How Sterile Procedure Kits Are Regulated: FDA Convenience-Kit Rules, EU MDR Article 22, and the Evidence Pack an Assembler, Distributor, or OEM Buyer Must Verify

Executive Context & Audience Scope: This guide addresses medical-device distributors, hospital procurement committees, OEM/private-label brand owners, and regulatory affairs professionals operating in or sourcing for the United States and European Union markets. When purchasing or assembling a pre-packaged sterile tray containing multiple instruments, dressings, and consumables, commercial teams frequently ask: Does combining cleared or CE-marked components into a single sterile pouch require a new premarket submission? Who bears legal manufacturer liability? And what documentary evidence must be audited before importing or releasing a lot?

The short answer is that neither the US FDA nor the EU MDR treats an assembled kit as a mere 'shopping bag' of pre-cleared items. Assembling a kit creates a distinct regulatory entity with its own labeling, Unique Device Identification (UDI), quality management system (QMS) requirements, and post-market liability. This guide dismantles the legal frameworks in both jurisdictions, analyzes real-world failure patterns from the FDA recall database, and delivers a decision-grade verification checklist for your next request for quotation (RFQ) or supplier audit.

In this guide

• What a 'procedure kit' is to a regulator
• When a kit needs its own FDA 510(k) — and the 1997 convenience-kit policy
• What EU MDR Article 22 requires
• What actually goes wrong — analysis of 4,426 kit/tray recalls
• Who is the legal manufacturer of an assembled kit
• The kit-level sourcing and verification checklist
• Where VEMERIX fits — and where due diligence still begins
• Frequently asked questions

1. What Exactly Is a 'Procedure Kit' to a Regulator — and Why Isn't It Just the Sum of Its Components?

To a clinician or hospital buyer, a sterile procedure kit is an operational efficiency tool: a single sterile package containing a disposable circumcision clamp, scalpel, drape, suture, and gauze, or an ultrasound probe cover, needle guide, and sterile gel packet. It reduces setup time, eliminates room-turnover bottlenecks, and standardizes aseptic technique.

To a regulatory authority, however, packaging multiple medical devices together introduces new, compounding physical, chemical, and microbiological risk vectors:

• Physical & Packaging Dynamics: Heavy metal instruments packed adjacent to thin polyurethane probe covers or fluid tubing can abrade or puncture the sterile barrier during transit.
• Chemical & Material Interactions: Residual Ethylene Oxide (EO) gas, plasticizers, or adhesives from one consumable can migrate to adjacent devices during terminal sterilization or shelf-life aging.
• Intended Purpose Shifts: Grouping individual components together may imply a new clinical workflow or procedure not covered by the original component manufacturers' Instructions for Use (IFU).
• Sterilization Incompatibilities: Subjecting pre-sterilized components to a second terminal sterilization cycle (e.g., re-sterilizing an already irradiated blade with EO gas) can degrade polymers, embrittle plastics, or alter chemical potency.

Under US federal law, 21 CFR 801.3 provides the exact statutory definition: 'Convenience kit means two or more different medical devices packaged together for the convenience of the user.'²

In the FDA classification architecture (analyzed from the openFDA classification snapshot of July 24, 2026, encompassing 7,084 total product codes), kits are not an afterthought. 358 product codes — 132 Class I, 199 Class II, 12 Class III, and 15 unclassified or otherwise designated — carry 'kit' or 'tray' in their device-type name (word-level match; kits classified under component-style names are not counted).⁹,¹¹ Beyond the name-level count, FDA's classification records themselves document a dedicated kit regime: codes such as OHG (Circumcision Tray) and MCY (Wound Dressing Kit) state in their own classification definitions that they were established under the May 20, 1997 convenience-kit guidance and are under enforcement discretion, requiring no kit-level 510(k) when the guidance criteria are met.¹¹

Furthermore, many procedure kits are regulated and cleared as devices in their own right through standard 510(k) premarket notifications, rather than relying on convenience-kit assembly discretion. Table 1 illustrates how dedicated kit product codes coexist alongside single-device clearances in the FDA 510(k) database.

