Medical Device UDI + RFID

What is FDA UDI and what does it require?

The first thing teams learn about UDI is that marking the device is only half the job. You can engrave a flawless identifier onto every instrument and still be out of compliance, because the same number also has to live in a federal database — and the database, not the device, is what an inspector pulls up first. UDI is two ledgers that must agree: the one in your hand and the one in Washington. The FDA Unique Device Identification (UDI) rule established a global system for identifying medical devices in commerce. Every device sold in the US carries a UDI; every UDI is registered in the FDA Global UDI Database (GUDID).

• Device Identifier (DI): static portion that identifies the device model, manufacturer and version. Same DI for every unit of that model.
• Production Identifier (PI): variable portion containing lot, serial number, manufacturing date and expiry. Changes per unit or per batch.
• Required formats: UDI must be in human-readable form (printed text) AND AIDC (Auto-Identification and Data Capture) form. AIDC = barcode, RFID, NFC, or similar machine-readable.
• Issuing agencies: FDA-accredited issuing agencies (GS1, HIBCC, ICCBBA) provide UDI numbering. GS1's GTIN-14 + serial is the most common DI structure.
• GUDID submission: every UDI must be submitted to the FDA Global UDI Database with full device attributes (intended use, contraindications, MRI safety, etc.). This is a separate compliance task from the physical labeling.

How does RFID work as a UDI data carrier?

RFID is one of several FDA-accepted AIDC formats for UDI. Its advantages over barcode are read speed, no line-of-sight requirement and reusability across the device lifecycle. Implementation has specific requirements.

• Encoding format: UDI string encoded into the RFID memory using GS1 element string format. Tag carries both DI and PI in a single read.
• Chip selection: passive HF or UHF — neither is mandatory. HF for surgical instruments and implants needing close-range identification; UHF for capital equipment and bulk inventory.
• Required dual-marking: UDI must appear in human-readable form (printed) AND AIDC (RFID). RFID alone is insufficient — printed UDI must accompany.
• Persistence: UDI must remain readable for the device's full useful life. RFID tags must survive the device's normal usage (sterilization, wash, environment) for the full warranty period.
• Direct-Part-Marking (DPM): for reusable surgical instruments, UDI must be permanently marked on the instrument body. RFID tag plus laser-engraved alphanumeric is typical.

How do you build a UDI + RFID program?

A combined UDI + RFID program touches design, manufacturing, packaging, regulatory affairs and post-market surveillance. The five-step playbook below comes from successful medical-device manufacturer programs.

• Design phase: choose UDI issuing agency (GS1 most common), reserve DI numbering range, design UDI placement on every device variant.
• Manufacturing line: integrate UDI marker (printer + RFID encoder) into the production line. Each device gets DI + PI marked plus RFID-encoded.
• GUDID submission: regulatory affairs team submits each UDI's metadata to GUDID via HL7 message or FDA portal. Submission deadline: prior to commercial distribution.
• Distribution and traceability: hospital and distributor systems read UDI + RFID for inventory, recall and adverse-event tracking. RFID accelerates the read; UDI provides the standardized identifier.
• Post-market surveillance: when adverse events occur, UDI lets FDA and manufacturer trace every unit affected. RFID helps locate units in hospital inventory; UDI tells you which units to look for.

Where does the FDA UDI compliance timeline actually sit in 2026?

The UDI Final Rule was published September 24, 2013 (21 CFR 801 Subpart B and 21 CFR 830) and phased in by device risk class. Greenlight Guru's UDI guide and FDA's own UDI Basics page are the two most cited references for the schedule. By 2026 the rule applies to every regulated risk class — but several edge cases still trip programs up.

• Class III (life-supporting / life-sustaining): UDI compliance since September 24, 2014. By 2026 these devices have been UDI-labelled for over a decade; the 2026 issue is data hygiene in GUDID, not whether the label is present.
• Class II (most general medical devices): UDI compliance since September 24, 2016. By 2026 a 'missing UDI' on a Class II device is treated as a labelling violation and a Form FDA-483 inspection observation.
• Class I and unclassified: UDI compliance and direct-mark dates September 24, 2022, with GUDID submission by December 8, 2022. The 2026 audit picture for Class I includes legacy inventory that pre-dates the deadline; FDA inspectors look for evidence of the rolling label transition.
• Direct Part Marking (DPM): 21 CFR 801.45 requires permanent direct marking on devices intended for more than one use and reprocessed before each use. RFID embedded in the handle is one acceptable AIDC carrier — but FDA also expects a human-readable identifier on the device, which means laser-etched alphanumeric or 2D DataMatrix usually accompanies the RFID.
• Combination products and convenience kits: FDA UDI rule treats combination products and convenience kits with specific exemptions per 21 CFR 801.30. Programs marking the kit-level UDI but missing the component UDI on the regulated device inside are a recurring 483 observation.

How does FDA UDI compare with EU MDR UDI?

EU Medical Devices Regulation 2017/745 (MDR) and In Vitro Diagnostics Regulation 2017/746 (IVDR) introduced the EU's UDI system in parallel with FDA's. Greenlight Guru's UDI overview emphasises that the two are conceptually aligned but procedurally divergent, with EUDAMED rather than GUDID, and an additional Basic UDI-DI grouping that has no FDA equivalent. Multinational programs need to track five differences explicitly.

• Basic UDI-DI vs UDI-DI: EU MDR introduced a Basic UDI-DI to group related device variants under one product family identifier. The Basic UDI-DI never appears on the device label or in AIDC — it is a regulatory grouping in EUDAMED. Manufacturers must assign a Basic UDI-DI per product group and map child UDI-DIs into it.
• Issuing entities: FDA approves GS1, HIBCC and ICCBBA. The European Commission also accredits IFA (Informationsstelle für Arzneispezialitäten) for certain IVDs in addition to those three. Most multinational manufacturers stay on GS1 across regions to keep one identifier set.
• Database: FDA GUDID (with public-facing AccessGUDID) versus the EU EUDAMED. Roughly 57 attributes in GUDID; ~111 attributes in EUDAMED. Submissions are independent — submitting to one does not feed the other.
• Single Registration Number (SRN): EU MDR requires economic operators (manufacturer, authorised representative, importer) to register and obtain an SRN before submitting UDI data to EUDAMED. FDA has no SRN equivalent — labeler identity is captured directly within GUDID submissions.
• Nomenclature: EU MDR uses the European Medical Device Nomenclature (EMDN) for product classification within EUDAMED. FDA uses its own product-code system (the FDA Device Classification database). Multinational regulatory teams typically maintain a crosswalk between EMDN, FDA product codes and the legacy Global Medical Device Nomenclature (GMDN) used by some other regions.

FAQ