The tectonic shifts in technology are transforming human life in ways unfathomable just a few years ago. Health-tech and med-tech are touching our lives continuously through a number of ways – from simple wearable devices to complex invasive devices; simple AI software which can predict and sense to complex AI software which can diagnose; sensors and other hardware devices including the mobile phone with ever-increasing computing power.

Some of these have made human lives so dependable on these devices, gadgets, software. In some cases, these are dumping human intelligence. We witnessed software wherein by looking at a camera on the mobile phone. The software can predict the heart rate and many other vitals. What if human intelligence gave way in believing the reading as true? The software or the camera is not a medical device. Hence outside the purview of regulations usually applicable to medical devices. Can we ignore the risks? If so, should software be treated as a medical device?

Software as Medical Device (SaMD)

A broadly accepted definition of a SaMD is the one issued by the International Medical Devices Regulation Forum (“IMDRF”); Currently, Australia, Brazil, Canada, China, Europe, Japan, Russia, Singapore and the USA are member countries to this Forum. The FDA has adopted this definition in the US. The Medical Device Directive adopted by the EU in 2010, and in major countries such as Australia, Canada and Japan.

The term “Software as a Medical Device” is defined as software intended to be used for one or more medical purposes that perform these purposes without being part of a hardware medical device. It includes an in vitro diagnostic medical device. SaMD must be capable of running on a computer platform that is not of a medical purpose. And should not need a hardware medical device to achieve its purpose. It can be interfaced or used in a combination with other devices. But cannot be used to drive a hardware device.

The definition, Mobile Application Meeting, also consider as SaMDs. The medical purpose‟ that it must intend to serve can be diagnostic, preventive, investigative, life-sustaining, for treatment of disease or injury, disinfection, control of conception or purely informative. In some jurisdictions, aids for persons with disabilities, devices for assisted reproduction and devices incorporating animal and/or human tissues are also recognized.

A SaMD can also be a means to suggest mitigation of a disease or provide aid to diagnosis. There are further guidelines on the definition of changes to SaMDs- they can be adaptive, corrective or preventive in nature. The manufacturer of SaMD would be a natural or legal person who has the intention for the software to be used under his/its name. It would not include a distributor or the manufacturer of an accessory. The final legal responsibility lies with the manufacturer unless it specifically imposes on another party by the country’s regulatory authority.

Putting them to use

SaMDs are now available in abundance in the Indian market. Both foreign manufacturers, as well as Indian manufacturers, are introducing so many forms of SaMDs. This includes the use of artificial intelligence, IoT, general software etc. Interesting, many SaMDs are enjoying high adoption rates not only for early users but continued users. The glaring point is that there is no legislative framework or guidance policy which works as a guiding principle for the SaMD manufacturers or at least as a self-regulating piece of legislation, in India.

The Medical Devices Rules, 2017 which has come into effect from January 1, 2018. Now defined medical devices and has made a clear distinction between drugs and medical devices. But still, this definition does not include SaMDs or software as a medical device. Interestingly, the draft Medical Devices Rules, 2016 on basis of which the Medical Devices Rules, 2017 have been formalized included software in the definition of medical device. AI, IoT, general software, wearable, and wellness and customized medical devices are flooding with the market. Software as a medical device as a whole should consider with equal importance in the sector. Curiously, the definition of medical devices under Foreign Direct Investment policy includes software.

Regulations

The IMDRF has worked extensively in setting guiding principles for governing SaMD and has put in place a regulatory structure for how the SaMDs shall be governed, regulated, clinically evaluated and how the data shall be evaluated and then used by the SaMD. While India has not yet included any software or apps in its regulatory purview. Countries like U.S.A, Singapore, Australia, EU and Japan has issued guidance documents to make the app developers aware of what might subject to regulation.

The common theme that determines the classification is the level of risk that these apps pose to the consumers. For example, let’s take an app which allows a user to take ECG test by putting their fingers on an external device which is connected wirelessly to the smartphone. It checks the electrical activity of the heart. Such apps may be considered as risky and be subject to regulation since the belief is that any incorrect analysis may hamper a user’s treatment. However, the Government authorities need to strike a balance while assessing these risks so that not all apps need to be certified under the law so that innovation is not hampered.

It is indeed a very fine balance. General wellness apps or products such as apps tracking and assisting in maintaining healthy body weight. Products are generally kept out of the purview of law versus apps which tracks and assists in say monitoring blood sugar or other vitals or treats specific health issues or provides guidance for treatment of specific illnesses. The whole purpose to bring these apps under regulation is that there is a certain amount of rigour before the apps are released to the market. And there is onus and responsibility on these makers. It should enable the app developers to be mindful of how is the product advertises, claims as well.

To protect consumers, certain jurisdictions, like Singapore, have mandated the manufacturers/ app developers to put a clarification statement on their product or on their apps. This statement should clearly state that this app or product is not intended to be used in a diagnosis, monitoring, management or treatment of any disease. Keeping all the innovation in health-tech space, India should provide guidance on SaMDs. The regulatory framework in India for medical devices is by the Central Drugs Standards Organization widely known as CDSCO.

The new Medical Devices Rules, 2017 are comprehensive and now extensively covers almost 351 medical devices and about 247 in-vitro medical devices. It still does not cover SaMDs. Given the increased use of mobile technology and awareness, guidelines on SaMDs could contribute to improving the affordability and availability of healthcare, including rural India, which has a huge user base. Gradual rigour in legislation will allow India to meet increased need, according to when resources for monitoring and enforcement become more available. India already follows the IMDRF regulations with respect to clinical trials. And the clinical evaluation of medical devices, with respect to documents, licensing and safety standards.

It is important for the legislation to allow the industry to grow and achieve its potential. Especially in a country like India where there is a need for the better point of care medical solutions. But at the same time provide unambiguous guidance. A good starting point would be a self-regulating mechanism with a set of standards, methods and procedures, clinical evaluation process. Such guidance would help improve innovation as well and guide the nascent Indian SaMD industry.

(Author is a qualified lawyer who has a keen interest in how tectonic shifts in technology is impacting healthcare delivery. The intersection of law, innovation, interaction with man and machine excites him. Manas works with NovoJuris Legal deeply in AI, IOT, health-tech, med-tech, devices and more in the healthcare segment)

A new paradigm for use of machine intelligence in healthcare