The CDSCO has released a comprehensive guidance document clarifying how AI-enabled and software-based medical devices will be regulated under the Medical Devices Rules, 2017.

Key Takeaways

  • CDSCO clarifies the regulatory path for AI and software-based medical devices under MDR, 2017.
  • Distinction made between Software as a Medical Device (SaMD) and Software in a Medical Device (SiMD).
  • AI products will be categorized into risk classes A, B, C, and D.
  • General wellness and fitness tracking software are exempt from these regulations.

In a strategic move to bolster India's digital health ecosystem, the Central Drugs Standard Control Organisation (CDSCO) has issued a formal guidance document detailing the regulatory pathway for software-based medical devices. This includes products powered by Artificial Intelligence (AI) and Machine Learning, all governed under the Medical Devices Rules (MDR), 2017.

The guidance is designed to provide much-needed clarity to manufacturers, importers, and innovators, helping them navigate the complex application process for regulatory approval. Crucially, the CDSCO clarified that this is not a new regulatory framework but an explanation of how existing provisions under the Drugs and Cosmetics Act, 1940 apply to modern digital healthcare solutions.

Why This Matters

BozokMedia analysis shows that as healthcare shifts from hardware-centric to software-driven models, regulatory ambiguity can stifle innovation. By distinguishing between Software as a Medical Device (SaMD)—standalone software used for diagnosis—and Software in a Medical Device (SiMD)—software embedded in hardware—the CDSCO is aligning India with international standards set by the IMDRF.

A predictable regulatory pathway for AI is the cornerstone of building trust in digital clinical decision support tools.

Under the new guidelines, AI-based software used for diagnosis, monitoring, or treatment will be classified into risk categories: Class A, B, C, and D. Higher-risk applications will face more stringent scrutiny. Furthermore, developers must now demonstrate robust protocols for cybersecurity, software validation, and post-market surveillance to ensure patient safety.

Historical Background

Historically, medical device regulation in India focused primarily on physical instruments and pharmaceutical compositions. However, the rapid integration of digital technologies necessitated an evolution in the Medical Devices Rules, 2017 to encompass the lifecycle of software, from design and verification to long-term maintenance and updates.

Did You Know?: The regulatory classification of a device is determined by the level of risk it poses to the patient during its intended use.

Frequently Asked Questions

1. Does this regulation apply to smartwatches used for step counting?
No, software intended for general wellness, lifestyle promotion, or basic fitness tracking is excluded from these regulations.

2. How are AI diagnostic tools classified?
They are classified into four risk-based categories (A, B, C, and D) based on their intended medical purpose and potential risk.