CDSCO Medical Device Regulations: The 2026 Guide to Classification, Licensing, and Market Entry in India

India's medical device market is growing quickly, and CDSCO's regulatory framework has been changing almost as quickly. Between late 2025 and mid 2026 alone, CDSCO published final software guidance, new risk classification lists for oncology, radiotherapy, and interventional radiology devices, an updated Class A exemption list, new IVD procedures, and a separate online provision for subsequent importers.

Before any application form is opened, a manufacturer or importer needs answers to a specific set of questions:

• Is the product a medical device under Indian law?
• What is its intended purpose?
• How is it classified?
• Is it being imported or manufactured in India?
• Does it have an appropriate predicate device?
• What clinical, analytical, or performance evidence is required?
• Which license or permission applies?
• What technical and regulatory documentation must be submitted?
• What post-market obligations apply after approval?

This guide works through those questions in order, under the Central Drugs Standard Control Organisation (CDSCO) and the Medical Devices Rules, 2017 (MDR 2017). It covers imported devices, Indian manufacturing, new devices without a predicate, IVDs, and medical device software, and it links to our detailed tutorials on each pathway where you need more depth.

Regulatory note: India's medical device framework continues to evolve. This guide reflects CDSCO publications available as of August 2026. Verify the current notification, rule, guidance, classification list, and application checklist before making any submission.

Quick Answer: The CDSCO Medical Device Regulatory Pathway

For most medical device projects, the pathway runs:

1. Define the device and its intended purpose.
2. Confirm whether it is regulated as a medical device.
3. Determine the risk classification (Class A, B, C, or D).
4. Determine the regulatory pathway: import, manufacture, clinical investigation, new device, IVD, or software.
5. Determine the evidence requirements: technical, performance, and clinical evidence as applicable.
6. Prepare the regulatory documentation: Device Master File, Plant/Site Master File, certificates, labeling, IFU, and evidence.
7. Submit the applicable CDSCO application.
8. Respond to regulatory queries and inspections where applicable.
9. Obtain the license or permission.
10. Maintain post-market compliance.

Each step is covered in a section below. The application form number appears at step 7, after the pathway is settled, and that ordering matters in practice: most avoidable CDSCO problems come from picking a form first and building the justification around it.

1. What Is CDSCO?

The Central Drugs Standard Control Organisation (CDSCO) is India's central regulatory authority for drugs and medical devices. It sits under the Directorate General of Health Services, Ministry of Health and Family Welfare, Government of India.

For medical devices, CDSCO administers the framework established under the Drugs and Cosmetics Act, 1940 and the Medical Devices Rules, 2017. That framework covers import, manufacture, clinical investigation, clinical performance evaluation of applicable IVDs, classification, licensing, quality requirements, technical documentation, labeling, post-market surveillance, device testing, and ongoing compliance.

The official CDSCO website carries the current Medical Devices Rules, amendments, notifications, classification lists, guidance documents, and application information. Links to the primary sources are at the end of this guide.

2. What Counts as a Medical Device in India?

The regulatory assessment starts from the intended purpose of the product, as defined by the manufacturer.

Medical devices can include instruments, apparatus, appliances, implants, materials, accessories, software, and certain diagnostic products, where they are intended for specified medical purposes and their principal intended action is not achieved by pharmacological, immunological, or metabolic means.

The recognized medical purposes include diagnosis, prevention, monitoring, treatment, or alleviation of disease; diagnosis or monitoring of injury or disability; investigation or modification of anatomy; support of physiological processes; supporting or maintaining life; disinfection of medical devices; and control of conception.

The intended purpose drives the assessment. Two technically similar products can land in different regulatory positions when their intended purposes differ. Scheduling software used purely for hospital administration sits outside the device framework; software intended to analyze clinical information and produce a diagnostic output sits inside it, with classification and evidence obligations attached. The classification exercise therefore begins with what the manufacturer intends the product to do, documented in the intended purpose statement, and every later element of the submission is checked against that statement.

3. Medical Devices Rules, 2017

The Medical Devices Rules, 2017 form the foundation of the Indian framework. They address classification, import, manufacturing, clinical investigation, clinical performance evaluation, licensing, quality management, technical documentation, labeling, sale and distribution, post-market obligations, and device testing.

The Rules have been amended repeatedly since 2017. CDSCO's current Medical Devices Rules page includes the subsequent amendments, among them the 2022 exemption for certain Class A devices and a 2023 amendment on State Medical Device Testing Laboratories, alongside a continuing stream of notifications, guidance documents, classification lists, and procedural updates.

