Quick answer

The FDA regulates AI/ML-based SaMD through existing premarket pathways (510(k), De Novo, PMA) supplemented by the predetermined change control plan framework for iterative algorithm updates.

Updated June 2026 · MmowW AI Compliance

FDA AI/ML SaMD Guidance: Compliance Framework for Software as a Medical Device (2026)

FDA Regulation of AI/ML-Based Software as a Medical Device

The FDA has developed a tailored regulatory approach for AI/ML-based Software as a Medical Device (SaMD). This framework balances rigorous safety oversight with recognition that AI/ML systems improve through iterative learning. As of 2026, the FDA has authorized over 900 AI/ML-enabled medical devices spanning radiology, cardiology, ophthalmology, and numerous other specialties.

Classification and Premarket Pathways

AI/ML SaMD follows the same classification system as other medical devices, categorized into Class I, II, or III based on risk.

PathwayTypical ClassWhen UsedReview Type
510(k)Class IISubstantially equivalent to predicatePremarket notification
De NovoClass I or IINovel, low-moderate risk, no predicateRisk-based classification
PMAClass IIIHigh-risk devicesFull premarket approval

Submissions for AI/ML SaMD should address algorithm architecture and training methodology, datasets used for training and validation, performance metrics, and failure mode characterization.

The Predetermined Change Control Plan

The PCCP framework represents the FDA's most significant adaptation for AI/ML devices. Traditional regulation assumes a fixed product. AI/ML systems improve over time. A PCCP allows manufacturers to describe planned modifications in their original submission and receive authorization to implement changes without new premarket applications.

PCCP Components

  1. Description of planned modifications (improved performance, expanded populations)
  2. Modification protocol describing development, validation, and implementation
  3. Impact assessment describing safety and effectiveness evaluation

Good Machine Learning Practice

The FDA, Health Canada, and UK MHRA jointly published Good Machine Learning Practice (GMLP) guiding principles covering the full AI/ML device lifecycle. Key principles include multi-disciplinary expertise, representative datasets, independent test sets, and robust real-world monitoring.

Real-World Performance Monitoring

Manufacturers must monitor post-market performance to identify degradation and support PCCP modifications. Systems should collect real-world performance data, track model drift, monitor for bias across subpopulations, and respond to safety signals.

Transparency and Labeling

Device labeling should communicate intended use, the AI's role in clinical workflow, performance characteristics, training data description, and known limitations. This enables informed decisions about integrating AI tools into clinical practice.

Practical Steps

  1. Engage the FDA early through Pre-Submission programs
  2. Design your QMS to address AI-specific requirements from the outset
  3. Document data management practices including provenance and representativeness
  4. Develop a PCCP strategy before your initial submission
  5. Implement GMLP principles throughout development
  6. Plan for post-market performance monitoring and reporting

Check your AI compliance readiness — free.

Take the Readiness Check 3 minutes · 10 questions · no signup required

This article is for informational purposes only and does not constitute legal advice. Regulatory requirements change frequently — verify current rules with official sources. Built by Sawai Gyoseishoshi Office, Hiroshima, Japan.