The 510(k) Pathway in 2026: Navigating a Shifting Regulatory and Political Landscape for Medical Devices

By Partha Anbil

A persistent tension exists between the drive for rapid technological advancement, the mandate for government oversight, and the paramount importance of patient safety. It is a foundation for the U.S. Food and Drug Administration’s (FDA) 510(k) premarket notification process, the primary pathway for new devices to enter the market.

The American medical device industry, a global powerhouse of innovation, continues to operate within a complex and often fraught regulatory framework. A persistent tension exists between the drive for rapid technological advancement, the mandate for government oversight, and the paramount importance of patient safety. This dynamic which scrutinized the U.S. Food and Drug Administration’s (FDA) 510(k) premarket notification process, the primary pathway for new devices to enter the market. A system where the vast majority of medical devices are cleared without direct human testing, relying on the principle of “substantial equivalence” to a previously marketed “predicate” device. This process, while facilitating incremental innovation, harbors systemic flaws that perpetuate risks to patient safety.

In the first quarter of 2026, the landscape has not simplified. Instead, it has been reshaped by significant regulatory reforms, a volatile political climate, and a surge in adverse events that underscore the urgency of the issues raised. The global medical device market, now valued at an estimated $572 to $679 billion in 2025 and projected to exceed one trillion dollars by the mid-2030s, is an economic force of immense scale. In the United States alone, national health expenditures reached $5.3 trillion in 2024, accounting for 18.0% of gross domestic product, up from 17.8% in 2019. This article provides an updated analysis for industry professionals, examining the current state of the 510(k) pathway, the latest safety data, and the profound impacts of recent political and regulatory shifts on the medical device ecosystem.

The 510(k) Framework: Modernization Meets Enduring Flaws

The 510(k) process remains the dominant route to market for medical devices in the United States. As of 2023, it still accounted for the clearance of thousands of devices annually, far outpacing the more rigorous Premarket Approval (PMA) pathway [1]. The core principle of demonstrating substantial equivalence to a predicate device—a concept established by the 1976 Medical Device Amendments to manage devices already on the market—persists as the foundation of the system. However, the FDA has made significant strides in modernizing the submission process itself.

Effective October 1, 2023, the agency mandated the use of the electronic Submission Template and Resource (eSTAR) for all 510(k) submissions. This mandate was extended to De Novo requests on October 1, 2025 [2]. The eSTAR program, an interactive PDF template, is designed to standardize submissions, improve efficiency, and ensure completeness, thereby reducing the number of “Refuse to Accept” (RTA) decisions. While this represents a significant operational improvement, it does not alter the fundamental criticism of the 510(k) pathway: it is a process that evaluates equivalence, not necessarily safety and effectiveness from first principles.

The concern of “predicate creep,” where a new device is cleared based on a predicate that was itself cleared based on an older device, remains a central issue. A 2023 study published in JAMA revealed that of 127 devices subject to the most severe Class I recalls between 2017 and 2021, a staggering 44.1% had been cleared based on a predicate device that was also subject to a Class I recall [3]. This daisy chain of equivalence can perpetuate and amplify flaws, a risk the FDA is attempting to address with forthcoming guidance on “Best Practices for Selecting a Predicate Device” [4]. This is part of a broader effort to reform the 510(k) program, which also includes draft guidance on evidentiary expectations for implants, the use of clinical data, and the concept of “Substantial Equivalence with Limitations,” all of which were released in September 2023 and remain under development [14].

The Unabated Safety Crisis: A Statistical Snapshot

Despite procedural modernizations, the data from recent years paints a grim picture of medical device safety. The number of adverse events and recalls has not only continued but, in some cases, accelerated. According to one industry analysis, 2024 saw over 16,000 device recalls affecting more than seventy million units worldwide [5]. The FDA itself receives over two million Medical Device Reports (MDRs) of suspected device-associated deaths, serious injuries, and malfunctions annually [6].

