FDA Regulatory Pathways

How the FDA classifies medical devices, the three main regulatory pathways, and what prototype builders need to know about marketing restrictions.

The U.S. Food and Drug Administration (FDA) regulates medical devices based on the risk they pose to patients. Understanding which regulatory pathway your device falls into affects your timeline, budget, testing requirements, and what you can legally say about your product.

At the prototype stage, you do not need FDA clearance or approval. Internal R&D, bench testing, and non-clinical feasibility work are not regulated. But knowing your likely classification early shapes better design decisions and prevents costly rework later.

---

Device classification

The FDA assigns every medical device to one of three classes based on the level of risk and the regulatory controls needed to ensure safety and effectiveness.

Class I: Low risk

Controls: General controls only (registration, listing, labeling, good manufacturing practices, adverse event reporting).

About 74% of Class I device types are exempt from premarket review entirely. You register your establishment, list the device, follow basic quality requirements, and you can market it.

Examples: Tongue depressors, elastic bandages, manual stethoscopes, examination gloves, bedpans, scalpels, toothbrushes.

Class II: Moderate risk

Controls: General controls plus special controls (performance standards, post-market surveillance, specific labeling, FDA guidance documents).

Most Class II devices require a 510(k) submission; you must demonstrate your device is "substantially equivalent" to an existing legally marketed device (called a predicate). Some Class II devices are exempt from 510(k).

Examples: Powered wheelchairs, blood glucose meters, contact lenses, pregnancy test kits, infusion pumps, patient monitors, surgical gloves, the Apple Watch ECG feature.

Class III: Highest risk

Controls: General controls plus Premarket Approval (PMA), the most rigorous pathway.

These are devices that sustain or support life, are implanted, or present significant risk. Clinical trials are almost always required.

Examples: Cardiac pacemakers, heart valves, breast implants, cochlear implants, deep-brain stimulators, implantable defibrillators.

---

The three main regulatory pathways

510(k): Premarket notification

The most common pathway. Used for Class II devices (and some Class I and III) that have a legally marketed predicate.

1

Identify a predicate device

Find an existing FDA-cleared device with the same intended use and similar technological characteristics. The FDA's 510(k) database is publicly searchable. Choosing the right predicate is critical; an inappropriate predicate is one of the top reasons for rejection.

2

Demonstrate substantial equivalence

Show that your device has the same intended use as the predicate AND either the same technological characteristics or different characteristics that do not raise new safety/effectiveness questions. This typically involves bench testing and performance data.

3

Submit and review

The FDA targets a 90-day review (under MDUFA V). Total preparation through clearance typically takes 3-12 months. Additional information requests add 30-60 days each.

Cost factor	Standard	Small business (< $100M revenue)
FDA user fee (FY 2026)	$26,067	$6,517
Total project cost (low complexity)	$30,000 - $75,000
Total project cost (moderate complexity)	$100,000 - $175,000
Total project cost (high complexity)	$175,000 - $500,000+

PMA: Premarket approval

Required for Class III devices. The most rigorous and expensive pathway.

You must provide valid scientific evidence, almost always including clinical trial data, demonstrating reasonable assurance of safety and effectiveness. An advisory panel of outside experts may review the application.

Cost factor	Standard	Small business
FDA user fee (FY 2026)	$579,272	$144,818
Clinical trials	$5M - $50M+
Total concept to approval	$10M - $100M+
Timeline	4-8+ years

First-time PMA fee waivers are available for companies with gross receipts under $30M. The FDA also offers the Breakthrough Devices Program for life-threatening conditions, which provides prioritized review and more flexible clinical study designs.

De Novo: New device classification

For novel devices that have no predicate but are low-to-moderate risk. This fills the gap between 510(k) (needs a predicate) and PMA (too rigorous for lower-risk devices).

Once granted, a De Novo device creates a new FDA classification and can serve as a predicate for future 510(k) submissions by other companies.

Cost factor	Standard	Small business
FDA user fee (FY 2026)	$173,782	$43,446
Median total cost	~$5M
Statutory review goal	120 days
Actual average review time	~307 days

---

"Cleared" vs. "approved" vs. "granted"

These terms are not interchangeable. Using them incorrectly in marketing materials is legally actionable.

Term	Pathway	Applies to	What it means
FDA Cleared	510(k)	Class I and II	Device is substantially equivalent to a predicate
FDA Approved	PMA	Class III	Device has demonstrated safety and effectiveness via clinical evidence
FDA Granted	De Novo	Novel low/moderate risk	Device authorized and a new classification created

Calling a 510(k)-cleared device "FDA approved" is legally inaccurate and can trigger FDA enforcement action. This is one of the most common mistakes startups make in marketing materials. Courts and the FDA both scrutinize this language.

