Medical Device Industry News & Regulatory Updates: What Changed in 2026 and What's Coming Next

A comprehensive roundup of the most impactful medical device regulatory changes, FDA actions, EU MDR/IVDR milestones, and industry trends shaping 2026 — and what to prepare for in 2027.

The Big Picture: 2026 Medical Device Regulatory Landscape

If you work in medical device regulation, 2026 is not a year you can afford to coast through. Multiple once-in-a-decade transitions are converging simultaneously: the FDA's shift from QSR to QMSR reached its compliance deadline, EU MDR/IVDR transition timelines continue to evolve under political and practical pressure, the EU AI Act began imposing direct obligations on medical device manufacturers, and an escalating global tariff environment is forcing companies to rethink where and how they manufacture.

Across all major jurisdictions, four macro themes are defining the regulatory landscape:

Harmonization is accelerating, but unevenly. The FDA's adoption of ISO 13485 through the QMSR is the most visible harmonization milestone in a decade. IMDRF working groups continue to converge on common frameworks for UDI, adverse event terminology, and software classification. But significant gaps remain -- the EU, US, and Asia-Pacific regions still diverge meaningfully on clinical evidence expectations, post-market requirements, and AI/ML oversight.

Digital health and AI regulation is crystallizing. The era of regulatory uncertainty for AI/ML medical devices is ending. Between the EU AI Act, FDA's maturing predetermined change control plan (PCCP) framework, and Health Canada's own AI guidance, manufacturers now have enough concrete rules to build compliance programs around -- even if those programs require significant investment and new capabilities.

Supply chain resilience is no longer optional. Two years of tariff escalation, coupled with ongoing semiconductor constraints and sterilization capacity concerns, have made supply chain strategy an executive-level regulatory concern. Companies that treated supply chain as a procurement problem are discovering it is a regulatory problem when they cannot maintain consistent manufacturing processes, validated suppliers, or component traceability.

Post-market obligations are tightening globally. Whether it is the EU's PSUR and trend reporting requirements, FDA's increased scrutiny on post-market surveillance through MDDR analysis, or emerging vigilance frameworks in ASEAN and Latin American markets, regulators everywhere are demanding more data, more frequently, and with more analytical rigor.

This roundup covers the developments that matter most, organized by jurisdiction and topic. Where possible, we include specific dates, document references, and practical implications. Where developments are anticipated but not yet finalized, we note that clearly.

FDA Updates

QMSR: The Compliance Deadline Has Arrived

The single most consequential FDA regulatory change in 2026 is the transition from the Quality System Regulation (21 CFR Part 820) to the Quality Management System Regulation (QMSR). The compliance date was February 2, 2026 -- and it is now behind us.

The QMSR incorporates ISO 13485:2016 by reference, replacing decades of FDA-specific quality system requirements with a framework that aligns with the international standard used by virtually every other major regulatory authority. FDA retains certain US-specific requirements layered on top of ISO 13485, including complaint file requirements (21 CFR 820.198), unique device identification provisions, and specific record-keeping mandates.

What this means in practice:

FDA inspectors are now evaluating manufacturers against ISO 13485:2016 requirements. Investigators received updated training and inspection guidance aligned with the QMSR framework. Firms that have not updated their quality manuals, procedures, and internal audit programs are at risk.
Companies that were already ISO 13485 certified had a smoother transition but still needed to address the FDA-specific additions. Dual-system documentation should be consolidated.
CAPA procedures, management review protocols, and design control documentation all needed to be cross-referenced to the ISO 13485 clause structure rather than the old 21 CFR 820 subpart structure.
The FDA has acknowledged that there will be a "reasonable transition" posture during early inspections, but this should not be interpreted as a grace period. Firms found with no evidence of transition effort will face standard enforcement consequences.

For a detailed breakdown of the QMSR changes and a transition checklist, see our QSR to QMSR Transition Guide.

AI/ML: Predetermined Change Control Plans Take Shape

The FDA's approach to AI/ML medical devices continued to mature throughout 2025 and into early 2026. Several developments are worth tracking:

Predetermined Change Control Plans (PCCPs): The final guidance on marketing submission recommendations for PCCPs, first released in draft form and finalized in 2025, established a framework for manufacturers to describe planned modifications to AI/ML algorithms within their initial marketing authorization. This allows certain algorithm updates -- such as retraining on new data or expanding to adjacent clinical applications -- without requiring a new 510(k) or PMA supplement, provided the modifications fall within the pre-specified plan.