A regulatory strategy therefore has to be built on the current MDR 2017 framework plus the applicable amendments and CDSCO updates. A checklist copied from an article written several years ago will miss requirements that now exist and include requirements that have changed.

4. CLA and SLA: Which Authority Regulates Your Activity?

Two authorities appear throughout the framework:

• Central Licensing Authority (CLA): the central authority responsible for specified activities, including import licensing and the manufacture of higher-risk devices.
• State Licensing Authority (SLA): the state-level authority responsible for specified activities, particularly the manufacture of Class A and Class B devices.

For manufacturing, CDSCO's published regulatory pathway assigns the authorities as follows:

For imports, the CLA handles licensing for all four classes, A through D.

5. The Four Risk Classes

India uses a risk-based classification system with four classes:

• Class A: lowest risk
• Class B: low to moderate risk
• Class C: moderate to high risk
• Class D: highest risk

Classification is determined using the risk classification principles under MDR 2017 together with the device-specific classification lists CDSCO publishes.

The class assigned determines the licensing authority, the application form and fee, the quality requirements, the evidence expectations, the degree of regulatory scrutiny, and whether inspection applies. Because all of those flow from it, classification is one of the first decisions in the project, settled before documentation work begins.

6. How to Determine the CDSCO Classification

A defensible classification assessment follows a defined sequence.

Step 1: Define the intended purpose. Document the intended use, indications, patient population, intended users, clinical environment, medical claims, and expected clinical function.

Step 2: Characterize the device. Record whether it is active or non-active, invasive or non-invasive, implantable or not, measuring or non-measuring, sterile or non-sterile, its duration of use, any software involvement, and whether its function is diagnostic or therapeutic.

Step 3: Identify the applicable classification rule. Assess the device against the risk classification provisions of MDR 2017 and current CDSCO classification material.

Step 4: Check the current CDSCO classification list. CDSCO continues to publish and revise device-specific classification lists. Between late 2025 and 2026 it issued classifications covering oncology devices, radiotherapy devices, interventional radiology devices, and Class A non-sterile/non-measuring devices. A classification spreadsheet downloaded in an earlier year can assign the wrong class to a device that has since been listed.

Step 5: Check whether the device is explicitly listed. If the device is not clearly covered, run a specific classification assessment against the MDR 2017 rules; selecting the closest-looking listed category can assign the wrong class and carry it into the whole submission.

7. The Class A Licensing Exemption and Its Limits

Certain Class A non-sterile and non-measuring devices are exempt from the licensing regime under the applicable MDR provisions. The exemption does not remove them from regulatory control.

CDSCO's October 31, 2025 classification notice states that Class A non-sterile, non-measuring devices are exempt from licensing provided the manufacturer or importer obtains the applicable registration number through the CDSCO Online System for Medical Devices. The notice also states that the classification list is dynamic. The CDSCO FAQ confirms that such devices require registration and labeling compliance even though they do not require a license.

Two limits on the exemption matter in practice. First, a Class A classification alone does not qualify a device; it must also meet the non-sterile and non-measuring conditions. Second, CDSCO specifically notes that variants supplied sterile, or variants with a measuring function, are not treated as Class A non-sterile/non-measuring devices for this exemption. A product family with sterile and non-sterile variants can therefore straddle the exemption line, with each variant assessed on its own configuration.

8. Which Form Applies: The Pathway-to-Form Map

The Indian framework maps each regulatory activity to an application form and a corresponding permission or license:

These pairings come from CDSCO's published regulatory pathway. The form is selected after the pathway is established, because the pathway decides which row of this table applies. A new IVD, for example, does not follow the standard MD-14 import route even though it is being imported; it has its own row.

9. Importing Medical Devices into India

For an overseas manufacturer, the import pathway runs through an Indian authorized agent (or other applicable representation) and proceeds in this order:

1. Appoint the Indian authorized agent.
2. Classify the device under the Indian rules.
3. Confirm the regulatory pathway (standard import, new device, or new IVD).
4. Assemble the technical documentation.
5. Assess the evidence package against Indian requirements.
6. Submit the MD-14 application to the CLA.
7. Respond to CDSCO review queries.
8. Receive the MD-15 import license.
9. Enter the market and run post-market compliance.

CDSCO's published pathway identifies Form MD-14 as the application and Form MD-15 as the import license, issued by the CLA, for all four device classes.

