Importing or Manufacturing a Medical Device in Korea?

Selling a medical device in Korea always runs on two separate tracks that have to come together: a product track (does this specific item qualify for sale) and a company track (does the business have a certified system for making or importing it consistently). Confusing the two — or assuming one substitutes for the other — is the single most common reason a first-time applicant's timeline blows up.

The Two-Track System, End to End

1. Medical device manufacturing or import business license (제조업/수입업 허가) — company-level, filed with the regional Ministry of Food and Drug Safety (식약처) office.
2. GMP (Good Manufacturing Practice) system certification — proves the company can make or import the device to a consistent standard, filed with a designated quality-review body.
3. Product-level license, certification, or notification — proves the specific device itself is safe and effective, filed with the Korea Institute of Medical Device Safety Information (NIDS, 한국의료기기안전정보원) or 식약처 depending on class.
4. Standard customs pre-clearance report (표준통관예정보고) once both are in place.
5. Post-market obligations — adverse event reporting, recalls, periodic and change-triggered GMP re-review, and product renewal every 5 years.

Handlers who only sell or repair devices just need to notify (신고); manufacturers and importers need a business license (허가) — plus at least one product license/certification/notification filed as a combined application, since a business license alone, with no product behind it, isn't issuable.

Classification Comes First — And So Does "Is This Even a Medical Device?"

Korea sorts every device into one of four risk classes:

• Class 1 — minimal risk (manual wheelchairs, stethoscopes, exam tables, surgical masks, medical cotton swabs, bandages, dental wax) — notification, not approval.
• Class 2 — low risk (blood pressure monitors, thermometers, patient monitors) — certification in most cases.
• Class 3 — moderate risk (artificial heart valves, artificial joints) — approval, reviewed directly by MFDS headquarters.
• Class 4 — high risk (pacemakers, coronary stents) — approval, MFDS headquarters.

Before any of that, confirm the product is a medical device at all. A beauty device is the clearest gray area: purely cosmetic purpose (a vibrating cleansing brush, an LED beauty mask) is a general consumer product, needing only KC electrical-safety certification if it plugs in or runs on battery — no certification at all if it doesn't, though the correct HS code still needs confirming with a customs broker. A device intended to change the body's structure or function (an ultrasound skin-regeneration device, a stimulation-therapy device) crosses into medical device territory, with the full classification-to-GMP chain that follows. File a formal inquiry through the Medical Device Electronic Civil Service System (의료기기전자민원시스템) before committing to either path — the wrong guess wastes an entire import cycle.

Class 1: The Lightest Path — Still Two Separate Filings

Class 1 devices go through notification, not approval, processed by NIDS — but "notification" still requires two things filed as a package on a first import: the business license (제조업/수입업 허가, filed with the regional MFDS office, ~20-day review) and the product notification itself (filed with NIDS, ~3–5 business days once the business license is in hand). A first-time importer can't file the business license alone with no product behind it. GMP review is exempted for Class 1, but the company still needs to maintain internal QMS/quality-manual documentation under ISO 13485 principles even without formal GMP certification.

Class 2: Identical, Equivalent-Announced, or Full Technical Document Review — the Timeline Hinges on Which

Class 2 splits into three paths depending on how the product compares to what's already on the market, and the difference in processing time is dramatic:

• Identical product (same manufacturer, same product as one already licensed) — only proof of identity needed, filed with NIDS.
• Equivalent-announced product (a type MFDS has publicly announced as equivalent 3+ times) — a test report is enough, filed with NIDS, 5-day turnaround.
• Neither — full technical document review and possibly clinical trial data required, 10-day base review plus up to 65 or 80 additional days depending on whether technical document review and/or clinical trials are needed — confirm which bucket a new product falls into before setting a launch timeline.

Business License Requirements: Facility & Quality Officer

Facility. A manufacturer needs a workshop, a test room, and a storage area; an importer needs a business office, a test room, and a warehouse. In practice these don't need to be physically separate spaces for a small operation — a single space with clear internal separation is generally acceptable, and there's no restricted building-use classification for either.

