Findings
Non-Device-MDDS functions are excluded from FDA regulation, provided they do not interpret or analyze medical data.
Device-MDDS hardware functions are still considered devices but are subject to enforcement discretion.
FDA clarified that functions involving analysis, alarms, or active patient monitoring fall under regulatory oversight due to higher risk.
The guidance addresses scenarios involving multiple function device products with both device and non-device functions.
General-purpose IT infrastructure used for data transfer, storage, or display is not regulated as a medical device.
Recommendations
Clearly delineate whether software functions qualify as Non-Device-MDDS or Device-MDDS under section 520(o)(1)(D) of the FD&C Act.
Avoid adding analysis, interpretation, or real-time monitoring capabilities to Non-Device-MDDS to maintain exemption from regulatory oversight.
For Device-MDDS, adhere to existing classification regulations but note FDA’s intent not to enforce regulatory controls for most low-risk use cases.
Developers of multiple function devices should assess how non-device functions impact the safety and effectiveness of device functions.
Consult FDA guidance on “Multiple Function Device Products” for more details on managing products with both device and non-device functions.
Regulatory Considerations
Non-Device-MDDS functions are not subject to FDA oversight under section 520(o)(1)(D) of the FD&C Act.
FDA does not enforce premarket notification, registration, or quality system requirements for Device-MDDS hardware functions.
Active patient monitoring and alarm systems remain within the scope of FDA regulation due to their higher risk profiles.
The regulatory status of multiple function devices depends on how non-device and device functions interact.
Developers must avoid modifying data or controlling other medical devices unless explicitly regulated as such.