Sometimes. PPE certification is not a one-off exercise: every manufacturer must keep series production compliant and respond to changes that could affect conformity. However, scheduled third-party surveillance is mandatory only for Category III PPE.
The exact obligation depends on the product’s risk category, the market where it is placed, the conformity marking used and the assessment module selected.
Quick answer: Category I and II PPE do not normally require automatic annual third-party retesting. Category III PPE requires ongoing involvement from a conformity assessment body through Module C2 product checks or Module D quality-system surveillance.
Ongoing requirements by PPE category
PPE is classified by the seriousness of the risk it protects against. The product name alone is not enough to determine the category.
Category I
Typical route: Module A: internal production control
Ongoing requirement: No routine third-party surveillance. The manufacturer must still keep production in conformity, maintain evidence and reassess relevant changes or safety concerns.
Category II
Typical route: Module B type-examination + Module C internal production control
Ongoing requirement: No scheduled third-party production surveillance. The type-examination certificate must be reviewed when relevant changes arise and renewed before expiry; certificates are valid for no more than five years.
Category III
Typical route: Module B + either Module C2 or Module D
Ongoing requirement: Mandatory ongoing third-party surveillance: supervised product checks at least once a year under C2, or quality-system audits at least once a year under D.
Classification note: Category III covers risks with very serious consequences, such as death or irreversible damage to health. Respiratory PPE for hazardous substances or oxygen-deficient atmospheres is generally Category III.
Category III PPE: Module C2 or Module D
Module C2: supervised product checks
Under Module C2, the manufacturer operates internal production control and a notified or approved body performs product checks at random intervals. The checks must take place at least once a year, and the first checks must occur no more than one year after the type-examination certificate is issued.
- The conformity assessment body selects an adequate sample of manufactured PPE.
- It carries out the examinations and tests needed to verify production homogeneity and conformity with the approved type and essential requirements.
- This is not necessarily a full annual retest of every feature or a requirement to send every sample to the body’s own laboratory; the body determines the sampling and checking arrangements.
Module D: production quality assurance
Under Module D, the manufacturer uses an approved quality system covering production, final inspection and testing. The notified or approved body assesses and monitors that system.
- Periodic audits must be carried out at least once a year.
- The body may also make unannounced visits and, if necessary, carry out or commission product examinations or tests.
- Planned changes to the approved quality system must be assessed with the body.
When can retesting or reassessment be triggered?
Even where no routine surveillance applies, the manufacturer must assess anything that could affect continued conformity. The result may be a documented no-impact decision, a technical-file update, targeted testing, a certificate supplement or review, or a new conformity assessment.
- Changes to the product or production
Examples include changes to:
- materials, formulation, components or protective performance;
- design, fit, sizing, interfaces, filters, valves or other safety-critical parts;
- a supplier of a critical material or component;
- manufacturing process, tooling, production site or quality controls;
- intended use, limitations, instructions, warnings or performance claims.
A supplier or process change does not automatically require a complete retest. It does require a documented assessment of whether conformity could be affected and, for certified Category II or III PPE, early agreement with the certificate-issuing body.
- Standards or the state of the art change
Harmonised EU standards and designated UK standards provide a presumption of conformity when cited and applied correctly, but the legal duty is to meet the applicable essential health and safety requirements.
A revised or withdrawn standard does not automatically invalidate every existing certificate. The manufacturer must assess whether the change reflects a development in the state of the art that could affect the approved type. If it does, the technical documentation and declaration may need updating, and the conformity assessment body may require targeted testing or a certificate review.
Important: Do not assume there is a universal two-year grace period. Withdrawal dates may be set in an official standards decision, while certificate and scheme arrangements may set additional deadlines. Check the current EU harmonised or UK designated standards list and confirm the position with the relevant body.
- Certificate review or expiry
EU type-examination certificates under the PPE Regulation are valid for a maximum of five years. A review is also required earlier where a modification to the approved type, a technical-documentation change or a change in the state of the art may affect conformity or certificate validity. Plan renewal well before the expiry date.
- Complaints, failures or surveillance findings
Risk-based sample testing, complaint investigation and monitoring are part of ongoing manufacturer duties. Field failures, repeated returns, non-conforming batches, an incident or a market-surveillance request can lead to additional testing and corrective action. Where PPE presents a risk, the manufacturer may need to notify the authority and bring the product into conformity, withdraw it or recall it.
Does every change require a full retest?
No. A proportionate change-control process may lead to:
- Documented no-impact assessment: where evidence shows the approved type is unaffected.
- Technical-document update: for drawings, risk assessment, bill of materials, instructions or the declaration of conformity.
- Targeted testing: for only the characteristics affected by the change.
- Certificate review or addition: where the approved type remains essentially the same but formal approval is needed.
- New conformity assessment: where a substantial change means the product should be treated as a new type or new product.
A practical ongoing-compliance checklist
- Control changes: Maintain a formal review process for design, materials, suppliers, processes, sites, claims and instructions.
- Track standards and certificates: Keep a dated register of standards, official-list status, certificate scope and expiry dates.
- Agree surveillance: Document the C2 sampling plan or D audit programme for each Category III certificate and market route.
- Monitor production: Use risk-based incoming, in-process and final checks that can demonstrate continued conformity.
- Review field data: Trend complaints, returns, incidents, non-conforming units and recalls; investigate safety signals promptly.
- Engage the body early: Discuss relevant changes before implementation rather than after production or shipment.
- Update the compliance pack: Keep the risk assessment, test evidence, drawings, bill of materials, instructions, marking and declaration aligned.
- Retain records: Keep required technical documentation and declarations for at least 10 years after the PPE is placed on the relevant market.
Frequently asked questions
Do Category I PPE products need annual retesting?
No routine third-party annual retest is prescribed for Category I PPE. The manufacturer must still maintain compliant series production, assess relevant changes, monitor safety information and carry out sample testing when appropriate to the risk.
How often is Category III PPE checked?
Under Module C2, supervised product checks take place at least once a year at random intervals. Under Module D, periodic quality-system audits take place at least once a year, with possible unannounced visits and product testing.
How long is a PPE type-examination certificate valid?
An EU type-examination certificate under Regulation (EU) 2016/425 is valid for a maximum of five years. Earlier review can be required where the product, technical documentation or state of the art changes in a way that may affect conformity.
Does changing supplier always mean retesting?
Not automatically. The manufacturer must assess whether the change could alter a safety-critical material, component, process or performance characteristic. Evidence may support a no-impact decision, but targeted testing and body approval may be needed.