Medical Devices & Consumer Health Products 2021

Last Updated August 31, 2021


Law and Practice


Arnold & Porter has 200 attorneys dedicated to serving its multinational life sciences clients across the firm's US and international offices. It provides globally integrated counselling to pharmaceutical, biotechnology, medical products and diagnostic companies, clinical laboratories, emerging growth and venture-backed companies, investors, non-profit institutions and universities around the world. Arnold & Porter currently has 94 attorneys who have held senior positions in US and European government and international organisations and over 100 attorneys with scientific degrees. Its team also includes healthcare professionals and public policy specialists. The firm's offerings in these fields cover regulatory matters, internal investigations, civil and criminal government investigations, domestic and global compliance programmes, patent procurement, structuring and fundraising, corporate transactions, mergers and acquisitions, tax and securities offerings, licensing and other partnering transactions, patent and commercial litigation, antitrust, product liability and government contracting.

The Federal Food, Drug, and Cosmetic Act (FDCA) and the Public Health Service Act (PHSA) are the two key statutes governing the development, manufacturing, distribution, registration, licensing, clearance and approval of such products in the USA. The U.S. Food and Drug Administration (FDA) is the federal administrative agency with primary authority for ensuring such products are safe and effective for their intended uses by enforcing the FDCA. The FDA issues regulations and guidance documents further detailing and interpreting requirements of the FDCA. The relevant regulations are located in Title 21 of the U.S. Code of Federal Regulations. 

The Federal Trade Commission (FTC) is the primary federal agency responsible for policing unfair, deceptive and anticompetitive advertising, and other business practices, including in the medical products industry. Through a Memorandum of Understanding, and as discussed further, the FDA and FTC share jurisdiction over the regulation of medical devices and certain other medical products. The FTC’s primary statutory authority is the U.S. Federal Trade Commission Act, which, among other things, prohibits unfair or deceptive advertising. Numerous states have implemented their own similar consumer protection/unfair or deceptive advertising statutes. Moreover, many states have laws regulating the manufacturing and distribution of prescription medical devices and the storage and distribution of human tissue products.

The FDA regulates products as medical devices based on their “intended use(s)”. A product’s intended use refers to “the objective intent of the persons legally responsible for the labeling of devices”; see 21 C.F.R. § 801.4. Such objective intent can be shown by, among other things:

  • labelling claims;
  • advertisements;
  • oral or written statements by a manufacturer or its representatives; and
  • circumstances surrounding a product’s distribution.

The FDCA defines a “device” to mean, in relevant part, an “instrument, apparatus, implement, machine, contrivance, implant in vitro reagent or other similar or related article, including any component, part, or accessory [that is] (1) intended for use in the diagnosis of disease or other conditions, or in the cure, mitigation, treatment, or prevention of disease, in man or other animals, or (2) intended to affect the structure or any function of the body of man or other animals, and which does not achieve its primary intended purposes through chemical action within or on the body of man or other animals and which is not dependent upon being metabolized for the achievement of its primary intended purposes”; see 21 U.S.C. § 321(h). 

Where a product falls within the scope of this statutory definition, the FDA may regulate such product as a medical device under the FDCA. In certain instances, the FDA has authority to exert “enforcement discretion” – that is, authority to not enforce some or all FDCA requirements against manufacturers of products which meet the definition of a medical device but which the FDA believes pose a low risk of harm to patients, either because of regulation through a parallel or complementary regulatory regime (such as in the case of certain in vitro diagnostic tests) or due to the inherent properties of the product (such as clinical decision support software which uses transparent, easy-to-understand inputs and outputs to assist a physician to track a patient’s disease symptoms).

The FDA applies a risk-based classification to its regulation of medical devices. This means that a particular device’s classification dictates the requirements applicable to its development, manufacture and commercialisation. The FDA places devices into three classes based on their risk. 

Class I devices present the lowest level of risk and are those for which general controls (ie, basic FDA device authorities) are sufficient to provide reasonable assurance of such devices’ safety and effectiveness. 

Class II devices present a medium level of risk and are those for which general controls alone are not sufficient to provide reasonable assurance of such devices’ safety and effectiveness, and for which there is sufficient information to establish special controls (ie, additional FDA device authorities, including performance standards) to provide such assurance. 

Class III devices present the highest level of risk and are those that support or sustain human life, are of substantial importance in preventing impairment of human health, or which present a potential, unreasonable risk of illness or injury. 

The FDA also regulates cosmetics and food, including dietary supplements, under the FDCA. Although these products generally do not require pre-market approval or clearance, except for certain additives, they must comply with applicable labelling and promotional requirements and must not be manufactured in a manner that renders them adulterated (eg, contaminated). Such products must also be safe for human use. The U.S. Environmental Protection Agency (EPA) generally regulates biocides under the Federal Insecticide, Fungicide, and Rodenticide Act (FIFRA), which requires, among other things, the registration of biocides and their manufacturing facilities. Depending on their intended use, however, biocides may also fall under FDA jurisdiction in certain instances.

Certain digital health technologies, such as medical apps, telemedicine platforms, and wearables, may be subject to regulation under the FDCA if they meet the definition of a medical device as discussed in 1.1 Medical Devices. As a result of the passage of the 21st Century Cures Act in December 2016, the FDCA statutorily excludes software functions from the medical device definition, under 21 U.S.C. § 360j(o), that are intended:

  • for administrative support of a healthcare facility;
  • for maintaining or encouraging a healthy lifestyle and are unrelated to the diagnosis, cure, mitigation, prevention or treatment of a disease or condition;
  • to serve as electronic patient records provided certain conditions are met;
  • for transferring, storing, converting formats or displaying clinical laboratory test or other device data and results; or
  • to serve as clinical decision support unless the function is intended to acquire, process, or analyse a medical image or a signal from an in vitro diagnostic device or a pattern or signal from a signal acquisition system and provided certain conditions are met.

In addition, the FDA is currently exercising enforcement discretion for certain software functions that may constitute medical devices as defined by the FDCA but are deemed by the FDA to be low risk. Specifically, the FDA is exercising enforcement discretion for software functions that help patients self-manage a disease or condition without providing specific treatment recommendations or treatment and software functions that automate simple tasks for healthcare providers. Manufacturers of these products are encouraged to seek guidance from the FDA through various administrative meeting and feedback mechanisms, such as the “pre-submission” meeting process and “request for classification” process.