We cover the MD-14 to MD-15 route in detail, including the statutory timelines, the prerequisite licenses, and license validity, in our dedicated guide: CDSCO Import License (MD-14 to MD-15): Strategy + Free Checklist.

10. What an MD-15 Import Submission Contains

The exact documentation depends on the product and pathway, but an import submission can involve:

• Application documentation and fees
• Power of Attorney where applicable
• Authorized agent documentation
• Manufacturer and manufacturing site information
• Regulatory certificates
• Quality system documentation
• Free Sale Certificate / Marketing Authorization documentation where applicable
• Declaration of Conformity
• Device Master File
• Plant/Site Master File
• Labeling and IFU
• Technical evidence

Internal consistency across these documents carries as much weight as their individual completeness. The intended purpose statement, the device description, the risk classification, the performance evidence, the clinical evidence, and the labeling and IFU all describe the same device, and a reviewer reads them against each other. A submission whose IFU claims an indication that the clinical evidence section never addresses, or whose classification rests on a duration of use the device description contradicts, generates deficiency queries that a consistency check before filing would have prevented.

11. Subsequent Importers

The import framework is also evolving procedurally. In September 2025, CDSCO published a separate provision for subsequent importers in the online medical device system, covering the situation where a device already licensed for import by one importer is to be imported by another.

Procedural changes of this kind are one more reason to check the online system's current requirements at the time of filing; steps recorded from a submission made several years ago can miss provisions like this one.

12. Manufacturing Medical Devices in India

For Indian manufacturers, the pathway depends on device classification.

Class A and B devices use MD-3 leading to an MD-5 license, or MD-4 leading to MD-6 under a loan license arrangement, through the State Licensing Authority. Class A devices meeting the non-sterile/non-measuring conditions follow the registration route described in Section 7 instead.

Class C and D devices use MD-7 leading to MD-9, or MD-8 leading to MD-10 under a loan license, through the Central Licensing Authority.

13. Technical Documentation

Depending on the device and pathway, the technical documentation can cover: device description, intended purpose, design, manufacturing information, risk management, verification, validation, performance, clinical evidence, biological safety, electrical safety, software, cybersecurity, labeling, IFU, packaging, sterility, shelf life, stability, applied standards, and post-market surveillance planning.

CDSCO's regulatory pathway specifically identifies the Device Master File and the Plant/Site Master File within the submission framework. The next two sections describe each.

14. The Device Master File

The Device Master File (DMF) is the technical core of the submission. A reviewer should be able to answer five questions from it: what the device is, what it is intended to do, how it is made, how it performs, and what evidence demonstrates its safety and performance.

Depending on the device, the DMF covers:

Device overview: product name, model, variants, intended purpose, indications, contraindications, intended users.

Design and construction: components, materials, design specifications, functional characteristics.

Manufacturing: manufacturing process, critical controls, manufacturing site, quality controls.

Risk management: hazard identification, risk estimation, risk control, residual risk.

Verification and validation: bench testing, performance testing, software validation, electrical safety, biocompatibility, sterility, packaging, shelf life, and other applicable testing.

Clinical and performance evidence, where applicable: clinical evaluation, clinical investigation, clinical performance, analytical performance, literature, post-market data, predicate or equivalence evidence.

Labeling: labels, IFU, warnings, precautions, storage, intended-use information.

The exact contents follow the applicable CDSCO checklist for the device and pathway. A DMF assembled by collecting whatever documents exist and filing them under these headings usually fails the consistency test described in Section 10; the file has to describe one device, one intended purpose, and one evidence position throughout.

15. The Plant/Site Master File

For manufacturing-related submissions, the Plant/Site Master File documents the manufacturing site and its quality systems. Its purpose is to demonstrate that the site can consistently produce a device meeting its defined specifications.

The documentation can cover site details, premises, manufacturing areas, equipment, personnel, quality systems, environmental controls, testing, storage, production processes, and quality control arrangements. The precise contents follow the applicable CDSCO checklist and device pathway.

16. Essential Principles of Safety and Performance

The Essential Principles framework defines the safety and performance requirements a device must meet, and the evidence package is structured against it. The framework addresses chemical, physical, and biological properties; infection and microbial contamination; biological safety; mechanical safety; electrical safety; radiation; software; measuring functions; diagnostic functions; active devices; devices incorporating specific substances; labeling and instructions; and performance evaluation.

A regulatory certificate on its own does not answer the Essential Principles; the certificate points to an evidence package, and the Indian submission needs that evidence organized against the risks and characteristics of the specific device. A conformity checklist mapping each applicable principle to the evidence that addresses it is the standard way to demonstrate this.

