As global healthcare systems shift toward automated supply chain tracking, post-market surveillance, and rapid recall execution, Unique Device Identification (UDI) has transitioned from an administrative option to an absolute pre-market regulatory barrier 1 4. For original equipment manufacturer (OEM) contract manufacturing and private-label programs—spanning disposable circumcision devices, endovenous laser fibers, NPWT dressings, and sterile injection needles—navigating UDI assignment across the US FDA, European Union (MDR), and China NMPA requires a clear contractual and operational roadmap.
Misalignments regarding who holds the UDI-DI, which issuing agency format is used (GS1, HIBCC, ICCBBA, or IFA), and how data fields are structured across regional databases can cause customs rejections, audit findings, or product holds. This guide provides a cross-jurisdiction decision matrix for private-label device programs.
Who is the labeler for a private-label device in each region?
A fundamental point of confusion in OEM and private-label partnerships is determining whether the contract manufacturer (OEM/ODM) or the brand owner is legally responsible for UDI registration.
Across all three regulatory frameworks—21 CFR 830.3 in the US, EU MDR 2017/745 Article 10, and NMPA UDI Rules Article 4—the rule is consistent: The legal manufacturer (the entity whose name appears on the device label as manufacturer) is the designated Labeler 3 5 7.
- Scenario A: Own-Brand / Private Label (Brand Owner as Legal Manufacturer): The brand owner obtains market authorization (510(k), CE mark, NMPA license) under its own name. The brand owner must register with an issuing agency (e.g., GS1 Company Prefix), assign the UDI-DI, own the regulatory database account (GUDID, EUDAMED, NMPA UDI Database), and perform data submissions. The contract manufacturer physically prints and applies the UDI barcode on the production line based on artwork specifications supplied by the brand owner.
- Scenario B: Distributor under OEM Label: The contract manufacturer (e.g., Weihai Medison) retains market authorization and lists its name as manufacturer, while the distributor markets the product under a commercial agreement. In this scenario, the OEM holds the UDI-DI, submits database entries, and maintains regulatory ownership.
If a private-label brand owner transitions its contract manufacturing supplier while maintaining its own legal manufacturer identity on the package, the primary UDI-DI assigned by the brand owner remains unchanged. However, the internal manufacturing site identifier recorded within the regulatory database record must be updated to reflect the new production facility registration.
What is the difference between a UDI-DI, a Production Identifier, and the EU Basic UDI-DI?
Understanding UDI requires separating static device identifier data from dynamic production data, as well as accounting for the European Union's unique administrative tier.
- UDI-DI (Device Identifier): A mandatory, fixed numeric or alphanumeric code specific to a manufacturer and device model/version. It serves as the primary key in public UDI databases. Examples include GS1 GTIN (Global Trade Item Number) or HIBCC LIC.
- UDI-PI (Production Identifier): A dynamic code applied during manufacturing that captures production-specific control data. Under FDA 21 CFR 801.40 and MDR Annex VI, the UDI-PI must include: (a) Lot or batch number, (b) Serial number (where applicable), (c) Expiration date, and (d) Manufacturing date.
- Basic UDI-DI (EU MDR Specific): Introduced under EU MDR 2017/745, the Basic UDI-DI is an administrative grouping code for device families with the same intended purpose, risk class, and design attributes 5. Crucially, the Basic UDI-DI does not appear on the packaging label or barcode; it appears on EU Declarations of Conformity, Technical Documentation, Notified Body Certificates, and EUDAMED.
For single-use sterile consumables, barcode syntax must follow standardized issuing agency specifications (GS1 General Specifications, HIBCC Standard, or ICCBBA for blood/tissues). Under GS1, Application Identifiers (AIs) structure the barcode data stream:
(01)GTIN / UDI-DI (14 digits)(17)Expiration Date (YYMMDD format)(10)Batch / Lot Number (alphanumeric up to 20 characters)(11)Manufacturing Date (optional YYMMDD format)(21)Serial Number (for serialized Class III devices or capital consoles)
Which database do I submit to in the US, EU, and China, and by when?