The practical uptake of PCCPs has been gradual. Early adopters have been primarily in radiology and cardiology, where algorithm updates are frequent and performance data is abundant. The FDA's Digital Health Center of Excellence (DHCoE) has published several case studies illustrating acceptable PCCP structures, which are valuable reference material for manufacturers drafting their own plans.

Transparency and performance monitoring: The FDA has continued to expand its public-facing AI/ML device database, which now lists over 1,000 authorized devices. The agency has signaled interest in standardized real-world performance monitoring requirements for AI/ML devices, though formal rulemaking on this topic has not yet occurred.

Good Machine Learning Practice (GMLP): The ten guiding principles for GMLP, developed jointly by the FDA, Health Canada, and the UK MHRA, remain the foundational framework. While not legally binding, these principles are increasingly referenced in FDA review feedback and are expected to underpin future guidance documents.

Cybersecurity: Enforcement of Section 524B Requirements

FDA's cybersecurity requirements for medical devices, codified through the 2023 omnibus legislation amending Section 524B of the FD&C Act, continued to be enforced and refined in 2025-2026.

Key developments:

Software Bill of Materials (SBOM): The requirement for manufacturers to provide an SBOM with premarket submissions is now firmly established. FDA reviewers are actively evaluating SBOM completeness and accuracy. Submissions lacking an adequate SBOM are being flagged as deficient during interactive review.
Premarket cybersecurity guidance: The updated premarket cybersecurity guidance, which replaced the 2014 version, has been in effect and is being applied to all new submissions. The guidance requires a comprehensive threat model, security architecture documentation, vulnerability testing results, and a plan for post-market cybersecurity management.
Legacy device challenges: Manufacturers of already-marketed devices are grappling with how to apply cybersecurity expectations retrospectively. While Section 524B primarily applies to new submissions, FDA's post-market cybersecurity guidance strongly encourages manufacturers to maintain a cybersecurity risk management program for all marketed devices, and inspectors have begun asking about cybersecurity practices during routine facility inspections.
EU Cyber Resilience Act (CRA) and NIS2 Directive: On the EU side, the Cyber Resilience Act introduces new vulnerability reporting and security update obligations for products with digital elements — including many connected medical devices. CRA vulnerability reporting requirements are expected to take effect in late 2026. Additionally, the NIS2 Directive is guiding national cybersecurity rules across EU member states, with healthcare explicitly designated as an essential sector. Manufacturers selling connected devices in the EU must now track CRA, NIS2, and MDR cybersecurity requirements simultaneously.

FDA Organizational and Structural Developments

The Center for Devices and Radiological Health (CDRH) has continued to refine its organizational structure and review processes:

CDRH leadership continuity: FDA and CDRH leadership changes are always closely watched by industry, particularly given the potential for shifting enforcement priorities and review philosophy. As of early 2026, the agency has been navigating broader federal workforce and spending review processes that have created uncertainty about staffing levels and program continuity.
Review timelines: Average review times for 510(k) submissions remained in the range of 100-150 calendar days through 2025, with the FDA meeting its MDUFA V performance goals for most submission types. De Novo review times continued to be a pain point, with median times still exceeding 200 days.
MDUFA V implementation: The Medical Device User Fee Amendments V agreement, effective through FY2027, continued to shape FDA's resourcing and performance commitments. User fees increased modestly in FY2026 in line with the agreed-upon fee schedule.