17. Clinical Evidence: When It Is Needed and How to Plan It

Clinical evidence requirements depend on the device, its risk class, its novelty, its intended purpose, the evidence that already exists, and the applicable pathway. The evidence can come from clinical investigation, clinical evaluation, published literature, existing clinical data, post-market evidence, performance studies, analytical performance data for IVDs, clinical performance data, and relevant international evidence.

Study size and cost do not by themselves make a study regulatorily useful; the study has to answer the specific evidence gap the pathway creates. Before designing a clinical investigation, settle eight points:

1. What claim needs to be supported?
2. What performance characteristic needs to be demonstrated?
3. What clinical outcome matters?
4. What population is relevant?
5. What comparator is appropriate?
6. What endpoint is required?
7. What evidence already exists?
8. What evidence gap remains?

Answering these first prevents the common and expensive outcome of a completed study that does not address the actual regulatory requirement.

18. Clinical Investigation of an Investigational Medical Device

For an investigational medical device, CDSCO identifies MD-22 as the application and MD-23 as the permission for conducting a clinical investigation.

A clinical investigation strategy covers the clinical investigation plan, study design, objectives, endpoints, inclusion and exclusion criteria, sample size, statistical analysis, risk-benefit assessment, ethics approval, investigator qualifications, safety reporting, data management, device accountability, and monitoring.

CDSCO's published pathway also indicates that clinical data generated in Indian subjects can form part of the route toward commercialization of investigational devices, which is why the investigation design should be agreed against the intended commercial claims before enrollment begins.

19. Devices Without a Predicate

A device is treated as novel when there is no appropriate predicate device for the intended purpose and regulatory assessment. For such products, the strategy runs: classification, evidence gap assessment, clinical investigation where applicable, evidence generation, and then the application for permission to import or manufacture. CDSCO identifies MD-26 as the application and MD-27 as the permission for a device without a predicate, following completion of the clinical investigation.

Before concluding that no predicate exists, check whether an appropriate regulatory comparator has simply not been identified yet. The two situations lead to very different programs: a missed predicate means an unnecessary clinical investigation and a delayed launch, while a wrongly claimed predicate means a submission built on an equivalence argument that will not hold. The search for a comparator is worth doing systematically before the no-predicate pathway is committed to.

We have a full written tutorial on this pathway, including the Rule 63 waiver provisions, in our guide: CDSCO New Device Registration Without a Predicate.

20. New Devices: Sequence the Strategy Before the Study

For novel devices, the regulatory strategy is set before the clinical study, in this order: intended purpose, classification, predicate assessment, regulatory pathway, evidence gap, clinical strategy, clinical investigation, regulatory submission.

This sequencing matters most for AI-enabled devices, novel diagnostic technologies, new therapeutic technologies, devices with unique mechanisms, and devices with no appropriate predicate, because in each of these cases the evidence requirement cannot be assumed from an existing product's file.

21. IVD Regulation in India

In-vitro diagnostic medical devices are regulated within the medical device framework but carry IVD-specific requirements. IVDs are classified according to their own risk-based criteria, and CDSCO maintains a dedicated IVD section containing classification material, performance evaluation resources, guidance, and procedural updates.

Recent IVD developments include a provision for IVD risk classification on the CDSCO online system (February 2026), an updated list of laboratories for IVD performance evaluation (June 2026), ICMR-CDSCO standard performance evaluation protocols, draft guidance on import of IVDs, and additional IVD FAQs.

EvySaif's IVD performance evaluation service page covers how analytical and clinical performance evidence is planned and documented for these products.

22. New IVDs and Clinical Performance Evaluation

For a new IVD requiring clinical performance evaluation, CDSCO identifies MD-24 as the application and MD-25 as the permission.

The evidence strategy addresses two layers:

Analytical performance: accuracy, precision, analytical sensitivity, analytical specificity, interference, cross-reactivity, measuring range, detection capability, reproducibility.

Clinical performance, depending on the intended purpose: clinical sensitivity, clinical specificity, positive and negative predictive value, agreement, and clinical utility where relevant.

The exact requirements follow the device and the applicable guidance or protocol. CDSCO's IVD section lists the current performance evaluation laboratories and the ICMR-CDSCO protocols, and performance planning should be checked against the current versions of both, since both were updated during 2026. If the same IVD is also headed for the EU market, our IVDR performance evaluation guide covers the parallel EU requirements under MDCG 2025-5.

