FDA Updates Cybersecurity Guidance

The U.S. Food and Drug Administration (FDA) recently issued a new guidance in regards to the cybersecurity of medical devices. The new guidance “Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions; Guidance for Industry and Food and Drug Administration Staff; Availability”

This guidance updates the previous version of the guidance, of the same title, issued on September 27, 2023, and finalizes the draft guidance entitled “Select Updates for the Premarket Cybersecurity Guidance: Section 524B of the FD&C Act” issued on March 13, 2024. This guidance provides FDA’s recommendations to industry regarding cybersecurity device design, labeling, and the documentation that FDA recommends be included in premarket submissions for devices with cybersecurity risk.

Additionally, this guidance has been updated to identify the information FDA generally considers to be necessary for cyber devices to support obligations under the new amendments to the Federal Food, Drug, and Cosmetic Act (FD&C Act) for ensuring cybersecurity of devices.

The announcement of the guidance was published in the Federal Register on June 27, 2025.