EMDN coding, and the actor registrations for your EU authorized representative and importer.

Build your code structure to the EU standard first — Basic UDI-DI, UDI-DI, UDI-PI — and the US requirement becomes a subset of it. Doing it the other way around always ends in a re-labeling project.

Choosing an Issuing Agency and Structuring Your Codes

Neither regulator invents your codes for you. You must obtain them from an accredited or designated issuing agency. The FDA has accredited three: GS1, Health Industry Business Communications Council (HIBCC), and ICCBBA (which serves blood, tissue, and cellular products). The EU has designated those same three plus IFA. In practice, GS1 is the default choice for medical device exporters because its GTIN system is already the commercial language of hospital supply chains in more than 150 countries.

Under the GS1 system, your DI becomes a 14-digit GTIN, and each production identifier maps to an Application Identifier: (11) for manufacturing date, (17) for expiration date, (10) for batch or lot number, and (21) for serial number. A complete human-readable UDI for a piece of OR equipment looks like this:

(01)51022222233336(11)141231(17)150707(10)A213B1(21)1234

Three structuring decisions will shape your next five years of labeling:

• Packaging hierarchy: assign a distinct GTIN to each level — unit, inner carton, export carton, pallet. Hospitals scan at receiving; if your export carton carries only the unit-level code, their system cannot reconcile quantities.
• Direct part marking method: for stainless steel and aluminum surfaces — instrument trolleys, table columns, pendant arms — laser etching a GS1 Data Matrix is the durable standard. Verify contrast and module size after passivation and powder coating, not before. For a closer look at the equipment this applies to, see our operating table range.
• When a new DI is required: any change to the device version, model, packaging configuration, or labeler identity demands a new DI. Production changes that do not affect identification — a new paint supplier, for instance — do not. Write this rule into your change-control procedure so engineering and regulatory never disagree about it under time pressure.

One US-specific nuance worth knowing: for Class I devices, a Universal Product Code (UPC) already on the label may serve as the UDI under 21 CFR 801.40(d). It is a legal shortcut, but it forfeits the production-identifier data that hospital customers increasingly expect. Most serious exporters use the full DI-plus-PI structure even where the shortcut is available.

A Practical UDI Rollout Plan for OR Equipment Exporters

Here is the five-step sequence we use when bringing a new product family — say, a line of LED surgical lights — into UDI compliance for both markets at once.

Step 1: Map the catalog to device versions. List every export SKU and decide which ones are the same “device” in regulatory terms and which are different versions. A surgical light with a different color-temperature option is usually one device version; a light with a different mounting system is not. This mapping determines how many DIs and Basic UDI-DIs you will need. Most first-time exporters over-count by treating every accessory bundle as a new device.

Step 2: Obtain your company prefix and assign codes. Join GS1 (or your chosen issuing agency), receive a company prefix, and generate GTINs for every device version and packaging level. Assign Basic UDI-DIs for the EU. Record everything in a DI master list that engineering, production, and regulatory all share — a spreadsheet with an owner and a revision history is enough to start.

Step 3: Engineer the label and the direct mark. Update artwork for unit labels, cartons, and pallets with the AIDC carrier and HRI. For reusable equipment, run direct-marking samples through your real reprocessing cycle — autoclave, chemical disinfection, abrasive cleaning — and verify scannability afterward. A Data Matrix that reads beautifully on day one and fails after fifty cleaning cycles is a recall waiting to happen.

Step 4: Submit to GUDID and EUDAMED. For the US, create a GUDID account and submit either manually or via HL7 SPL. For the EU, register your economic operators (manufacturer, authorized representative, importer) for SRNs, then submit each UDI-DI data set with its EMDN classification, linked to the certificate records through the Basic UDI-DI. Do this before the first shipment, not after — EU market surveillance can now query the database in real time.

Step 5: Wire UDI into change control and audits. Every engineering change order should ask one mandatory question: does this change the DI? Every internal audit should sample-scan finished goods against the database records. When customers or third parties inspect your facility — the kind of scrutiny covered in our medical factory audit guide — UDI consistency between the line, the label, and the database is now one of the first things checked.

The database is the product now. A perfectly manufactured table with a stale GUDID or EUDAMED record behind it will clear customs slower than a flawed table with perfect data — and your buyer will remember which one you shipped.

The most common rollout failures we see are not technical. They are organizational: the label designer works from an outdated DI list, the regulatory lead submits EMDN codes without checking the current nomenclature release, and nobody owns the question of whether a mid-year component change triggers a new DI. Assign one person — usually in regulatory affairs — as the owner of the DI master list, and make their sign-off mandatory on every artwork and engineering change.

Conclusion

Medical device UDI requirements in 2026 come down to one discipline executed twice: identify every device version with a registered static code, attach the dynamic production data at the label and on the device itself, and keep the database records behind those codes current in both GUDID and EUDAMED. The US system has been fully enforced for higher-risk classes since the mid-2010s, with enforcement discretion for most Class I devices; the EU system crossed its decisive threshold on May 28, 2026, when the first four EUDAMED modules became mandatory under Decision (EU) 2025/2371.

For exporters of operating room equipment, the engineering work — direct marks that survive reprocessing, packaging-level GTINs, artwork control — is modest compared with the organizational work of keeping data consistent across engineering changes. Start with the EU structure, standardize on one issuing agency, and make the DI master list a controlled document. If you are planning an export program for surgical lights, tables, pendants, beds, or trolleys and want a partner who already runs this process on every production batch, talk to our team about how we handle UDI assignment, labeling, and database submission as part of the manufacturing program.

Frequently Asked Questions

Are UDI requirements mandatory for Class I devices exported to the US?

Legally, the FDA’s July 2022 final guidance says the agency does not intend to enforce UDI labeling, direct marking, or GUDID submission for most Class I and unclassified devices, other than implantable, life-supporting, or life-sustaining ones. Commercially, the answer is different: US hospitals and distributors scan at receiving and routinely require UDI in their purchasing contracts, so most exporters apply full UDI to Class I products anyway.

What is the difference between a Basic UDI-DI and a UDI-DI?

The UDI-DI is the static device identifier that appears on the label alongside the production identifiers. The Basic UDI-DI is an EU-only concept: a higher-level code assigned to a device model family that never appears on the label. It functions as the access key in EUDAMED, linking all of a device’s UDI-DIs to its certificates, technical documentation, and registration records.

Can I use the same GS1 GTIN for both FDA and EU markets?

Yes. A GS1 GTIN accepted as your FDA Device Identifier can simultaneously serve as your EU UDI-DI, which is why most exporters standardize on GS1 — it is accredited by the FDA and designated in the EU. The EU adds requirements on top (Basic UDI-DI, EMDN classification, actor registration), but the underlying device codes can be shared.

When did EUDAMED UDI registration become mandatory?

May 28, 2026. The European Commission’s Decision (EU) 2025/2371, published on November 27, 2025, declared the Actor, UDI/Device, Notified Bodies and Certificates, and Market Surveillance modules functional, triggering the six-month transition period set out in Regulation (EU) 2024/1860. From that date, manufacturers must register their devices in EUDAMED before placing them on the EU market.

Does a reusable surgical device need the UDI marked on the device itself?

In both markets, yes — devices intended for multiple uses and reprocessing between uses must carry the UDI directly on the device, unless an exception applies (for example, where direct marking would interfere with safety or performance). For stainless steel OR equipment, a laser-etched GS1 Data Matrix is the standard approach; verify that it remains scannable after the full reprocessing cycle, including autoclaving and chemical disinfection.