23. New IVD Import or Manufacture

For a new IVD requiring permission to import or manufacture for sale or distribution, CDSCO identifies MD-28 as the application and MD-29 as the permission.

The product's status as a new IVD is assessed first, together with its classification, performance evidence, and regulatory history, because a new IVD does not follow the standard established-device import route even though the commercial activity is the same.

24. Medical Device Software and AI

Medical device software includes standalone diagnostic software, clinical decision support software, AI-enabled diagnostic systems, software controlling a medical device, software embedded in a medical device, monitoring software, image analysis software, and algorithm-based clinical tools.

CDSCO published its Guidance Document on Medical Device Software under MDR-2017 on July 21, 2026, following a draft published in October 2025 that addressed scope, definition, classification, standards, technical documentation, and QMS requirements for medical device software.

We analyze the final guidance clause by clause, including the classification matrix and documentation expectations, in our deep-dive: CDSCO Medical Device Software Guidance 2026.

25. How to Assess a Software or AI Medical Device

The assessment starts from the intended medical function of the software. Whether the product uses AI is a downstream question; the intended function decides device status, classification, and the evidence expectations. From there, the assessment covers:

• Intended purpose: what clinical task the software performs.
• Output: whether it displays information, analyzes it, detects abnormalities, diagnoses, predicts, recommends, or controls another device. Each step up that scale raises the risk position.
• Risk: what happens to the patient if the output is incorrect.
• Data: what data the software uses, and whether the training and validation data represent the intended population.
• Validation: how the software has been verified and validated.
• Clinical performance: whether the algorithm performs adequately in the intended population.
• Change management: how future software updates will be assessed and reported.

For AI-enabled products, the regulatory strategy covers both software lifecycle management and clinical/performance evidence; a validation package frozen at one software version does not answer a product that retrains or updates.

26. Do CE Marking or FDA Approval Work in India?

No. International approvals serve as supporting evidence in an Indian submission; they do not by themselves authorize sale in India.

International documentation that can support a submission includes CE certification and EU regulatory documentation, US FDA clearance or approval, Health Canada authorization, TGA approval, PMDA approval, Free Sale Certificates, and Marketing Authorizations. The weight of each document depends on the product and the CDSCO pathway, so the useful exercise is a mapping: each existing international document set against the specific Indian requirement it can address, with the remainder identified as gaps to be filled. Section 38 describes that mapping in more detail.

27. Labeling and IFU

Labeling forms part of the regulatory submission and is reviewed against it. The label and IFU must be consistent with the intended purpose, indications, contraindications, warnings, precautions, instructions, storage conditions, device identification, manufacturer information, and performance claims stated elsewhere in the file.

A recurring weakness in submissions: the application states one intended purpose, the IFU claims something broader, and the clinical evidence supports something narrower. All three are reconciled before filing, because a reviewer who finds the mismatch will raise it as a deficiency, and the fix at that stage can mean revising the labeling, the claims, or the evidence position under time pressure.

28. Quality Management System

Depending on the device and pathway, the regulatory package covers quality management system documentation, manufacturing controls, supplier controls, process controls, equipment controls, validation, testing, corrective and preventive action, change control, complaint handling, and traceability.

The QMS and the technical evidence do different jobs. The QMS demonstrates consistent production and control of the device; the technical evidence demonstrates the safety and performance of the specific device. A QMS certificate cannot substitute for missing performance data, and a strong test report cannot substitute for absent manufacturing controls. The submission needs both, and they need to describe the same product and site.

29. Post-Market Surveillance

Once the product is on the market, the manufacturer or importer runs systems for monitoring its safety and performance. Post-market activities include complaint handling, adverse event reporting, trend analysis, Field Safety Corrective Action, corrective action, risk management updates, product changes, software updates, and regulatory reporting.

A complete regulatory strategy therefore covers three phases: pre-market evidence and licensing, market entry, and the post-market lifecycle. The post-market systems are designed before launch, because adverse event reporting obligations begin with the first unit sold.

30. Changes and Lifecycle Management

Devices change over time: a new manufacturing site, a new supplier, a new component, a new software version, a new intended use or indication, a label change, a manufacturing process change, a packaging change, a sterilization change, a new model or variant.

Each change is assessed against one criterion: does it affect the approved device, its safety, its performance, its intended purpose, or its regulatory status? A change control system that answers this reliably has to connect four functions, engineering, quality, clinical, and regulatory, so that a component substitution made for supply reasons is seen by the people who know it alters the biocompatibility position.

31. Regulatory Strategy for a New Device

For a new device, EvySaif structures the regulatory project in five stages.

