A regulatory device is any medical product that meets the legal definition of a “device” and falls under the oversight of a government agency like the U.S. Food and Drug Administration or the European Commission. In practical terms, this includes everything from tongue depressors and bandages to pacemakers and MRI machines. If a product is intended to diagnose, treat, or prevent disease, and it works through physical rather than chemical means, it is almost certainly a regulatory device that must meet specific safety and performance standards before reaching patients.
The Legal Definition
Under U.S. law, a device is any instrument, apparatus, implant, machine, or similar article (including its components and accessories) that is intended for use in diagnosing disease, curing or treating a condition, or affecting the structure or function of the body. The critical distinction between a device and a drug is how it works: a device does not achieve its primary purpose through chemical action or by being metabolized. A hip replacement, a blood glucose monitor, and a surgical scalpel all qualify. A pill that lowers blood pressure does not.
This definition is broad by design. It captures not only the physical products you might picture in a hospital, but also diagnostic test kits, contact lenses, powered wheelchairs, and increasingly, standalone software that performs a medical function.
How Devices Are Classified by Risk
Regulatory agencies sort devices into classes based on how much risk they pose to patients. In the U.S., there are three classes. In the European Union, there are four. The higher the risk, the more evidence a manufacturer must provide before selling the product.
- Class I (lowest risk): Simple, well-understood products like elastic bandages, manual stethoscopes, and exam gloves. These are subject to general controls, meaning basic manufacturing standards, proper labeling, and registration with the regulatory agency. Many are exempt from further review.
- Class II (moderate risk): Products like powered wheelchairs, pregnancy tests, and infusion pumps. These require general controls plus special controls, which can include specific performance testing, design standards, or patient labeling requirements. Most Class II devices must go through a formal review process before reaching the market.
- Class III (highest risk): Life-sustaining or life-supporting products like heart valves, implantable defibrillators, and certain neural stimulators. These require the most rigorous premarket review, including clinical trial data proving both safety and effectiveness.
The EU system adds a fourth tier by splitting the middle category into Class IIa (low-to-moderate risk, typically devices placed inside the body for under 30 days) and Class IIb (moderate-to-high risk, often implanted for longer periods). The manufacturer is responsible for determining which class their product falls into based on published classification rules.
Getting a Device to Market
The pathway a device takes to reach patients depends on its risk class. In the U.S., the two main routes are the 510(k) process and the Premarket Approval (PMA) process.
The 510(k) pathway applies to most Class II devices and some Class I devices. A manufacturer must demonstrate that their new device is “substantially equivalent” to a product already legally sold, called a predicate device. This comparison covers intended use, technological characteristics, and performance testing. Filing a 510(k) currently costs $26,067 in standard fees, or $6,517 for qualifying small businesses.
The PMA pathway is reserved for Class III devices and is far more demanding. Manufacturers must submit valid scientific evidence, often from clinical trials, showing that the device is both safe and effective for its intended use. The standard filing fee is $579,272 (or $144,818 for small businesses), reflecting the depth of review involved. PMA is the most stringent type of premarket submission the FDA requires.
For devices that treat life-threatening or irreversibly debilitating conditions, the FDA offers a Breakthrough Devices Program. Qualifying products receive prioritized review, more frequent interaction with agency experts during development, and faster feedback on clinical study designs. To be eligible, a device must represent a breakthrough technology, offer significant advantages over existing options, or address a condition with no approved alternatives.
Software as a Regulatory Device
Software can be a regulatory device even when it runs on a general-purpose phone or computer. The International Medical Device Regulators Forum defines Software as a Medical Device (SaMD) as software intended for one or more medical purposes that performs those purposes without being part of a hardware device. An app that analyzes medical images to detect skin cancer, for instance, qualifies as a regulatory device. A fitness tracker that counts steps generally does not, because step counting is not a medical purpose.
The distinction matters because SaMD must go through the same classification and review process as physical devices. A diagnostic algorithm that helps identify diabetic eye disease faces regulatory scrutiny comparable to a physical diagnostic instrument with a similar intended use.
Quality and Manufacturing Standards
Regulatory agencies do not simply approve a device and walk away. Manufacturers must operate under a formal quality management system throughout the entire product lifecycle, from design through production, installation, and servicing. The international standard for this is ISO 13485, which sets requirements specific to the medical device industry. It emphasizes risk management and risk-based decision making at every stage, and it extends to organizations throughout the supply chain, not just the final manufacturer.
Meeting this standard means documenting design controls, verifying that production processes are consistent, maintaining traceability for components, and having procedures in place to catch problems before products ship.
What Happens After a Device Is Sold
Regulation does not end at the point of sale. Manufacturers and distributors must follow postmarket requirements that include tracking systems, establishment registration, and mandatory reporting of device malfunctions, serious injuries, or deaths. If a device causes unexpected harm, the manufacturer is legally required to notify the regulatory agency.
For higher-risk devices, the FDA can require postmarket surveillance studies to collect long-term safety data from real-world use. These studies are sometimes mandated as a condition of approval, particularly for implants or devices where long-term performance is uncertain at the time of initial review. This ongoing oversight is designed to catch problems that clinical trials, which typically involve hundreds or thousands of patients, may not reveal.
Regulatory Devices in Synthetic Biology
The term “regulatory device” also appears in a completely different context: synthetic biology. Here, a regulatory device is an engineered genetic component that controls gene expression inside a living cell, functioning like a tiny circuit. Early examples include the genetic toggle switch, which acts as a biological memory element, and the repressilator, which keeps time by cycling through states like an oscillator.
Scientists have built on these designs to create digital logic gates, pulse generators, filters, and communication modules from biological parts. Biosensors are a practical application: a sensitive element detects a specific molecule, and a transducer module triggers a cellular response. Some designs use RNA-based switches that flip gene expression on or off at a threshold concentration of a target molecule, producing binary, switch-like behavior similar to an electronic circuit. These biological regulatory devices are a foundation of efforts to program cells for applications in medicine, environmental sensing, and industrial biotechnology.