software

Subscribe to software via RSS

Welcome to the latest installment of Arnold & Porter’s Virtual and Digital Health digest. This digest covers key virtual and digital health regulatory and public policy developments during July and early August 2026 from the EU and UK.

During July 2026, regulators in the EU and UK continued to focus on the practical implementation of AI and digital health regulation.

In the EU, the Digital Omnibus on AI introduced the first substantive amendments to the AI Act, while policymakers and industry groups turned their attention to how AI requirements will interact with existing frameworks. This included new principles on the use of AI in Joint Clinical Assessment dossiers under the Health Technology Assessment Regulation, the European Federation of Pharmaceutical Industries and Association’s (EFPIA) call for trusted AI testing environments and proportionate AI governance in its response to the Biotech Act consultation, and further debate on the treatment of software and AI-enabled technologies in the ongoing Medical Device Regulation (MDR)/In Vitro Diagnostic Regulation (IVDR) revision. Together, these developments reflect a growing focus on ensuring that AI-specific requirements integrate effectively with existing regulatory frameworks.

In the UK, regulators published a series of guidance documents addressing questions about when AI-enabled products qualify as medical devices and how they should be regulated. New Medicines and Healthcare products Regulatory Agency (MHRA) guidance on ambient voice technologies and updated guidance on digital mental health technologies provide greater clarity on the medical device boundary, while additional outputs from the AI Airlock program highlight the challenges associated with qualification, intended purpose, and lifecycle management of AI systems. These developments suggest that regulators are increasingly focused on addressing practical implementation questions.

Continue Reading Virtual and Digital Health Digest – August 2026

Welcome to the latest installment of Arnold & Porter’s Virtual and Digital Health Digest. This digest covers key virtual and digital health regulatory and public policy developments during May and early June 2026 from the United Kingdom and European Union.

May 2026 saw continued momentum across the European Union (EU) and United Kingdom (UK) toward modernizing and streamlining the regulatory landscape for digital health, with a particular focus on accommodating AI-enabled technologies while reducing unnecessary complexity. A central development was the provisional agreement on the Digital Omnibus package, which seeks to simplify the application of the EU AI Act by clarifying overlaps with sector-specific legislation, deferring key obligations, and introducing more proportionate requirements.

In parallel, regulators on both sides of the Channel are advancing reforms to ensure that medical device frameworks remain fit for purpose in an increasingly software-driven and data-centric environment. In the EU, the activation of key European Database on Medical Devices (EUDAMED) modules marks a major step toward enhanced transparency and traceability, while ongoing discussions on the Medical Devices Regulation 2017/745 (MDR)/In Vitro Diagnostic Regulation 2017/746 (IVDR) revisions highlight a strong policy drive toward simplification and better integration of AI. In the UK, the Medicines and Healthcare products Regulatory Agency’s (MHRA) proposed pre-market reforms and broader thinking on AI regulation signal a shift toward more flexible, lifecycle-based oversight, with greater emphasis on post-market monitoring and innovation support.

Data governance and cybersecurity also remain high on the agenda. Industry and regulators alike are emphasizing the need for coherent, proportionate frameworks that avoid duplication while enabling innovation, particularly in light of expanding AI use cases and global supply chains. Together, these developments reflect a broader trend toward risk-based, innovation-friendly regulation, coupled with increasing expectations around transparency, accountability, and data protection in digital health.

Continue Reading Virtual and Digital Health Digest – June 2026

Welcome to the latest installment of Arnold & Porter’s Virtual and Digital Health Digest. This digest covers key virtual and digital health regulatory and public policy developments during June and early July 2025 from the United Kingdom and European Union.

There has been a flurry of new guidance from the Medical Device Coordination Group this month, including guidance on classification of medical device software, on supply of software apps through online platform such as the App Store and Google Play, and on the interaction between the Medical Device Regulation and the EU AI Act. These are welcome guidance documents to provide important clarification for manufacturers as they develop software medical devices, although the guidance documents inevitably cannot cover every situation and leave some questions unanswered. 

Continue Reading Virtual and Digital Health Digest – July 2025

Welcome to the latest installment of Arnold & Porter’s Virtual and Digital Health Digest. This digest covers key virtual and digital health regulatory and public policy developments during May and early June 2025 from the United Kingdom and European Union.

There has been a lot of focus on AI this month. The European Commission has launched a consultation on high-risk AI systems, which includes medical devices and is therefore highly relevant for digital health companies. The European Medicines Agency has published a workplan on data and AI use, which sets out how the European Medicines Regulatory Network plans to leverage large volumes of regulatory and health data to support regulatory decision-making for better medicines. There has also been international guidance published on the use of AI in pharmacovigilance. However, there has also been controversy as the UK Data Use and Access Bill continues through the parliamentary process, as there is disagreement on its treatment of copyright-protected material in the development of AI systems. As uses of AI continue and authorities seek to put in place relevant legislation and guidance to match the speed of development, expect this focus to continue.

