Regulatory Jobs
Hero Gradient Background

What a Person Responsible for Regulatory Compliance (PRRC) Actually Does Day to Day

Connor Griggs (MSRA, CQA)
Connor Griggs (MSRA, CQA)

Regulatory Consultant Providing Expert FDA & EU MDR Project Leadership to Medical Device Companies

7 MIN READ

Introduction

If you work in medical device regulatory affairs and your company sells into the European Union, you've almost certainly heard the acronym PRRC. The Person Responsible for Regulatory Compliance is one of the more consequential roles created by the EU Medical Device Regulation (MDR, 2017/745) and the In Vitro Diagnostic Regulation (IVDR, 2017/746), and it's become a distinct hiring category in its own right rather than just a duty tacked onto an existing quality or regulatory title. This piece walks through what the role legally requires, what the job looks like in practice, and how it tends to differ depending on the size of the organization you're in.

Where the Role Comes From

Article 15 of both the MDR and the IVDR requires manufacturers to have, within their organization, at least one person with the necessary expertise in the field of medical devices to serve as the PRRC. Authorized representatives acting for manufacturers based outside the EU have an equivalent obligation. This was a deliberate departure from the old Medical Device Directive framework, which didn't name an individual role with this level of personal accountability. The regulation is explicit that microenterprises and small enterprises are not required to have the PRRC permanently and continuously within their own organization, but they must have such a person permanently and continuously at their disposal, which is why you'll see PRRC-as-a-service consulting arrangements at smaller device companies.

What the Job Actually Covers

Article 15(3) lays out the core responsibilities, and they're worth knowing cold if you're interviewing for or hiring into this role. The PRRC is responsible for ensuring that the conformity of devices is appropriately checked before a batch is released, that technical documentation and the declaration of conformity are drawn up and kept up to date, that post-market surveillance obligations are complied with, that reporting obligations for incidents and field safety corrective actions are fulfilled, and, where relevant, that a statement is issued for investigational devices confirming conformity with general safety and performance requirements. In day-to-day terms, that means the PRRC is often the internal signatory or gatekeeper on release decisions, the person quality and regulatory teams escalate to when a vigilance question is ambiguous, and the person notified bodies expect to see named and engaged during audits and technical documentation reviews.

What surprises people moving into the role is how much of it is judgment rather than paperwork. Technical documentation being kept up to date sounds administrative until you're the one deciding whether a labeling change, a supplier substitution, or a software patch is significant enough to require a new conformity assessment. Vigilance reporting timelines are unforgiving, and the PRRC is frequently the person who has to make a fast, defensible call about whether an event meets the threshold for a serious incident report to a competent authority.

Who Is Qualified to Hold the Title

The regulations set out two qualification routes, and hiring managers screen against both. The first is a diploma, certificate, or other evidence of formal qualification awarded on completion of a university degree or equivalent course of study in law, medicine, pharmacy, engineering, or another relevant scientific discipline, plus at least one year of professional experience in regulatory affairs or in quality management systems relating to medical devices. The second, for candidates without that formal education background, is four years of professional experience in regulatory affairs or quality management systems relating to medical devices. In practice, this means the PRRC talent pool skews toward people who have already spent years in device quality or regulatory roles rather than early-career hires, and job postings for the title almost always name one of these two qualification paths explicitly.

How the Role Differs by Company Size

At a large, multi-product manufacturer, the PRRC role is often a dedicated position, sometimes with a small team supporting it, and it's frequently distinct from the head of regulatory affairs or head of quality, even though those functions coordinate constantly. At a smaller manufacturer, it's common to see the PRRC duties held by the same individual who runs quality assurance or regulatory affairs more broadly, which puts real pressure on that person's time during audit season or a product recall. At the smallest manufacturers, the outsourced consulting-PRRC model is genuinely common, and those consultants build a career specializing in exactly this function across multiple client companies.

One protection worth knowing about, because it comes up in negotiations and in how the role is structured internally, is Article 15(3), which states that PRRCs shall not be placed at a disadvantage within their organization for carrying out their duties. That clause exists because the role sometimes puts a PRRC in the position of blocking a product release or delaying a launch on regulatory grounds, and the drafters of the regulation clearly anticipated the internal friction that creates. If you're evaluating a PRRC role in an interview, it's worth asking directly how release-hold decisions have gone historically and whether the person who held the role before you felt supported when they said no.