As a consequence of the broad definition of “medical device”, many types of products fall within FDA jurisdiction. As noted, in some cases, the FDA has elected to exercise enforcement discretion. In others, fulfilment of FDA requirements, such as those governing manufacturing quality standards, may make reference to other regulatory or quasi-regulatory regimes. For example, while respirator particulate filtration claims are subject to the National Institute for Occupational Safety and Health and other non-FDA standards, these products are considered medical devices when marketed for a medical purpose, such as mitigation of airborne pathogens, and must go through the same registration, clearance, or approval pathway as other devices.

Domestic and foreign establishments engaged in the manufacture, preparation, propagation, compounding, assembly and/or processing of a medical device must register with the FDA and list such device with the FDA. The FDA has jurisdiction over any establishment that is engaged in these activities for a medical device intended for the US market regardless of its location in the world. Examples of such establishments include:

  • specification developers;
  • contract manufacturers and sterilisers;
  • repackagers and relabellers; and
  • initial importers of medical devices into the USA.

Generally, establishments must register and list their devices with the FDA no later than 30 days after engaging in any of the above activities. However, foreign establishments must register and list their devices prior to exporting such devices to the USA. Similarly, domestic importers must register with the FDA prior to importing devices. These initial importers must have a physical address in the USA and are responsible for ensuring that imported devices comply with FDA requirements. In addition, foreign establishments must designate, and submit to the FDA the information of a US agent that resides or maintains a place of business in the USA. 

Typically, the initial importer is also the importer of record from a US customs perspective and is generally the party responsible for ensuring that medical devices or device components imported into the USA are properly labelled and meet relevant customs requirements. The FDA has joint review authority with U.S. Immigrations and Customs Enforcement (ICE) to review and inspect shipments of suspected medical devices or device components intended for distribution within the USA.

Establishments must re-submit their registration and listing information on an annual basis between 1 October and 31 December. Establishments may also update such information at any time. Certain changes, however, must be updated no later than 30 days after their occurrence, such as changes to the establishment’s name, mailing address and trade name. The failure to comply with these registration and listing requirements result in a device being misbranded.

Unless specifically exempt based on the specific product classification regulation or an FDA enforcement discretion policy, manufacturers of devices must comply with current good manufacturing practice (cGMP) requirements, known as the quality system regulation (QSR). The QSR sets forth cGMP requirements for devices which govern “the methods used in, and the facilities and controls used for, the design, manufacture, packaging, labeling, storage, installation, and servicing of all finished devices”; see 21 C.F.R. § 820.1(a).

The QSR applies to manufacturers of devices, meaning those that engage in the design, manufacture, fabrication, assembly or processing of a finished device. Although the QSR is broad in scope, a manufacturer only needs to comply with the provisions of the QSR that apply to its particular operations. In addition, a regulated firm may delegate certain aspects of QSR compliance to another party by written agreement; however, it remains responsible for its share of any regulated activity. The manufacture of a device in violation of the QSR renders it adulterated. In addition to complying with the QSR, manufacturers may also employ FDA-recognised consensus standards relating to, among other things, the performance, safety and other characteristics of a device, which can facilitate the pre-market review process discussed in 2.4 Marketing and Sales.

A fundamental QSR requirement is that a manufacturer maintains a quality management system (QMS) appropriate for the devices it manufactures and that it complies with the QSR. Management must be involved in the oversight and review of the QMS and establish and implement an overarching quality policy. In addition, a manufacturer must have an appropriate quality organisation with sufficient resources. The head of a manufacturer’s quality department must also have sufficient authority, and support from management to run an effective QMS free from undue commercial influence. Manufacturers must also establish procedures for, and routinely conduct, quality audits and take appropriate corrective action. The QSR requires manufacturers to have sufficient quality personnel with the necessary education, background, training and experience, and to implement procedures for, and conduct, training. 

The QSR also requires manufacturers to establish and maintain procedures to control the design of the device to ensure that specified design requirements are met. This particular QSR provision has been used by the FDA to address the emerging role of software in devices. Manufacturers must also establish and maintain procedures to control all quality documents, to ensure that all purchased or otherwise received products and services conform to specified requirements, and to identify products during all stages of receipt, production, distribution and installation. Manufacturers must develop, conduct, control and monitor production processes to ensure that a device conforms to its specifications and establish and maintain process control procedures. 

Each manufacturer must also ensure that all inspection, measuring and test equipment is suitable for its intended purposes and capable of producing valid results. The QSR also requires manufacturers to establish and maintain procedures to ensure that equipment is routinely calibrated, inspected, checked and maintained, and implement and follow procedures for acceptance activities. Procedures must also be implemented for control of non-conforming product, implementing corrective and preventive actions, control of labelling activities, and the handling and storage of product.

The QSR also imposes various record-keeping requirements on manufacturers. Records must be obtained at the manufacturing establishment or another location that is reasonably accessible to the manufacturer’s responsible officials and FDA inspection personnel. Manufacturers must also maintain device master records for each device, as well as device history records for each batch/lot/unit of devices manufactured. The QSR also requires manufacturers to maintain a quality system record and complaint files. Manufacturers must establish and maintain procedures for receiving, reviewing and evaluating complaints by a formally-designated unit. Finally, establishment of a corrective and preventative action planning process is an essential part of a QMS.

The FDA does not directly regulate corporate social responsibility, the environment or sustainability throughout the product life cycle, although rarely an environmental assessment can be required in certain regulatory scenarios. However, the EPA at the federal level and state and local agencies govern the disposal of certain medical waste and manufacturing facilities. Such requirements may include obtaining appropriate licences and permits and conducting testing. 

Device manufacturers are responsible for ensuring that a device’s label and labelling comply with the FDCA and are otherwise consistent with its 510(k) clearance or pre-market approval, each of which are discussed in 2.4 Marketing and Sales. A device’s label is any written, printed or graphic matter displayed upon its immediate container; whereas, a device’s labelling broadly refers to any labels and other written, printed or graphic matter on the device or any of its containers or that otherwise accompany the device. Labelling is broadly construed to include any material that has a textual relationship to a device, including user manuals, instructions for use, sales brochures and information on product websites.

