Rule 8 MDR 2017 — The Jurisdiction Map Most Indian MedTech Manufacturers Have Never Read

The Wrong Authority Problem — How Indian MedTech Manufacturers Are Wasting Months Filing With the Wrong Regulator

By Ankur Khare — Biomedical Engineer | Regulatory Affairs Specialist | Founder, MedReg Intel


A Class B medical device manufacturer filed their manufacturing licence application with CDSCO in New Delhi.

They paid the fee. They submitted the documents through SUGAM. They waited.

Four months later CDSCO informed them that Class B manufacturing licences are not issued by CDSCO. They are issued by the State Licensing Authority — the State Drug Controller of the state where the manufacturing site is located.

They had been in the wrong queue for four months.

Four months of investor runway consumed. Four months of delayed market entry. Four months of a mistake that a single careful reading of Rule 8 of MDR 2017 would have prevented entirely.

This is not an unusual story. Versions of it happen regularly across Indian MedTech — not because manufacturers are careless but because the jurisdiction map in MDR 2017 is more complex than it appears on first reading, and almost nobody explains it clearly before the first application is filed.

This article does that.


Rule 8 — The Jurisdiction Map That Determines Everything

Rule 8 of MDR 2017 divides regulatory jurisdiction between two authorities across two dimensions — the type of activity and the risk class of the device.

Understanding Rule 8 before filing anything is not optional. It is foundational. Getting it wrong means filing with the wrong authority, paying the wrong fee, waiting in the wrong queue, and eventually discovering the mistake only when the authority you filed with tells you they cannot help you.

Here is the complete jurisdiction map.

Central Licensing Authority — CLA

The Central Licensing Authority is the Drugs Controller General of India — DCGI — at CDSCO. FDA Bhawan. Kotla Road. New Delhi.

CLA has jurisdiction over:

  • Import licences for all four device classes — Class A, B, C, and D
  • Manufacturing licences for Class C and D devices only
  • Clinical investigation permissions — Forms MD-22 and MD-23
  • New device permissions — Forms MD-26 and MD-27
  • Notified Body registrations

Every import licence in India — regardless of device class — goes through CLA. This is the provision most manufacturers know. What they often miss is that manufacturing jurisdiction is split — and only the higher-risk classes go to CLA.

State Licensing Authority — SLA

The State Licensing Authority is the State Drug Controller of each state. Maharashtra has its own. Karnataka has its own. Delhi has its own. Every state and union territory has a separate SLA with its own office, its own processing timelines, and its own operational practices.

SLA has jurisdiction over:

  • Manufacturing licences for Class A and B devices
  • Sale, stock, and distribution licences for all four device classes — including Class C and D — within that state
  • Wholesale licences

The sale and distribution jurisdiction is the element most manufacturers overlook. A Class D cardiac pacemaker requires a CLA import licence from CDSCO. But the distributor selling that pacemaker in Maharashtra requires a separate SLA sale licence from Maharashtra's State Drug Controller. Two different licences. Two different authorities. Both are mandatory. Neither substitutes for the other.


The Five Most Expensive Jurisdiction Mistakes

Mistake 1 — Filing Class B manufacturing licence with CDSCO

This is the most common and most expensive mistake. Class B manufacturing licences — blood pressure monitors, hypodermic needles, hearing aids, pulse oximeters — are issued by the State Licensing Authority of the state where the manufacturing site is located. Not by CDSCO.

A manufacturer whose site is in Pune files with Maharashtra's SLA at their Pune office. Not with CDSCO in Delhi.

The fee for a Class B manufacturing licence under the Second Schedule is ₹15,000 — payable to the SLA, not to CDSCO. Filing with the wrong authority means the fee goes to the wrong place and the application sits unprocessed until the manufacturer realises the error.

Mistake 2 — Assuming the CDSCO import licence covers distribution

This mistake costs manufacturers legal exposure they do not discover until an inspection.

An MD-15 import licence from CDSCO gives the authorised representative the right to import the device into India. It does not give any distributor the right to sell, stock, or distribute that device.