Stage 1, product definition: intended purpose, indications, users, patient population, technology, claims.

Stage 2, regulatory classification: medical device status, risk class, applicable rule, existing CDSCO classification, predicate status.

Stage 3, evidence strategy: existing evidence, evidence gaps, clinical evidence, performance testing, analytical evidence, verification, validation.

Stage 4, submission strategy: regulatory forms, Device Master File, Plant/Site Master File, certificates, risk management, evidence, labels, IFU.

Stage 5, lifecycle strategy: post-market surveillance, vigilance, complaints, change control, software updates, regulatory maintenance.

32. Regulatory Strategy for an Imported Device

For an established foreign device, the project runs in twelve steps:

1. Confirm medical device status under the Indian definition.
2. Determine the Indian classification.
3. Review predicate and comparator status.
4. Determine whether standard import licensing or another pathway applies.
5. Assess the existing international approvals and their supporting files.
6. Conduct a documentation gap assessment against the Indian checklist.
7. Prepare the Device Master File and manufacturing site documentation.
8. Review labeling and IFU against Indian requirements.
9. Prepare the MD-14 submission.
10. Respond to CDSCO queries.
11. Obtain the MD-15 license where approved.
12. Implement post-market compliance.

Steps 1 through 6 come before document preparation. Running them first is faster and cheaper than collecting documents and discovering at step 9 that the pathway assumed at the start was wrong.

33. Regulatory Strategy for a Device Without a Predicate

For a novel device, the sequence runs: product definition, classification, predicate assessment, regulatory gap assessment, clinical and performance strategy, clinical investigation where applicable, evidence generation, the MD-26/MD-27 pathway where applicable, the commercial import or manufacturing pathway, and post-market surveillance.

The regulatory strategy and the clinical strategy are developed together on this pathway, because the clinical investigation exists to close the specific evidence gap the regulatory assessment identified. The no-predicate tutorial walks through each stage with the applicable forms and the Rule 63 waiver provisions.

34. Ten Common CDSCO Regulatory Mistakes

1. Starting with the application form. The pathway determines the form, and picking the form first regularly puts new IVDs and no-predicate devices into the wrong route.

2. Using an outdated classification list. CDSCO published new classification lists for oncology, radiotherapy, and interventional radiology devices between November 2025 and January 2026. A device classified from an older list can carry the wrong class into the whole submission.

3. Assuming Class A means no regulation. Only Class A non-sterile, non-measuring devices qualify for the licensing exemption, and they still require registration and labeling compliance (Section 7).

4. Assuming CE or FDA approval equals Indian approval. International evidence supports the submission; the Indian pathway, documentation, and license are still required.

5. Running a clinical study without a regulatory evidence plan. The study has to answer the identified evidence gap; a study designed first and mapped to requirements afterward often measures the wrong endpoint in the wrong population.

6. Treating the Device Master File as document collection. The DMF describes one device with one intended purpose and one consistent evidence position; assembled files that contradict each other generate deficiency queries (Section 14).

7. Ignoring intended purpose wording. A broadened claim can change the classification and the evidence requirement. Claims are frozen before the evidence program is designed, and any later change to them is reassessed.

8. Underestimating software. Software and AI functions carry their own classification, validation, performance, and lifecycle requirements under the 2026 guidance (Sections 24 and 25).

9. Treating IVDs like general medical devices. IVDs have their own classification criteria, performance evaluation requirements, laboratories, and form pairs (Sections 21 to 23).

10. Ignoring post-market obligations. Vigilance, PMS, and change control obligations begin at market entry and continue for the life of the product (Sections 29 and 30).

35. CDSCO Regulatory Readiness Checklist

Run this before submission.

Product

• Intended purpose clearly defined
• Indications defined
• Users identified
• Patient populations defined
• Medical claims documented
• All variants identified

Classification

• Medical device status confirmed
• Risk class established
• Latest CDSCO classification list checked
• Applicable classification rule documented
• Predicate status assessed

Regulatory pathway

• Import or manufacture determined
• CLA or SLA identified
• Standard or novel device pathway confirmed
• IVD pathway assessed where applicable
• Software pathway assessed where applicable
• Clinical investigation requirement determined
• Clinical performance evaluation requirement determined

Evidence

• Risk management
• Verification
• Validation
• Performance testing
• Clinical evidence
• Analytical performance where applicable
• Clinical performance where applicable
• International evidence mapped
• Literature