Notable Clearances, Approvals, and Enforcement Actions

Device authorizations of note (2025 - early 2026):

The FDA continued its record pace of AI/ML device authorizations, with 2025 setting a new high-water mark. Notable trends include:

Expansion of AI-enabled devices beyond radiology into pathology, ophthalmology, and gastroenterology
Growing number of De Novo classifications for truly novel AI/ML devices without predicates
Several high-profile total product lifecycle (TPLC) advisory panel meetings on digital therapeutics and prescription digital therapeutics (PDTs) that signaled evolving agency thinking on this category
Continued growth in cardiovascular AI devices, particularly for arrhythmia detection and cardiac imaging analysis

Enforcement trends:

Warning letter volume for medical device establishments remained elevated, with recurring themes including CAPA inadequacy, complaint handling failures, and insufficient process validation -- themes likely to evolve as QMSR-aligned inspections ramp up.
Import alerts continued to target manufacturers, particularly in Southeast and East Asia, with inadequate quality system documentation or failure to register and list with FDA.
Consent decree activity, while not at historically high levels, continued for manufacturers with repeated GMP violations, particularly in the sterilization and reprocessing space.

EU MDR / IVDR Updates

Extended Transition Timelines: Where Things Stand

The EU MDR and IVDR transition remains one of the most complex and drawn-out regulatory transitions in the history of medical device regulation. The key developments:

Article 120 Amendments (Regulation 2023/607 and subsequent modifications):

The European Parliament and Council extended the MDR transition deadlines through amendments to Article 120, acknowledging that the original May 2024 deadline was not achievable for the full installed base of legacy devices. As amended:

Class III and Class IIb implantable devices had an extended deadline of December 26, 2027 to obtain MDR certification (provided they held a valid MDD certificate or had submitted an MDR application to a notified body).
Class IIb (non-implantable), Class IIa, and Class I (sterile/measuring) devices received an extended deadline of December 26, 2028.
"Sell-off" dates were also extended, allowing devices lawfully placed on the market under the extended transition to remain available until December 26, 2028 or December 26, 2029, respectively.

These extensions came with conditions: manufacturers must have an active application with a notified body, must maintain their existing MDD/AIMDD quality management system, and must continue to meet vigilance and post-market surveillance obligations.

Status in early 2026: The transition is proceeding, but at a pace that raises concerns about whether even the extended deadlines will be met for all device categories. Multiple industry associations have called for further extensions or alternative transition mechanisms, though the European Commission has so far resisted additional timeline changes.

IVDR Implementation: A Regulation Under Strain

The In Vitro Diagnostic Regulation (IVDR) continues to face implementation challenges that exceed even the difficulties seen with MDR:

Classification changes: IVDR reclassified a large portion of IVD devices into higher risk classes compared to the old IVDD. Devices that were previously self-certified now require notified body involvement. The sheer volume of devices needing notified body review has overwhelmed capacity.
Notified body availability for IVD: As of early 2026, the number of notified bodies designated under IVDR remains limited relative to the volume of applications. Several bodies have expanded their IVDR scope, but capacity constraints are acute, particularly for Class D devices (the highest risk category, including companion diagnostics and blood screening tests).
Common Specifications: The European Commission has been developing Common Specifications (CS) for certain device categories where harmonized standards are not yet available. Progress on CS has been slower than industry hoped, creating uncertainty about the performance evaluation and analytical evidence requirements for specific device types.
Performance evaluation: The IVDR's performance evaluation requirements, particularly the clinical performance study provisions, represent a significant increase in evidentiary burden compared to the IVDD. Manufacturers of well-established IVD technologies are struggling with the requirement to generate new clinical evidence for devices that have been on the market for decades.

EUDAMED: Mandatory Registration Confirmed for May 2026

After years of delays, the European Commission has confirmed that EUDAMED's core modules will become mandatory from 28 May 2026. This is the single most operationally significant EUDAMED milestone since the database's inception.

What becomes mandatory on 28 May 2026:

All economic operators (manufacturers, authorized representatives, importers) must complete Actor Registration and obtain a Single Registration Number (SRN) before this date.
Manufacturers must register new MDR/IVDR devices in EUDAMED before placing them on the EU market.
Legacy devices (those already on the market under transitional provisions) must be registered by 28 November 2026.

Current module status as of early 2026:

Actor Registration and UDI/Device Registration modules are operational and in use.
Notified Body and Certificate module is functional.
Clinical Investigation and Performance Study modules have been deployed.
Vigilance and Post-Market Surveillance module has been partially deployed, with full functionality still being phased in.
Market Surveillance module remains under development.

Practical implications: Manufacturers who have not yet registered as actors in EUDAMED should begin immediately. The registration process itself can take weeks when accounting for organizational data verification, authorized representative coordination, and SRN issuance. Companies placing new devices on the EU market after 28 May 2026 without EUDAMED registration will be in non-compliance.

