Article 40

Notified bodies shall, without delay, and at the latest within 15 days, inform the authority responsible for notified bodies of relevant changes which may affect their compliance with the requirements set out in Annex VII or their ability to conduct the conformity assessment activities relating to the devices for which they have been designated.

The authorities responsible for notified bodies shall monitor the notified bodies established on their territory and their subsidiaries and subcontractors to ensure ongoing compliance with the requirements and the fulfilment of its obligations set out in this Regulation. Notified bodies shall, upon request by their authority responsible for notified bodies, supply all relevant information and documents, required to enable the authority, the Commission and other Member States to verify compliance.

Where the Commission or the authority of a Member State submits a request to a notified body established on the territory of another Member State relating to a conformity assessment carried out by that notified body, it shall send a copy of that request to the authority responsible for notified bodies of that other Member State. The notified body concerned shall respond without delay and within 15 days at the latest to the request. The authority responsible for notified bodies of the Member State in which the body is established shall ensure that requests submitted by authorities of any other Member State or by the Commission are resolved by the notified body unless there is a legitimate reason for not doing so in which case the matter may be referred to the MDCG.

At least once a year, the authorities responsible for notified bodies shall re-assess whether the notified bodies established on their respective territory and, where appropriate, the subsidiaries and subcontractors under the responsibility of those notified bodies still satisfy the requirements and fulfil their obligations set out in Annex VII. That review shall include an on-site audit of each notified body and, where necessary, of its subsidiaries and subcontractors.

The authority responsible for notified bodies shall conduct its monitoring and assessment activities according to an annual assessment plan to ensure that it can effectively monitor the continued compliance of the notified body with the requirements of this Regulation. That plan shall provide a reasoned schedule for the frequency of assessment of the notified body and, in particular, associated subsidiaries and subcontractors. The authority shall submit its annual plan for monitoring or assessment for each notified body for which it is responsible to the MDCG and to the Commission.

The monitoring of notified bodies by the authority responsible for notified bodies shall include observed audits of notified body personnel, including where necessary any personnel from subsidiaries and subcontractors, as that personnel in the process of conducting quality management system assessments at a manufacturer's facility.

The monitoring of notified bodies conducted by the authority responsible for notified bodies shall consider data arising from market surveillance, vigilance and post-market surveillance to help guide its activities.

The authority responsible for notified bodies shall provide for a systematic follow-up of complaints and other information, including from other Member States, which may indicate non-fulfilment of the obligations by a notified body or its deviation from common or best practice.

The authority responsible for notified bodies may in addition to regular monitoring or on-site assessments conduct short-notice, unannounced or ‘for-cause’ reviews if needed to address a particular issue or to verify compliance.

The authority responsible for notified bodies shall review the assessments by notified bodies of manufacturers' technical documentation, in particular the performance evaluation documentation as further outlined in Article 41.

The authority responsible for notified bodies shall document and record any findings regarding non-compliance of the notified body with the requirements set out in Annex VII and shall monitor the timely implementation of corrective and preventive actions.

5 years after notification of a notified body, and again every 5 years thereafter, a complete re-assessment to determine whether the notified body still satisfies the requirements set out in Annex VII shall be conducted by the authority responsible for notified bodies of the Member State in which the body is established and by a joint assessment team in accordance with the procedure described in Article 35.

The authority responsible for notified bodies of the Member State in which the notified body is established may conduct a complete re-assessment prior to the dates referred to in the first subparagraph upon request by the notified body or where, based on the results of the annual assessments performed in accordance with paragraph 4 of this Article, it has concerns regarding the continued fulfilment by the notified body of the requirements set out in Annex VII.

Complete re-assessments that have already started prior to 11 March 2023 shall continue to be conducted, unless the authority responsible for notified bodies of the Member State in which the notified body is established decides to suspend or terminate the ongoing complete re-assessment taking into account its own resources and the resources of the notified body already spent on the re-assessment, as well as the results of the annual assessments conducted in accordance with paragraph 4 of this Article. Before suspending or terminating an ongoing complete re-assessment, the authority responsible for notified bodies shall hear the notified body concerned.

The Commission is empowered to adopt delegated acts in accordance with Article 108 in order to amend paragraph 10 of this Article to modify the frequency at which the complete re-assessment referred to in that paragraph is to be carried out.

The Member States shall report to the Commission and to the MDCG, at least once a year, on their monitoring and on-site assessment activities regarding notified bodies and, where applicable, subsidiaries and subcontractors. The report shall provide details of the outcome of those activities, including activities pursuant to paragraph 7, and shall be treated as confidential by the MDCG and the Commission; however, it shall contain a summary which shall be made publicly available.

The summary of the report shall be uploaded to the electronic system referred to in Article 52.