Health Canada Medical Device Regulation Reform 2026: Terms & Conditions, AI/ML Guidance, REP, and Lifecycle Oversight

The 2026 Reform in Context

Health Canada's medical device regulatory framework is undergoing its most significant modernization in years. Between January and April 2026, four interconnected changes took effect that collectively shift the regulatory approach from point-in-time licensing to lifecycle-based oversight:

1. Expanded Terms & Conditions (T&C) authority — effective January 1, 2026
2. Guidance on T&C for Class II–IV devices — published April 1, 2026
3. Mandatory Regulatory Enrolment Process (REP) — effective April 1, 2026
4. Pre-market guidance for ML-enabled medical devices — published April 1, 2026

These changes affect every manufacturer of Class II–IV medical devices sold in Canada, including foreign manufacturers who rely on Canadian authorized representatives.

Expanded Terms & Conditions Authority

What Changed on January 1, 2026

The Medical Devices Regulations were amended to give the Minister of Health new authority to impose, amend, or remove Terms and Conditions (T&Cs) on Class II–IV medical device licenses at any point during a device's lifecycle. Previously, Health Canada could impose T&Cs primarily at the time of license issuance.

The reform gives Health Canada three new capabilities:

• Temporal flexibility — T&Cs can be imposed at any time, not just at initial licensing
• Dynamic corrective power — Health Canada can intervene in active licenses when new risk signals emerge during post-market clinical use
• Proportionality framework — T&Cs must be commensurate with the identified risk or uncertainty

What T&Cs Can Require

Health Canada's April 1, 2026 guidance outlines the types of obligations that may be imposed through T&Cs:

The T&C Process

The April 1, 2026 guidance defines a structured process:

1. Post-market notification — Health Canada communicates its intention to add T&Cs to an active license, including the rationale based on new scientific evidence or risk signals
2. Manufacturer response — The manufacturer has the right to submit observations and propose alternative approaches
3. Decision — Health Canada issues a final decision with specific T&C requirements and compliance timelines
4. Compliance monitoring — The manufacturer must report on T&C compliance as part of ongoing license maintenance
5. Removal — A manufacturer can request cancellation of a T&C once the required data has been provided and the uncertainty or risk has been adequately addressed

T&C Transparency: Public Disclosure

Health Canada will publish information on T&Cs issued or amended on or after January 1, 2026, on the Regulatory Decision Summary (RDS) page. This is a significant transparency measure that means:

• T&Cs imposed on your device license will be publicly visible
• Competitors, healthcare providers, and patients can see regulatory conditions attached to your products
• Non-compliance with T&Cs becomes a reputational risk, not just a regulatory one

Manufacturers should factor this transparency into their compliance strategy and communications planning.

Enforcement and Non-Compliance

Non-compliance with imposed T&Cs can result in:

• License suspension or cancellation
• Mandatory product recall
• Import restrictions
• Publication of enforcement actions

Implications for Manufacturers

The expanded T&C authority means that obtaining a medical device license in Canada is no longer the end of the regulatory story. Health Canada can require additional evidence generation or risk management activities at any point, based on post-market signals.

For manufacturers, this requires:

• Robust post-market surveillance systems that can detect emerging risk signals early
• Processes for rapid data collection and reporting when T&Cs are imposed
• Internal capability to design and execute post-market studies
• Budget allocation for potential post-market compliance activities

AI/ML-Enabled Medical Device Guidance

Scope and Applicability

Health Canada published pre-market guidance for machine learning-enabled medical devices (MLMDs) on April 1, 2026. The guidance applies to Class II, III, and IV devices that use machine learning (ML) either wholly or in part to achieve a defined medical purpose.

The guidance establishes a lifecycle approach to regulating ML-enabled devices, covering:

• Good Machine Learning Practices (GMLP)
• Data management and quality requirements
• Risk management for ML components
• Testing and evaluation of ML algorithms
• Clinical validation of ML performance
• Transparency and explainability expectations
• Change management through Predetermined Change Control Plans (PCCPs)

Predetermined Change Control Plans

Health Canada introduces the PCCP concept for ML-enabled devices, mirroring the FDA's approach. A PCCP allows manufacturers to pre-define the types of changes they expect to make to their ML algorithms (retraining, model updates, dataset expansion) and gain pre-approval for those change categories.

Key PCCP elements:

• Description of planned changes — What modifications are anticipated over the device lifecycle
• Change protocol — Methodology for implementing changes, including validation requirements
• Impact assessment — How changes will be evaluated for safety and effectiveness
• Performance monitoring — Post-change monitoring to verify continued device safety

Without a PCCP, any ML model change that could affect safety or effectiveness would require a new medical device license application or significant change amendment — a process that can take months.

Data Management Requirements

The guidance emphasizes data quality and governance:

• Training data must be representative of the intended patient population
• Data collection protocols must be documented and validated
• Bias assessment and mitigation must be performed across demographic subgroups
• Sex- and Gender-Based Analysis Plus (SGBA+) must be incorporated into risk assessments, with implications for liability and reputational risk if not adequately addressed
• Data provenance and lineage must be traceable

ML-Specific Risk Factors

Beyond general risk management (ISO 14971), the ML guidance enumerates specific risk factors that manufacturers must address:

ML Architecture and Algorithm Disclosure

The guidance expects manufacturers to provide detailed information about:

• ML methods and training algorithms used
• Architecture of the ML component (layer structure, parameter counts, activation functions)
• Software inputs and outputs (data types, formats, ranges)
• Degree of autonomy (human-in-the-loop, human-on-the-loop, or fully autonomous)
• How the ML output fits into the clinical workflow and decision-making process
• How the model handles out-of-distribution inputs and edge cases

Cover Letter Disclosure Requirements

For Class II–IV device applications involving ML:

• State clearly in the cover letter that the device uses machine learning
• Indicate whether a PCCP is included in the submission
• Specify the ML function and its role in the device's intended medical purpose

Failure to disclose ML use may result in application processing delays.