Notified Body Capacity

Notified body capacity remains the single largest bottleneck in the EU regulatory system:

Metric	Approximate Status (Early 2026)
Notified bodies designated under MDR	~40
Notified bodies designated under IVDR	~15
Total MDR certificates issued to date	~10,000+
Estimated legacy devices still needing MDR certification	Tens of thousands
Average time from notified body application to MDR certification	12-18 months

The European Commission and Member State authorities have taken steps to accelerate notified body designation and expand capacity, including joint assessment programs and measures to reduce administrative burden. New notified body designations are expected to continue throughout 2026 and 2027, but the gap between available capacity and industry demand remains significant.

MDCG Guidance Documents

The Medical Device Coordination Group (MDCG) continued to issue guidance documents throughout 2025 and into 2026. Key releases and updates include guidance on:

Clinical evaluation methodology and clinical investigation planning
Post-market clinical follow-up (PMCF) study design
Legacy device transition requirements and documentation
Software qualification and classification under MDR/IVDR
Unique Device Identification (UDI) assignment for systems and procedure packs
Notified body operational expectations for conformity assessment

These guidance documents, while not legally binding, are treated as authoritative interpretive tools by notified bodies and national competent authorities. Manufacturers should review all relevant MDCG guidance and ensure their technical documentation aligns with the group's expectations.

Harmonized Standards Update

In early 2026, the European Commission published Implementing Decision (EU) 2026/193, updating the list of harmonized standards that provide presumption of conformity under the MDR. Revised ISO standards now cover neurosurgical implants, biological and clinical evaluation, sterilization methods, non-active surgical implants, breathing gas pathways, and small-bore connectors. Manufacturers should verify that their technical documentation references the correct editions of applicable harmonized standards and assess whether the updated standards introduce any new requirements that affect their conformity claims.

Global Regulatory Updates

UK MHRA: Building a Post-Brexit Framework

The United Kingdom's post-Brexit medical device regulatory framework continues to evolve:

UKCA marking: The UK government has repeatedly extended the deadline for transitioning from CE marking to UKCA marking for medical devices. As of early 2026, CE-marked devices continue to be accepted on the GB market under transitional provisions. The MHRA has signaled that the future framework will diverge from EU MDR in certain respects, particularly around software regulation and AI/ML devices, but the full set of UK-specific regulations has not yet been finalized.
MHRA regulatory reform: The MHRA has been developing its own medical device regulatory framework under the Medicines and Medical Devices Act 2021. A series of consultations and regulatory roadmap publications have outlined the agency's intentions, but the finalized regulations have been subject to repeated delays.
International Recognition Framework: The MHRA has expressed interest in mutual recognition and reliance pathways that would allow manufacturers to leverage regulatory decisions from other trusted authorities (FDA, EU notified bodies, Health Canada, TGA) to streamline UK market access. Details remain under development.
Good Machine Learning Practice: The UK was a co-signatory of the GMLP principles with FDA and Health Canada, and the MHRA continues to develop AI/ML-specific guidance aligned with these principles.

China NMPA

China's National Medical Products Administration (NMPA) continues to refine its regulatory framework:

Registration rule updates: The NMPA has continued to update its registration and filing requirements for medical devices, including revised requirements for clinical evaluation, software, and IVD devices. The overall trajectory is toward greater alignment with international standards while retaining China-specific requirements.
AI/ML regulation: China has been developing its own regulatory framework for AI-enabled medical devices, with several guidance documents released by NMPA's Center for Medical Device Evaluation (CMDE). The approach shares some conceptual similarities with FDA's framework but includes unique requirements around algorithm transparency and data localization.
Clinical trial requirements: NMPA's clinical trial requirements remain among the most stringent globally, particularly the expectation for China-specific clinical data for many device categories. Some relaxation has occurred for lower-risk devices and devices with substantial international clinical evidence, but Class III devices generally still require Chinese clinical studies.

