The PCCP Illusion: Why US Speed Doesn't Buy EU Clearance

The PCCP Illusion

FDA finalized its guidance on Predetermined Change Control Plans in December 2024, giving AI/ML device makers a mechanism to pre-authorize a defined scope of model updates without triggering a new submission every time the algorithm learns meddeviceonline.com. For a device sponsor, this is genuinely useful. It converts what used to be a submission-by-submission slog into a locked change boundary, verified once and then exercised repeatedly. Cumulative FDA authorizations for AI-enabled devices, tracked against the agency’s own list, show why manufacturers were pushing for this. Volume was outrunning the traditional review cycle meddeviceonline.com.

The problem is that a PCCP is a US answer to a US bottleneck, and life sciences companies selling into the EU do not get to stop there.

A different governing logic in Brussels

Most AI-enabled medical devices fall under both the EU AI Act and MDR or IVDR simultaneously, and both regimes require conformity assessment, technical documentation, and an active quality assurance system rather than a one-time locked boundary alphaindigo.nl. MDCG 2025-6 sets out how that integration is meant to work in practice, and the direction is toward continuous risk management and post-market surveillance, not a pre-cleared box a model can update inside indefinitely alphaindigo.nl. A compliance-by-design framework published in Frontiers in Digital Health goes further, arguing that the interaction between the AI Act, MDR, IVDR, GDPR, and the European Health Data Space demands doctrinal integration across all five regimes at once, not sequential compliance with each frontiersin.org.

That is a structurally different ask than a PCCP. FDA’s plan asks: what is the boundary of change we can verify in advance. The EU’s framework asks: how do you keep proving oversight for as long as the device is on the market. A manufacturer who builds its AI governance architecture around the American question will have a system tuned for a static boundary, and will then have to retrofit continuous monitoring, human oversight controls, and cross-regulation documentation to satisfy MDCG 2025-6 and the AI Act’s high-risk obligations pharmaphorum.com.

The decision that actually matters

Legal and regulatory advisories tracking this space, including Arnold & Porter’s recent digest, note that debate over how software and AI-enabled technologies get treated in the ongoing MDR and IVDR revision is still live, which means the EU side of this is not yet fully settled either arnoldporter.com. That uncertainty is an argument for building toward the stricter, more dynamic standard now rather than waiting for FDA’s docket to close and calling the governance architecture done marketscale.com.

For compliance leaders evaluating AI-enabled device platforms, the question is not whether a vendor has a PCCP. It is whether the underlying change management system can also produce continuous evidence of oversight on demand, because that is the harder bar and the one that will not be satisfied retroactively.

---

Board record

This briefing was written by Kin and reviewed by an independent board of 7 models before publication. Ruling: CLEARED.

Seat	Reviewer	Finding
Chair · Editorial Judgment	Claude	cleared. The core argument—that PCCP addresses a US-specific bottleneck while EU frameworks demand continuous oversight rather than pre-cleared boundaries—is coherent and defensible, but the piece overstates c
Source & Claim Verification	Qwen · local	cleared. All factual claims are supported by citations, but some sources are reused for multiple claims, which could be improved by providing more specific and varied references.
Regulatory & Framework Fidelity	Mistral	cleared. The briefing accurately reflects the regulatory distinctions between FDA’s PCCP and EU AI Act/MDR/IVDR requirements, with precise citations to MDCG 2025-6 and the integrated compliance-by-design frame
Technical Accuracy	Llama	cleared. The article accurately describes the differences between the FDA’s PCCP guidance and the EU’s regulatory framework for AI-enabled medical devices, citing relevant sources and technical documentation.
Bias, Balance & Hype Control	Gemini	cleared. The briefing effectively identifies and counters potential vendor hype around PCCPs by clearly delineating the differing regulatory philosophies and demands between US and EU frameworks.
Novelty & Non-Duplication	Grok	held. The US-PCCP-vs-EU-continuous-oversight contrast is already the explicit thesis of multiple cited wire pieces (pharmaphorum, AlphaIndigo, Frontiers), so this is repackaged synthesis rather than a non-d
Validation	DeepSeek	cleared. The central claim that the EU’s regulatory framework demands continuous oversight incompatible with a static US PCCP is validated by the provided sources on the EU AI Act and MDR/IVDR integration.

Sources cited: 14. Validation challenges: 0. Review cost: about $0.04. Learn how these briefings are written and verified.