FDA issued a revised final guidance on Clinical Decision Support Software on January 6, 2026, reissuing it with a minor correction on January 29, 2026, and replacing the version that had stood since September 2022. The statute hasn't moved — Section 520(o)(1)(E) of the FD&C Act, added by the 21st Century Cures Act, still excludes certain software from FDA's device definition only if it meets all four criteria. What moved is how FDA treats the hardest case under that test: software built for a decision that cannot wait.
The test itself didn't change
Section 520(o)(1)(E) still asks whether a software function meets four conditions before it can sit outside FDA's device definition: it must not acquire, process, or analyze a medical image, signal, or pattern; it must work from medical information already available — patient data, published literature, clinical practice guidelines; it must support, not replace, a healthcare professional's judgment; and it must let that professional independently review the basis for the recommendation. All four have to hold. FDA's January 2026 guidance replaces the 2022 CDS guidance, but the four statutory criteria it interprets are the same four criteria — what changed is the agency's reading of two of them.
Why the time-critical shift matters
Under the 2022 guidance, software built for a decision that couldn't wait for the clinician to independently research and weigh the recommendation was treated as presumptively failing the test — the time pressure itself was read as evidence the software was effectively making the decision. The 2026 revision drops that presumption. Time-critical use is now one input into the Criterion 4 analysis: can the healthcare professional still independently review the basis for the recommendation, even operating under time pressure, rather than simply accepting the software's output because there wasn't time to do otherwise. That is a materially different question, and it reopens non-device status for tools that would have failed outright four years ago.
- Single-recommendation software gets a second look. Where the 2022 guidance treated a tool that returns one answer as inherently suspect — there being no real choice to independently assess — the 2026 guidance allows enforcement discretion when only one option is genuinely clinically appropriate.
- Risk scoring is no longer a default disqualifier. A feature that produces a risk score can still meet the non-device criteria, provided the basis for the score remains independently reviewable.
- Imaging and signal analysis remain untouched. Criterion 1 still excludes any function that acquires, processes, or analyzes a medical image, signal, or pattern — nothing in the 2026 revision reaches this criterion.
- The scope stays limited to clinician-facing tools. The 2026 guidance addresses software directed at healthcare professionals; patient- and caregiver-facing decision support is evaluated on its own, separate terms.
A time-critical recommendation isn't automatically a device recommendation anymore. It's a recommendation FDA now expects you to prove the clinician can still independently check — even under pressure. Reading the Criterion 4 shift
- Re-run Criterion 1 first. Image, signal, or pattern analysis still fails the test outright — confirm this hasn't changed before revisiting anything else.
- Document the Criterion 4 analysis for time-critical features. Show specifically how the clinician retains independent review, not merely that the software displays its inputs.
- Re-examine single-recommendation functions. If only one option is genuinely clinically appropriate, build the clinical record that supports it.
- Update labeling and user documentation to the January 2026 text. A non-device rationale still built on the 2022 guidance is built on a superseded document.
None of this is a blanket deregulation of clinical software. FDA kept the statute's four conditions intact and kept imaging and signal analysis squarely inside device regulation. What it changed is the margin around two genuinely hard calls — time pressure and single-answer outputs — that were producing device determinations the agency now says the statute didn't actually require. Companies with a CDS feature that failed the 2022 test on time-critical grounds alone have a real reason to revisit that call under the current guidance. Companies that haven't touched their non-device file since 2022 are relying on a superseded document for a classification decision that drives their entire regulatory pathway — and if the underlying algorithm is a candidate for planned updates, that same classification increasingly intersects with how FDA reviews predetermined change control plans. If your software validation program also needs a current-guidance refresh, our FDA Computer Software Assurance work covers the production and quality-system side of the same question. Our clinical decision support practice runs the Criterion 4 analysis against the January 2026 text before you commit to a classification in writing.
Frequently asked questions
What are the four criteria for non-device CDS software?
Under Section 520(o)(1)(E) of the FD&C Act, software is excluded from the device definition only if it meets all four: it does not acquire, process, or analyze a medical image, signal, or pattern; it displays, analyzes, or prints medical information already available, such as patient data or clinical guidelines; it supports or provides recommendations to a healthcare professional; and it lets the healthcare professional independently review the basis for those recommendations rather than relying primarily on the software to make the clinical decision.
What changed in FDA's January 2026 CDS guidance?
FDA revised its interpretation of the four criteria, most notably moving time-critical decision-making out of an automatic disqualifier under Criterion 3 and into a factor considered under Criterion 4's independent-review analysis. The agency also extended enforcement discretion to some single-recommendation software and softened its treatment of risk-scoring functions. The statute and the four criteria themselves did not change.
Does the 2026 guidance change how imaging-based software is regulated?
No. Software that acquires, processes, or analyzes a medical image, signal, or pattern still fails Criterion 1 and remains outside the non-device exclusion regardless of the other criteria. The 2026 revisions address the independent-review and time-critical analysis under Criteria 3 and 4; they do not reopen Criterion 1.
Sources & further reading
- FDA. Clinical Decision Support Software — Guidance for Industry and Food and Drug Administration Staff. fda.gov
- 21st Century Cures Act, Pub. L. No. 114-255, § 3060(a) (amending 21 U.S.C. § 360j(o)). congress.gov
This article is provided for general informational purposes and reflects the regulatory landscape as of November 2026. It is not legal or regulatory advice. Confirm FDA's current Clinical Decision Support Software guidance with FDA or qualified counsel before relying on the description above.