An AI tool used near a patient does not automatically become an FDA-cleared medical device. The legal analysis starts with intended purpose and software function, not a marketing description like “AI-powered.”
Device or non-device clinical decision support?
The FDA’s January 2026 final Clinical Decision Support guidance explains how statutory exclusions for certain CDS functions apply. A software function that lets a healthcare professional independently review the basis of its recommendations can differ from software intended to diagnose a condition or direct urgent treatment without such review. The relevant statutory criteria must be assessed together; simply showing a model explanation does not guarantee exemption.
Model performance is a patient-safety question
Before adoption, evaluate the exact version against the actual patient population, data sources and clinical workflow. Measure false negatives, false positives, missing information, subgroup performance and uncertainty. An AI score derived from a retrospective curated dataset does not by itself establish safety when users are busy, patients differ or the system updates after release.
Keep the clinical decision with an accountable person
Define who must approve summaries, alerts and proposed treatment changes. Provide access to original charts and evidence when a recommendation conflicts with clinical judgement. Create escalation paths for unusual readings, tool outages and adverse events. A human rubber-stamp performed too quickly to verify a result is not a meaningful safeguard.
Privacy and security are separate
Patient information brings HIPAA or other privacy obligations for covered actors, alongside contractual requirements when a vendor processes data. Ask where prompts, medical images, retrieved charts, logs and audit trails are stored and who can access them. The FDA’s CDS guidance does not substitute for privacy, security, reimbursement or medical-practice analysis.
Procurement boundary and options
For low-risk internal education, prefer de-identified examples and restrict outputs from patient care. For diagnostic functions, obtain the manufacturer’s device-specific regulatory status, clinical validation, update plan and post-market monitoring evidence. Do not infer clearance from inclusion in a vendor presentation or from the existence of other authorized devices.
Sources & Further Reading
- Clinical Decision Support Software — final guidance — U.S. Food and Drug Administration.
- Artificial Intelligence-Enabled Medical Devices — U.S. Food and Drug Administration.
Jurisdiction/scope: United States; health software with varied FDA jurisdiction. This is educational information, not legal, medical or other professional advice. No hands-on product testing is claimed.