The coexistence of dedicated kit 510(k) clearances — FCM has been cleared continuously from 1976 through May 2026, and FCH and NWO carry a small number of kit-level clearances — alongside kit codes whose classification records place them under the 1997 enforcement-discretion policy (OHG, MCY since May 1997, PPB, OWL, PEZ) confirms the core premise: a kit buyer's first regulatory inquiry must establish whether a proposed product is being sold under a dedicated kit 510(k) clearance or under assembler enforcement discretion.¹⁰

2. When Does a Kit Need Its Own FDA 510(k) — and When Can the Assembler Rely on the 1997 Policy?

In the United States, medical device distributors and assemblers often believe that if all items inside a kit are legally marketed, the kit itself is completely exempt from FDA oversight. This is legally incorrect. The governing policy is the FDA's Convenience Kits Interim Regulatory Guidance, issued on May 20, 1997.¹

The 1997 policy is an exercise of enforcement discretion, not a formal statutory exemption. FDA explicitly states that it 'does not intend to require 510(k) clearance' for a convenience kit, but only when all three of the following cumulative conditions are strictly satisfied:

• Condition 1 — Listed Kit Type: The kit must match one of the recognized kit types published in the Attachment to the 1997 Guidance (which treats 'kit', 'set', and 'tray' as synonymous). The list explicitly includes Circumcision Tray (under Obstetrical and Gynecological Devices), Sterile Puncture Tray (under General and Plastic Surgery Devices), Catheter Care Tray (under Gastroenterology-Urology Devices), Suture Removal Kit, Dressing Change Tray, and Bone Marrow Biopsy Tray.
• Condition 2 — Independently Cleared Components: Every single medical device component within the kit must already have its own valid 510(k) clearance or be legally 510(k)-exempt in its own right. The assembler cannot introduce an unapproved or unauthorized component into a convenience kit.
• Condition 3 — Documented Quality System Determination: The assembler/manufacturer must maintain documented determinations in its Quality System files demonstrating that the assembly and any further processing (such as packaging and terminal sterilization) do not significantly affect the safety or effectiveness of any component device.

If any one of these three conditions fails, enforcement discretion dissolves, and the kit becomes an adulterated or misbranded device requiring its own dedicated 510(k) premarket notification before commercial distribution.

What Triggers Cause a Convenience Kit to Lose 510(k) Enforcement Discretion?

Regulatory and procurement teams must monitor five specific boundaries that immediately void convenience kit status:

• Inclusion of Unapproved or Uncleared Devices: Sourcing a generic scalpel, needle guide, or forceps from an unregistered overseas supplier that lacks an active 510(k) clearance or 510(k)-exempt listing voids the entire kit's discretion.
• Inclusion of Drugs or Biologics: The 1997 guidance leaves drug requirements untouched: it directs assemblers of kits containing components regulated as drugs to FDA's drug center (CDER) for the premarket requirements of those drug components, and it does not apply to kits under CBER (biologics) jurisdiction. Adding a pre-filled local anesthetic (such as 1% Lidocaine HCl) takes the kit outside this device-only policy and into drug-device combination territory.
• Altered Component Indications or Workflows: Grouping a general-purpose trocar and catheter together and marketing the kit specifically for a specialized neonatal or cardiovascular indication not cleared for the individual components.
• Sterilization Interactions: Subjecting a component cleared only for gamma radiation to an Ethylene Oxide (EO) sterilization cycle that generates toxic residuals or alters polymer tensile strength without validated biocompatibility data.
• IVD Kits and Combination Products: FDA's UDI convenience-kit interpretation excludes in vitro diagnostic devices subject to the IVD labeling requirements of 21 CFR Part 809 and combination products as defined in 21 CFR 3.2(e) — IVD test kits sit outside the convenience-kit rules covered in this guide.

