# [Medical ML] Regulatory Landscape for Medical AI: FDA, CE Marking, and Ukrainian MHSU Regulatory Landscape for Medical AI: FDA, CE Marking, and Ukrainian MHSU πŸ“š Academic Citation: Ivchenko, O. (2026). Regulatory Landscape for Medical AI: FDA, CE Marking, and Ukrainian MHSU. Medical ML Diagnosis Series. Odesa National Polytechnic University. Article #6 in Medical ML for Ukrainian Doctors Series By Oleh Ivchenko | Researcher, ONPU | Stabilarity Hub | February 8, 2026 πŸ“‹ Key Questions Addressed How do FDA, EU, and Ukrainian regulatory frameworks differ in their approach to AI-enabled medical devices? What are the pathways for market authorization of medical AI software in each jurisdiction? How can Ukrainian developers prepare for both domestic approval and international market access? Context: Why Regulatory Understanding Matters For ScanLab and any medical AI initiative targeting Ukrainian healthcare, regulatory compliance isn't optionalβ€”it's existential. Understanding the regulatory landscape determines: Market access: Which markets can you legally enter? Development priorities: What documentation and validation is required from day one? Timeline and cost: Regulatory pathways vary from weeks to years and from thousands to millions in investment Trust building: Physician adoption correlates strongly with regulatory approval status As we noted in Article #5 on data requirements, medical AI development must build regulatory-ready documentation from the start. This article maps the three key regulatory environments relevant to Ukrainian medical AI developers. 1. United States: FDA Framework for AI/ML Medical Devices The Regulatory Structure The U.S. Food and Drug Administration (FDA) has been regulating medical devices since 1976 and has emerged as the global leader in AI-specific medical device regulation. The FDA defines Software as a Medical Device (SaMD) as software intended for medical purposes that performs without being part of a hardware device. πŸ“Š Key Statistics As of late 2025, the FDA has authorized over 1,200 AI/ML-enabled medical devices Approximately 100 new approvals annually Global SaMD market valued at $18.5 billion Classification and Pathways The FDA employs a risk-based classification system: Class I (Low Risk): Fitness trackers, simple displays β€” Generally exempt Class II (Moderate Risk): AI triage tools, ECG analysis β€” 510(k) pathway (~90 days) Class III (High Risk): Autonomous diagnostic AI, mammography AI β€” PMA pathway (~180 days) Novel Moderate: First-of-kind AI tools β€” De Novo pathway (~60 days) πŸ“Œ Key Finding: A 2015-2020 study found that of 222 FDA-approved AI/ML devices, 204 (92%) used the 510(k) pathway, 15 used De Novo, and only 3 required full PMA. The 2024-2025 AI/ML Action Plan In December 2024, the FDA finalized groundbreaking guidance introducing the Total Product Life Cycle (TPLC) approach specifically designed for AI/ML devices: Predetermined Change Control Plans (PCCP) Manufacturers can pre-specify allowed modifications to AI algorithms Updates within the approved PCCP scope don't require re-approval Addresses the fundamental tension between AI's adaptive nature and regulatory requirements for "locked" algorithms Good Machine Learning Practice (GMLP) - 10 Principles Representative and unbiased training datasets Robust cybersecurity practices Transparent communication with end-users about algorithm updates Documented data management and retraining protocols Transparency Gaps Despite progress, studies reveal significant transparency issues: Study design reported: 53.3% of devices Training data size disclosed: 46.7% of devices Demographic data included: 4.5% of devices Randomized trial evidence: 1.6% of devices Reported adverse events: 5.2% of devices ⚠️ Critical Concern: One study found that 9.4% of approved AI/ML devices have been recalled, though one-third were subsequently re-approved. 2. European Union: MDR and AI Act Double Regulation The Regulatory Duality Challenge European medical AI developers face a unique challenge: compliance with two overlapping regulatory frameworks: Medical Device Regulation (EU MDR 2017/745) - sector-specific medical device law EU AI Act (Regulation 2024/1689) - horizontal AI legislation "Companies risk being caught between overlapping regulatory frameworks." β€” MedTech Europe EU AI Act Risk Classification ```mermaid graph TD A[AI System Assessment] --> B{Medical Device?} B -->|Yes - Requires Notified Body| C[HIGH-RISK AI] B -->|No| D{General Purpose?} D -->|Yes| E[GPAI Requirements] D -->|No| F{Manipulation Risk?