Cloud capacity is becoming scarce, CIOs need to plan now
Bernhard Liebl
7 min read 63 percent. That’s how fast Google’s cloud business grew year-over-year-outpacing Microsoft ...
When acquiring a MedTech company, buyers scrutinize revenue, EBITDA, and customer contracts. But who checks the MDR certification status? In the MedTech industry, regulatory due diligence increasingly determines whether a deal happens – or fails entirely. Seventy percent of companies have withdrawn products from the market; 91% cite certification costs as the primary reason. For investors, compliance posture has become the new risk profile.
In traditional MedTech M&A due diligence, finances, intellectual property, and customer relationships take center stage. Regulatory status was a simple checkbox: CE marking present, quality management system certified – done. The MDR has shattered that logic.
A CE marking under the former Medical Device Directive had no expiry date. Under the MDR, CE markings are valid for only five years and require full re-certification by a Notified Body. For a MedTech portfolio comprising 50 products, this means: 50 re-certifications, each costing up to €500,000, waiting over a year for slots – and the risk that the Notified Body issues conditions requiring product modifications.
For a private equity investor evaluating a MedTech SME, this fundamentally alters valuation. Questions are no longer “What’s the revenue?” but rather: How many certificates expire within the next 24 months? Is there a confirmed slot with a Notified Body? What will it cost to re-certify the entire portfolio? And which products are not worth re-certifying – and must therefore be written off?
The BVMed survey reveals: 70% of member companies have withdrawn products. Fifty-five percent report that suppliers have ceased operations. In 38% of cases, supplier failures triggered their own product withdrawals. These cascading effects go unexamined in standard due diligence.
Even more critical: 58% of products withdrawn from the EU market continue to be sold outside the EU – primarily in the U.S. This may sound like a safety net, yet it carries strategic risk: A company selling its most profitable products exclusively in the U.S. becomes dependent on a single market. If the FDA tightens regulation – which is plausible given mounting pressure from Congress – the second leg of its business vanishes.
“The SME-dominated sector is suffocating under bureaucratic burdens and reporting obligations – without any tangible improvement in patient care or safety.” – Dr. Marc-Pierre Möll, Managing Director, BVMed (BVMed Autumn Survey, October 2025)
Every board reviewing a MedTech acquisition or investment should ask – and demand substantiated answers to – these five questions:
1. Certificate expiry timelines: When do MDR certificates for each product in the portfolio expire? Is there a pipeline plan for re-certifications? What is the cumulative investment volume required?
2. Relationship with Notified Bodies: Does the company hold a binding contract with a Notified Body – or is it merely on a waiting list? A company without a secured slot is a company with insecure market access.
3. NIS2 readiness: Is the company registered with the BSI (Federal Office for Information Security)? Does it maintain documented IT risk management? Since December 2025, NIS2 applies without transitional periods. Non-compliance is already a violation.
4. PFAS exposure: Which products contain PFAS chemicals? Are substitution plans in place? An ECHA decision is expected in 2026. A portfolio heavily reliant on PFAS – with no migration strategy – is a silent devaluation factor.
5. R&D pipeline: 53% of MedTech companies have scaled back R&D projects; 46% cut them by more than 75%. An empty pipeline means you’re not buying growth – you’re buying a declining asset base.
One can also interpret MDR pressure as a buying opportunity. Companies selling under regulatory strain are cheaper than they were three years ago. Buyers capable of clearing compliance hurdles – by leveraging the infrastructure of a larger organization – can acquire niche products at attractive valuations and retain them in the EU while competitors abandon them.
For strategic buyers with existing MDR infrastructure (established relationships with Notified Bodies, an in-house Regulatory Affairs team, and a QMS compliant with ISO 13485), this consolidation phase may be precisely the right moment. The art lies in distinguishing between companies whose products lose value under regulatory pressure – and those whose products gain value, simply because competitors exit the market.
In the global medtech market – growing at double-digit rates – companies holding both fully certified EU portfolios and FDA clearance are the most attractive acquisition targets. Dual certification is becoming a premium differentiator. Those who recognize this are buying smart – and cheaply.
Up to €500,000 per individual product. Average fees charged by Notified Bodies have risen by 124%. For a mid-sized MedTech portfolio, cumulative re-certification costs can range from €1 million to €5 million.
Currently 51 (as of December 2025). Under the prior directives, there were 80. Wait times for certification slots range from 12 to 18 months. Seventy-five percent of certification procedures take over 12 months.
Ninety-one percent of companies cite certification costs as the main reason. For niche products with low unit volumes, re-certification effort exceeds projected EU revenue. Fifty-eight percent of these withdrawn products continue to be sold outside the EU – mainly in the U.S.
Five key points: expiry timelines for all product certificates; contractual relationship with a Notified Body (not just a waitlist position); NIS2 compliance (mandatory since December 2025); PFAS exposure across the portfolio; and the state of the R&D pipeline (53% of companies have reduced projects).
Header Image Source: Pexels / Mikhail Nilov (px:7579831)