Health Canada

MDSAP: Canada continues to rely on the Medical Device Single Audit Program (MDSAP) as its primary quality system audit mechanism. MDSAP audits cover the requirements of all five participating regulatory authorities (US, Canada, Brazil, Japan, Australia). Health Canada has been working to improve MDSAP audit consistency and has updated its grading criteria for nonconformities.
Digital health and AI guidance: Health Canada has published guidance on software as a medical device (SaMD) and pre-market requirements for machine learning-enabled devices. The agency's approach aligns closely with the FDA/Health Canada/MHRA GMLP principles.
Licensing and Essential Principles (LEEP): Health Canada's ongoing modernization of its medical device licensing framework includes aligning Essential Principles of Safety and Performance with international expectations. The framework is designed to leverage recognized standards and conformity assessment procedures more efficiently.

Japan PMDA

Japan's Pharmaceuticals and Medical Devices Agency (PMDA) has continued its regulatory modernization:

SaMD regulatory program: PMDA's regulatory framework for software as a medical device has matured, with a growing number of AI/ML-enabled devices approved through the PMDA pathway. Japan has been notably proactive in developing regulatory science approaches for adaptive algorithms.
MDSAP participation: Japan remains an MDSAP participating authority, though it retains certain Japan-specific requirements (particularly around Japanese-language labeling and domestic representation) that manufacturers must address separately from MDSAP audits.

South Korea MFDS

The Ministry of Food and Drug Safety (MFDS) has continued to expand its regulatory framework for digital health and AI/ML devices, publishing several guidance documents on SaMD classification and submission requirements. South Korea has also been active in IMDRF working groups on AI/ML regulation.

Australia TGA

The Therapeutic Goods Administration (TGA) has implemented regulatory reforms aimed at improving review efficiency and aligning with international best practices. The TGA's participation in MDSAP and its reliance on conformity assessment from recognized international bodies continue to facilitate market access for manufacturers with strong international regulatory portfolios.

IMDRF Harmonization Progress

The International Medical Device Regulators Forum (IMDRF) continued its harmonization work across several priority areas:

Artificial Intelligence/Machine Learning Working Group: The IMDRF AI/ML working group has been developing consensus documents on terminology, risk classification, and regulatory considerations for AI/ML medical devices. These documents, once finalized, are expected to influence national regulatory frameworks globally.
Cybersecurity guidance: IMDRF has published updated guidance on cybersecurity principles for medical devices, providing a common framework that member authorities can adapt to their national contexts.
UDI harmonization: Work continues on global harmonization of UDI requirements, including data element alignment across GUDID (US), EUDAMED (EU), and other national databases.

AI and Digital Health Regulation

EU AI Act: Direct Impact on Medical Device Manufacturers

The EU AI Act, which entered into force in August 2024, represents the world's first comprehensive horizontal AI regulation -- and it has direct, significant implications for medical device manufacturers.

Medical devices and IVD devices that incorporate AI systems are subject to both the AI Act and the MDR/IVDR. The AI Act classifies AI systems used in medical devices as high-risk (Annex I, Section A), which triggers a comprehensive set of requirements:

Risk management systems specific to AI risks (distinct from, but complementary to, ISO 14971 risk management)
Data governance requirements for training, validation, and testing datasets
Technical documentation requirements that go beyond MDR/IVDR technical file expectations
Transparency obligations including clear information to users about the AI system's capabilities and limitations
Human oversight mechanisms ensuring meaningful human control over AI decisions
Accuracy, robustness, and cybersecurity requirements throughout the product lifecycle
Post-market monitoring specifically for AI performance (complementing MDR/IVDR post-market surveillance)

Timeline: The AI Act's obligations are being phased in. Prohibitions on unacceptable-risk AI practices took effect in February 2025. High-risk AI system requirements -- including those for medical devices -- are expected to become fully enforceable by August 2026. Manufacturers of AI-enabled medical devices should be actively assessing the gap between their current MDR/IVDR compliance programs and the additional AI Act requirements.

Conformity assessment: For AI systems embedded in medical devices already subject to notified body conformity assessment under MDR/IVDR, the AI Act provides that the notified body assessment can be integrated into the existing MDR/IVDR conformity assessment process. This avoids duplicative assessments but adds scope and complexity to notified body audits. Whether notified bodies have the AI expertise to effectively assess these requirements is an open question.