The Assembler Is Still a Legal Manufacturer: QMSR and Kit UDI Obligations

A common misconception among distributors is that relying on the 1997 convenience-kit policy eliminates general manufacturing obligations. In reality, the FDA considers the entity that packages and sterilizes the kit to be a device manufacturer subject to full establishment registration (21 CFR Part 807), device listing, and Current Good Manufacturing Practice (CGMP).

The QMSR Transition (Effective February 2, 2026): The 1997 guidance mandated that assemblers maintain files 'in accordance with the Quality System regulation (21 CFR 820)'. On February 2, 2026, the FDA's Quality Management System Regulation (QMSR) took effect, harmonizing 21 CFR Part 820 with ISO 13485:2016.⁴ FDA has not reissued the 1997 guidance, but the quality system it references now is the QMSR: kit assemblers must maintain their convenience-kit determinations, compatibility reviews, and sterilization records within a QMS built on ISO 13485:2016 — for example under its design-and-development (Clause 7.3) and production (Clause 7.5) controls — rather than the superseded QSR text.

Kit-Level Unique Device Identification (UDI): Under FDA's UDI regulations and the April 2019 Convenience Kits Guidance, a convenience kit is treated as a single device for UDI labeling purposes.³ Under 21 CFR 801.30(a)(11), individual devices packaged within the immediate container of a convenience kit are excepted from bearing their own UDI on their individual packaging, provided that the exterior label of the convenience kit bears a compliant UDI Device Identifier (DI) and Production Identifier (PI). Note the boundary: the 2019 guidance states its convenience-kit interpretation applies only to the UDI system and does not define the term for other regulatory purposes.

3. What Does EU MDR Article 22 Require — Statement, Notified Body, or Full Conformity Assessment?

In the European Union, the regulatory regime for multi-component kits is governed by Article 22 of Regulation (EU) 2017/745 (Medical Device Regulation / MDR), titled 'Systems and procedure packs'.⁵

Unlike the US policy of enforcement discretion, Article 22 establishes a codified, three-tiered statutory framework. The applicable conformity path depends entirely on whether the components are already CE-marked, whether they are combined within their approved intended purposes, and whether the assembler sterilizes the final pack.

Deconstructing Article 22 Subsections: Statements, Sterility, and the 'Device in Its Own Right' Cliff

Understanding the exact mechanics of Article 22 requires examining its statutory subsections in detail:

• Article 22(1) Scope: Natural or legal persons may combine CE-marked medical devices with other CE-marked devices, IVDs (under Regulation (EU) 2017/746), or other products that comply with applicable EU legislation, provided they are placed on the market as a system or procedure pack.
• Article 22(2) The Drawn-Up Statement: The assembler must draw up a formal statement declaring that: (a) they verified the mutual compatibility of the devices in accordance with the manufacturers' instructions and acted accordingly when assembling the pack; (b) they packaged the system or procedure pack so that the devices' characteristics and performance are not adversely affected, and supplied it with the relevant information, including the information to be provided by the manufacturers per Section 23 of Annex I; and (c) the whole activity is subject to appropriate methods of internal monitoring, verification and validation.
• Article 22(3) Notified Body Sterilization Procedure: If the assembler sterilizes the procedure pack, they must apply one of the conformity assessment procedures in Annex IX (QMS audit) or Annex XI Part A (Production Quality Assurance). Crucially, the Notified Body's audit and certificate are strictly limited to the aspects of the assembly related to securing and maintaining sterility until the sterile barrier is opened or damaged.
• Article 22(4) The 'Device in Its Own Right' Trigger: If the pack contains any device that does not bear a CE mark, if the combination of devices is not compatible with their original intended purposes, or if sterilization was not carried out in accordance with the component manufacturers' instructions, the pack is treated as a device in its own right. The assembler then assumes the obligations incumbent on manufacturers under Article 10 and must submit the kit to a complete conformity assessment under Article 52.
• Article 22(5) Prohibition of Additional CE Marking: Article 22(5) explicitly commands: 'The systems or procedure packs referred to in paragraph 1 shall not themselves bear an additional CE marking'. Instead, the pack label must bear the name, registered trade name/mark, and contact address of the assembler, along with the information specified in Section 23 of Annex I.