A damning report from the U.S. Government Accountability Office (GAO), published in December 2025, brought these issues into sharp focus [7]. The report found that from fiscal years 2020 to 2024, the FDA oversaw 3,934 medical device recalls, all of which were voluntarily initiated by manufacturers. The agency has used its authority to mandate recall only four times since 1990. The GAO highlighted that insufficient staffing, and resources severely hamper the FDA’s oversight capabilities, leading to significant delays. For instance, the agency was late 73.9% of the time in officially terminating recalls, a process that confirms a manufacturer has completed its corrective actions.

Metric Current Findings (2026) Source
Annual Device Recalls (Trend) 3,934 recalls in 4 years; >16,000 in 2024 alone GAO [7], IQVIA [5]
Annual Reported Deaths (MAUDE data) >13,500 deaths logged in MAUDE database MedPage Today [8]
Adverse Event Reporting ~29% of reports are late; significant under-counting persists BMJ [9]
Recalled Predicates 44.1% of Class I recalled devices used a recalled predicate CEPR [3]

The case of Philips Respironics’ breathing machines serves as a potent, contemporary example of the system’s failures. The company received thousands of adverse event reports over a decade regarding degrading internal components releasing toxic materials, yet it hid many of these from the FDA. By the time a voluntary recall of fifteen million devices was initiated in 2021, significant harm had already been done, with 561 deaths linked to the devices post-recall as of January 2024 [3]. A March 2025 study in the BMJ further revealed that nearly 29% of all device safety reports miss the FDA’s mandated reporting deadline, with death reports from breakthrough device manufacturers being late 18.9% of the time [9].

A New Political Reality: The FDA in an Era of Upheaval

The regulatory environment for medical devices does not exist in a vacuum. The political climate of 2025–2026 has introduced a new layer of complexity and uncertainty. Following the start of the new Trump administration in 2025, the Department of Health and Human Services (HHS) underwent a sweeping reorganization under Secretary Robert F. Kennedy Jr. This included a plan to cut the FDA’s workforce by 19%, or approximately 3,500 employees, with a focus on “administrative” functions and the centralization of policy and communications at the HHS level [10].

The Center for Devices and Radiological Health (CDRH), the FDA division responsible for medical device regulation, has seen a number of high-profile departures, including the director of the Digital Health Center of Excellence and the deputy science director. CDRH was also subject to a slate of layoffs of newer employees hired to focus on artificial intelligence and machine learning, most of which were prompted by the Department of Government Efficiency (DOGE), though many were subsequently reversed [10]. These reductions, coupled with an executive order requiring agencies to withdraw ten regulations for every new one issued, have created a chilling effect on the FDA’s ability to conduct oversight and issue new guidance. Industry reports already note decreased responsiveness to application reviews and missed deadlines.

This is further compounded by significant increases in user fees under the Medical Device User Fee Amendments (MDUFA V), with the annual establishment registration fee for FY2026 jumping by 23% to $11,423, placing additional financial strain on manufacturers [15].

This resource constraint directly impacts on the FDA’s ability to address the very safety issues highlighted by the GAO and other watchdogs. When the agency is already late 73.9% of the time in terminating recalls, further staffing cuts raise fundamental questions about whether the FDA can fulfill its core mandate of protecting public health in the medical device space. The confirmation of Dr. Marty Makary as FDA Commissioner in March 2025 brought a leader who emphasizes scientific rigor and placebo-controlled trials, yet the structural constraints imposed by the broader reorganization may limit the practical impact of any reform agenda [10].

However, Commissioner Makary’s tenure has also been marked by a significant deregulatory push in the digital health space. In a landmark move in January 2026, the FDA issued revised final guidance for Clinical Decision Support (CDS) software and General Wellness products [16]. The updated CDS guidance significantly narrows the scope of software regulated as a medical device, introducing an enforcement discretion policy for certain CDS functions that provide a single, clinically appropriate recommendation. Simultaneously, the revised General Wellness guidance expands the category of low-risk products exempt from FDA oversight, now allowing non-invasive wearables that measure parameters like blood pressure and glucose to be marketed for general wellness purposes without FDA review. Announced by Commissioner Makary at the Consumer Electronics Show (CES) as an effort to “cut unnecessary red tape” and “promote innovation,” these changes represent a seismic shift in the digital health landscape, raising both opportunities for rapid innovation and concerns about patient safety in the absence of traditional oversight [17].