---

Marketing restrictions

A medical device that requires premarket submission but is marketed without it is considered adulterated and/or misbranded under federal law.

What you cannot do without clearance/approval

• Introduce the device into interstate commerce

• Make therapeutic or diagnostic claims

• Promote the device for medical use

• Sell or distribute the device for clinical use on patients

Consequences

Enforcement level	What happens
Warning letters	Public record, damages credibility, demands corrective action
Civil penalties	Up to ~$17,730 per violation per day, capped at $1M per proceeding
Criminal (misdemeanor)	Up to 1 year imprisonment; no criminal intent required
Criminal (felony)	Intent to defraud or repeat offenses; more severe penalties
Product actions	Seizure, mandatory recall, import holds, injunctions

The FDA actively monitors the internet and company websites for unauthorized therapeutic claims. "Research Use Only" labeling is not a loophole; if the device is actually used clinically or marketed with health claims, the FDA will treat it as a regulated device regardless of the label.

---

International markets

If you plan to sell outside the U.S., other regulatory frameworks apply.

European Union: CE Marking (EU MDR)

The EU uses four risk classes (I, IIa, IIb, III) and relies on independent Notified Bodies (not a central agency) for conformity assessment. CE certificates are valid for a maximum of 5 years and subject to annual surveillance audits.

Key differences from FDA:

• More granular classification (four classes vs. three)

• Third-party review by Notified Bodies, not a central government agency

• A device may be Class IIa in the EU but Class III in the U.S., or vice versa

• EU MDR transition deadlines extend through December 2028

Other major markets

• Japan (PMDA): Four-class system. May require in-country clinical trials. MDSAP participant.

• China (NMPA): Requires in-country testing in NMPA-designated labs, dossier translation, and a local agent. Growing market but more burdensome process.

• Canada (Health Canada): Similar to U.S. regulation. Common target for North American market expansion. MDSAP participant.

• MDSAP (Medical Device Single Audit Program): A single audit can satisfy quality system requirements for the U.S., Canada, Japan, Australia, and Brazil simultaneously.

---

What matters at the prototype stage

You do not need FDA involvement for internal R&D, bench testing, or early feasibility work. But several classification-dependent decisions should be made early:

Start now

• Identify your likely classification. Use the FDA Product Classification Database. If uncertain, a 513(g) request costs $7,820 (standard) or $3,910 (small business).

• Research predicates (for 510(k) devices). Study cleared devices in the FDA 510(k) database with comparable technology and indications. Your design should not diverge from predicates in ways that break substantial equivalence.

• Begin documenting design controls. For Class II and III devices, the FDA expects design control documentation from the start of development, not retrofitted later. The Design History File should grow alongside your prototype.

• Start risk management. ISO 14971 risk analysis should begin at the concept phase. Risk analysis informs design decisions and is a required input to all premarket submissions.

Use available FDA programs

• Pre-Submission (Q-Sub) meetings: Free and voluntary. Get FDA feedback on your testing strategy, clinical study design, and regulatory pathway before committing resources.

• Breakthrough Devices Program: For life-threatening or irreversibly debilitating conditions. Provides prioritized review and more flexible study designs. Decision within 60 days of application.

• Small Business Determination: 75% fee reduction on user fees for companies under $100M revenue.

Bottom line for prototyping: Use any components you want for your prototype. But know your likely FDA class, start documentation early, and talk to the FDA (via Q-Sub) before investing heavily in development. The earlier you understand the regulatory landscape, the fewer expensive surprises later.

---

Common startup pitfalls

1. "Build first, figure out FDA later." Roughly three-quarters of medical device startups fail before even making an FDA submission, usually from deferred regulatory planning, not lack of innovation.

2. Wrong classification or predicate. Misclassifying your device leads to the wrong pathway. Choosing a poor predicate invites 510(k) rejection.

3. No quality management system. Both FDA and EU require a robust QMS. Starting late means expensive retrofitting. See Manufacturing Standards.

4. Skipping biocompatibility testing. Any device that contacts the body requires ISO 10993 testing. This affects material choices you make during prototyping.

5. Ignoring cybersecurity. For connected or software-enabled devices, the FDA now rejects submissions without adequate cybersecurity documentation outright (Refuse to Accept policy).

6. Underestimating cost and timeline. A "simple" 510(k) can cost $30K-$500K and take 6-12 months. PMA is measured in years and tens of millions.

---

Related pages

• Manufacturing Standards & Certifications: Quality systems, biocompatibility, and how standards affect cost

• Revenue & Reimbursement: Who pays, how insurance works, and how business models shape design

• Validation (DRC): How Protoboard validates component compatibility

• BOM + Export: Exporting your bill of materials for sourcing