For a distributor to legally sell an imported medical device in any state — that distributor must hold a valid SLA sale licence from the State Drug Controller of that state. This licence is applied for separately, from the SLA of each state where the distributor operates.

Most manufacturers hand over their imported devices to national distributors without verifying whether those distributors hold valid SLA sale licences in each operating state. The distributor then sells across multiple states — technically in violation of MDR 2017 Rule 8(2) in every state where their SLA licence is absent or expired.

Mistake 3 — Assuming one SLA licence covers all states

SLA jurisdiction is strictly state-specific. A sale licence granted by Maharashtra's SLA covers sale and distribution within Maharashtra only.

A distributor operating across Maharashtra, Karnataka, Tamil Nadu, Delhi, and Gujarat needs five separate SLA sale licences — one from each state's Drug Controller.

In practice, most national distributors in India do not have complete SLA compliance across every state in their territory. The compliance gap exists quietly until a state-level enforcement action or a pre-tender compliance audit reveals it.

Mistake 4 — Treating loan licence jurisdiction as different from direct manufacturing

Loan licences — which allow a company to manufacture using another company's licensed facility — follow the same jurisdictional rules as direct manufacturing licences.

A loan licence for a Class A or B device is applied for at the SLA of the state where the licensed manufacturing facility is located. Form MD-4 for Class A and B. This is the same authority as direct manufacturing — but a different form. Many manufacturers who know they need to go to SLA for direct manufacturing assume loan licences follow a different route. They do not.

Mistake 5 — Assuming GSR 777(E) exemption eliminates all licensing requirements

GSR 777(E) dated October 2022 exempted Class A non-sterile non-measuring devices from all MDR 2017 provisions. This is a genuine and significant exemption — it removes the manufacturing licence and import licence requirement for qualifying devices entirely.

What it does not remove is the SLA sale licence requirement for distributors selling those exempt devices.

This is a specific ambiguity in the exemption that has not been formally resolved through published CDSCO guidance. The exemption removes the device from MDR 2017 provisions. But the sale licence requirement under the Drugs and Cosmetics Act and the broader regulatory framework may still apply to the distribution activity even where the device itself is exempt from MDR 2017.

Manufacturers whose devices qualify for GSR 777(E) exemption should seek specific legal and regulatory advice on their distributors' sale licence obligations before assuming the exemption eliminates all compliance requirements across the distribution chain.


The Ground Reality — What Seven Years Inside the Government Health System Reveals

The jurisdiction map in Rule 8 is clean on paper. The operational reality is more complex.

Seven years inside India's National Health Mission in Chhattisgarh gave me direct visibility into how regulatory jurisdiction confusion plays out not just for manufacturers but inside government procurement processes.

The confusion is not only a manufacturer problem. It exists within the system itself.

State Drug Controllers and CDSCO operate with limited formal coordination on boundary cases. A device that sits at the Class B/C classification boundary — where the risk classification itself is genuinely uncertain — can find itself caught between two authorities. CLA defers to SLA because the device might be Class B. SLA defers to CLA because the device might be Class C. The manufacturer waits while both authorities consider whether the question belongs to them.

I have seen government hospital procurement processes delayed not because a manufacturer was non-compliant but because the jurisdictional status of a specific device category had never been formally resolved. The procurement committee wanted CLA confirmation. The manufacturer had SLA documentation. Neither was wrong. But the gap between them was enough to delay a procurement cycle by months.

This ground reality explains why Rule 8 jurisdiction clarity matters beyond just filing the right form with the right office. In a procurement environment — especially government procurement — your regulatory documentation needs to be unambiguously correct for the specific authority that a procurement officer will call when they want to verify your compliance status.

A Class B device with SLA manufacturing licence and state-specific SLA sale licences is verifiable by a state procurement officer with a single phone call to their state Drug Controller. A Class B device whose manufacturer has only CDSCO correspondence on file — because they mistakenly filed with CLA — is unverifiable through the state procurement system even if the manufacturer's intent was fully compliant.


The Multi-State Distribution Problem

For manufacturers selling nationally through distribution networks the SLA sale licence requirement creates a compliance multiplication challenge that most organisations have not fully addressed.