Technical documentation

• Device Master File
• Plant/Site Master File
• Manufacturing information
• Quality documentation
• Risk documentation
• Test reports
• Clinical/performance evidence
• Standards
• Declaration of Conformity

Labeling

• Label
• IFU
• Warnings
• Precautions
• Contraindications
• Storage conditions
• Manufacturer information
• Intended-use consistency across the file

Regulatory submission

• Correct application form
• Correct authority
• Fees
• Authorized agent documentation where applicable
• Power of Attorney where applicable
• Regulatory certificates
• Free Sale / Marketing Authorization documentation where applicable
• All required annexures

Post-market

• Complaint handling
• Adverse event reporting
• PMS
• FSCA procedure
• Change control
• Software lifecycle management where applicable

36. How Long Does CDSCO Approval Take?

No single timeline applies to every device. The duration depends on the device class, the import versus manufacturing pathway, novelty, clinical evidence requirements, testing, inspection, documentation completeness, regulatory queries, device complexity, and the application pathway.

A device-specific regulatory project plan, built from the applicable pathway and its statutory review periods, gives a usable timeline; a generic figure quoted for all devices does not. For the import route specifically, the statutory review window and license validity are covered in our MD-14 to MD-15 guide.

37. How Much Does CDSCO Approval Cost?

The cost depends on the pathway and the evidence required. The components include CDSCO application fees, testing, laboratory evaluation, clinical investigation, clinical or performance evaluation, QMS certification, regulatory consulting, technical documentation, Notified Body activities where applicable, translation and legalization, and post-market compliance.

The applicable government fees are checked against the current MDR 2017 schedules before budgeting. For a novel device, the license application fee is usually the smallest line: clinical evidence and technical documentation typically represent the larger share of the program, and a budget covering only the application fee understates the project by a wide margin.

38. Mapping International Evidence to Indian Requirements

A company entering India with existing approvals maps its evidence from the EU, US, Canada, Australia, Japan, or other markets against the Indian requirements: classification, intended purpose, technical documentation, clinical evidence, performance evidence, QMS, labeling, manufacturing site information, and the import or manufacturing pathway.

The purpose of the mapping is to identify which existing evidence supports the Indian submission and which gaps remain, so that studies are repeated only where a genuine gap exists. In our experience the common genuine gaps are Indian labeling requirements, authorized agent documentation, and, for some device types, performance data relevant to the Indian intended population; the common false gap is clinical data that already exists in the CE technical file but was never extracted into a submission-ready form.

39. Why Regulatory Strategy Starts Early

The most expensive regulatory problems surface late. The typical sequence: a company develops the device, completes engineering, obtains international certification, prepares the Indian submission, and only then discovers that the classification differs from what was assumed, the clinical evidence does not answer the Indian requirement, the intended-use wording is inconsistent across documents, the predicate status is unclear, required testing is missing, or the Device Master File is incomplete. Each of these, found at submission stage, costs months.

Running the order as regulatory strategy, then product development, then evidence generation, then documentation, then submission lets the regulatory requirements shape the development program while design changes are still cheap to make.

40. How EvySaif Supports CDSCO Medical Device Projects

EvySaif Research and Medical Affairs Solutions supports medical device and diagnostic projects across regulatory strategy, clinical evidence, and medical documentation. Our CDSCO India regulatory services cover:

• Regulatory pathway assessment: determining the Indian regulatory route from the device characteristics, intended purpose, classification, and market entry strategy.
• Classification assessment: reviewing the intended purpose against the applicable classification principles and current CDSCO lists.
• Evidence gap assessment: mapping existing evidence against the expected Indian requirements.
• Clinical evidence strategy: determining what clinical or performance evidence is required and designing it to answer the regulatory question.
• IVD performance evaluation: analytical and clinical performance evidence strategies for IVD projects, detailed on our IVD performance evaluation page.
• Medical device software and AI: regulatory and evidence planning for software-driven and AI-enabled devices under the 2026 guidance.
• Technical documentation: preparation and review of the Device Master File, Plant/Site Master File, and supporting documents.
• Medical writing: regulatory, clinical, and scientific documents built to communicate the evidence clearly.
• Submission support: organizing the package and responding to documentation and scientific queries.

Across all of these, the work aligns the product, its intended purpose, its classification, its evidence, its documentation, and its pathway into one consistent submission. Broader strategy engagements run through our regulatory strategy consulting service.

41. Frequently Asked Questions

What is CDSCO? CDSCO is India's central regulatory authority for drugs and medical devices, under the Ministry of Health and Family Welfare.