The FDA has promulgated specific requirements for device labels and labelling. For example, a device’s label must specify the name and address of the manufacturer, packer or distributor and contain a unique device identifier. In addition, a device’s labelling must be adequate for its intended use, provide adequate directions for use, and cannot be false or misleading in any particular. Product labelling claims must generally be substantiated by the same level of evidence required for FDA clearance or approval of those claims. For Class I and II devices, the FDA and FTC essentially share the same standard of evidence for claim substantiation, although the FDA has more detailed guidance and requirements for the kinds of clinical and non-clinical data that a manufacturer must collect and submit to support clearance/approval and subsequent promotional labelling claims. 

In 2018, the FDA issued guidance clarifying that manufacturers may make claims in labelling or advertising which is consistent with their cleared or approved labelling and scope of authorised intended uses so long as those claims are substantiated, do not raise new or significant safety issues, and do not represent a material departure from the scope of approval, as detailed in the guidance.

The FDA has long recognised that certain types of communications will not, as a matter of FDA enforcement policy, be used as evidence of a product’s intended use or subject to promotional requirements. Generally, to fall within this category of communications, known as “scientific exchange”, a communication must be objective and medical/scientific in nature, delivered in a non-promotional setting/context, and delivered by non-promotional personnel (eg, medical affairs). Examples of such communications include medical/scientific peer-reviewed publications, presentations of clinical data at scientific conferences, responses to unsolicited requests for medical information, certain information regarding unapproved/uncleared products or uses provided to payors, and institutional review board (IRB)-approved clinical trial recruitment materials.

As noted in 1.1 Medical Devices, while the FDA has primary jurisdiction over and sets the standards for device labels and labelling, the FTC has primary jurisdiction over advertising. As a threshold matter, any advertising or promotional claims of a device must be consistent with its labelling and 510(k) clearance or pre-market approval and be truthful and non-misleading, including disclosing material limitations and risks and being substantiated by the appropriate level of scientific evidence. Specific FTC regulations and guidance govern the evidence required to substantiate device performance claims, safety and efficacy claims, and endorsements or testimonials given by product users or prescribers. The FTC requires medical product safety or efficacy claims to be substantiated by competent and reliable scientific evidence.

The FTC, as well as state attorneys general and, in certain instances, competitors or consumers, all have standing to bring suit against a medical device company that engages in false, deceptive, disparaging or misleading advertising practices. Even where promotional claims are consistent with a broad/general indication, however, claims should not detail a more specific indication that may, among other things, presume a specific clinical outcome or provide a new type of diagnostic information that significantly impacts patient management. Failure to comply with advertising requirements renders a device misbranded and is a common area of enforcement and scrutiny by the FDA, the FTC, other federal and state agencies, competitors and other private litigants. Consequently, US regulatory and enforcement authorities expect companies responsible for product labelling and promotion to review product claims (such as advertising materials, sales representative field materials, and websites) for consistency with applicable FDA and FTC requirements prior to use.

Generally, Class I devices do not require a pre-market clearance or approval unless otherwise specified in the applicable classification regulation. Class II devices generally require pre-market clearance through the submission of a 510(k) pre-market notification upon a determination of “substantial equivalence” to a legally marketed predicate device. If an appropriate predicate does not exist, a device would be considered a Class III device (requiring a pre-market approval), unless down-classified to Class II or Class I via a de novo submission. The de novo process is a risk-based classification process in which the FDA will make a risk-based evaluation as to whether the device can be classified into Class I or Class II. Class III devices require a pre-market approval (PMA) prior to commercial distribution. The PMA process, which often requires demonstration of safety and efficacy for the proposed intended use, is a more rigorous and lengthy process than pre-market clearance and generally requires the sponsor to conduct clinical trials.

Manufacturers must submit a 510(k) to the FDA at least 90 days prior to the initial marketing of a device, making a change or modification to a cleared device that could significantly affect the safety or efficacy of the device, or making a major change or modification to the intended use of a previously cleared device. A 510(k) is a pre-market notification intended to demonstrate that the device, or change or modification, is substantially equivalent to a predicate device (ie, a device that that is already legally marketed because it was on the market prior to 28 May 1976 and does not require a PMA, or because it was found to be substantially equivalent to another device, or because it was reclassified by the FDA from Class III to II). 

A device is considered substantially equivalent to a predicate device if: (i) it has the same intended use and technological characteristics as the predicate; or (ii) it has the same intended use as the predicate but different technological characteristics that do not raise different questions of safety and effectiveness, and the information submitted to the FDA demonstrates that the device is as safe and effective as the predicate device. If the FDA finds that the 510(k) demonstrates that the device, or change or modification, is substantially equivalent to the predicate device, it will “clear” the device for marketing. The FDA will notify the 510(k) applicant within 15 calendar days of receiving the submission whether the 510(k) was accepted for substantive review. The FDA’s goal is to reach a decision on the 510(k) within 90 calendar days of receiving the submission.

PMA approval, on the other hand, is based on a determination by the FDA that the PMA contains sufficient and accurate scientific evidence demonstrating a reasonable assurance that the device is safe and effective for its intended use(s). This applies to initial product approval as well as subsequent new intended uses and certain changes or modifications. The FDA’s goal is to reach a decision on a PMA within 180 days after receipt of a PMA that it accepts for filing and to which the sponsor does not submit a major amendment. PMAs must include, among other information, clinical and non-clinical data, and often require sponsors to conduct their own clinical studies. 

Before conducting clinical studies in support of a PMA, the sponsor must comply with the investigational device exemption (IDE) standards at 21 C.F.R. Part 812, which govern clinical and non-clinical data collection. An IDE allows the investigational device to be used in a clinical study in order to collect necessary data, including on the device’s safety and effectiveness, so long as certain regulatory standards, including protections for the health, safety and welfare of clinical trial subjects are met. The IDE regulations apply to all clinical evaluations of investigational devices, unless exempt; however, submissions to the FDA are only required for significant risk studies. An IDE will go into effect 30 days after the FDA’s receipt of the application unless the FDA notifies the sponsor that the investigation cannot begin. 

