Regulatory Radar: What Changed for Medical Devices in August 2026

August 2026 brought regulatory movement on four fronts at once. The FDA opened a public discussion on generative artificial intelligence and revised a guidance document that had structured usability documentation for a decade. The European Parliament advanced the revision of the MDR and the IVDR. ANVISA launched a public call for early assessment of innovative devices and joined the list of authorities recognised by the World Health Organization. And three Asian authorities changed their rules for software as a medical device.

None of these changes demands immediate action from everyone. Together, though, they point to the direction of the next cycle of requirements, and some of them carry deadlines that fall within the next few weeks. This article organises what happened and, more importantly, what each item means for your operation.

United States: the FDA opens the discussion on generative AI

On 18 August, the FDA published a discussion paper on the regulation of medical devices enabled by generative artificial intelligence. The document addresses questions that have no settled answer in any jurisdiction yet: how to evaluate foundation models, how to handle agentic systems, and how to structure risk-proportionate post-market monitoring when a model's behaviour can change after authorisation.

The agency opened comments until 19 October 2026, under docket FDA-2026-N-7874.

What this means for you. If your company develops software as a medical device with AI components, this is a concrete window of influence over the framework that will govern the product for years to come. Filing a well built technical comment costs little and puts the company inside the conversation before the rule is settled. It is also worth using the questions in the document as an internal checklist: if you cannot answer how you would monitor your model's performance degradation in the field, that is a quality system gap, not merely a submission topic.

United States: the QMSR is no longer a project, it is the basis for inspection

The transition from 21 CFR 820 to a structure aligned with ISO 13485 is already in force, and the first enforcement actions under the new rule have started to appear. The relevant point is not the conceptual change, which has been known since the final rule was published, but the fact that enforcement now rests on the new text.

What this means for you. Procedures that still mention QSR, Device Master Record and Device History Record are out of step with the text in force. This does not automatically invalidate your quality system, but it creates an inconsistency that shows up on an auditor's first read. Companies operating under both ISO 13485 and FDA requirements tend to have less work here, because the structure is already mapped. Those maintaining two parallel systems have a real opportunity to consolidate.

United States: human factors guidance revised after a decade

In force since 3 August, the revised human factors and usability guidance aligns its terminology with ISO 14971 and IEC 62366-1. Terms such as harm, residual risk, serious injury, use environment and use-related risk analysis now follow the definitions in the standards. The guidance also replaces references to QSR with QMSR throughout the text and speaks of the design and development file instead of the device master record. The documentation section is leaner and refers to the specific submission-content guidance published in May 2026.

What this means for you. Use-related risk analysis templates, usability validation study protocols and the human factors engineering report itself need a terminology review before your next submission. It is a low-effort technical adjustment with a high deficiency impact: a vocabulary mismatch between your report and the current guidance triggers a request for clarification during review.

European Union: the MDR and IVDR revision advances, but nothing has changed yet

The proposal presented by the European Commission in December 2025 is still going through the ordinary legislative procedure. On 1 July 2026, the rapporteur of the European Parliament's Public Health Committee published a draft report with more than 130 suggested amendments to the Commission's text. The report shows broad support for making requirements more risk-proportionate, but clinical sector bodies have already voiced concern that part of the changes would lower clinical evidence and transparency requirements.

What this means for you. This is the most misread item on the list. A revision under way is not a revision in force. Transition deadlines, post-market surveillance obligations and clinical evidence requirements under the MDR and the IVDR remain fully applicable. No certification plan should be slowed down on the expectation of future simplification. What makes sense now is to follow the process and map which of your products would benefit from the proposed changes, so you can react quickly when the final text comes out.

European Union: the AI Act was postponed for devices, but not suspended

The Digital Omnibus, Regulation (EU) 2026/1744, entered into force on 27 July and moved the compliance deadline for high-risk AI embedded in a regulated product, the category that covers medical devices with AI, from 2 August 2027 to 2 August 2028. The obligations remain exactly the same: only the clock changed.

Three sets of obligations were not postponed. The Article 5 prohibitions have applied since February 2025, the obligations for general-purpose AI providers since August 2025, and the Article 50 transparency duties since 2 August 2026. No MDR or IVDR obligation was altered by the Digital Omnibus.

What this means for you. Two points deserve attention. First, the postponement stops applying if the system undergoes a significant design change, which makes it risky to treat 2028 as a comfortable date for products under active development. Second, a longer deadline is a reason to plan well, not to stop. The practical path is still the same: map your existing MDR documentation against the AI Act's high-risk system requirements and address only the gap.

Brazil: ANVISA opens a public call for innovative devices

On 5 August, ANVISA published Public Call 5/2026, selecting up to 10 developers of innovative medical devices to take part in early regulatory assessment in a collaborative environment with the Agency. The initiative targets products in risk classes III and IV, and five slots are reserved for domestic developers. Applications are open until 3 September 2026.

The logic of the programme is to discuss regulatory questions while the product is still under development, rather than at the moment the registration petition is filed.

What this means for you. For anyone developing technology with no approved equivalent in Brazil, this kind of early interaction reduces dossier rework and aligns technical expectations before the heavy investment in evidence. The deadline is short, and preparing the application requires clarity on risk classification, state of the art and clinical evidence strategy.

Brazil: ANVISA recognised by the WHO as a listed authority

The World Health Organization released its transitional list of Listed Authorities for medical devices, and ANVISA is among the 12 recognised national authorities and regional systems, including in vitro diagnostic products. The list exists to support the adoption of regulatory reliance between countries.

What this means for you. Brazilian registration gains weight as a basis for reliance in other markets, which changes the sequencing calculation of an international strategy. For foreign manufacturers, it reinforces Brazil as the gateway to Latin America. For Brazilian manufacturers, it opens an argument in markets that accept reliance on listed authorities.

Asia: China, India and Korea change their software rules

The NMPA opened for public consultation its guidance on the clinical evaluation of class III AI-assisted diagnostic devices, aimed at software that helps characterise lesions in medical images. India published final guidance for medical software, and South Korea detailed the documentation requirements for registering SaMD and SiMD.

What this means for you. Software as a medical device is being regulated in an increasingly specific way in each jurisdiction, rather than through the adaptation of general device rules. Anyone planning to export needs to treat each market as its own dossier, with clinical evidence and algorithm documentation requirements defined locally.

The pattern behind the eight movements

Three themes repeat when you look at the whole month together.

The first is artificial intelligence. The FDA, the European Union and the NMPA are building specific requirements at the same time, with different approaches. Anyone with an AI product will need distinct regulatory strategies per market, not one translated dossier.

The second is vocabulary convergence. The QMSR brings the FDA closer to ISO 13485, the human factors guidance now speaks the language of ISO 14971 and IEC 62366-1, and the WHO list institutionalises reliance between authorities. Quality systems built on international standards are easier to reuse.

The third is pace. Four relevant authorities changed rules in the same month. Regulatory monitoring is no longer a quarterly task; it is routine.

How HSC helps

HSC Global Group performs regulatory gap analysis for ANVISA, FDA, MDR, IVDR and MDSAP, turning a change in a standard into an action plan with a deadline, an owner and evidence of closure. We also support companies in preparing dossiers for international markets and in acting as registration holder in Brazil for foreign manufacturers.

If you do not know which of these eight movements affect your product line, that is exactly the question a gap analysis answers.

Talk to our team on WhatsApp at +55 11 5286-1608 or through hscglobalgroup.com.

---

Sources: FDA, European Commission, European Parliament, Official Journal of the European Union, ANVISA, World Health Organization, NMPA. Survey of August 2026.