What law regulates medical devices in India? Medical devices are regulated under the Drugs and Cosmetics Act, 1940 and the Medical Devices Rules, 2017, together with subsequent amendments, notifications, and applicable CDSCO guidance.

What are the four medical device classes in India? Class A, B, C, and D, in order of increasing risk. The class determines the licensing authority, the application form, and the evidence expectations.

Which authority handles medical device imports? The Central Licensing Authority handles import licensing for all four classes.

What is Form MD-14? MD-14 is the application for an import license for a medical device.

What is Form MD-15? MD-15 is the import license issued on that application.

What is Form MD-22? MD-22 is the application for permission to conduct a clinical investigation of an investigational medical device.

What is Form MD-23? MD-23 is the permission to conduct that clinical investigation.

What is Form MD-26? MD-26 is the application for permission to import or manufacture a medical device that has no predicate device.

What is Form MD-27? MD-27 is the permission issued on an MD-26 application.

What is Form MD-24? MD-24 is the application for permission to conduct clinical performance evaluation of a new IVD.

What is Form MD-25? MD-25 is the permission issued on an MD-24 application.

What is Form MD-28? MD-28 is the application for permission to import or manufacture a new IVD for sale or distribution.

What is Form MD-29? MD-29 is the permission issued on an MD-28 application.

Are Class A devices exempt from CDSCO licensing? Only Class A non-sterile, non-measuring devices are exempt from licensing, and they still require registration through the CDSCO online system and labeling compliance. Sterile or measuring variants of a Class A device do not qualify.

Does CE marking allow a device to be sold in India? No. CE documentation can support the Indian submission, but the applicable Indian license or permission is still required before sale.

Does FDA approval provide CDSCO approval? No. FDA approval is supporting evidence; the Indian pathway still applies.

Are AI medical devices regulated in India? Software falls within the medical device framework depending on its intended purpose and function. CDSCO issued a dedicated Guidance Document on Medical Device Software under MDR-2017 on July 21, 2026.

Are IVDs regulated by CDSCO? Yes. IVDs are regulated under the medical device framework with their own classification, performance evaluation, and licensing requirements, and CDSCO maintains a dedicated IVD regulatory section.

Can a device without a predicate be approved in India? Yes. The MD-26/MD-27 pathway covers devices without a predicate, following the applicable clinical investigation under MD-22/MD-23.

42. Final Takeaway

The productive first question for an Indian device project is which regulatory pathway applies and what evidence will demonstrate that the device meets the Indian requirements. Answered early, that question sets the classification, the evidence program, the documentation, and the form; answered late, it forces rework of all four.

The framework is also still moving. CDSCO's 2025-2026 output includes final software guidance, new device classifications, IVD procedural changes, and updated performance evaluation laboratories, so regulatory monitoring continues after the license is granted, alongside the post-market obligations that come with it.

Planning a CDSCO Submission?

If you are planning to import, manufacture, develop, or commercialize a medical device or IVD in India, the first step is a pathway determination and an evidence gap assessment, done before the full submission package is prepared.

EvySaif supports CDSCO regulatory strategy, device classification, import and manufacturing pathways, no-predicate strategy, clinical evidence strategy, IVD performance evaluation, medical device software and AI, technical and regulatory documentation, gap assessment, and medical and scientific writing.

Talk to our regulatory strategy team to scope the assessment.

CDSCO Official Resources

Verify the latest requirements directly against the official sources before any regulatory decision:

• Medical Devices Rules, 2017
• CDSCO Medical Device and Diagnostics
• CDSCO In-Vitro Diagnostics
• CDSCO Latest Public Notices

Regulatory Updates Reflected in This Guide

• July 21, 2026: Guidance Document on Medical Device Software under MDR-2017.
• June 29, 2026: Updated CDSCO list of laboratories for IVD performance evaluation.
• February 6, 2026: Provision for risk classification of IVDs on the CDSCO online system.
• January 2, 2026: Risk classification list for oncology medical devices.
• November 27, 2025: Risk classification lists for radiotherapy and interventional radiology devices.
• October 31, 2025: Updated Class A non-sterile/non-measuring classification list.
• September 15, 2025: Separate provision for subsequent importers in the online medical device system.

Last reviewed: August 2026

This article reflects the regulatory position as of 30 August 2026, including the Medical Devices Rules, 2017 as amended, the CDSCO classification lists and IVD procedural updates published between October 2025 and June 2026, and the final Guidance Document on Medical Device Software of 21 July 2026. Regulatory requirements evolve; verify current requirements for your specific device before acting.