Medical Device Regulatory Risk Assessment

Risk Mapping

Classification and Pathway Risk: Where Most Programs Go Wrong

The regulatory pathway for a medical device — 510(k), De Novo, or PMA — determines the review standard, the type of evidence required, the development timeline, and ultimately the time-to-market. Getting the pathway wrong, or discovering mid-development that the assumed pathway is unavailable, is one of the costliest regulatory mistakes a device company can make. Classification risk — the probability that FDA will classify the device differently than the company assumed — is the upstream driver of pathway risk.

Classification risk is not always obvious. A device that appears to fall into an existing 510(k)-eligible product code may have a technological characteristic or intended use that FDA would view as requiring a De Novo or PMA pathway. FDA's 510(k) review database is the most reliable source of information about how the agency has treated similar devices — but interpreting that database requires understanding what was actually cleared and why, not just what the product code says. We analyze the clearance history for the relevant device category and identify the risks that exist for the specific device and intended use before a pathway is selected.

Predicate Selection Risk in 510(k) Programs

A 510(k) submission rises or falls on predicate selection. The predicate must be legally marketed, have a substantially equivalent intended use to the subject device, have the same or different technological characteristics that don't raise new questions of safety and effectiveness. A predicate that is technically legally marketed but that was cleared under circumstances FDA now considers inadequate, or that has since been voluntarily recalled or had its clearance order rescinded, creates a substantial equivalence argument FDA may not accept.

We analyze the predicate landscape for every 510(k) program at the outset — reviewing the predicate's clearance history, any post-clearance FDA actions, the technological characteristics comparison, and the adequacy of the predicate's performance data as a benchmark for the subject device's test requirements. Predicate selection risk is identified and mitigated before submission, not discovered in an FDA deficiency letter.

Data Package Risk: Identifying Gaps Before They Become Deficiencies

A regulatory risk assessment maps the data package requirements for the device's classification and intended use against the data the development program is planned to generate. The gap between what FDA will expect and what the current plan will produce is the data package risk. For 510(k) devices, this includes biocompatibility, electrical safety, EMC, sterility validation, performance testing, and HFE as applicable. For PMA devices, the data requirements are device-specific and extensively guided by FDA's device-specific PMA guidance documents. Identifying data package gaps at program initiation — when filling them is still part of the program plan — is far less expensive than discovering them after the development program is complete.

What We Deliver

• Regulatory risk assessment memo: classification, pathway, predicate, and data package risks
• Device classification analysis: product code review, classification regulation analysis
• Predicate landscape analysis: candidate predicates, clearance history, suitability assessment
• Data package gap analysis: expected requirements vs. planned program deliverables
• Pathway recommendation with risk-adjusted justification
• Pre-submission meeting strategy: questions that should be validated with FDA before submission
• Regulatory strategy document: pathway, timeline, key milestones, risk mitigation plan

Assess Your Regulatory Risk