TÜV Rheinland Adds Traceability Checks to ISO 13485

On June 1, 2026, TÜV Rheinland began requiring on-site verification of end-to-end digital supply chain traceability systems in ISO 13485:2016 surveillance and recertification audits. The update is especially relevant to ISO 13485-certified manufacturers, raw material procurement teams, logistics and distribution participants, and supply chain service providers, because certificate validity may be suspended if the required traceability capability is not met.

Event Overview

TÜV Rheinland issued a notice to globally certified companies on May 29, 2026. According to the notice, from June 1, 2026, all ISO 13485:2016 surveillance audits and recertification audits will include mandatory on-site checks of an end-to-end digital supply chain traceability system.

The verification focuses on whether companies can demonstrate a two-way traceability loop across raw material batches, production work orders, finished product serial numbers, logistics documents, and UDI data. Companies that fail to meet the requirement may have the validity of their certificates suspended.

Which Segments May Be Affected

ISO 13485-Certified Manufacturing Companies

Manufacturing companies are directly affected because the added audit requirement links production records with upstream material batches and downstream product identification. The impact is mainly reflected in whether production work orders, finished product serial numbers, and UDI data can be connected in a verifiable and bidirectional manner during an on-site audit.

From an industry perspective, manufacturers may need to pay closer attention to the consistency between actual production records and the digital traceability records presented during surveillance or recertification audits.

Raw Material Procurement and Supplier Management Teams

Procurement teams may be affected because raw material batch information is one of the key points in the required traceability chain. If material batch records cannot be connected to production work orders and finished products, the traceability loop required by the audit may be incomplete.

Analysis shows that procurement-related impact may appear in supplier documentation, batch record collection, and the ability to retrieve upstream information when auditors check specific finished product serial numbers or UDI data.

Processing, Assembly, and Production Operations

Processing and production operations are affected because the audit requirement specifically includes the connection between raw material batches, production work orders, and finished product serial numbers. This means the operational record chain must be able to support both forward tracing and backward tracing.

Current more worth noting is whether each production record can be matched with the relevant material batch and finished product information without gaps during on-site verification.

Logistics and Distribution Participants

Logistics and distribution participants may be affected because logistics documents are included in the required verification scope. The traceability chain does not stop at production completion; it also extends to the movement of finished products through logistics documentation.

Observably, companies relying on external logistics or distribution partners may need to ensure that shipment-related records can be connected to product serial numbers and UDI data when requested during audits.

Supply Chain System and Data Service Providers

Supply chain service providers may be affected where they support digital traceability, record integration, or document management for ISO 13485-certified companies. The audit requirement emphasizes end-to-end digital traceability, making system connectivity and record retrieval more important in audit scenarios.

From an industry angle, this development may increase attention on whether digital systems can demonstrate the full traceability chain across procurement, production, finished goods, logistics, and UDI-related data.

Key Points to Watch and Practical Responses

Monitor Further Official Audit Guidance

Companies should continue to watch for further official statements from TÜV Rheinland regarding how the on-site checks will be implemented in surveillance and recertification audits. The current confirmed information identifies the required traceability scope, but companies may still need to follow any additional clarification on evidence format, audit sampling, or documentation expectations.

Check the Five Required Traceability Links

Enterprises preparing for ISO 13485:2016 audits should focus on the five links named in the notice: raw material batches, production work orders, finished product serial numbers, logistics documents, and UDI data. A practical response is to test whether a specific finished product can be traced backward to raw materials and forward to logistics documents, and whether the same chain can be verified in reverse.

Separate Policy Signals from Audit Readiness

It is more appropriate to understand this update as an audit requirement that now needs operational evidence. Companies should avoid treating it only as a policy signal. The relevant question for audit readiness is whether the required records can be retrieved, matched, and explained during on-site verification.

Prepare Supplier, Production, and Logistics Records in Advance

Companies should review whether supplier batch information, production work orders, serial number records, logistics documents, and UDI data are aligned before an audit. If different departments or external partners hold separate records, communication and record-matching should be completed before the audit rather than during the audit process.

Editor’s View / Industry Observation

Analysis shows that this update means traceability is moving from a general quality management expectation to a mandatory on-site verification point within TÜV Rheinland’s ISO 13485:2016 surveillance and recertification audits.

Observably, the change is more than a signal for companies audited by TÜV Rheinland, because the notice states that non-compliant companies may face suspension of certificate validity. At the same time, it should not be interpreted beyond the confirmed scope: the available information specifically concerns TÜV Rheinland audits for ISO 13485:2016 certificate holders from June 1, 2026.

From an industry perspective, the reason this issue requires continued attention is that the audit focus covers multiple business functions at once, including procurement, production, finished product identification, logistics documentation, and UDI data. The practical challenge is not only whether each record exists, but whether the full traceability loop can be demonstrated in both directions.

Conclusion

The TÜV Rheinland update highlights the growing importance of digital supply chain traceability in ISO 13485:2016 audit practice. For affected companies, the most immediate task is to verify whether the required traceability chain can withstand on-site checks across material, production, product, logistics, and UDI records.

It is more appropriate to understand this information as a concrete audit requirement for TÜV Rheinland-certified companies rather than a broad industry-wide conclusion. A rational response is to review traceability evidence early, monitor further official clarification, and prepare cross-department records before the next surveillance or recertification audit.

Information Source Statement

Main source: TÜV Rheinland notice to globally certified companies dated May 29, 2026, regarding ISO 13485:2016 surveillance and recertification audit requirements effective from June 1, 2026.

Items requiring continued observation: any further official clarification from TÜV Rheinland on detailed audit implementation, evidence requirements, and handling procedures for companies that do not meet the traceability verification requirement.