MDCG 2018-3 Rev.1 UDI Rules and Boundary Conditions

The European Commission's Medical Device Coordination Group (MDCG) issued MDCG 2018-3 Rev.1 (June 2020) to establish UDI and registration mechanics for systems and procedure packs.⁶

Under MDCG 2018-3 Rev.1, an Article 22 procedure pack must be assigned a Basic UDI-DI — identifying packs with the same group of components and the same intended purpose — and provided, together with the other core data elements of Annex VI Part B, to the UDI database (EUDAMED) under the assembler's Single Registration Number (SRN), in line with Article 29(2). The pack itself must then be assigned and bear its own UDI (UDI-DI + UDI-PI), generally affixed to the outside of the packaging; the Basic UDI-DI is the registration identifier, not a labeling element. The guidance explicitly confirms that packs falling under Article 22(4) (devices in their own right) are outside the scope of procedure-pack registration and must follow standard medical device UDI rules.

The Client-Requested Bundling Boundary: MDCG 2018-3 Rev.1 also draws a practical boundary below Article 22: where a supply-chain actor makes different products available together at the request of a client or hospital, and — in that entire combination — neither places that combination on the market itself nor intends it to be used together for a specific medical purpose, that person is considered a distributor, not a system or procedure pack producer under Article 22(1). The guidance's own example: a distributor supplying sterile tweezers, a sterile needle and surgery gloves in one shipment at a client's request. The corollary for buyers: standardized, catalogued procedure packs produced in advance for commercial distribution are inside Article 22, and a supplier cannot escape its duties by calling a catalog pack a 'custom bundle'.

4. What Actually Goes Wrong With Kits in the Field — Analysis of 4,426 FDA Kit/Tray Recalls (2015–2026)

Regulatory theory dictates what should happen; post-market surveillance data reveals where kit assembly actually breaks down. To quantify real-world failure mechanisms, we queried the openFDA device recall database (local snapshot of July 24, 2026, comprising 58,785 total recall actions).⁹

Across all medical device product codes, 7,343 of 58,785 all-time recall actions (12.5%) named a kit or tray in the product description. Focusing on the modern regulatory window from 2015 through partial-year 2026, kit and tray assemblers — mostly firm-initiated actions recorded in the FDA recall database — logged 4,426 kit/tray recall actions.

Classifying the 4,426 recall narrative reasons using non-exclusive root-cause taxonomy reveals where quality control failures concentrate (Table 3).

Methodological Note: Categories in Table 3 are non-exclusive (individual recall narratives often cite multiple co-occurring failures, such as a component defect leading to packaging abrasion); percentages represent the share of the 4,426-action dataset matching specific keyword patterns. Counts represent reporting actions, not incidence rates.

The Cascade Recall Phenomenon: When One Component Sinks the Entire Kit

The most consequential finding in the 2015–2026 recall record is the cascade recall phenomenon. A kit assembler may maintain immaculate cleanrooms, perfect pouch-sealing validation, and flawless batch records, yet face a massive, multi-million-dollar field recall because an upstream component supplier issued a recall for a single item inside the tray.

