EU AI Act — High-Risk Medical Device AI (Article 6 / MDR / IVDR): AI Compliance Requirements
EU AI Act Article 6(1) classifies AI systems embedded in EU-regulated medical devices as high-risk. Any AI-powered medical device subject to third-party conformity assessment under MDR (Class IIa, IIb, III) or IVDR (Class B, C, D) must comply with the full EU AI Act high-risk regime by August 2, 2028 (DEFERRED from the original 2 Aug 2027 by the Digital Omnibus — Regulation (EU) 2026/1744, published in the Official Journal 24 July 2026, in force 27 July 2026). This means: conformity assessment, technical documentation, quality management system, post-market monitoring, and registration in the EU AI database. Dual compliance (MDR/IVDR + AI Act) is mandatory — no grace period after August 2, 2028. The MDCG published guidance document MDCG 2025-6 clarifying the overlap; that guidance predates the Digital Omnibus deferral and its stated 2027 date should be read as 2028.
Summary of publicly-available regulatory text as of 2026-08-22. Verify against current official sources before relying on this for compliance decisions. Not legal advice.
Key Facts
August 1, 2024
August 2, 2028
€15,000,000 or 3% of global annual turnover for high-risk AI violations
What Your Business Must Do
3 compliance requirements identified. Critical requirements carry the highest risk of enforcement action.
Medical Device AI Risk Classification
CriticalClassify your AI-enabled medical device under both EU MDR/IVDR (CE marking class) and EU AI Act Article 6(1). If your device is Class IIa, IIb, or III under MDR (or Class B/C/D under IVDR) AND uses AI, you are automatically high-risk under the AI Act. Document this dual classification.
Deadline: August 2, 2028
AI Act Art. 6(1)Technical Documentation & QMS
CriticalHigh-risk AI medical devices require: (1) Technical documentation (Article 11 EU AI Act) describing design, architecture, training data, performance metrics. (2) Quality Management System (Article 17) covering data governance, design, testing, post-market monitoring. (3) Post-market monitoring plan (Article 72). Integrate AI Act requirements into your existing MDR Technical File.
Deadline: August 2, 2028
AI Act Art. 11, Art. 17, Art. 72AI Act Conformity Assessment
High PriorityUndergo a conformity assessment under EU AI Act Chapter V (for high-risk AI). Coordinate with your Notified Body — they must assess both the MDR/IVDR device classification AND the AI Act high-risk requirements. Register in the EU AI database (Article 71) before placing on market.
Deadline: August 2, 2028
AI Act Art. 43, Art. 71Who Does This Apply To?
Applies to: providers (and, in their respective roles, deployers, importers, and distributors) of AI systems that are, or are a safety component of, a medical device or in-vitro diagnostic device subject to third-party conformity assessment under the MDR (Class IIa, IIb, III) or IVDR (Class B, C, D) and placed on the EU market or put into service in the Union. Such AI is classified high-risk under Article 6(1), so the full high-risk regime applies in addition to MDR/IVDR: a conformity assessment, technical documentation, a quality management system, risk management, human oversight, post-market monitoring, and registration in the EU AI database. Dual compliance is mandatory — there is no grace period after the high-risk obligations for these systems fully apply on 2 August 2028 (deferred from the original 2 August 2027 by the Digital Omnibus, Regulation (EU) 2026/1744, in force 27 July 2026). The MDCG guidance MDCG 2025-6 pre-dates this deferral and its stated 2027 date should be read as 2028. Scope turns on the device's risk class, not company size. Penalties for high-risk violations reach EUR 15,000,000 or 3% of global annual turnover.
Recent Regulatory Guidance
MDCG 2025-6 — Guidance on the interplay between MDR/IVDR and the AI Act
MDCG 2025-6 clarified the dual-regime application: (1) AI systems embedded in MDR Class IIa/IIb/III or IVDR Class B/C/D devices subject to third-party conformity assessment fall under EU AI Act Article 6(1) high-risk classification by virtue of MDR/IVDR class; (2) the Notified Body conducting MDR/IVDR conformity assessment may also conduct AI Act conformity assessment if designated for both regimes; (3) technical documentation requirements (MDR Annex II + AI Act Annex IV) may be combined, but each regime's substantive requirements must be met independently; (4) the AI Act post-market monitoring obligations operate alongside, not in place of, MDR Article 83 PMS.
Key Case Law & Precedent
Boston Scientific Medizintechnik v. AOK Sachsen-Anhalt (CJEU C-503/13 + C-504/13)
Court of Justice of the European Union · 2015Foundational CJEU ruling on defective medical devices: a device belonging to a group or production series with a potential defect can be classified as defective without proof that any specific unit is faulty. The ruling underpins the strict-liability framework that the EU Product Liability Directive 2024 now extends to AI-enabled medical devices and that informs MDCG's coordinated MDR/AI Act post-market surveillance approach — manufacturer liability attaches at the population level, not per-unit.
Outcome: Manufacturer liability extended to all units in a defective production series; reimbursement of preventive replacement permitted
Case referenceIndustry Playbooks covering EU AI Act — High-Risk Medical Device AI (Article 6 / MDR / IVDR)
These industry playbooks include jurisdiction-specific checklist items and guidance for EU AI Act — High-Risk Medical Device AI (Article 6 / MDR / IVDR).
Frequently Asked Questions
Does EU AI Act — High-Risk Medical Device AI (Article 6 / MDR / IVDR) apply to my business?
EU AI Act Article 6(1) classifies AI systems embedded in EU-regulated medical devices as high-risk. Any AI-powered medical device subject to third-party conformity assessment under MDR (Class IIa, IIb, III) or IVDR (Class B, C, D) must comply with… Use Aegis Firma's free scanner to get a personalized assessment in under 5 minutes.
What is the penalty for non-compliance?
The maximum penalty under EU AI Act — High-Risk Medical Device AI (Article 6 / MDR / IVDR) is: €15,000,000 or 3% of global annual turnover for high-risk AI violations. Fines are typically scaled by company size, severity of violation, and whether violations were willful or accidental.
How do I comply with EU AI Act — High-Risk Medical Device AI (Article 6 / MDR / IVDR)?
The 3 requirements above cover the core obligations. The fastest path to compliance is: (1) conduct an AI risk assessment, (2) document your AI systems, (3) implement transparency disclosures where required. Aegis Firma generates all required documents automatically.
Official Source
https://health.ec.europa.eu/document/download/b78a17d7-e3cd-4943-851d-e02a2f22bbb4_enLast updated: 2026-08-22 — verify at source before relying on this information.
Don't leave compliance to chance
Aegis Firma scans your AI tools, tells you exactly which regulations apply, and generates all required documents — in 30 minutes.
Start your free compliance scan