Alignment with International Standards

Health Canada's ML guidance aligns with:

• IMDRF Good Machine Learning Practice (GMLP) Guiding Principles (final, January 2025)
• Tri-Agency GMLP Principles (FDA, Health Canada, MHRA, October 2021)
• ISO 13485:2016 quality management system requirements
• ISO 14971:2019 risk management framework

This alignment means manufacturers building ML compliance programs for FDA or EU markets can leverage much of the same documentation and processes for Health Canada submissions.

Regulatory Enrolment Process (REP) Now Mandatory

What REP Changes

Effective April 1, 2026, the Regulatory Enrolment Process (REP) is mandatory for all Class II–IV medical device submissions. REP replaces email-based submissions with a structured, web-based intake process through the Common Electronic Submission Gateway (CESG).

Key changes:

IMDRF Table of Contents Requirement

Alongside REP, Health Canada now requires the IMDRF Table of Contents (ToC) format for all Class II–IV device submissions. The IMDRF ToC, based on IMDRF N9 and N13 Edition 4, provides a standardized organization for medical device application content.

This aligns Canada with other IMDRF member states and simplifies multi-market submissions for manufacturers who already use IMDRF ToC format for other jurisdictions.

Practical Impact on Foreign Manufacturers

Foreign manufacturers must:

1. Register for CESG access (if not already done during the REP pilot phase)
2. Prepare submissions in IMDRF ToC format
3. Submit through REP for all new and amended MDL applications
4. Ensure their Canadian authorized representative (Canadian importer of record) is prepared for the new process

Failure to use REP may result in application delays or returns.

Updated Significant Change Guidance

Health Canada has updated its guidance on what constitutes a "significant change" requiring a new or amended medical device license. The updated guidance tightens the threshold for changes involving:

• Software changes — including cybersecurity updates, compatibility changes, and algorithm modifications
• Performance changes — any modification that could affect clinical performance
• Cybersecurity changes — patches, vulnerability fixes, and security protocol updates may now trigger significant change review
• Compatibility changes — modifications to device connectivity, interoperability, or integration with other systems

The lowered threshold for software-related changes is particularly relevant for connected devices and SaMD products. Manufacturers should review their change control processes to ensure that cybersecurity patches and software updates are assessed against Health Canada's significant change criteria.

Comparison: Before and After the 2026 Reforms

How Canada Compares to FDA and EU MDR

Canada's 2026 reforms bring it closer to both the FDA's lifecycle approach and the EU's systematic oversight model. Manufacturers compliant with both FDA and EU requirements will find the Canadian framework increasingly familiar.

Action Plan for Manufacturers

Immediate (Next 30 Days)

1. Register for CESG if you have not already done so during the REP pilot
2. Convert submission templates to IMDRF ToC format for all planned Class II–IV applications
3. Review current licenses for devices that may be affected by the expanded T&C authority

Short-Term (30–90 Days)

4. Update change control SOPs to incorporate the updated significant change criteria, especially for software and cybersecurity changes
5. Develop PCCPs for any ML-enabled devices in your portfolio or pipeline
6. Train regulatory affairs teams on REP submission requirements and IMDRF ToC structure
7. Assess post-market surveillance systems for readiness to support potential T&C obligations

Ongoing

8. Monitor Health Canada guidance updates — additional guidance documents are expected throughout 2026 to support the new regulatory framework
9. Engage with your Canadian authorized representative on REP processes and compliance requirements
10. Benchmark against FDA and EU requirements to identify opportunities for documentation and process harmonization across all three markets

Frequently Asked Questions

Do the T&C changes apply to devices already licensed in Canada?

Yes. The expanded T&C authority applies to all active Class II–IV medical device licenses. Health Canada can impose new T&Cs on devices that have been on the Canadian market for years if new risk signals emerge.

Does my ML-enabled device need a PCCP?

A PCCP is not mandatory, but without one, any ML model change that could affect safety or effectiveness requires a new license application or significant change amendment. A PCCP streamlines the process for anticipated changes.

Can I still submit applications by email?

No. As of April 1, 2026, REP via CESG is mandatory for all Class II–IV medical device submissions. Email submissions are no longer accepted.

How does the IMDRF ToC requirement affect my existing submission templates?

You will need to restructure your technical documentation to follow the IMDRF ToC format. If you already prepare submissions in the IMDRF format for other markets (Japan, Australia, etc.), much of your content can be reused with Canada-specific adaptations.

What happens if Health Canada imposes T&Cs I disagree with?

The guidance provides for a manufacturer response process. You can submit observations and propose alternative approaches. However, the Minister's final decision is binding, and non-compliance with imposed T&Cs can result in license suspension or cancellation.

Sources and References

• Health Canada, "Guidance on terms and conditions for class II to IV medical devices" (April 1, 2026)
• Health Canada, "Pre-market guidance for machine learning-enabled medical devices" (April 1, 2026)
• Health Canada, "Guidance on managing applications for medical device licences" (effective February 2, 2026)
• Health Canada, "Guidance on how to interpret significant change" (updated 2026)
• Medical Devices Regulations (Canada), as amended effective January 1, 2026
• IMDRF Stakeholder Forum presentation, Health Canada Regulatory and Policy Updates (March 10, 2026)
• IMDRF N9 and N13 Ed 4 — Table of Contents for medical device applications
• Tri-Agency Good Machine Learning Practice (GMLP) Principles (FDA, Health Canada, MHRA, 2021)
• IMDRF GMLP Guiding Principles (final, January 2025)