A variety of factors over the past several decades have contributed to device manufacturers moving their physical manufacturing operations abroad, although the USA market remains a key commercial focus. Such factors include:

  • changes to the US tax code that no longer advantaged domestic manufacturing;
  • lowering production costs;
  • increasing productivity;
  • reducing environmental-related liabilities;
  • finding suitable locations for large-scale manufacturing facilities; and
  • growth of ex-US markets.

Even where products are produced oversees, they must meet applicable FDA requirements in order to enter, and remain on, the US market.

The FDA actively co-ordinates with foreign regulatory authorities, especially as part of international harmonisation efforts. In particular, the FDA frequently collaborates with the EU's European Medicines Agency, the UK's Medicines and Healthcare products Regulatory Agency (MHRA), and Japan’s Ministry of Health, Labour and Welfare (MHLW) and Pharmaceuticals and Medical Devices Agency (PMDA) to help establish international harmonised standards. 

The FDA also participates in the Medical Device Single Audit Program (MDSAP), which permits an MDSAP-recognised auditing organisation to conduct a single regulatory audit of a medical device manufacturer that satisfies the requirements of MDSAP-participating regulatory authorities. The FDA accepts MDSAP audit reports in lieu of routine surveillance inspections. In addition to the FDA, MDSAP members are currently:

  • Therapeutic Goods Administration of Australia;
  • Brazil’s Agência Nacional de Vigilância Sanitária;
  • Health Canada; and
  • Japan’s MHLW and PMDA.

Device manufacturers must comply with requirements governing field corrective actions and safety reporting. Due to public health implications, these requirements are generally subject to increased FDA scrutiny. Failures to timely recall or correct defective products, and to notify the FDA of the same, are often the focus of product liability plaintiffs who seek to establish knowledge of a safety issue and the failure to meet a duty of care by the manufacturer. Such failures may also lead to the FDA conducting a “for cause” inspection.

Device manufacturers (ie, persons or entities that manufacture, prepare, propagate, compound, assemble or process a device) must comply with the FDA requirements regarding medical device reports (MDRs) and reporting certain corrections and removals of medical devices. Under MDR requirements, a device manufacturer must submit reports of individual adverse events to the FDA within 30 calendar days of becoming aware of a reportable death, serious injury or malfunction. Manufacturers must also submit reports of individual adverse events to the FDA within five working days after becoming aware of a reportable event that requires remedial action to prevent an unreasonable risk of substantial harm or for which the FDA has made a written request. Reportable events are generally those that reasonably suggest a device may have caused or contributed to a death or serious injury or involve malfunctions that would likely cause or contribute to a death or serious injury. 

In addition to these reporting requirements, manufacturers must develop and implement written MDR policies and procedures regarding, among other things, the identification, communication and evaluation of events. Manufacturers must also abide by documentation and record-keeping requirements for MDRs.

Manufacturers must also submit reports to the FDA regarding any correction or removal of a device that it initiates to reduce a risk to health posed by the device or to remedy a violation of the FDCA caused by the device and which may present a risk to health. Manufacturers must submit such reports to the FDA no later than ten working days from initiating the correction or removal. A correction is any repair, modification, adjustment, relabelling, destruction or inspection of a device without its physical removal from its point of use. A removal is the physical removal of a device from its point of use to another location for correction. Even where a correction or removal is not reported to the FDA, a manufacturer must maintain records of such correction or removal.

Device manufacturers maintain primary responsibility for the initiation and conduct of product recalls, market withdrawals and stock recoveries. A recall is where a manufacturer corrects or removes a marketed product that the FDA considers to be in violation of the FDCA and against which the agency would initiate legal action, but does not include a market withdrawal or a stock recovery. A market withdrawal is a manufacturer’s removal or correction of a distributed product that involves a minor violation that would not be subject to legal action by the FDA or that involves no violation; a stock recovery is a manufacturer’s removal or correction of a product that has not been marketed or that has not left the direct control of the firm (ie, the product remains on premises owned by, or under the control of, the manufacturer and has not been released for sale or use). 

Manufacturers may voluntarily initiate recalls of products that violate the FDCA and must notify the FDA accordingly. The FDA will evaluate the health hazard presented by a recalled product by considering, among other things, any harm that may have already occurred, the likelihood of further harm and the seriousness of such harm. Based on this evaluation, the FDA will categorise the recall as:

  • Class I – there is a reasonable probability that the use of, or exposure to, a violative device will cause serious adverse health consequences or death;
  • Class II – use of, or exposure to, a violative device may cause temporary or medically reversible adverse health consequences or the probability of serious adverse health consequences is remote; or
  • Class III – use of, or exposure to, a violative device is not likely to cause adverse health consequences. 

Manufacturers must take several actions in connection with a recall, including notifying its direct accounts and other users of the recall, ceasing further distribution of the product, conducting effectiveness checks, preparing status reports and arranging for appropriate disposition of the recalled products. The failure to timely conduct a recall or to notify the FDA can result in violations of the FDCA, including criminal violations if the issue caused a significant risk of patient harm. In addition, recalls often precipitate consumer litigation and requests for refunds.

See 1.1 Medical Devices.

The FDA oversees manufacturers’ compliance with the FDCA medical device requirements in a variety of ways, including routine or for-cause inspections, which are often the product of complaints by customers, competitors or other regulators, reviews or inspections of regulated materials entering the US ports of entry, surveillance of manufacturer websites or presentations at industry conferences, reviews of manufacturer regulatory submissions, and reviews of information received from other agencies such as requests for technical review assistance by the U.S. Securities and Exchange Commission of securities filings describing regulated products. 

The FDA may conduct routine or “for cause” inspections. For routine inspections, the FDA will inspect device establishments using a risk-based inspection schedule. The FDA will consider, among other things, the establishment’s compliance history, its history of recalls, and the inherent risk of the devices it manufactures. The FDA will generally conduct a for cause inspection following the emergence of a safety signal, complaints by product users, patients, customers or competitors, or field corrective actions, such as recalls. In either case, device establishments must co-operate and comply with such inspections or else they risk the FDA deeming its devices adulterated. Depending on the outcome of the inspection, the establishment may receive an FDA Form 483, detailing inspectional observations. The establishment will need to promptly respond to, and remediate, such observations or risk further agency action.