Major Regulatory Shifts: QMSR, Cybersecurity, and the Rise of AI

Amidst the political turmoil, several landmark regulatory changes have taken effect or have been finalized, creating a new compliance landscape for manufacturers.

Quality Management System Regulation (QMSR)

A landmark regulatory change took effect on February 2, 2026: the new Quality Management System Regulation (QMSR). This long-awaited rule replaces the decades-old Quality System Regulation (QSR) and aligns U.S. requirements with the international standard, ISO 13485:2016 [11]. The QMSR represents a fundamental shift from a prescriptive to a risk-based approach, explicitly integrating risk management activities throughout the entire device lifecycle. While this harmonization is broadly welcomed by industry for streamlining global compliance, it also places a greater on manufacturers to develop and maintain a robust, risk-centric quality system. The FDA has concurrently retired its old Quality System Inspection Technique (QSIT) in favor of a new process aligned with the QMSR.

Computer Software Assurance (CSA)

Complementing the QMSR, the FDA finalized its guidance on Computer Software Assurance (CSA) for Production and Quality System Software in September 2025 [18]. This guidance represents a paradigm shift from the traditional, burdensome Computer Software Validation (CSV) to a more modern, risk-based approach. CSA encourages manufacturers to apply critical thinking and focus testing efforts on areas that have the highest impact on product quality and patient safety, rather than treating all software with the same level of scrutiny. This move is intended to foster the adoption of modern technologies and automation in manufacturing and quality processes, aligning with the risk-based principles of the QMSR.

Mandatory Cybersecurity Requirements

A critical and previously unaddressed vulnerability in the 510(k) pathway has been cybersecurity. The landscape shifted dramatically with the implementation of Section 524B of the Federal Food, Drug, and Cosmetic (FD&C) Act, which grants the FDA statutory authority to require robust cybersecurity protection for “cyber devices.” Following the final guidance issued in June 2025, manufacturers submitting 510(k)s for devices with software and connectivity must now provide comprehensive documentation demonstrating a secure product development framework, a plan to monitor and address postmarket vulnerabilities, and a software bill of materials (SBOM) [19]. This requirement, a direct response to the growing threat of cyber-attacks on healthcare infrastructure, adds a significant new layer of scrutiny to the premarket review process for a vast number of modern medical devices.

Artificial Intelligence and Machine Learning (AI/ML)

Simultaneously, the proliferation of Artificial Intelligence and Machine Learning (AI/ML) in medical devices presents a new frontier for the 510(k) process. As of August 2024, over 950 AI/ML-enabled devices had been cleared or approved by the FDA, the vast majority (924) through the 510(k) pathway [12]. The adaptive nature of some AI/ML algorithms challenges the static “substantial equivalence” model. The FDA is grappling with this, having issued draft guidance on the lifecycle management of AI-enabled device software in January 2025 [13].

More significantly, the agency finalized its guidance on Predetermined Change Control Plans (PCCPs) in December 2024 [20]. This groundbreaking framework allows manufacturers to pre-specify and gain authorization for planned modifications to their AI/ML algorithms within a defined scope, avoiding the need for a new 510(k) submission for every update. While the PCCP guidance is a major step toward enabling innovation in adaptive AI, it requires a sophisticated and well-documented plan, placing a new burden on manufacturers to prospectively define the evolution of their algorithms.

However, with 5.2% of these novel devices already having reported adverse events, it is clear that the existing regulatory paradigm is being stretched to its limits.

The FDA’s final guidance issued on December 18, 2025, regarding the “Use of Real-World Evidence to Support Regulatory Decision-Making for Medical Devices,” removes major barriers for 510(k) submissions by allowing the use of de-identified, high-level data from sources like Electronic Health Records (EHR) and registries without requiring individual patient-level data. This shift facilitates faster, more cost-effective submissions by enabling the use of existing, large-scale data to demonstrate safety and effectiveness.