While UDI data structure is largely harmonized through International Medical Device Regulators Forum (IMDRF) guidelines, each major jurisdiction operates its own independent database and enforcement schedule 2 6 7.
| Regulatory Dimension | United States (US FDA) | European Union (EU MDR) | China (NMPA) |
|---|---|---|---|
| Primary Governing Regulation | 21 CFR Part 830 & 21 CFR 801.20 | Regulation (EU) 2017/745 (MDR) Art. 27-29 | Rules for UDI System (NMPA Announcement 66) |
| Central Regulatory Database | GUDID (Global UDI Database) | EUDAMED (UDI/Devices Module) | NMPA National UDI Database |
| Family Grouping Identifier | Not Applicable (Direct DI submission) | Basic UDI-DI (Mandatory key for certificates) | Not Applicable (Direct DI submission) |
| Mandatory Database Milestone | Class III (2014), Class II (2016), Class I (2018/2022 enforcement policy) | EUDAMED UDI/Devices Module mandatory on 28 May 2026 | Class III first batch (Jan 2021); remaining Class III + IVDs (Jun 2022); selected Class II (Jun 2024) |
| Direct Marking Requirement | Mandatory ONLY for reusable devices reprocessed between uses | Mandatory ONLY for reusable devices reprocessed between uses | Mandatory ONLY for reusable devices reprocessed between uses |
| Accepted Issuing Agencies | GS1, HIBCC, ICCBBA | GS1, HIBCC, ICCBBA, IFA | GS1, China Article Numbering Center (CIIA), ZIIA |
Source: FDA, EU Commission & NMPA Regulatory Frameworks / VEMERIX Regulatory Synthesis
In the European Union, the mandatory application of the EUDAMED UDI/Device registration module on 28 May 2026 marks a critical operational threshold 6. Under the gradual roll-out mechanism introduced by Regulation (EU) 2024/1860, the mandatory use of an EUDAMED module begins six months after the European Commission publishes an Official Journal notice confirming that the module is fully functional. The Commission published that notice (Commission Decision (EU) 2025/2371) on 27 November 2025, making the Actor registration and UDI/Devices modules binding from 28 May 2026. Post-May 2026, placing any Class I, IIa, IIb, or III device on the EU market requires a validated EUDAMED registration containing the Basic UDI-DI and all associated UDI-DIs.
In China, NMPA implemented UDI in distinct catalog phases following the 2019 Rules for the UDI System. The first batch was originally scheduled for 1 October 2020 but was postponed to 1 January 2021:
- Phase 1 (1 January 2021): First batch of 69 high-risk Class III devices (orthopedic implants, cardiac pacemakers, vascular stents).
- Phase 2 (1 June 2022): Remaining Class III medical devices, including in vitro diagnostic (IVD) reagents.
- Phase 3 (1 June 2024): A selected catalog of 103 Class II devices covering high-demand single-use products, centralized-procurement items, and medical-aesthetic devices. Class I devices are not yet covered and remain on a future expansion timeline.
openFDA GUDID Dataset Insights: Real-World Registration Behavior for Single-Use Consumables
Analyzing public UDI data from the openFDA GUDID database (which contains over 5,080,000 registered Device Identifier records) reveals revealing patterns in how single-use sterile devices are listed by manufacturers 9.
When examining UDI DI registration volumes across surgical circumcision and urology product categories under FDA regulation 21 CFR 884.4530, significant structural differences emerge:
- Product Code OHG (Circumcision Tray / Kit): 1,384 registered DIs in GUDID. Trays and comprehensive procedure kits account for the largest proportion of registered UDI records because multi-component kits require unique kit-level DIs.
- Product Code PRN (Pediatric Position Holder / Ring System): 245 registered DIs in GUDID, reflecting established pediatric clamp and ring device lines.
- Product Code HFX (Circumcision Clamp): 130 registered DIs in GUDID.
- Product Code FHG (Circumcision Bell): 34 registered DIs in GUDID.
- Product Code QQR (Circumcision Device With Stapler): 0 registered DIs in GUDID. This zero count highlights that many international manufacturers of single-pass circular staplers market their devices overseas under CE or NMPA approvals without separate 510(k) GUDID registration, or bundle them under broader general surgical stapler product codes.
This empirical data underscores the necessity for private-label brand owners to verify that their contract manufacturer has assigned proper, standalone UDI-DIs for the exact target market, rather than assuming an overseas registration carries over automatically.
When is direct marking required for a single-use device?
A frequent concern for OEM engineering teams is whether UDI codes must be permanently etched or printed directly on the physical device body (Direct Marking / DPM).
