Back to Explorer

Deciding When to Submit a 510(k) for a Software Change to an Existing Device: Guidance for Industry and Food and Drug Administration Staff

FinalCenter for Devices and Radiological Health10/25/2017

Description

This guidance will assist industry and Agency staff in determining when a software (including firmware) change to a medical device may require a manufacturer to submit and obtain FDA clearance of a new premarket notification (510(k)).This guidanceis not intended to implement significant policy changes to FDA’s current thinking on when submission of a new 510(k) is required for a software change to a 510(k)-cleared device (or group of devices) or other device subject to 510(k) requirements, such as a preamendments device or a device that was granted marketing authorization via the De Novo classification process under section 513(f)(2) of the Food, Drug, and Cosmetic Act (FD&C Act) (also referred to together as “existing devices”). Rather, the intent of this guidance is to enhance the predictability, consistency, and transparency of the “when to submit” decision-making process by providing a least burdensome approach, and describing in greater detail the regulatory framework, policies, and practices underlying such a decision, specifically as it relates to software changes.

Scope & Applicability

Product Classes

10
Medical Device

FDA intends to assess device cybersecurity based on a number of factors; demonstrate or maintain its safety and effectiveness; ensuring cybersecurity has become essential to FDA’s ability to protect the public health; Cyber-resiliency capabilities for medical devices

dialysis system

Modification to allow users to silence a low-risk alarm on a dialysis system.

sterilizer

display provides information on temperature and pressure

multi-parameter monitor

originally cleared with version A of an OEM module

ingestible telemetric gastrointestinal capsule imaging system

software modification to increase the number of images viewed

infusion pump

general purpose infusion pump with occlusion alarms

robotically assisted surgical system

utilizes position sensors and actuators

Imaging catheter

Catheter for coronary arteries including lasers

EEG diagnostic monitor

Electroencephalogram monitor for brain electrical activity

IVD analyzer

In vitro diagnostic analyzer software collecting reagent records; manufacturer makes software modifications for handling samples

Stakeholders

2
Manufacturer

Entity responsible for submitting NDINs

Private label distributors

Exempt from 510(k) if satisfying specific requirements

Regulatory Context

Attributes

7
Pre-mitigation risk score

Used to assess the severity of a hazard before controls are applied

intended use

Specifications that are directly associated with the intended use of the device.

Amplitude Integrated EEG

New quantitative parameter added to EEG monitor

Peak power

Quantitative parameter for EEG monitor

Spectral edge frequency

Quantitative parameter for EEG monitor

Cybersecurity

Protection of software and device data

Clinical functionality

Device ability to perform as intended in a clinical setting; directly associated with the intended use of the device; Could the change significantly affect clinical functionality?

Identified Hazards

Hazards

10
Software failure

Systematic failures where probability may not be statistically determined

low-risk alarm

Modification to allow users to silence a low-risk alarm.

occlusion

alarms related to occlusion downstream and upstream

specimen identification mis-association

handling samples having invalid characters in specimen IDs

uncontrolled motion

prevent uncontrolled motion of the instrument in the event of a component failure

Energy transfer to the patient

Risk from new programming mode in cardiac monitor

Minor burn hazard

Sample probe motor overheating during maintenance

Mis-association of patient data

Defect in barcode reading leading to incorrect reports

Cybersecurity

Risk of device functionality being compromised

Hazardous situation

Potential for death or serious injury due to software failure

Related CFR Sections (3)

Related Warning Letters (10)

  • CGMP/QSR/Medical Devices/Adulterated

    Envoy Medical Inc.

    2025-12-09
  • CGMP/QSR/Medical Devices/Adulterated

    Hong Qiangxing Shenzhen Electronics Limited

    2025-11-25
  • CGMP/QSR/Medical Devices/Adulterated

    Contec Medical Systems Co., Ltd.

    2025-10-28
  • CGMP/QSR/Medical Devices/Adulterated/Misbranded

    Royal Philips

    2025-10-28
  • CGMP/QSR/Medical Devices/Adulterated/Misbranded

    Qianjiang Kingphar Medical Material Co Ltd.

    2025-10-28
  • CGMP/QSR/Medical Devices/Adulterated

    LEVO AG

    2025-10-21
  • CGMP/QSR/Medical Devices/Adulterated

    Technological Medical Advancements LLC

    2025-10-07
  • Medical Device/Adulterated/Misbranded/Lacks PMA and/or 510(k)

    The Richline Group, Inc.

    2025-09-23
  • Investigational Device Exemptions (IDE)/Premarket Approval Application (PMA) Adulterated Device

    SeniorLife Technologies, Inc.

    2025-09-16
  • CGMP/QSR/Medical Devices/Adulterated

    Miach Orthopaedics

    2025-08-26

See Also (8)