Where the FDA believes it has identified evidence of a violation of the FDCA, the agency may take a variety of advisory and administrative actions on its own, such as sending the violative firm an Untitled Letter or Warning Letter and requesting corrective action, issuing an import alert, authorising administrative hold or detention of violative product, or working with the Department of Justice (DOJ) to sue to seize product or enjoin certain violative activity. The FDA is generally afforded wide enforcement discretion in determining whether to initiate such actions and which actions to utilise. 

Untitled Letters and Warning Letters are usually made public and are followed closely by other regulatory enforcement agencies as well as the plaintiffs’ bar; thus even a resolved Untitled Letter or Warning Letter can result in collateral legal and reputational consequences. In addition to inspectors, the FDA employs criminal investigators through the FDA Office of Criminal Investigations (OCI). The FDA OCI is an expert investigative branch that is authorised to collect and evaluate evidence to determine whether an individual or company may have committed a serious violation of the FDCA. As the FDCA authorises criminal penalties for companies and individuals, the FDA has the authority to refer cases to the DOJ for further investigation and prosecution.

In general, enforcement under the FDCA in the device space tends to involve the following.

  • Distribution or sale of a medical device without appropriate clearance, approval, or IDE on file (“pre-approval promotion”); this is a violation of the misbranding and adulteration provisions of the FDCA.
  • Promotion of a medical device for an intended use other than the one for which it has been cleared or approved, such as promotion of a device with a broad intended use for a specific disease or organ type (“off-label promotion”). Although the FDA’s authority to police truthful, non-misleading statements about off-label efficacy or safety have increasingly been limited by US courts, the agency continues to use evidence of off-label promotion to support enforcement, particularly where there is evidence of patient harm.
  • Manufacturing or distribution of a medical device or device component that is not in compliance with the QSR or special controls related to product manufacturing or safety. Such an act is a violation of the adulteration provisions of the FDCA. In addition to failing to comply with the QSR, the FDA may deem devices adulterated for a number of other reasons – for example, failing to produce the product in sanitary conditions or within the specifications required for the device to perform safely and effectively for the uses intended. Others relate to technical but important prohibitions under the FDCA, such as improper refusal of the FDA to inspect a manufacturing facility or changing or altering the physical device packaging without authorisation.
  • Failure to timely file accurate required reports, such as MDR reporting, field actions (such as recalls), or other required reports. Failure to file is a separate violation of the FDCA, although such a failure can also be used as evidence of adulteration. False or misleading filings can also give rise to separate violations of US law, including liability for the individual making the false report.

Committing or causing prohibited acts (ie, violations) under the FDCA are subject to criminal penalties. Criminal penalties are periodically adjusted for inflation and other factors under the Criminal Fines Enforcement Act. As a general matter, such violations are misdemeanours punishable by imprisonment of up to one year and/or a fine of up to USD100,000 per offence for individuals and USD200,000 per offence for corporations. However, subsequent violations, and violations committed with the intent to defraud or mislead, are felonies punishable by imprisonment of up to three years and/or a fine of up to USD250,000 per offence for individuals and USD500,000 per offence for corporations. Generally, the FDA will afford potential violators an opportunity to take appropriate and prompt corrective actions before initiating a criminal prosecution unless the offence presents a danger to health or constitutes an intentional, gross or flagrant violation. 

For certain violations of the FDCA, the FDA may seek to impose civil monetary penalties (CMPs). Subject to certain exceptions, the FDA may impose CMPs against any person who violates a requirement of the FDCA relating to devices; these have most often been used in instances where an executive or their company has failed to file required post-marketing device reports. CMPs cannot exceed USD28,914 per violation and USD1,927,676 for all such violations adjudicated in a single proceeding. These CMP amounts are adjusted annually. The FDA will first issue a complaint to the manufacturer against which it is considering issuing CMPs, and the manufacturer can request a hearing on the matter. Additional procedural requirements also apply.

The USA does not have a comprehensive federal statutory or regulatory regime governing product liability. Rather, each state has its own product liability laws and doctrines derived from statutes or case law. As a result, the precise legal theories available to any given plaintiff depend on which state’s law applies. 

In product liability cases, courts typically apply the law of the home state of the plaintiff. Although specifics may differ among the states, the broad principles that govern product liability are generally similar across the USA. It is also important to note that the scope of liability depends significantly on the state in which the litigation proceeds. This is not just the result of different laws, but because the jury pools’ and judges’ approaches towards product liability litigation differs widely among the states. Frequently, plaintiffs’ attorneys seek to bring product liability cases in jurisdictions that have gained reputations for plaintiff-favourable verdicts and/or judges. As a result of this state-by-state variation, a common key dispute in product liability cases is determining the proper location for the litigation to proceed. 

There are several common theories of liability that plaintiffs pursue in medical device litigation across the USA. However, because of the existing FDA regulatory framework governing medical devices, plaintiffs must first overcome the issue of pre-emption, which precludes state product liability suits. The level of protection afforded by pre-emption depends heavily on whether the product is a PMA device or a 510(k) device. 

Devices approved under a PMA enjoy robust, though not absolute, protection from product liability suits. Generally, state law claims for negligence, strict liability and implied warranty against the manufacturer of a PMA device are pre-empted except where violations of FDA requirements are alleged. 510(k)-cleared devices enjoy much less protection. However, the U.S. Supreme Court has rejected the broad application of pre-emption to 510(k)-cleared devices because the clearance process instead depends on substantial equivalence vis-à-vis a predicate device and is not a full safety and effectiveness review.

The most common theory of medical device product liability in the USA is “strict liability”. Under that theory, one who designs, manufactures or sells a product in a defective condition that caused the product to be unreasonably dangerous to the user or his or her property may be subject to liability for physical harm caused to the user without regard to whether the manufacturer was at fault or engaged in culpable wrongdoing. As a result, a defendant may be held liable under a strict liability theory even if it exercised all possible care in the preparation and sale of the product. 

