Navigating the collision of global AI legislation and MDR

Artificial intelligence is reshaping the medical device sector at extraordinary speed, prompting a wave of regulatory activity across the globe. Medical device manufacturers now operate at the intersection of vertical, device specific regulation (MDR/IVDR, FDA QMSR, CDS, cybersecurity) and horizontal AI legislation that extends across industries. Understanding this convergence is no longer optional; it is essential for global market access.

At present, the EU AI Act remains the most comprehensive horizontal AI regime. For AI-enabled medical devices, the Act operates in parallel with MDR/IVDR, imposing additional obligations around data governance, transparency, robustness, human oversight, and continuous post market monitoring. Because MDR/IVDR classification determines the device's AI Act risk tier, manufacturers in Europe face a deeply intertwined regulatory landscape – one that demands early alignment between engineering, quality, and regulatory teams, as well as more proactive engagement with notified bodies. This landscape, however, may evolve in the near term, as ongoing EU-level regulatory simplification efforts could narrow and/or delay the EU AI Act's application to medical devices and IVDs.

The United States takes a different path. While it lacks a federal horizontal AI statute, states are rapidly filling the void. California, Colorado, Connecticut, Virginia, and Illinois have enacted or proposed AI and automated decision-making laws that impose transparency, risk assessment, and algorithmic accountability requirements on companies deploying AI – requirements that can directly affect manufacturers offering digital, predictive, or patient facing device functions. At the federal level, FDA continues to advance a vertical, lifecycle-based regulatory approach through its evolving AI DSF guidance, CDS updates, cybersecurity expectations, and the 2026 transition to an ISO aligned QMSR.

Globally, several countries are emerging as regulatory leaders. The EU remains the most advanced in horizontal AI regulation; the UK has positioned itself as a pro innovation but structured regulator; Canada, Singapore, Japan, and South Korea are building sophisticated AI and digital health frameworks; and China has implemented some of the world's most detailed rules governing algorithmic transparency, labeling, and generative AI deployment. Together, these regions signal a shift toward harmonized expectations around risk management, transparency, and algorithmic accountability.

For manufacturers, the message is clear: AI governance is now a core regulatory competency. Companies must maintain an enterprise-wide AI inventory, integrate AI governance into global QMS structures, strengthen bias and robustness testing, and align documentation to both device specific and horizontal AI requirements. Those who embrace global readiness, not just regional compliance, will be best positioned to compete as AI driven innovation expands.

Authors

Jodi Scott

Partner Global Regulatory Denver, Washington, D.C.

Arne Thiermann, LL.M. (LSE)

Office Managing Partner Global Regulatory Hamburg

Hélène Boland

Senior Associate Global Regulatory Brussels

All AI and Digital Health articles
Next article