Handling Non-Compliant Medical Equipment A Practical Guide

Introduction

Non-compliant medical equipment — devices that lack valid market approval, carry incorrect certification, or fail to meet the regulatory requirements of the market where they are used — poses a serious risk. Using or placing non-compliant devices in service can harm patients, expose organisations to legal liability, invalidate insurance, and result in regulatory enforcement action. The right response is to identify the issue, act decisively, and document every step.

This guide explains how to identify non-compliant medical equipment, what to do when you find it, what organisations are required to report, and how to protect your organisation across the UK, EU, US, Gulf and South Africa.

Non-compliance in three categories

Non-compliance in medical equipment falls into three broad categories, each requiring a different response.

• Market approval failure: the device lacks valid CE, UKCA, FDA clearance, or equivalent approval for the market in which it is being used. It should not be on the market at all.

• Certification or documentation failure: the device may have valid market approval,  but the documentation provided has expired, is incorrect, or is fraudulent.

• Device performance or safety failure: the device has valid approvals, but is performing outside its specifications or causing adverse events not anticipated in the approved risk management.

How to identify non-compliant equipment

1. Missing or incorrect regulatory mark: a device without the CE, UKCA or FDA mark for the market where it is used, or with a mark that cannot be verified, is potentially non-compliant.

2. Expired or unverifiable certificates require a Declaration of Conformity, a market approval certificate, and an ISO 13485 certificate. Expired certificates or certificates from unrecognised bodies are compliance red flags.

3. Device not found in regulatory database: search the MHRA register, FDA 510(k) database, EUDAMED, SFDA or SAHPRA register. A legitimately approved device will appear in the relevant database.

4. Discrepancies between the label and documentation: if the manufacturer name, model number, or device description on the label does not match the compliance documentation, this is a serious concern requiring immediate clarification.

5. Receipt without documentation of a delivery of medical devices — no DoC, no certificate, no IFU — should trigger quarantine and investigation before any clinical use.

6. Unverifiable supplier credentials. If a supplier cannot demonstrate their own regulatory status as an authorised importer or distributor, this raises questions about the compliance of the devices they supply.

7. Device on an active recall: a device subject to an active recall requiring removal from service is non-compliant for continued clinical use until the required action is completed.

8. Post-market defect: a device in service was found to be performing outside specification — delivering incorrect dosing or giving inaccurate readings — requiring a clinical risk assessment and possibly a vigilance report.

Non-compliance types and required actions

Different types of non-compliance require different immediate responses.

When in doubt about whether a device is compliant or safe to use, the answer is always to quarantine until the status is confirmed. The clinical risk of using a non-compliant device is almost always greater than the disruption of removing it from service.

Need to assess a device's compliance status?

We can help you review compliance documentation and assess whether a device meets requirements for your market. Tell us the device, what you have and what concerns you — we will give you a clear picture of the compliance position.

No pressure, no obligation. → Talk to the team

What to do when non-compliance is found

A clear, documented process for handling non-compliant equipment protects both patients and your organisation.

• Quarantine immediately removes the device from active service and labels it clearly as quarantined. Do not allow clinical use until the compliance issue is resolved.

• Notify the clinical and management lead to promptly escalate the findings to clinical governance, quality management,t and senior management. A compliance issue requires a cross-functional response.

• Document what you found and, when recorded, the device details, the compliance issue identified, the date of discovery, who found it, and the immediate action taken.

• Contact the supplier formally in writing to raise the compliance concern,n requesting clarification,  documentation, or resolution. Written communication creates an evidence trail.

• Report to the regulator, if required; when non-compliance involves potential patient harm, or when fraudulent certification is suspected, notify the relevant regulator — MHRA, FDA, SFD, A, or SAHPRA.

• Conduct a clinical risk review and assess whether any patients have been affected. If patient harm is identified or cannot be excluded, follow your clinical incident reporting process.

The decision to use a quarantined device in an emergency — where no compliant alternative is available, and the clinical risk of non-use is greater — must be made by a clinical governance lead with documented rationale. This must be a rare exception, not a routine workaround.

Preventing non-compliance in procurement

The best response to non-compliant equipment is to prevent it from entering the supply chain. These steps reduce the risk.

1. Require compliance documentation at the tender stage, including the Declaration of Conformity, CE or UKCA certificate and ISO 13485 certificate, as mandatory tender documents. Suppliers who cannot provide them should not be shortlisted.

2. Verify in the regulatory database before purchase; cross-check the MHRA register, FDA database, EUDAMED, SFDA, or SAHPRA before placing orders. Do not rely solely on supplier-provided documents.

3. Inspect labelling at goods receipt to confirm CE, UK, CA, or FDA marks are present, the model matches the order,r and documentation accompanies the delivery before accepting goods into inventory.

4. Use approved supplier lists, maintain a list of compliance-verified suppliers, and limit purchases to suppliers on it. Review supplier qualification regularly.

5. Set up field safety notifications, monitor and subscribe to MHRA Medical Device Alerts, and FDA recall notifications for device types in your inventory. Act promptly when alerts are received.

6. Train procurement and clinical staff to ensure everyone who orders or receives medical equipment understands what compliance documentation is required and how to raise a concern if it is missing.

7. Document all compliance checks; keep records of every compliance verification — database searches, document checks, inspection results. This is the evidence that your organisation acted responsibly.

Organisations with a mature compliance programme rarely encounter great non-compliance surprises. The investment in upfront verification pays back many times over by preventing a compliance failure from reaching clinical service.

Common non-compliance handling mistakes

These errors make non-compliance situations worse when they occur.

• Continuing to use a device during an investigation, whether quarantined or suspect, while the compliance issue is under investigation, creates additional clinical risk and legal exposure. Quarantine means no clinical use.

• Inadequate documentation of the issue and response leaves the organisation unable to demonstrate it acted responsibly if the matter is later reviewed by a regulator or in legal proceedings.

• Handling compliance issues informally: a verbal assurance from a supplier that a documentation issue will be resolved is not sufficient. All communication about compliance concerns must be in writing.

• Not reporting fraudulent certificates if a supplier has provided forged or fraudulent certificates is a criminal and regulatory matter. Notifying the regulator is the correct course of action.

• Not conducting a clinical risk review when a non-compliant device has been in clinical use is a basic patient safety obligation.

Non-compliance obligations by region

Regulatory obligations for non-compliant equipment vary by market.

Regardless of the market, the immediate actions are the same: quarantine the device, document the issue and seek expert advice before taking further steps. Do not delay quarantine while investigating.

More from Business

• Buyers — source medical equipment with verified compliance documentation to reduce the risk of non-compliance.

• Suppliers — list your compliant devices and provide buyers with confidence in your regulatory documentation.

• Advertise — promote your products and services to a clinical audience.

• Business overview — explore everything MediGear offers healthcare organisations.

Disclaimer

This article is for general information only and does not constitute legal, regulatory, procurement or clinical advice. Non-compliance handling requirements, reporting obligations and regulatory enforcement vary by market, device type and circumstance. Always consult the relevant regulatory authority and qualified legal and regulatory professionals for advice specific to your situation and organisation. medigear.UK accepts no liability for actions taken based on this content.