Quality officer (품질책임자). Every license needs one, appointed per manufacturing site, meeting one of three qualification tiers: (1) a licensed professional (optician, dental technician, dental hygienist, radiologic technologist, clinical pathologist, or physical therapist for a matching product, or a certified medical-engineering/quality-management technician); (2) a 4-year science/engineering/medical degree holder in a device-related field (or any graduate degree in a science/engineering field); or (3) a tiered experience track for non-degree-holders — 1 year of device quality work for a related-field bachelor's or associate degree, up to 6 years for a high school graduate with no related degree. A Class 2 RA (regulatory affairs) professional certificate holder can serve as quality officer concurrently. The quality officer needs 8+ hours of annual continuing education, due within 3 months of first appointment or any change.

GMP: What It Actually Proves, and the First-Time Process

GMP certifies the system, not the product — a manufacturer's certification covers the domestic manufacturing site; an importer's covers the overseas manufacturing site(s) supplying them. The typical first-time sequence: (1) map out the actual manufacturing/import structure — which processes are in-house vs. outsourced, which overseas factory supplies what; (2) build a baseline quality-management document set — quality policy, quality manual, procedures for design control, purchasing/supplier management, process control, inspection/testing, complaint/nonconformance/CAPA handling, and training, plus the record forms each procedure actually uses; (3) select a quality-review body (KTL, KTC, KCL, KTR, TÜV SÜD Korea, or TÜV Rheinland Korea are all currently designated) based on their experience with your product category, queue length, and how they handle a regional site visit; (4) apply through the UDI portal (의료기기전자민원시스템), specifying the manufacturing site(s), the product/product-group scope, and attaching the quality documentation; (5) coordinate the on-site audit date and prepare — an opening meeting, document-and-facility review with interviews, and a closing meeting covering findings; (6) receive the conformity certificate, or address findings within a set window and resubmit. GMP review recurs on four tracks: initial, 3-year periodic, additional (when adding a product group), and change (e.g., relocating a manufacturing site).

If you're manufacturing, the audit centers on the process flow from raw-material intake through shipping, facility/equipment condition, and whether the org chart's named roles (quality officer, production manager, safety officer) actually match who's doing the work — a title with no real duties behind it is a common finding. If you're importing, the audit centers on your overseas manufacturer's quality-system maturity (do they already hold ISO 13485 or another country's GMP?), the contract structure (exclusive/non-exclusive, OEM), and your own company's import/distribution/complaint-handling procedures — Korea doesn't require your overseas manufacturer to hold a separate Korean GMP certification from scratch if they already have a foreign one your reviewer can rely on, but the reviewer still needs to see that quality-system evidence up front, not discovered mid-audit.

The Three Most Common GMP Audit Findings

1. Document-vs-practice mismatch — the single most frequent and damaging finding. A procedure calling for two-person sign-off with only one signature on file; a raw-material inspection procedure that says "100% inspection" but records show visual checks only; a process flow diagram showing a test step the factory floor has quietly dropped. Any document using "must," "always," or "shall" heavily is worth cross-checking against actual practice before an audit, not during one.
2. Weak supplier management — a supplier list with no documented selection criteria or evaluation record; a contract sterilization vendor with a signed agreement but no qualification basis on file; an evaluation procedure that exists on paper but hasn't produced an actual evaluation record in years.
3. Superficial change/complaint/CAPA handling — a process or raw-material change with no change-control record; customer complaints handled only by sales with no quality-system-level root-cause analysis; nonconformance records with no documented cause or corrective action. Auditors generally trust a company that can show how it responded to a problem more than one claiming it never had any.

