Medical Cyber Device Requirements

Authority type
Federal Statute
Jurisdiction
United States
Issuing body
Food and Drug Administration
Citation
FD&C Act section 524B, 21 USC 360n-2(a) through (c)
Legal status
Statute in Effect
Last reviewed

Section 524B requires sponsors of covered premarket submissions for a cyber device to provide a vulnerability-management plan, processes for cybersecurity and updates, and an SBOM. Covered pathways include 510(k), PMA, De Novo, PDP, and HDE submissions. The statutory cyber-device definition and submission timing control applicability.

Law checked through .

Sources

Related guides