Conclusion and Recommendations for a Path Forward

The core aspects remain relevant today and have become even more pronounced due to events from the past three years. The 510(k) pathway, while procedurally modernized with eSTAR, is still a system struggling with legacy issues of predicate creep and a fundamental disconnect from first-principles safety evaluation. The latest statistics on recalls and adverse events confirm that significant patient risk persists. Compounding this are the new realities of a resource-constrained FDA operating in a turbulent political environment and the disruptive force of innovative technologies like AI.

For industry professionals, navigating this landscape requires a more proactive and vigilant posture than ever before. Recommendations for stakeholders are:

  • For Medical Device Manufacturers: The shift to QMSR is not merely a compliance exercise; it is an imperative to embed a true culture of quality and risk management. This includes adopting the principles of Computer Software Assurance (CSA) to modernize validation processes. Beyond compliance, companies must invest in robust post-market surveillance systems that go beyond the passive, reactive reporting of the past. For connected devices, a proactive cybersecurity lifecycle management plan is no longer optional but a regulatory mandate. In an era of diminished FDA resources, the burden of ensuring device safety falls more heavily on the manufacturer. Proactively collecting real-world evidence and being transparent with data will be key to building trust and mitigating liability.
  • For Regulatory Professionals: Mastery of the new QMSR, cybersecurity requirements, CSA principles, and the evolving landscape of AI/ML regulation is critical. The strategy for selecting predicate devices must become more rigorous, anticipating the FDA’s forthcoming guidance and the increased scrutiny on device lineage. Developing robust PCCPs for AI/ML devices will be a key differentiator for agile product development. Engaging with the FDA through the Q-Submission Program, even with potential delays, remains essential for clarifying regulatory expectations for novel technologies.
  • For Providers and Healthcare Systems: The assumption that FDA clearance equates to proven safety is more dangerous than ever. Healthcare providers must be vigilant, challenge manufacturers for clinical and real-world performance data, and diligently report adverse events. Value analysis committees should incorporate a device’s regulatory history, including its predicate lineage, recall data, and cybersecurity posture, into purchasing decisions.
  • For Policymakers and the FDA: The 2025 GAO report’s recommendations must be heeded. The FDA requires adequate resources and staffing to perform its critical oversight mission. Furthermore, a fundamental re-evaluation of the 510(k) pathway is long overdue. Legislative action may be required to grant the FDA more explicit authority to demand better safety data for higher-risk 510(k) devices and to break the chain of flawed predicates.

The medical device landscape of 2026 is one of profound contradiction: a system striving for modernization and efficiency while simultaneously being undermined by resource limitations and enduring, foundational flaws. The lessons from the transvaginal mesh debacle, the Philips Respironics scandal, and the Penumbra JET 7 recall are symptoms of a regulatory architecture that has not kept pace with the scale and complexity of the modern device market. For industry to thrive and for public trust to be maintained, all stakeholders must acknowledge these challenges and commit to a more rigorous, transparent, and safety-focused approach to innovation.


References

[1] Intuition Labs. (2025, November 14). FDA 510(k) Explained: Medical Device Premarket Notification. https://intuitionlabs.ai/articles/fda-510k-premarket-notification-process

[2] U.S. Food and Drug Administration. (2026, February 17). eSTAR Program. https://www.fda.gov/medical-devices/how-study-and-market-your-device/estar-program

[3] Novick, B. (2026, January 13). The FDA Fails to Protect Americans from the Medical Device Industry. Center for Economic and Policy Research. https://cepr.net/publications/fda-fails-to-protect-americans-from-medical-device-industry/

[4] Hogan Lovells. (2025, October 15). FDA Device Guidance Agenda: What to Watch in 2026. https://www.hoganlovells.com/en/publications/fda-device-guidance-agenda-what-to-watch-in-2026