How Technical Document Review and GMP Connect

Technical document review proves a specific product is safe and effective (structure, risk analysis, clinical/non-clinical data, labeling); GMP proves the system that makes it consistently can be trusted — the two are meant to run partly in parallel, not sequentially, and each references the other: a risk identified in the technical document's risk analysis should show up as a controlled step with inspection records in GMP; usability findings should be reflected in the actual instructions-for-use and labeling; and any post-launch change to structure, raw materials, or manufacturing method needs to be checked against both the technical document/license (does it trigger a change filing) and the GMP change-control procedure (was it reviewed, approved, and re-tested as required) — the two records need to stay in sync with each other, not drift apart over time.

MDSAP: Skip the Overseas Site Visit If Your Manufacturer Already Has It

An overseas manufacturing site with no existing Korean GMP normally requires an in-person site visit from Korean reviewers — the single biggest cost and schedule driver for a first-time import, with the importer covering the review team's flights, lodging, and per diem on top of the review fee. If the overseas manufacturer already holds MDSAP (Medical Device Single Audit Program) certification — the joint quality-system audit recognized by the US FDA, Health Canada, Brazil's ANVISA, Japan's MHLW/PMDA, and Australia's TGA, built on ISO 13485 plus each country's additional requirements, audited on a roughly 3-year cycle with annual surveillance — Korea isn't a full MDSAP member but accepts a current MDSAP audit report as the basis for replacing the in-person site visit with a documentary review, a substantial cost and timeline saver. Ask any overseas manufacturer upfront whether they hold MDSAP and can provide a current audit report before quoting a GMP timeline.

A Class 3 Real-World Case: Importing Male Condoms

A recent live case illustrates how much heavier a Class 3 product's path is than Class 1/2: male condoms are Class 3 (pregnancy/STI-prevention failure risk), reviewed directly by MFDS headquarters rather than NIDS, and the overseas factory (in this case, in China) needed an in-person GMP site visit since it held no prior Korean GMP recognition — with the importer covering the 2–3-person review team's flights, lodging, and per diem. The path ran import business license → overseas manufacturing site registration and GMP review → product approval, with the technical document requiring physical performance testing (burst volume/pressure, pinhole checks per ISO 4074 or the MFDS standard) and biological safety testing (cytotoxicity, sensitization, irritation) from an OECD GLP-compliant lab — a foreign lab's report is accepted only if GLP-compliant; otherwise the sample has to be re-tested domestically (KTL, KTR). One meaningful shortcut: if the same overseas factory already supplies a different Korean importer with a valid GMP certificate for the same product category, a signed GMP-use consent letter from that factory can substitute for a fresh site visit — worth asking a prospective overseas supplier about before assuming a full site visit is required.

Personal-Use Import Exception

An unapproved medical device generally can't be imported into Korea even for personal use — but a narrow exemption exists for a device with no approved domestic alternative, used for self-treatment, clinical trials, or R&D. For personal-treatment use: submit product information plus a physician's letter confirming the device is medically necessary (no business registration required — individuals can apply directly), filed with NIDS. The exemption does not apply if a comparable device is already approved and on sale in Korea domestically, regardless of personal-use intent, and use of a proxy-purchase or forwarding service instead of the formal exemption process is a common cause of customs rejection. One category is flatly excluded regardless of exemption filings: tattoo-machine needles, since a 2018 law change classified them as outside medical device scope entirely (not a treatment purpose), so they cannot be imported even under the personal-use exemption.

Product Renewal — Don't Miss the Window

Every license, certification, and notification carries a 5-year validity period, and renewal has to be filed between 270 and 180 days before expiry — approved products renew through MFDS, certified/notified products through NIDS. Required materials: the original certificate, evidence the product still meets current safety/efficacy standards (updated test reports, or a declaration of conformity for notified products), production/import performance records, and any safety-information/corrective-action records. A gap in production/import volume isn't automatically disqualifying — recognized exceptions include an inability to source raw materials, an import halt, no demand for a rare device, service/maintenance-only activity, or an ongoing new-health-technology assessment. Review takes up to 180 days, and a failed or unfiled renewal means the license, certification, or notification simply lapses.