業界ガイド

FDA Regulation of AI Medical Devices

In the United States, AI software that diagnoses, treats, or informs care for a patient is usually regulated by the FDA as a medical device.

4 分で読めます
最終更新日 2026年9月15日

読み始めるクイズに答えてください

このページでは4 分で読めます

概要
ディープダイブ
戦略的影響
The Future of FDA Regulation of AI Medical Devices
現実世界の実装
リスクとガードレール
実装ロードマップ
探検を続けましょう
よくある質問

概要

It reaches the market through one of three main routes: 510(k) clearance, De Novo classification, or premarket approval (PMA). This matters because it decides what evidence a developer must produce, how an AI model can be updated after launch, and how much doctors and patients can trust the tool.

ディープダイブ

The FDA regulates software by its intended use, not by the technology inside it. If software is meant to diagnose, treat, prevent, or mitigate disease, it is generally a device; standalone software of this kind is called Software as a Medical Device (SaMD). Devices fall into Class I, II, or III by risk, and the class largely sets the pathway. Most AI-enabled devices reach the market through 510(k) clearance, in which the manufacturer shows substantial equivalence to a legally marketed "predicate" device. When a novel device is low to moderate risk and has no predicate, the De Novo pathway creates a new classification that later devices can use as a predicate. Premarket approval (PMA), the strictest route, is reserved for high-risk Class III devices and usually requires clinical evidence. The FDA's public list of authorized AI-enabled devices now runs to more than a thousand products, most of them in radiology. Not all health software is a device. The 21st Century Cures Act (2016) excludes certain clinical decision support tools. To qualify, the tool must show clinicians the basis for its recommendations so they can review them independently, and it must not analyze medical images or signals. Traditionally, a significant change to a cleared device needs a new submission. The Food and Drug Omnibus Reform Act of 2022 gave the FDA authority to approve predetermined change control plans (PCCPs), and the FDA finalized guidance for AI-enabled devices in December 2024. A PCCP lets a manufacturer make specified, pre-validated changes without filing again. A common misconception is that cleared AI devices learn on their own in the field. Most authorized models are "locked": they change only through controlled, versioned updates. In the EU, the Medical Device Regulation (MDR) classifies software under Rule 11, which puts most diagnostic software in Class IIa or higher and so requires notified body review. The EU AI Act adds high-risk AI obligations for these devices, phasing in later than most of the Act.

技術的な洞察

A PCCP has three parts. The description of modifications lists the specific planned changes, such as retraining on new data, performance improvements, or new input sources. The modification protocol covers how the data will be managed, how retraining is done, which performance metrics and acceptance criteria apply, and how the updated model is validated. The impact assessment weighs the benefits and risks of the changes. Changes outside the authorized plan still need a new marketing submission. The common baseline is the Good Machine Learning Practice principles published by the FDA, Health Canada and the UK MHRA in 2021. They cover representative training data, independent training and test sets, clinically relevant metrics, how humans and the AI perform together, and monitoring after deployment. Reviewers look for performance broken down by patient subgroup, such as age and sex, and by acquisition equipment, such as scanner vendor and site. A model that works on one hospital's scanners can fail on another's, so reviewers watch closely for data drift.

戦略的影響

背景とルール

AI のアイデアが現実と接触しても生き残れるかどうかは、業界の状況によって決まります。

品質管理

ドメインの制約は、許容可能なエラー率と監視モデルに影響を与えます。

ビルドの選択

導入を成功させると、技術的能力と最前線のワークフローが連携します。

The Future of FDA Regulation of AI Medical Devices

The main open question is generative AI. Large language models produce open-ended output that is hard to validate the way a fixed classifier is validated. The FDA's Digital Health Advisory Committee held its first meeting on generative AI-enabled devices in November 2024. Expect more attention to monitoring real-world performance after deployment, to transparency about training data, and to greater use of PCCPs as manufacturers learn what the FDA will accept. In Europe, companies face overlapping MDR and AI Act requirements. Guidance on how the two fit together, and whether notified bodies have enough capacity, will shape how quickly AI devices reach patients there.

現実世界の実装

A radiology startup builds software that flags suspected brain bleeds on CT scans and moves them up the reading queue. It gets 510(k) clearance by showing substantial equivalence to a triage tool that is already cleared.

IDx-DR (now LumineticsCore) detects diabetic retinopathy in retinal photos without a specialist reading the image. There was no predicate device, so the FDA authorized it through the De Novo pathway in 2018.

A maker of ECG analysis software submits a predetermined change control plan (PCCP) with its application. The plan describes how the company will retrain the model on new data and what tests each update must pass, so those updates do not each need a new submission.

A company selling the same imaging AI in Europe must get a CE mark under the EU Medical Device Regulation through a notified body. It must also prepare for the EU AI Act, which treats such products as high-risk AI systems.

リスクとガードレール

規制要件により、強力なプロトタイプが無効になる可能性があります。
過去のデータには、特定のコミュニティに害を及ぼすバイアスがコード化されている可能性があります。
レガシーシステムでは、統合のボトルネックや隠れたコストが発生する可能性があります。

実装ロードマップ

問題の枠組みから評価まで、各分野の専門家を巻き込みます。
起動前に監査証跡とドキュメントを設計します。
コンプライアンスと安全義務を早期に検証します。
明確な停止基準とロールバック基準を使用して、段階的にロールアウトします。

探検を続けましょう

ヘルスケアにおける AI

一か八かの展開が実際にどのようなものかを学びましょう。ガイドを読む

金融における AI

規制された環境でリスクに敏感な AI を探索します。ガイドを読む

Free newsletter

Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.

One email each weekday. Unsubscribe in one click. We never sell or share your address.

Test yourself

Take the FDA Regulation of AI Medical Devices quiz

Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.

クイズを開始する

Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation

よくある質問

What is FDA Regulation of AI Medical Devices?

In the United States, AI software that diagnoses, treats, or informs care for a patient is usually regulated by the FDA as a medical device. It reaches the market through one of three main routes: 510(k) clearance, De Novo classification, or premarket approval (PMA). This matters because it decides what evidence a developer must produce, how an AI model can be updated after launch, and how much doctors and patients can trust the tool.

What must a manufacturer show to obtain 510(k) clearance?

A 510(k) rests on substantial equivalence to an existing predicate. Most AI-enabled devices reach the market this way.

The FDA authorized IDx-DR, an autonomous AI for diabetic retinopathy, in 2018. Which pathway did it use, and why?

De Novo is for novel low-to-moderate-risk devices with no predicate. Once a device is authorized this way, later devices can use it as a predicate.

What does a predetermined change control plan (PCCP) allow?

A PCCP authorizes planned changes, such as retraining, in advance, along with the protocol used to validate them. Changes outside the plan still need a new submission.

Which three parts make up a PCCP?

A PCCP describes the planned changes, sets out how they will be developed and validated, and assesses their benefits and risks.

Which statement about most FDA-authorized AI devices is accurate?

Most authorized AI models are locked. Updates come as controlled versions, and radiology, not dermatology, accounts for most authorized AI devices.

学び続ける