There are three sub-theories of strict liability, as detailed below.

  • Design defect: most courts impose liability for design defect if the product could feasibly have been designed in a safer manner. A minority of courts ask instead whether a product is considered defective when it is dangerous to an extent not expected by the ordinary consumer who purchases it. 
  • Failure to warn: to hold a manufacturer liable for failing to warn of certain risks, the plaintiff must establish that the foreseeable risks of harm could have been avoided by providing reasonable instructions or warnings, and the failure to provide those instructions or warnings makes the product unreasonably dangerous. The adequacy of a product’s label or instructions for use is the typical focus of this claim.   
  • Manufacturing defect: to hold a manufacturer liable for a manufacturing defect, the plaintiff must establish that due to a problem in the manufacturing process, the particular product used by the plaintiff was unsafe because it differed from the manufacturer’s intended design. 

Under the theory of negligence, the plaintiff must establish that a manufacturer failed to exercise reasonable care in manufacturing, labelling or designing the product. Many jurisdictions impose both strict and negligence-based liability for harm caused by products based on manufacturing defects, design defects and warning defects. Commonly, plaintiffs will assert both strict liability and negligence theories together in the same case.

Most states recognise various causes of action against manufacturers on the basis that they misled consumers about the safety of their products. “Common-law fraud” generally requires the plaintiff to prove that a misrepresentation was made with knowledge of its falsity with an intent to defraud, that the plaintiff justifiably relied on that misrepresentation, and that the plaintiff suffered damage as a result. 

“Negligent misrepresentation” is similar but requires only that the defendant should have known of the falsity rather than having actual knowledge of such falsity. As referenced in 1.1 Medical Devices, many states have enacted consumer protection statutes under which plaintiffs may bring consumer fraud actions. Such statutes generally prohibit false advertising and/or deceptive acts or practices and include special remedies such as multiple damages or recovery of attorneys’ fees. 

Most states also provide a cause of action against manufacturers for breach of express warranty where the manufacturer has made a representation about the product’s performance or safety that is alleged to be untrue. Plaintiffs often bring express warranty claims along with one of more of the fraud-based theories discussed above. 

“Implied warranty” is also a viable theory of liability in many jurisdictions. To hold a manufacturer liable for breach of implied warranty, the plaintiff must establish that the product is not fit for the ordinary purposes for which such a product is used. Many courts have held that the implied warranty theory of liability is duplicative of, or identical to, strict liability. 

In addition to seeking the costs of past or expected future medical treatment, plaintiffs who claim injury from medical devices will often seek large damage awards for non-economic or punitive damages. Non-economic damages include, for example, compensation for pain and suffering. Punitive damages may be awarded to deter and punish wrongdoing. In order to obtain punitive damages, plaintiffs typically need to prove that a company acted with “malice” or similar showing of heightened culpability. In some jurisdictions, there are statutory limits on the size of punitive damages awards; in other states, larger awards may be allowed.

Generally, defendants in product liability cases maintain insurance policies that cover, among other things, product liability settlements and judgments, recalls, regulatory penalties and attorneys’ fees. In addition, jurisdictions may limit a plaintiff’s recovery to the amounts that their own insurance (eg, medical insurance) does not cover. Depending on the jurisdiction and circumstances of a particular case, a party may also be able to recover court costs and attorneys’ fees if they prevail.

In the USA, competitors in the medical device space may bring actions against each other in a judicial or private forum. For example, the Lanham Act allows a device manufacturer to bring a civil lawsuit against a competitor that is alleged to have misrepresented their own, or the manufacturer’s product, in advertising or promotion. Similarly, such manufacturer can bring a complaint before the National Advertising Division of the Better Business Bureau (NAD). Although the NAD process is voluntary, NAD may refer cases to the FTC where a defendant refuses to participate. 

The greatest product liability exposure to companies involved in manufacturing medical devices is “mass tort” litigation. Mass torts are litigations that include large numbers of plaintiffs, sometimes many thousands, filed in various jurisdictions across the country. Typically, these cases are filed by many different plaintiffs’ law firms who widely advertise and recruit for clients on television or the internet, and are paid a percentage of clients’ recovery. In addition to personal injury claims, mass torts may also involve claims brought by governmental entities (state attorneys general), whistleblowers and/or third-party payors seeking to recover statutory penalties or damages.   

Often, mass tort litigations will result in the formation of Multidistrict Litigations (MDLs), which are co-ordinated litigations assigned to a single federal judge for pre-trial management. Some MDL judges will order test trials, called “bellwether trials”, intended to facilitate settlement by providing each side an opportunity to assess the risk of trial. Defendants have sometimes been successful in defeating mass tort litigations on the basis of strong legal or medical causation defences or driving down the settlement cost by winning multiple bellwether trials. Most frequently, however, given the significant litigation costs and risk in defending against large numbers of claims, mass torts result in significant settlements.   

While one cannot predict in advance what cases will develop into mass torts, mass torts often share certain typical features. Typically, mass tort litigation ensues when the FDA orders a recall of a device or takes other significant action relating to a serious safety concern. Plaintiffs’ lawyers will take advantage of the regulatory action, recruit plaintiffs through advertising and then file suits.

In addition, mass tort actions have most frequently arisen in the medical device context where devices are intended to be implanted in the body for a prolonged period of time, but have design defects that render them prone to latent damage or deterioration. In these cases, because the safety issue is not immediately evident and only becomes obvious after many individuals have the device implanted, there are frequently large number of plaintiffs available for recruitment. While there are exceptions, devices used in connection with surgical or diagnostic procedures have been less frequent targets of mass tort litigation.

The Federal Rules of Civil Procedure govern class actions in federal courts while states may have their own roles and procedures for such actions. Under federal rules, a class action may only be brought where:

  • the class is so numerous that a joinder of all members is impracticable;
  • there are questions of law or fact common to the class;
  • the claims or defences of the representatives must be typical of the claims or defences of the class; and
  • the representative parties must fairly and adequately protect the interest of the class.