Our dataset analysis identified at least 330 kit recall actions between 2015 and 2026 that were triggered because a contained sub-component was recalled upstream or made subject to an FDA safety alert (113 in 2024 — dominated by kits containing plastic syringes covered by the FDA's March 19, 2024 Safety Alert — and 68 already in partial-year 2026). Two recent live-verified openFDA API records demonstrate how component cascades occur in practice:

• Case 1 — Medline Circumcision Tray Cascade (FDA Recall Z-2546-2026, Initiated May 21, 2026): Medline Industries initiated a recall of 512 convenience kits—specifically including the MERCY MEDICAL CIRCUMCISION TRAY—because the kits contained Huons Lidocaine HCl Injection USP 1% ampoules that Huons had recalled upstream after an FDA manufacturing inspection identified quality issues.⁷ The kit's own assembly, sealing, and sterility were not in question — the recall existed solely because of the drug ampoule inside it.
• Case 2 — Medline Ultrasound Vascular Access Kit Cascade (FDA Recall Z-2742-2024, Initiated April 8, 2024): Medline recalled procedural kits (including peripheral ultrasound catheter insertion kits) because they contained plastic disposable syringes affected by the FDA Safety Alert issued on March 19, 2024, concerning plastic syringes from certain manufacturers.⁸

Circumcision Tray Recall Concentration: Across the 2015–2026 dataset, 33 recall actions specifically named circumcision trays or circumcision kits (predominantly Medline Industries and Centurion Medical Products). The root causes spanned component cascades (affected syringes, recalled lidocaine, non-conforming PVP prep pads, MASTISOL adhesive), sterile-barrier seal failures (incomplete heat seals, compromised packaging), and assembly omissions (a kit lot distributed without the required sterilization process).⁹

Critical Post-Market Caveat: Passive surveillance data in FDA MAUDE and recall databases reflect reporting volume, product composition, and commercial market presence—not absolute failure rates or safety rankings. A large kit assembler like Medline appears frequently in recall data because it manufactures tens of millions of procedure packs annually across thousands of hospital configurations.

5. Who Is the Legal Manufacturer of an Assembled Kit — and What Are the Warehouse Kitting Traps?

A frequent operational scenario in medical device distribution involves 'warehouse kitting': a regional distributor purchases finished sterile circumcision devices from one manufacturer, sterile drape packs from a second, and sterile gauze from a third, places all three into a branded outer box in its local warehouse, and sells the combination as a 'Complete Circumcision Procedure Pack'.

What is the legal status of this distributor under US and EU law?

The Earliest-Expiry Trap: A recurring finding in FDA inspections and EU notified-body audits is failure to respect the earliest-expiry rule. If a procedure tray contains a surgical clamp with a 5-year shelf life, sterile gauze with a 3-year shelf life, and a skin prep solution with a 2-year shelf life, the outer kit label must bear an expiration date of exactly 2 years. Assigning a 5-year expiration date to the kit would render it misbranded.

6. The Kit-Level Sourcing & Verification Checklist: What to Mandate in Your Next Supplier RFQ

When qualifying a contract manufacturer or supplier for sterile procedure kits—such as circumcision anastomat kits, ultrasound-guided vascular puncture sets, or NPWT dressing kits—procurement and quality teams should not accept a generic ISO 13485 certificate as proof of kit compliance. Mandate the following six-point Kit Evidence Pack in your RFQ specifications (Table 5).

7. Where VEMERIX Fits — And Where Due Diligence Still Begins

VEMERIX is the international brand of Weihai Medison Medical Equipment Co., Ltd., positioned as a Minimally Invasive Surgery Total Solution Platform serving urology, vascular surgery, and perioperative care.

Our core consumable portfolio includes dedicated, multi-component sterile procedure kits developed specifically for high-throughput outpatient surgery and specialized clinical workflows:

• Circumcision Anastomat Kit (Lu Mech Reg. 20162020372): A specialized urology procedure pack pairing our NMPA Class II circumcision anastomat with a sizing gauge, prepuce forceps, elastic cohesive bandage, gauze dressing, skin-prep swabsticks, and auxiliary consumables in adult and children configurations. For details on kit component selection and lot-acceptance testing, refer to our companion circumcision anastomat kit components and acceptance guide.
• Ultrasound Guidance Puncture Kit: A single-use Class II imaging-access kit pairing universal-fit sterile probe sleeves, sterile needle guides, elastic securement bands, and sterile acoustic gel packets for vascular-access localization and percutaneous guidance workflows. For probe-sleeve compatibility rules, consult our ultrasound-guided puncture kit selection guide.
• Disposable NPWT Drainage Dressing Kit: A perioperative wound-care pack pairing our proprietary side-suction multi-chamber drainage cup (S.O.M.T technology) with PVA / PU foam, a semi-permeable membrane, and independent drainage and injection lines with a tee connector.