How This Differs From Adjacent Roles

People new to device regulatory affairs sometimes conflate the PRRC with the Qualified Person (QP) role from pharmaceutical manufacturing, but they're not the same thing. The QP is a pharma-specific role tied to batch release under EU GMP rules; the PRRC is a device- and IVD-specific role created by the MDR and IVDR with a different legal basis and a different scope of duties. The PRRC is also distinct from the general Responsible Person language used in some other regulatory contexts, and from a company's head of regulatory affairs, even though one person frequently holds both titles at smaller companies. When you're reading a job posting, look closely at whether PRRC appears as a standalone requirement or is bundled into a broader regulatory affairs manager description, since that tells you a lot about how seriously the company is treating the distinct legal accountability the title carries.

What a Working Week Looks Like

Ask a working PRRC what fills their calendar and you'll hear less about grand strategy and more about a steady rhythm of sign-offs, reviews, and cross-checks. A batch or lot release decision might land on their desk with a deviation attached that needs a judgment call about whether it affects conformity. A complaint that came in overnight might need an initial assessment against the vigilance reportability criteria before a deadline clock starts running. A design change from engineering might need a documented rationale for why it does or doesn't trigger a new technical documentation submission to the notified body. None of these individually take long, but they arrive constantly, and the PRRC is usually the person whose signature or sign-off makes the decision final rather than advisory.

Notified body interactions are a recurring feature rather than an annual event. Audits happen on a cycle, but unscheduled questions, requests for clarification on technical documentation, or notification of a significant change can arrive at any time, and the PRRC is typically the named point of contact who has to respond credibly and quickly. Internally, the PRRC also tends to be the person other departments come to when they're not sure whether something is a regulatory issue at all, a supplier quality problem, a labeling ambiguity, a question about whether a marketing claim crosses into unapproved territory. Being the default escalation point for ambiguous questions is one of the least visible parts of the job description but one of the most time-consuming parts of the actual role.

Career Paths Into and Out of the Role

Most PRRCs arrive at the role after several years in device quality assurance or regulatory affairs, often having built experience across more than one product line or therapeutic area before taking on the named accountability. It's less common to see the role as someone's first regulatory job, both because the qualification criteria in Article 15 effectively require prior experience and because the judgment the role demands is hard to develop without having already sat through a few audits, a few complaint investigations, and a few close calls on reportability decisions.

From the PRRC seat, career paths tend to move in one of two directions. Some professionals use it as a proving ground toward a head of regulatory affairs or head of quality title, since the role builds exactly the kind of cross-functional visibility and audit-facing experience those positions require. Others specialize further and move into PRRC consulting, taking on the role for multiple smaller manufacturers who don't need or can't yet support a full-time in-house hire. Both paths are legitimate, and which one makes sense usually comes down to whether you're drawn more toward building a broader regulatory leadership career inside one organization or toward the variety and independence of supporting several companies at once.

Why This Has Become a Distinct Hiring Niche

Demand for people who can credibly hold this title picked up sharply during and after the MDR and IVDR transition periods, as manufacturers who had previously operated under the older directives had to formally designate PRRCs and, in many cases, discovered they didn't have anyone on staff who cleanly met the qualification criteria. Notified bodies ask about the PRRC by name during audits, and gaps in that role are a real finding, not a paperwork technicality. If you're building a career in device regulatory affairs, deliberately accumulating the specific experience the regulation asks for, meaningful time in regulatory affairs or QMS work tied to actual devices, is a concrete, verifiable way to make yourself a credible PRRC candidate rather than someone who simply has the title without the underlying qualification.

Conclusion

The PRRC role is a good example of how European regulation has created individual, named accountability inside device companies rather than leaving compliance as a diffuse organizational responsibility. For regulatory professionals, understanding exactly what the role requires, legally and practically, is useful whether you're aiming to hold the title yourself, hiring for it, or simply working alongside whoever does. It's a role built on judgment under time pressure as much as on paperwork, and the qualification bar exists precisely because the decisions it involves matter.

Stay updated with
our Articles

Subscriber 1
Subscriber 2
Subscriber 3

5,000+ job seekers
joined our newsletter