India has 28 states and 8 union territories. A national distribution network — in principle — requires valid SLA sale licences in each state and UT where your distributor operates. That is potentially 36 separate licences, each requiring a separate application to a separate State Drug Controller, each with its own processing timeline and fee.

In practice, most national distributors in India do not have complete SLA compliance across every state in their territory. Some have licences in their primary states and operate informally in secondary markets. Some have expired licences that were never renewed. Some have licences that cover the old device category notification but not the current one following MDR 2017 notified category updates.

This compliance gap is the most widespread unaddressed regulatory risk in Indian MedTech distribution.

It is also the risk most likely to surface at the worst possible moment — during a state-level Drug Controller inspection, during a competitor-initiated complaint, during a tender compliance audit, or during a post-market safety investigation where distribution records need to be verified.

The practical steps for any manufacturer to address this:

Step 1 — Obtain a complete list of every state and UT where your distributor sells, stocks, or warehouses your device.

Step 2 — Verify that your distributor holds a valid, current SLA sale licence for your specific device category in each of those states.

Step 3 — For states where licences are absent, expired, or incorrectly categorised — initiate corrective action before an inspection creates urgency.

Step 4 — Build SLA sale licence compliance verification into your annual distributor audit programme as a standing requirement.

This is not a theoretical compliance exercise. It is a practical risk management process for a gap that exists in most national distribution networks right now.


How to Map Your Jurisdiction Correctly Before Filing Anything

A three-step process for any manufacturer or importer to establish their complete regulatory jurisdiction before submitting a single application.

Step 1 — Classify your device correctly under the First Schedule

Your device class determines which authority handles your manufacturing or import licence. If your classification is uncertain — seek formal clarity before filing. A misclassification that sends you to the wrong authority adds months. A misclassification that sends you to a less stringent authority than your device actually requires creates compliance risk that compounds over time.

Step 2 — Map every activity against Rule 8

For each regulatory activity you need — manufacturing, import, sale, clinical investigation, new device permission — map it explicitly against Rule 8. Do not assume. Write it down. Manufacturing: which authority, which form, which fee. Sale and distribution: which SLA, which state, which form, which fee.

Step 3 — Audit your distributor network for SLA sale licence compliance

Before your device reaches the market — whether through import or domestic manufacturing — verify that every distributor in every state they operate in holds a valid SLA sale licence for your device category. This step is consistently skipped. It should be routine.


The Bottom Line

MDR 2017 Rule 8 draws the jurisdictional lines clearly. CLA handles import and high-risk manufacturing. SLA handles lower-risk manufacturing and all-level distribution.

But clarity on paper does not automatically translate into correct filing in practice — because most manufacturers read MDR 2017 for the provisions that affect their first application and stop before they reach the provisions that affect everything that comes after.

CLA gets your device into India. SLA lets your distributor sell it. A clinical investigation approval from CLA does not give anyone in any state the right to sell the device commercially. A manufacturing licence from SLA does not cover import. An import licence from CDSCO does not cover distribution.

Every activity. Every class. Every state. Mapped against Rule 8. Before the first application is filed.

That mapping is fifteen minutes of work. The mistake it prevents can cost four months of runway — and in a funded MedTech startup, four months of runway is not a regulatory inconvenience. It is an existential risk.


MedReg Intel tracks regulatory developments, compliance strategy, and policy analysis relevant to India's medical device sector at medregintel.com

If you are unsure whether your current applications, licences, or distribution arrangements are with the correct regulatory authority — reach out at ankur@medregintel.com before your next application is filed or your next distributor agreement is signed.

Ankur Khare is a Biomedical Engineer and Regulatory Affairs Specialist and the founder of MedReg Intel. This article is for informational purposes and does not constitute formal regulatory or legal advice.

Comments

Popular posts from this blog

The ₹50 Lakh Mistake Killing Indian MedTech Startups — And How to Avoid It

A Practical Roadmap for Developing Medical Devices in India

Make in India for Medical Devices — The Reality No One Is Talking About