In addition, in order to maintain a class action, it must be shown that:

  • prosecution of separate actions could create of a risk of inconsistent or varying adjudications that would establish incompatible standards of conduct or a risk of adjudications with respect to individual class members that, as a practical matter, would be dispositive of the interests of the other members or would substantially impair or impede their ability to protect their interests;
  • the party opposing the class has acted or refused to act on grounds generally applicable to the class, so that final injunctive or declaratory relief is appropriate as to the class as a whole; or
  • the court finds that questions of law or fact common to class predominate over any questions affecting only individual members, and that a class action is superior to other available methods for fairly and efficiently adjudicating the controversy.

Generally, alternative dispute resolution (ADR) mechanisms are pursued following agreement between the parties to a dispute. Courts may also prompt or order parties to a lawsuit to participate in settlement conferences or meetings where they can attempt to resolve the dispute prior to going to trial.

Although the FDCA does not provide private litigants with a cause of action, violations of FDCA requirements may be used as evidence in product liability or other litigation to establish a standard of care or other baseline requirements, as referenced in 4.6 Mass Tort Litigation. Courts may differ as to the application of such violations to a particular case. Several states have enacted their own versions of the FDCA, which mirror the FDCA’s requirements and could be enforced by private litigants depending on the particular statute.

The FDA is in the process of harmonising the QSR with ISO 13485:2016. This ISO standard is an international consensus standard used by various regulatory authorities. Although the QSR already bears many similarities to this standard, many hope that this will help harmonise requirements and facilitate FDA compliance, if and when implemented.

As a result of the COVID-19 pandemic, there have been executive and legislative efforts, both proposed and implemented, to encourage the onshoring of the manufacture of medicinal products, including certain medical devices. For example, the Coronavirus Aid, Relief, and Economic Security Act, which was signed into law on 27 March 2020, amended the FDCA to provide the FDA with authority to prevent or mitigate medical device shortages before or during a public health emergency. Among other things, manufacturers of certain medical devices deemed critical to public health must notify the FDA of a permanent discontinuance in the manufacture of the device or an interruption in the manufacture of the device that is likely to lead to a meaningful disruption in supply of that device in the USA during a public health emergency.

In addition, the recently reintroduced Verifying Accurate Leading-edge IVCT Development (VALID) Act of 2021 would give the FDA authority to regulate diagnostic tests and most of their constitutive components by creating an entirely new product category, in vitro clinical tests (IVCTs), for all in vitro diagnostics and laboratory developed tests (LDTs). The new risk-based framework attempts to clarify and recalibrate regulatory authorities between the FDA and the Centers for Medicare and Medicaid Services, which implements the Clinical Laboratory Improvement Amendments of 1988 (CLIA). Currently, the FDA asserts jurisdiction over LDTs under the FDCA but exercises enforcement discretion in most instances as long as the tests are developed, validated and performed within an individual, CLIA-certified lab and performed at the direction of a licensed healthcare provider. The VALID Act intends to better clarify this authority by, among other things, establishing high-risk IVCTs and low-risk IVCTs, which would not be subject to FDA pre-market review.

See 5.1 Policy Development.

Brexit does not have a direct impact on the medical device regulatory regime in the USA. We note that the FDA has the authority to enter into Mutual Recognition Agreements (MRAs) with foreign regulatory authorities allowing their respective inspectors to rely upon information from inspections conducted within each other’s borders. MRAs yield greater efficiencies for US and foreign regulatory systems by avoiding duplication of inspections and reallocation of resources towards inspection of drug manufacturing facilities with potentially higher public health risks across the globe.

The FDA has a long-standing MRA in place with the European Union, which included the UK's MHRA. However, prior to the effective date of Brexit, the USA and the UK entered into a general MRA covering, among other things, surveillance inspections and pre-approval and post-approval inspections. Currently, this MRA (and the FDA’s MRA authority generally) is limited to pharmaceuticals and does not apply to devices.

COVID-19 has largely impacted the FDA’s ability to conduct domestic and foreign inspections of device manufacturers and facilities engaged in clinical and non-clinical research. 

On 10 March 2020, the FDA announced its intention to postpone most inspections of foreign manufacturing facilities and products and temporarily postponed routine surveillance inspections of domestic manufacturing facilities on 18 March 2020. On 10 July 2020, the FDA announced its intention to resume certain on-site inspections of domestic manufacturing facilities subject to a risk-based prioritisation system. The FDA further clarified its intentions in an August 2020 guidance that the agency would evaluate whether to conduct a physical inspection on a case-by-case basis, according to whether a domestic or foreign inspection is “mission critical”, and would employ alternative tools when a physical inspection is not possible. More recently, in April 2021, the FDA issued guidance describing how it will request and conduct voluntary remote interactive evaluations of manufacturing and outsourcing facilities as well as facilities involved in non-clinical and clinical research. 

In addition, the COVID-19 pandemic has resulted in significant use of the FDA’s emergency use authorisation (EUA) authority, particularly for diagnostic tests and personal protective equipment. Under the FDA’s EUA authority, the FDA may authorise an uncleared or unapproved device, or uncleared or unapproved use of an approved device, to diagnose, treat or prevent serious or life-threatening diseases or conditions caused by chemical, biological, radiological and nuclear threats when certain criteria are met and the Secretary of the Department of Health and Human Services (the parent agency of the FDA) has declared that an EUA is appropriate.

It should be noted that an EUA is not the same as a clearance or approval and establishes various conditions that the EUA holder (eg, manufacturer) and certain other entities (eg, distributors) must comply with, particularly relating to the collection of performance and safety data. The FDA has taken action against EUA holders that failed to comply with EUA conditions.

COVID-19 has also caused significant delays in initiating and maintaining litigation. Although many courts have successfully adopted virtual tools, such as videoconferencing services, to conduct hearing and enable trials to proceed, delays or postponements have persisted. As restrictions continue to ease in the USA, it is expected that such delays will be alleviated.

