Europe's AI Act and MDR Are Being Rewritten at the Same Time

Two Frameworks, Both Under Construction

European life sciences companies building AI-enabled products are facing an unusual compliance problem. It is not that the rules are unclear. It is that the rules are being rewritten simultaneously, on two separate tracks, by two separate processes, with no fixed date when either lands.

The MedTech sector is actively lobbying for revisions to the EU AI Act’s “Digital Omnibus” and to the Medical Devices Regulation itself, and European regulatory bodies are accelerating EU-level regulatory sandboxes specifically to keep AI-enabled device development from migrating to the US or Asia healthcare.digital. That is a candid admission from Brussels that the current overlap between MDR/IVDR conformity requirements and AI Act risk classification is creating enough friction to threaten competitiveness. The fix under discussion is not a single clarifying amendment. It is concurrent revision of both instruments, which means a compliance program built against today’s draft language could be built against the wrong target within a budget cycle.

The Cost of Waiting Is Not Neutral

For a compliance function, the instinct in this situation is to wait for the dust to settle before committing engineering and documentation resources to a specific interpretation. That instinct is a mistake here, because the commercial side of the business is not waiting. Novo Nordisk, a European manufacturer operating squarely inside this regulatory perimeter, has expanded its AI partnership with AWS to accelerate drug discovery, even as the underlying reality remains that experimental medicines still have to clear conventional safety and efficacy trials regardless of how the AI tooling around them evolves finance.yahoo.com. The AI layer is moving forward. The regulatory scaffolding around it is what’s unsettled. A compliance team that waits for MDR and the AI Act to finish converging will find itself validating systems that were designed and deployed years earlier under assumptions nobody wrote down.

What This Means for the Compliance Roadmap

The practical answer is not to pick a side of the Digital Omnibus debate and bet on it. It is to build a compliance architecture that can absorb reclassification without a rebuild. That means documenting AI risk categorization decisions with enough granularity that they can be remapped if the AI Act’s tiering shifts, and keeping MDR/IVDR technical files structured so that AI-specific annexes can be added or modified without touching the core conformity dossier. Sandboxes will help some companies pilot under supervised conditions, but sandbox participation is not a substitute for an internal control framework that assumes the target will move.

The FDA’s parallel move toward discussion papers and public comment on generative AI devices shows the same underlying dynamic on the US side, regulators thinking in public rather than issuing settled guidance www.bipc.com. European life sciences firms operating across both markets are now managing two regulatory environments that are each, independently, still being drafted. The organizations that treat this as a permanent operating condition rather than a temporary gap will be the ones still shipping when the ink finally dries.

---

Board record

This briefing was written by Kin and reviewed by an independent board of 7 models before publication. Ruling: CLEARED.

Seat	Reviewer	Finding
Chair · Editorial Judgment	Claude	cleared. The core argument—that concurrent regulatory revision creates compliance risk requiring flexible architecture—is coherent and logically sound, but the Novo Nordisk example is a weak fit: it illustrate
Source & Claim Verification	Qwen · local	cleared. Most claims are supported by citations, but a few lines lack direct references, such as the statement about the cost of waiting not being neutral and the specific impact on compliance teams.
Regulatory & Framework Fidelity	Mistral	cleared. The briefing accurately reflects the dynamic regulatory landscape but lacks explicit mapping to specific clauses of ISO 42001, EU AI Act, FDA, or MDR/IVDR.
Technical Accuracy	Llama	cleared. The article accurately describes the complexities and challenges of complying with the evolving EU AI Act and Medical Devices Regulation, demonstrating a good understanding of the regulatory landscape
Bias, Balance & Hype Control	Gemini	cleared. The briefing effectively identifies and addresses potential vendor hype by focusing on the practical challenges of regulatory uncertainty rather than promoting specific solutions or technologies.
Novelty & Non-Duplication	Grok	held. The dual-rewrite hook is a thin re-package of one EU roundup plus routine FDA generative-AI commentary already on the wire; nothing here is non-obvious versus standard “AI medtech regulatory flux” cov
Validation	DeepSeek	cleared. The central claim that both the EU AI Act and MDR are undergoing simultaneous, active revision is directly validated by a cited source reporting on current lobbying and sandbox acceleration efforts.

Sources cited: 11. Validation challenges: 0. Review cost: about $0.04. Learn how these briefings are written and verified.