For deeper analysis of device packaging validation and private-label compliance, see our technical frameworks on sterile barrier packaging and shelf-life validation, our UDI decision matrix for private-label devices, and our guide on design transfer and change control under QMSR/ISO 13485.

Our Editorial Commitment to Transparent Due Diligence: We do not ask prospective distributors or procurement teams to take quality on faith. We believe that whether you are qualifying VEMERIX or any other global medical manufacturer, you should subject our kits to the exact six-gate verification checklist outlined in Table 5.

We provide qualified distributors and OEM partners with complete regulatory evidence dossiers—including component registration certificates, EO sterilization validation reports per ISO 11135, ISO 11607 packaging validation data, and comprehensive Quality Agreements. Explore our Quality & Regulatory Management Systems or contact our technical team to request sample packs and regulatory documentation.

8. Frequently Asked Questions (FAQ)

Does a medical convenience kit always need its own 510(k) in the United States?

No. Under FDA's May 1997 Convenience Kits Interim Regulatory Guidance, the FDA exercises enforcement discretion (meaning it does not intend to require a 510(k)) if the kit matches one of the recognized types on FDA's list (e.g., Circumcision Tray, Sterile Puncture Tray), all component devices are independently 510(k)-cleared or exempt, and the assembler maintains documented determinations in its Quality System (under QMSR / ISO 13485) proving that packaging and sterilization do not affect component safety or effectiveness.¹ If any condition is violated, a dedicated 510(k) is required.

Can an EU MDR Article 22 procedure pack carry its own CE marking on the outer box?

No. Under Article 22(5) of Regulation (EU) 2017/745, procedure packs assembled under Article 22(1) shall not themselves bear an additional CE marking.⁵ The individual CE-marked components inside retain their CE status, but the outer pack bears the assembler's name and address, its own UDI (UDI-DI + production identifier), and Annex I Section 23 information; the Basic UDI-DI is registered in EUDAMED rather than placed on the label. If the assembler terminally sterilizes the pack under Article 22(3), the notified body's involvement is limited to the aspects securing and maintaining sterility — the pack itself still does not bear an additional CE marking.

Can a medical device distributor assemble sterile procedure kits in its own warehouse?

Yes, but doing so elevates the distributor to a legal manufacturer under both regimes. In the US, the distributor becomes an assembler/repackager subject to FDA establishment registration (21 CFR Part 807), device listing, QMSR compliance, and kit-level UDI rules. In the EU, the distributor becomes an Article 22 assembler (requiring EUDAMED Actor registration and an Article 22 Statement) or, if it performs terminal sterilization, must undergo a Notified Body audit under Article 22(3).

What is the most common cause of procedure kit recalls in the FDA database?

In our analysis of 4,426 FDA kit/tray recall actions (2015–2026), sterile-barrier and packaging integrity failures constituted 31.1% (1,377 actions), followed by component quality defects at 29.1% (1,288 actions).⁹ Furthermore, at least 330 kit recalls were pure cascade recalls caused by upstream sub-components being recalled or made subject to an FDA safety alert, underscoring the critical necessity of strict supplier change control.

Do high recall counts mean that procedure kits are inherently riskier than single devices?

No. Passive surveillance records in openFDA reflect commercial volume, the large number of individual components per kit, and mandatory post-market reporting rules—not true clinical failure incidence or relative product safety. Multi-component kits dominate hospital supply chains; when an upstream manufacturer recalls a widely distributed syringe or vial, dozens of downstream kit assemblers must execute mandatory kit recalls even if the kit's primary packaging and sterile barrier were flawless.