[5] IQVIA. (2025, August 1). Medical Device Recalls: the impact of disruptive, digital technology on device recalls. https://www.iqvia.com/blogs/2025/07/medical-device-recalls-the-impact-of-disruptive-digital-technology-on-device-recalls

[6] U.S. Food and Drug Administration. (2026, January 16). MDR Data Files. https://www.fda.gov/medical-devices/medical-device-reporting-mdr-how-report-medical-device-problems/mdr-data-files

[7] U.S. Government Accountability Office. (2025, December 12). Medical Device Recalls: HHS and FDA Should Address Limitations in Oversight of Recall Process (GAO-26-107619). https://www.gao.gov/products/gao-26-107619

[8] MedPage Today. (2025, March 12). FDA’s Deadline Ignored in Nearly 30% of Device Safety Reports. https://www.medpagetoday.com/publichealthpolicy/fdageneral/114622

[9] The BMJ. (2025, March 12). Late adverse event reporting from medical device manufacturers to the US Food and Drug Administration: a cross-sectional study. https://www.bmj.com/content/388/bmj-2024-081518

[10] Skadden, Arps, Slate, Meagher & Flom LLP. (2025, April 8). FDA at the Start of the Trump Administration: A Cheat Sheet. https://www.skadden.com/insights/publications/2025/04/fda-at-the-start-of-the-trump-administration

[11] U.S. Food and Drug Administration. (2026, February 2). Quality Management System Regulation (QMSR). https://www.fda.gov/medical-devices/postmarket-requirements-devices/quality-management-system-regulation-qmsr

[12] Lin, J. C., et al. (2025, September 26). Benefit-Risk Reporting for FDA-Cleared Artificial Intelligence/Machine Learning–Enabled Medical Devices. JAMA Health Forum. https://jamanetwork.com/journals/jama-health-forum/fullarticle/2839236

[13] U.S. Food and Drug Administration. (2025, March 25). Artificial Intelligence in Software as a Medical Device. https://www.fda.gov/medical-devices/software-medical-device-samd/artificial-intelligence-software-medical-device

[14] U.S. Food and Drug Administration. (2023, September 7). Recommendations for the Use of Clinical Data in Premarket Notification (510(k)) Submissions. https://www.fda.gov/regulatory-information/search-fda-guidance-documents/recommendations-use-clinical-data-premarket-notification-510k-submissions

[15] U.S. Food and Drug Administration. (2025, July 30). Medical Device User Fee Rates for Fiscal Year 2026. https://www.federalregister.gov/documents/2025/07/30/2025-14412/medical-device-user-fee-rates-for-fiscal-year-2026

[16] U.S. Food and Drug Administration. (2026, January 6). Clinical Decision Support Software. https://www.fda.gov/regulatory-information/search-fda-guidance-documents/clinical-decision-support-software

[17] Arnold & Porter. (2026, January 21). FDA “Cuts Red Tape” on Clinical Decision Support Software and Wearable Products for General Wellness. https://www.arnoldporter.com/en/perspectives/advisories/2026/01/fda-cuts-red-tape-on-clinical-decision-support-software

[18] U.S. Food and Drug Administration. (2025, September 24). Computer Software Assurance for Production and Quality System Software. https://www.fda.gov/regulatory-information/search-fda-guidance-documents/computer-software-assurance-production-and-quality-management-system-software

[19] U.S. Food and Drug Administration. (2025, June 27). Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions. https://www.federalregister.gov/documents/2025/06/27/2025-11669/cybersecurity-in-medical-devices-quality-system-considerations-and-content-of-premarket-submissions

[20] U.S. Food and Drug Administration. (2024, December 18). Marketing Submission Recommendations for a Predetermined Change Control Plan for Artificial Intelligence/Machine Learning-Enabled Medical Devices. https://www.fda.gov/regulatory-information/search-fda-guidance-documents/marketing-submission-recommendations-predetermined-change-control-plan-artificial-intelligence


Disclaimer: The views expressed in the article are those of the authors and not of the organizations they represent.

Related Articles

About The Author

Partha Anbil