} F -->|Yes| G[PROHIBITED AI] F -->|No| H[LOW-RISK AI] C --> I[Full Compliance Obligations] G --> J[Banned Outright] E --> K[Transparency Requirements] H --> L[Minimal Obligations] style C fill:#dc3545,color:#fff style G fill:#000,color:#fff style E fill:#ffc107,color:#000 style H fill:#28a745,color:#fff ``` πŸ”‘ Critical Point: Any medical device with AI that requires notified body involvement under MDR/IVDR is automatically classified as high-risk under the AI Act. Compliance Timeline ```mermaid timeline title EU AI Act Compliance Milestones May 2025 : General-purpose AI obligations apply August 2025 : Prohibited AI practices enforced August 2026 : High-risk AI obligations (most systems) August 2027 : Full obligations for medical devices under MDR/IVDR ``` High-Risk AI Requirements (Beyond MDR) Risk Management System (Art. 9): AI-specific risk assessment aligned with MDR Data Governance (Art. 10): Requirements for training, validation, and testing datasets Technical Documentation (Art. 11): Comprehensive documentation of design, training, and validation Transparency (Art. 13): Clear disclosure of accuracy levels and limitations Human Oversight (Art. 14): Ensuring appropriate human control over AI outputs Quality Management System (Art. 17): AI QMS integrating with ISO 13485 CE Marking Pathway ```mermaid graph TD A[1. Classification - MDR Annex VIII] --> B[2. Technical Documentation] B --> C[3. Quality Management System] C --> D[4. Conformity Assessment] D --> E[5. EU Declaration of Conformity] E --> F[6. CE Mark Affixation] ``` 3. Ukraine: MHSU and EU Integration Path Current Regulatory Framework Ministry of Health of Ukraine (MHSU/MOH): Central executive body for technical regulation State Service of Ukraine on Medicines and Drugs Control (SSMD): Market supervision authority Technical Regulations: Based on Decrees No. 753, 754, 755 (October 2013) ⚑ Critical Limitation: Ukrainian regulations are currently aligned with older EU Directives (93/42/EEC, 98/79/EC, 90/385/EEC), not the current EU MDR. Harmonization with MDR is expected within approximately 2 years. 2025 Reform: State Regulatory Authority (SRA) A major reform announced in 2025 establishes the State Regulatory Authority (SRA)β€”a single regulator that will: Grant market access for medicines, medical devices, substances of human origin, and cosmetics Replace the current fragmented regulatory structure Align more closely with EU institutional practices Medical Device Classification in Ukraine Class I (non-sterile, no measuring): Self-declaration Class I (sterile or measuring): Notified body examination Class IIa/IIb: QMS examination Class III: Design + QMS examination IVD (general): Self-declaration (Lists A/B require notified body) AI-Specific Considerations πŸ‡ΊπŸ‡¦ Current Status: Ukraine has no specific AI regulation for medical devices. AI-enabled devices are assessed under general medical device rules. Practical Implications for ScanLab: Develop to EU AI Act standards from the outset (future-proofing) Maintain documentation that satisfies FDA requirements (optional but valuable) Leverage EC Certificate recognition pathway for faster Ukrainian market access Prepare for eventual MDR alignment in Ukrainian regulations 4. Comparative Analysis Pathway Comparison πŸ‡ΊπŸ‡Έ FDA: Most mature AI-specific framework; PCCP enables adaptive algorithms; 510(k) pathway accessible πŸ‡ͺπŸ‡Ί EU: Dual regulation challenge; AI Act adds significant burden on top of MDR; August 2027 deadline for medical devices πŸ‡ΊπŸ‡¦ Ukraine: Currently based on older EU Directives; SRA reform underway; EC recognition provides efficient market access; no AI-specific rules yet Market Access Strategy for Ukrainian Developers ```mermaid graph LR A1[ISO 13485 QMS] --> A2[MDR Documentation] A2 --> A3[AI Act Annex IV] A3 --> A4[GMLP Compliance] B1[Notified Body Selection] --> B2[Conformity Assessment] B2 --> B3[EU Market Entry] C1[Authorized Representative] --> C2[EC Certificate Recognition] ``` 5. Practical Implications for ScanLab Immediate Actions Establish ISO 13485 QMS: Foundation for all regulatory pathways Document AI development per GMLP: Training data, validation, testingβ€”all from project inception Design for transparency: Build explainability features that satisfy both clinical and regulatory needs Plan for adaptive algorithms: Implement change control processes compatible with FDA PCCP concept Regulatory Timeline Considerations for ScanLab πŸ‡ΊπŸ‡¦ Ukrainian Market: 6-12 months (via CE recognition) πŸ‡ͺπŸ‡Ί EU Market: 12-24 months (full CE marking + AI Act) πŸ‡ΊπŸ‡Έ US Market: 12-18 months (510(k) pathway) 6. Open Questions for Future Research How will Ukraine's planned SRA handle AI-specific medical device requirements? What will be the timeline for Ukrainian MDR harmonization? How are notified bodies preparing for joint MDR/AI Act assessments? What predicate devices exist for AI-based X-ray analysis under FDA 510(k)? How should developers handle the gap between AI Act requirements and current Ukrainian regulation? Key Insights Summary βœ… How do FDA, EU, and Ukrainian frameworks differ? FDA leads in AI-specific guidance with TPLC/PCCP; EU creates dual regulatory burden with MDR + AI Act; Ukraine relies on older Directive-based rules with EC recognition pathway. βœ… What are market authorization pathways? FDA: 510(k)/De Novo/PMA; EU: CE marking via notified body; Ukraine: Direct assessment or EC Certificate recognition. βœ… How can Ukrainian developers prepare for international access? Develop to EU AI Act + MDR standards; this documentation base supports all three markets with minimal adaptation. 🎯 For Ukrainian Medical AI Developers The optimal strategy is develop once, deploy globally: Build to the highest common denominator (EU AI Act + MDR) Use this documentation base for FDA and Ukrainian submissions Leverage EC Certificate recognition for Ukrainian market speed Plan for eventual Ukrainian MDR harmonization Next in Series: Article #7 - US Experience: FDA-Approved AI Devices Series: Medical ML for Ukrainian Doctors | Stabilarity Hub Research Initiative Author: Oleh Ivchenko | ONPU Researcher | Stabilarity Hub