Continue Reading Virtual and Digital Health Digest – June 2025

The recently published MDCG 2025-4 guidance provides important clarifications on how Medical Device Software (MDSW) apps should be made available via online platforms and on the role of these online platforms. With digital distribution channels such as the App Store and Google Play playing a central role in healthcare software deployment, the guidance has significant implications for medical device manufacturers operating in the EU.

In essence, the guidance clarifies that digital distribution does not reduce regulatory obligations. Software-based medical devices must be subject to the same level of regulatory scrutiny and compliance as traditional, physical devices.

We set out below some comments on the distinction between platforms acting as intermediary service providers under the Digital Services Act (DSA) and those that may qualify as importers or distributors under the EU Medical Devices Regulations (the MDR and IVDR).

Continue Reading EU Medical Device Software: New guidance on placing software medical devices on the EU market

Welcome to the latest installment of Arnold & Porter’s Virtual and Digital Health Digest. This digest covers key virtual and digital health regulatory and public policy developments during April and early May 2025 from the United States, United Kingdom, and European Union.

Cybersecurity is a hot topic in the UK and EU this month. In both, cybersecurity plans are developing, with the European Commission conducting a consultation on the EU Action Plan to strengthen cybersecurity within hospitals and health care providers, and the UK Cyber Security and Resilience Bill being published, introduced partly because of cyberattacks on UK hospitals. This is clearly an important area for developers of digital products and services, who should watch the progress of these policies closely.

Continue Reading Virtual and Digital Health Digest – May 2025

Welcome to the latest installment of Arnold & Porter’s Virtual and Digital Health Digest. This digest covers key virtual and digital health regulatory and public policy developments during March and early April 2025 from the United States, United Kingdom, and European Union.

The biggest change this month is that as of March 25, 2025, the European Health Data Space Regulation (EHDS Regulation) is now in force. This means that, as it is gradually implemented, companies will be able to request access to electronic health data for health care purposes, including for use in scientific research, and may be required to share certain health data that they hold. The implementation of the EHDS Regulation is likely to raise a number of questions, which future European Commission implementing regulations or guidelines may clarify.

Continue Reading Virtual and Digital Health Digest – April 2025

This digest covers key virtual and digital health regulatory and public policy developments during April and early May 2024.

You will note that France has set out new pricing rates for innovative digital therapeutic medical devices under the accelerated market access pathway, known as PECAN. While the pathway was set out in February 2023, the lack of reimbursement rates means up-take has been low. The order of April 22, 2024 introduces the new pricing structure, with the maximum amount of financial compensation set at €780 per year, per patient. This is an important step in ensuring digital therapeutic products can be widely available in France while also ensuring that developers can obtain appropriate reimbursement.

Continue Reading Virtual and Digital Health Digest, May 2024

The UK Medicines and Healthcare products Regulatory Agency (MHRA) has published its strategic approach to artificial intelligence (AI). The publication is in response to the request from the Secretaries of State of DSIT and DHSC dated 1 February 2024, in which the MHRA was asked to provide details about what steps it is taking in accordance with the principles and expectations of the Government’s pro-innovation approach set out in the white paper published in 2023. Further information is set out in our previous post.

The strategy provides information on how the MHRA views the risks and opportunities of AI from three perspectives:

  • MHRA as a regulator of AI products
  • MHRA as a public service organisation delivering time-critical decisions
  • MHRA as an organisation that makes evidence-based decisions that impact on public and patient safety, where that evidence is often supplied by third parties

The document is likely to be of particular interest to AIaMD manufacturers as it sets out in detail current and proposed regulations and guidance, and areas where this is likely to be tightened. Following the launch of the strategic approach, the government also published details of the AI Airlock regulatory sandbox, discussed in another post.

With a raft of measures relating to AI being published and additional measures expected in the next couple of years, pharmaceutical and medical device companies operating in the UK need to continually review how they will be impacted and respond appropriately.

Continue Reading MHRA sets out its AI regulatory strategy

In our blog post on 22 February 2024 we reported on the Medicines and Healthcare products Regulatory Agency (MHRA) announcement that it intended to launch a regulatory sandbox for software and AI medical devices called the “AI-Airlock”. The pilot project went live on 9 May 2024, and government sources are citing it as a key component of the MHRA’s strategic approach to AI, published on 30 April 2024 (discussed in a separate post).

Continue Reading The MHRA’s “AI Airlock” – what do you need to know?