Under US 21 CFR 830.50, EU MDR Annex VI Part C Clause 4.5, and NMPA UDI Rules Article 8, single-use sterile devices intended to remain in their sterile packaging until clinical use are EXEMPT from direct device marking 3 5 7. Direct marking applies exclusively to reusable medical devices that undergo cleaning, disinfection, or sterilization between patient uses (e.g., surgical scissor handles, reusable laser consoles, or endoscope bodies).
For single-use sterile products (disposable circumcision staplers, single-use 1470 nm laser fibers, sterile NPWT dressings, and injection needles), applying the UDI carrier (1D barcode or 2D Data Matrix code) to the primary sterile pouch label and secondary shelf carton fulfills all global regulatory requirements.
How must UDI barcodes be structured across packaging levels?
UDI compliance requires distinct UDI-DIs for each packaging tier in the supply chain hierarchy:
- Primary Packaging Level (Individual Pouch / Blister): Contains the individual UDI-DI (GTIN-14) plus full UDI-PI (lot number and expiry date) in human-readable plain text and AIDC barcode format.
- Secondary Packaging Level (Shelf Carton / Box of 10 or 20 units): Assigned a unique carton-level UDI-DI (GTIN-14 distinct from the primary pouch). The barcode must reflect the exact pack count contained within.
- Tertiary / Logistics Level (Corrugated Shipping Case / Pallet): Labeled with a GS1-128 or ITF-14 shipper code, often incorporating Serial Shipping Container Codes (SSCC) for logistics routing.
OEM Contractual Provisions: UDI & Label Reconciliation
When establishing a contract manufacturing or private-label supply agreement, quality and legal teams must embed explicit UDI operational clauses into the Quality Agreement (QAA). Essential provisions include:
- Label Artwork Authorization: The brand owner retains ownership of UDI-DI assignments and must approve all final barcode label artwork prior to production.
- Barcode Quality Inspection (ISO/IEC 15415 / 15416): Mandate that the OEM verify barcode print quality on the production line, achieving a minimum print grade of Grade B (2.5/4.0) or higher.
- Label Reconciliation and Scrap Control: Require 100% reconciliation of printed UDI labels per production lot to prevent rogue or mislabeled sterile units.
- Change Control Notification: The OEM must agree not to alter packaging materials, pouch dimensions, or label substrate without written change request approval, as changes may trigger UDI-DI reassignment under GS1/MDR rules.
Where VEMERIX fits—and where due diligence still begins
VEMERIX provides international distributors and private-label partners with complete regulatory and UDI enablement across our urology, vascular, perioperative, and sterile consumable product lines. Every product manufactured under Weihai Medison's ISO 13485 quality system features GS1-compliant UDI barcode tracking on primary pouches and outer cartons, supported by complete technical files.
To discuss OEM contract manufacturing, private-label UDI reconciliation, or regional registration documentation, visit our quality portal at VEMERIX Quality & Regulatory Hub or contact our regulatory team at VEMERIX Contact & Partnership Support.
Frequently Asked Questions (FAQs)
Q: Does the contract manufacturer or the private-label brand owner hold the UDI and GUDID record?
A: The legal manufacturer (the brand owner whose name appears on the commercial product label) holds regulatory ownership of the UDI-DI and maintains the GUDID, EUDAMED, or NMPA database account. The contract manufacturer acts as an authorized production provider printing the label according to approved customer specifications.
Q: Is UDI submission required before placing a device on the EU market?
A: Yes. Under EU MDR Article 29, the UDI-DI and associated device data must be registered in the EUDAMED database before a device is placed on the market. With the EUDAMED UDI module becoming mandatory on 28 May 2026, pre-market registration is enforced across all EU member states.
Q: Do single-use devices need direct marking on the device itself, or only on the label?
A: Single-use devices that remain in their sterile barrier packaging until clinical application are exempt from direct marking. UDI compliance is satisfied by printing readable 1D or 2D barcodes on the primary pouch label and outer box package.
Q: What happens if a private-label distributor changes contract manufacturers? Does the UDI-DI change?
A: If the legal manufacturer (brand owner) remains the same, the UDI-DI assigned to the device model does not change. However, the manufacturer's internal facility registration record and GUDID/EUDAMED manufacturing site details must be updated to reflect the new contract manufacturing location.
Q: Are multi-pack shipping cartons required to have a separate UDI-DI from the primary unit pouch?
A: Yes. Each packaging level (unit of use pouch, inner box carton, outer shipping case) requires a distinct UDI-DI (GTIN-14 under GS1 rules) that specifies the exact unit count contained within that packaging tier.