FDA Digital Health Center of Excellence

The DHCoE has continued to expand its activities:

Total Product Lifecycle (TPLC) advisory program for digital health developers, providing non-binding feedback on regulatory strategy
Digital Health Advisory Committee meetings exploring emerging questions around prescription digital therapeutics, clinical decision support, and remote patient monitoring
Real-World Performance (RWP) pilot programs exploring how real-world data can be used to monitor AI/ML device performance post-market
Pre-submission program outreach specifically targeting digital health startups and first-time submitters

International Convergence on SaMD Regulation

The regulatory community's convergence on Software as a Medical Device regulation continues, with several notable developments:

The IMDRF SaMD framework (N12, N23, N41 documents) remains the foundational reference, but national implementations continue to diverge in detail.
Multiple jurisdictions are developing or refining frameworks for "Software in a Medical Device" (SiMD) as distinct from standalone SaMD, recognizing that embedded software presents different regulatory considerations.
Clinical evaluation expectations for SaMD remain inconsistent across jurisdictions, creating challenges for manufacturers seeking simultaneous global market access.
Cloud-based SaMD and continuously learning systems present ongoing regulatory challenges that no jurisdiction has fully resolved.

Supply Chain and Manufacturing

Tariff Impacts on Medical Device Manufacturing

The global tariff environment has emerged as one of the most disruptive forces affecting the medical device industry in 2025-2026.

US tariff actions:

The tariff landscape has been particularly volatile for medical device manufacturers:

Tariffs imposed on Chinese imports, which were expanded significantly in 2025, have affected a wide range of medical device components and finished goods. Devices and components classified under certain HTS codes face tariff rates that have substantially increased manufacturing costs for companies relying on Chinese supply chains.
Tariff actions targeting other trading partners have created additional uncertainty and cost pressure across the industry's global supply chain.
The medical device industry has actively lobbied for tariff exclusions, with some product categories receiving temporary relief. However, the exclusion process has been slow and unpredictable, making long-term planning difficult.

Industry response:

Strategy	Adoption Trend	Key Challenges
Reshoring to US manufacturing	Increasing, especially for critical components	Higher labor costs, facility build-out timelines of 2-4 years
Nearshoring to Mexico, Costa Rica, Dominican Republic	Accelerating	Workforce training, supplier ecosystem development
Diversifying from China to Vietnam, India, Malaysia	Significant movement	Regulatory re-registration requirements, validation costs
Absorbing tariff costs	Common for low-margin devices	Unsustainable long-term, margin compression
Redesigning products to avoid tariffed components	Emerging	Regulatory change notification obligations, re-validation

Regulatory implications of supply chain changes:

Manufacturing site changes, even when driven by tariff economics, trigger regulatory obligations in virtually every jurisdiction. Companies must consider:

FDA establishment registration and listing updates
Notified body notification and potential audit of new manufacturing sites
NMPA, PMDA, and other authority notifications for site changes
Revalidation of manufacturing processes at new facilities
Updated supply chain and traceability documentation
Potential impact on predicate equivalence arguments if manufacturing processes change materially

Component Shortages and Supply Chain Resilience

Semiconductor and electronic component shortages, which peaked in 2021-2022, have largely eased for most medical device categories. However, targeted shortages persist for certain specialized components, and the experience has driven lasting changes in industry practice:

Safety stock strategies have expanded, with many manufacturers maintaining 6-12 months of critical component inventory rather than just-in-time approaches.
Second-source qualification programs have accelerated, though the regulatory burden of qualifying alternative components (particularly for Class III devices and IVD reagents) remains significant.
Design for supply chain resilience is increasingly being incorporated into design control processes, with component availability and single-source risk being evaluated alongside traditional design inputs.

Ethylene Oxide (EO) Sterilization

EO sterilization remains a critical concern for the medical device industry:

Approximately 50% of medical devices requiring sterilization rely on EO. Alternative methods (electron beam, gamma irradiation, vaporized hydrogen peroxide, supercritical CO2) are not feasible for many device types due to material compatibility or geometry constraints.
EPA emission standards for commercial sterilization facilities have continued to tighten, forcing facility upgrades and, in some cases, facility closures or capacity reductions.
FDA has continued to support industry efforts to validate alternative sterilization methods, including through the Innovation Challenge for sterilization approaches that reduce EO use while maintaining sterility assurance.
The net effect has been increased sterilization costs and longer lead times, particularly for manufacturers relying on contract sterilization services.

