ISO 14971-2019 PDF

Full title and description

ISO 14971:2019 — Medical devices — Application of risk management to medical devices. This international standard specifies terminology, principles and a systematic process for risk management that applies across the entire lifecycle of medical devices (including SaMD and IVDs), covering hazard identification, risk analysis, risk evaluation, risk control and production/post‑production activities.

Abstract

ISO 14971:2019 (3rd edition) provides manufacturers and other stakeholders a normative framework for establishing and maintaining a risk management system for medical devices. The 2019 edition formalizes benefit–risk analysis, strengthens requirements for production and post‑production information, and separates detailed guidance into the companion technical report (ISO/TR 24971:2020) so that the standard itself remains a concise set of requirements.

General information

• Status: Published (current; confirmed in ISO review process).
• Publication date: December 2019.
• Publisher: International Organization for Standardization (ISO).
• ICS / categories: 11.040.01 (Medical equipment and supplies).
• Edition / version: 3rd edition (ISO 14971:2019).
• Number of pages: 36 pages.

Scope

ISO 14971:2019 specifies a process for the application of risk management to medical devices throughout their lifecycle, from design and development through production, distribution, use, maintenance and disposal. It defines required activities for identifying hazards, estimating and evaluating associated risks, implementing and verifying risk controls, documenting risk acceptability decisions (including benefit–risk considerations), and monitoring effectiveness using production and post‑production information. The standard is intended for use by manufacturers and organizations involved in medical device risk management.

Key topics and requirements

• Definitions and terminology for risk, harm, benefit and related concepts as applied to medical devices.
• Establishing a risk management process and risk management plan covering all lifecycle stages.
• Hazard identification and reasonably foreseeable misuse considerations.
• Risk analysis and estimation (severity and probability) and risk evaluation against predefined acceptability criteria.
• Risk control options, implementation of controls, and verification of control effectiveness.
• Benefit–risk analysis: documenting that overall residual risk is acceptable when weighed against expected medical benefits.
• Requirements for production and post‑production information gathering, review and corrective action when new risks or changes in the state of the art are identified.
• Traceability and documentation requirements to support regulatory submissions and quality systems (e.g., alignment with ISO 13485 processes).

These topics are normative in ISO 14971:2019; extensive guidance and examples are provided in the companion technical report ISO/TR 24971:2020.

Typical use and users

Used primarily by medical device manufacturers (design, engineering, regulatory and quality teams), notified bodies and conformity assessment bodies, clinical safety officers, and consultants. It supports risk management activities required for regulatory submissions, design controls, post‑market surveillance, and integration with quality management systems such as ISO 13485. Procurement, service and maintenance organizations, and software developers of SaMD also use the standard to ensure consistent risk management across product portfolios.

Related standards

Key companion and related documents include ISO/TR 24971:2020 (Guidance on the application of ISO 14971) and various regional/adopted versions such as EN ISO 14971:2019 with amendment A11:2021 (which adds EU‑specific annexes mapping the standard to MDR/IVDR requirements). ISO 14971 is commonly used alongside ISO 13485 (medical device quality management) and other device‑specific standards that inform hazard identification and control measures.

Keywords

risk management; medical devices; ISO 14971; benefit‑risk analysis; hazard identification; post‑market surveillance; risk acceptability; SaMD; IVD; ISO/TR 24971.

FAQ

Q: What is this standard?

A: ISO 14971:2019 is the international standard that specifies a systematic, documented process for risk management of medical devices across their entire lifecycle.

Q: What does it cover?

A: It covers terminology, requirements for establishing a risk management process and plan, hazard identification, risk analysis and evaluation, risk control implementation and verification, benefit–risk analysis for residual risk acceptability, and production/post‑production monitoring and actions. Guidance is available in ISO/TR 24971:2020.

Q: Who typically uses it?

A: Medical device manufacturers (design, regulatory, quality teams), notified bodies and conformity assessors, clinical engineers, safety officers, consultants, and others responsible for device safety and regulatory compliance.

Q: Is it current or superseded?

A: ISO 14971:2019 is the current (3rd) edition, published in December 2019; the edition was reviewed/confirmed in ISO’s periodic review process and remains the active version. ISO/TR 24971:2020 provides the current guidance document.

Q: Is it part of a series?

A: ISO 14971 is the principal risk‑management standard for medical devices and is supported by the technical report ISO/TR 24971 (guidance). National/adopted regional versions (EN ISO 14971 and its amendments) exist to provide jurisdictional mapping (for example to EU MDR/IVDR). It is frequently used together with ISO 13485 and device‑specific standards.

Q: What are the key keywords?

A: Risk management, medical device safety, hazard analysis, risk control, residual risk, benefit‑risk analysis, production and post‑production information, ISO/TR 24971.