European AI Act Compliance: What Medical Device Companies Need to Know

OCT Medical Devices 2025: European AI Act Compliance

The European Union’s AI Act is poised to shape the future of medical devices, particularly those that incorporate artificial intelligence (AI). For healthcare firms involved in software-as-a-medical-device (SaMD) or digital and AI devices, compliance with this regulation should not be viewed as a cause for panic.

Understanding the AI Act

The AI Act was passed by the European Parliament on March 13, 2024, received approval from the EU Council on May 21, 2024, and officially entered into force on August 1, 2024. It serves as a risk-management system aimed at identifying, evaluating, and mitigating the potential risks that AI systems may pose to health, safety, and fundamental rights such as privacy and data protection.

For those with Class IIa or higher AI-related devices, compliance with the AI Act is expected to mirror the requirements of the EU Medical Device Regulation (MDR). This familiarity is crucial for companies already engaged in MDR compliance efforts.

Key Compliance Dates

While various deadlines for compliance exist, the vast majority of medical devices falling under the Act’s Annex I product safety component must be compliant by August 2, 2027. This timeline provides a clear pathway for organizations to prepare for compliance.

Integrating AI Act with MDR

The AI Act is described as an “interesting type of Act” that blends product legislation with human rights-adjacent legislation. It is designed to work in conjunction with the MDR to ensure rights, fairness, and respect for human rights. New transparency requirements under the AI Act relate to safety and fairness—elements that were already present in the MDR.

Compliance Strategies

Companies already preparing AI-based software for the MDR should find that their compliance processes remain largely consistent, albeit with increased emphasis on data transparency. It is advised that organizations prepare early for new standards and guidance, integrating these into their quality management processes as they become available.

Conclusion

As the landscape of medical devices continues to evolve with advancements in AI, understanding and adhering to the AI Act will be essential for compliance. The regulation aims to ensure safety while fostering innovation in the medical device sector. Organizations should view this as an evolution of their existing compliance frameworks rather than a complete overhaul.

More Insights

US Rejects UN’s Call for Global AI Governance Framework

U.S. officials rejected the establishment of a global AI governance framework at the United Nations General Assembly, despite broad support from many nations, including China. Michael Kratsios of the...

Agentic AI: Managing the Risks of Autonomous Systems

As companies increasingly adopt agentic AI systems for autonomous decision-making, they face the emerging challenge of agentic AI sprawl, which can lead to security vulnerabilities and operational...

AI as a New Opinion Gatekeeper: Addressing Hidden Biases

As large language models (LLMs) become increasingly integrated into sectors like healthcare and finance, a new study highlights the potential for subtle biases in AI systems to distort public...

AI Accountability: A New Era of Regulation and Compliance

The burgeoning world of Artificial Intelligence (AI) is at a critical juncture as regulatory actions signal a new era of accountability and ethical deployment. Recent events highlight the shift...

Choosing Effective AI Governance Tools for Safer Adoption

As generative AI continues to evolve, so do the associated risks, making AI governance tools essential for managing these challenges. This initiative, in collaboration with Tokio Marine Group, aims to...

UN Initiatives for Trustworthy AI Governance

The United Nations is working to influence global policy on artificial intelligence by establishing an expert panel to develop standards for "safe, secure and trustworthy" AI. This initiative aims to...

Data-Driven Governance: Shaping AI Regulation in Singapore

The conversation between Thomas Roehm from SAS and Frankie Phua from United Overseas Bank at the SAS Innovate On Tour in Singapore explores how data-driven regulation can effectively govern rapidly...

Preparing SMEs for EU AI Compliance Challenges

Small and medium-sized enterprises (SMEs) must navigate the complexities of the EU AI Act, which categorizes many AI applications as "high-risk" and imposes strict compliance requirements. To adapt...

Draft Guidance on Reporting Serious Incidents Under the EU AI Act

On September 26, 2025, the European Commission published draft guidance on serious incident reporting requirements for high-risk AI systems under the EU AI Act. Organizations developing or deploying...