Reimbursement and Market Access

CMS Coverage and Payment Updates

Reimbursement dynamics in the US continued to shape market access decisions for medical device manufacturers:

Medicare coverage determinations: CMS has continued to issue National Coverage Determinations (NCDs) and Local Coverage Determinations (LCDs) that directly affect device utilization. The coverage with evidence development (CED) pathway remains relevant for innovative but unproven technologies.
DRG and APC rate updates: Annual updates to diagnosis-related group (DRG) weights and ambulatory payment classification (APC) rates for FY/CY2026 reflect the usual mix of winners and losers across device categories. Manufacturers of high-cost devices should review the rate updates for their relevant DRGs and APCs.

NTAP and TPT Programs

The New Technology Add-on Payment (NTAP) and Transitional Pass-Through Payment (TPT) programs remain critical pathways for innovative medical devices to achieve adequate reimbursement during their initial market entry period:

NTAP provides additional payment above standard DRG rates for qualifying new technologies in the inpatient setting. The program has seen steady growth in applications, reflecting the pipeline of innovative devices reaching the market. CMS has finalized NTAP approvals for several novel device categories in the FY2026 IPPS final rule.
TPT provides separate payment for qualifying new devices in the outpatient setting, typically for 2-3 years. This program is particularly relevant for devices used in ambulatory surgery centers and hospital outpatient departments.
Timing alignment: Manufacturers continue to face the strategic challenge of aligning their FDA market authorization timeline with CMS payment application deadlines. Missing an application cycle can delay adequate reimbursement by a full year.

Value-Based Procurement and Outcomes-Based Contracting

The broader trend toward value-based healthcare is affecting medical device procurement:

Hospital systems and group purchasing organizations (GPOs) are increasingly incorporating clinical outcomes data, total cost of care analysis, and real-world evidence into their procurement decisions.
Risk-sharing agreements and outcomes-based contracts -- where manufacturers share financial risk if their devices do not deliver promised clinical or economic outcomes -- are growing more common, particularly for high-cost implantable devices and capital equipment.
These trends are driving manufacturers to invest more heavily in health economics and outcomes research (HEOR), real-world evidence generation, and post-market clinical studies that demonstrate value beyond initial regulatory clearance/approval.

Key Dates and Deadlines Summary

Date	Event	Jurisdiction
February 2, 2026	QMSR compliance date (QSR to QMSR transition complete)	US (FDA)
May 28, 2026	EUDAMED mandatory: new MDR/IVDR devices must be registered; all actors must have SRN	EU
August 2, 2026	EU AI Act high-risk system requirements expected to become enforceable	EU
November 28, 2026	EUDAMED: legacy devices must be registered	EU
Late 2026	Cyber Resilience Act vulnerability reporting requirements take effect	EU
December 26, 2027	Extended MDR transition deadline for Class III and Class IIb implantable devices	EU
December 26, 2028	Extended MDR transition deadline for Class IIa and other devices	EU
December 26, 2028-2029	Extended sell-off dates for legacy devices under MDR transition	EU
FY2027	MDUFA V fee schedule continues; potential start of MDUFA VI negotiations	US (FDA)
Ongoing	UKCA marking transition timeline under continued review	UK (MHRA)
Ongoing	IVDR transition -- notified body certification deadlines vary by device class	EU

What to Watch for in Late 2026 and 2027

Anticipated FDA Developments

QMSR inspection findings: As FDA inspections under the QMSR framework accumulate, patterns will emerge. Watch for FDA guidance or FAQ documents addressing common compliance gaps identified during early QMSR-era inspections.
PCCP maturation: Expect more AI/ML devices to include PCCPs in their marketing submissions, and watch for FDA enforcement actions or feedback letters that clarify the boundaries of acceptable predetermined change control plans.
MDUFA VI negotiations: Negotiations for the next user fee authorization cycle (MDUFA VI), which will take effect in FY2028, are expected to begin in late 2026 or early 2027. These negotiations will set FDA's performance goals, fee structure, and program commitments for the next five years. Industry stakeholders should engage early through trade associations.
Cybersecurity post-market guidance: Additional guidance on post-market cybersecurity management practices, including vulnerability disclosure requirements and coordinated disclosure timelines, is anticipated.
Laboratory Developed Tests (LDTs): FDA's efforts to bring LDTs under more formal regulatory oversight continue to evolve. The final rule on LDTs issued in 2024 established a phased enforcement timeline, and subsequent implementation steps are expected in 2026-2027, though political and legal challenges may affect the timeline.

