FDA final guidance on medical-device cybersecurity, effective March 2026, creates new pre-market submission requirements for cybersecurity documentation and new post-market surveillance obligations for device manufacturers. Manufacturers of internet-connected and software-as-medical-device products should review their pre-market submission templates and post-market surveillance programmes against the final guidance.
Authors