Anticipated EU Developments

Further transition timeline pressure: If notified body certification rates do not accelerate, pressure for additional MDR/IVDR transition extensions will grow. The European Commission will likely face renewed calls for pragmatic solutions to avoid device shortages.
EUDAMED full functionality: The remaining EUDAMED modules are expected to reach operational status, which will trigger previously deferred transparency and reporting obligations for manufacturers and notified bodies.
MDCG guidance pipeline: Additional MDCG guidance on clinical evaluation, post-market surveillance reporting, and software/AI device classification is expected. These documents increasingly fill gaps left by the regulations themselves.
AI Act enforcement begins: As high-risk AI system requirements become enforceable in August 2026, the interaction between AI Act compliance and MDR/IVDR conformity assessment will need to be worked out in practice. Early enforcement actions and notified body audit findings will set important precedents.

Global Developments to Monitor

MHRA final regulations: The UK's final medical device regulatory framework is anticipated, which will clarify the long-term requirements for the GB market and the timeline for ending CE mark acceptance.
IMDRF AI/ML outputs: Finalization of IMDRF consensus documents on AI/ML regulation could significantly influence national regulatory approaches and provide manufacturers with a more harmonized global framework.
Tariff environment: The global trade and tariff environment remains highly volatile. Manufacturers should maintain contingency plans for further tariff escalation and be prepared to adjust supply chain strategies on short timelines.
Sustainability and ESG requirements: Emerging sustainability regulations in the EU (including aspects of the Corporate Sustainability Reporting Directive and potential eco-design requirements) may begin to affect medical device design, packaging, and reporting requirements. These requirements are still in early stages for the device industry but warrant monitoring.

Practical Takeaways for Regulatory Teams

If you do one thing this quarter: Verify that your quality management system documentation has been fully updated for QMSR compliance and that your internal audit program reflects the ISO 13485 clause structure. If you have not already done this, it is urgent.

If you are planning EU market access: Engage a notified body now if you have not already. The queue is long and getting longer. Ensure your technical documentation meets MDR/IVDR requirements, not just legacy MDD/IVDD expectations. Budget for longer timelines and higher certification costs than historical norms.

If you manufacture AI/ML devices: Build your compliance roadmap for the EU AI Act alongside your MDR/IVDR program. Assess whether a PCCP strategy makes sense for your FDA submissions. Invest in data governance and algorithm change management infrastructure.

If your supply chain touches tariff-affected regions: Conduct a comprehensive tariff exposure analysis. Model scenarios for further escalation. Evaluate nearshoring or dual-sourcing options -- but factor in the full regulatory cost of manufacturing site changes before committing.

If you are a startup approaching first submission: Take advantage of FDA's pre-submission program and DHCoE advisory programs. Plan your reimbursement strategy (NTAP/TPT timing, coverage pathway) in parallel with your regulatory strategy, not after clearance.

Conclusion

The medical device regulatory landscape in 2026 is defined by convergence and complexity. The QMSR brings US quality system requirements closer to the international standard. The EU AI Act adds a new layer of compliance for AI-enabled devices. Extended MDR/IVDR transition timelines provide relief but do not eliminate the massive certification backlog. And the global tariff environment is forcing manufacturing strategy changes that carry their own regulatory consequences.

For regulatory professionals, the key skill in this environment is not just knowing the rules in any single jurisdiction -- it is understanding how changes in one domain (trade policy, AI regulation, quality system harmonization) ripple across the entire product lifecycle and global market access strategy. The companies that thrive will be those that take an integrated, proactive approach to regulatory intelligence rather than reacting to each development in isolation.

We will continue to update this roundup as new developments emerge throughout 2026. Bookmark this page and check back for updates.