Arnold & Porter

601 Massachusetts Avenue
NW Washington
DC 20001

+1 202 942 5120
Author Business Card

Trends and Developments


Arnold & Porter has 200 attorneys dedicated to serving its multinational life sciences clients across the firm's US and international offices. It provides globally integrated counselling to pharmaceutical, biotechnology, medical products and diagnostic companies, clinical laboratories, emerging growth and venture-backed companies, investors, non-profit institutions and universities around the world. Arnold & Porter currently has 94 attorneys who have held senior positions in US and European government and international organisations and over 100 attorneys with scientific degrees. Its team also includes healthcare professionals and public policy specialists. The firm's offerings in these fields cover regulatory matters, internal investigations, civil and criminal government investigations, domestic and global compliance programmes, patent procurement, structuring and fundraising, corporate transactions, mergers and acquisitions, tax and securities offerings, licensing and other partnering transactions, patent and commercial litigation, antitrust, product liability and government contracting.


Increasingly, consumer products include health or wellness components, and more technology-oriented, over-the-counter medical devices are entering the consumer health marketplace (referred to as “digital health tools” for the purposes of this article). Smartphones, tablets and other internet and Bluetooth-enabled, software-based consumer products are foundational to the growth in consumer health and wellness products, some of which are app-enabled/supported medical devices regulated by the U.S. Food and Drug Administration (FDA). Indeed, the COVID-19 pandemic has accelerated adoption and adaptation of more complex medical device functions and technologies for consumer healthcare use. However, the trend of expansion and growth in digital health tools predates the pandemic. 

In particular, the marketplace for digital health tools and other consumer health products directed at young women and parents – “femtech”, “babytech” and “famtech” – has experienced significant growth and innovation in recent years. In 2019, Forbes estimated the US babytech market size at around USD46 billion, while Allied Market Research, a market research agency, estimated that the global baby monitor portion of this sector could reach USD1.9 billion by 2027. Companies catering to this demographic are marketing a variety of tech-enabled medical devices and wellness products, including smartphone-enabled fertility trackers and breast pumps, app-enabled infant sleeping systems, baby monitors that measure infant breathing and vitals and at-home fertility tests. 

A core consideration for companies developing and launching a femtech or babytech product is whether the product could be subject to regulation by the FDA as a medical device. Given the time and resources that achieving compliance with FDA requirements can require, there are many companies in this space that aim to position and market their products in a manner that exempts them from FDA oversight. Moreover, regulatory agencies, self-regulatory bodies, competitors and consumers are all attentive to what companies are promising in terms of efficacy and attributes for products in the femtech and babytech sectors. Accordingly, regulatory compliance and truth-in-advertising are critical considerations for companies marketing products in this lucrative market, both of which demand careful development of strategies for bringing products to market and associated product advertising and promotion. 

Although this article focuses on femtech and babytech products, it may be noted that, in many respects, the same issues and risks apply in other consumer technology areas of focus in digital wellness and health.

The first part of this article provides an overview of the regulatory framework for digital health products marketed in the femtech and babytech spaces, the second part provides illustrative examples of these products, and the third part speaks to the risk environment and enforcement climate for these products, addressing recent regulatory enforcement, advertising challenges and consumer litigation. 

Regulatory framework

Whether a femtech or babytech product marketed for a health-related use is subject to FDA oversight as a medical device turns on whether the product meets the statutory definition of a device. The Federal Food, Drug, and Cosmetic Act (FDCA) defines the term “device” in relevant part, as an “instrument, apparatus, implement, machine, contrivance, implant in vitro reagent or other similar or related article, including any component, part, or accessory [that is] (1) intended for use in the diagnosis of disease or other conditions, or in the cure, mitigation, treatment, or prevention of disease, in man or other animals, or (2) intended to affect the structure or any function of the body of man or other animals, and which does not achieve its primary intended purposes through chemical action within or on the body of man or other animals and which is not dependent upon being metabolized for the achievement of its primary intended purposes” (21 U.S.C. § 321(h)). 

Significantly, the FDA determines the intended use of a product by looking at the objective intent of the person responsible for marketing the device, as reflected by, for example, the labelling, promotional materials, product website or oral statements by the company or its representatives. Thus, two companies can market essentially the same consumer digital health product in the USA, but one be considered a device and the other not a device because of the difference in claims made for the products. Therefore, if a company markets a wearable device for infants that detects heart rate, respiration and sleep movements for sleep tracking or sleep management, the product could potentially be considered a general wellness tool that is not subject to FDA regulation. If, however, the company, in addition to promoting the wearable device for sleep management, also makes statements about use of the wearable in assessing whether an infant shows signs of (or for monitoring) sudden infant death syndrome (SIDS), sleep apnea or other sleep or breathing disorders, then that same wearable could be considered a regulated medical device.

The FDA has long maintained that the device definition encompasses software-based products, such as mobile applications, in the same manner in which it encompasses traditional hardware-based products. However, because of the ways in which they differ from more traditional medical devices, the FDA has struggled with how to apply its device authorities to software-based digital health products. The agency’s regulatory approach to digital health devices, including consumer digital health devices, has evolved significantly over the last decade, culminating in a December 2016 statutory amendment to the FDCA device definition to carve out certain software functions through enactment of the 21st Century Cures Act (Cures Act).

In the years leading up to the Cures Act, the FDA had adopted a risk-based approach to regulation of digital health tools where the agency decided to focus its regulatory oversight on higher-risk digital health tools, while exercising enforcement discretion over lower-risk tools even if the lower-risk tools technically meet the definition of a device. This risk-based approach to regulation was reflected in various agency guidance documents, including draft FDA guidance on mobile medical applications and general wellness tools. The agency has tried to solicit and respond to medical technology developer feedback when shaping these proposals, particularly those around multi-use software applications. 

As amended in December of 2016 by the Cures Act, the FDCA device definition now excludes certain enumerated categories of low-risk software functions – for example, certain administrative support tools, general wellness tools, electronic patient records, medical device data systems and certain clinical decision support (CDS) tools; see 21 U.S.C. § 360j(o). Although the Cures Act carve out largely codified FDA’s existing policies on regulation of software products, they have helped to provide more certainty to those companies seeking to develop digital health tools. For example, certain women’s health digital health tools are potentially marketed without FDA oversight pursuant to the Cures Act “general wellness” exemption for software functions that are intended for “maintaining or encouraging a healthy lifestyle and [are] unrelated to the diagnosis, cure, mitigation, prevention, or treatment of a disease or condition”. Other women’s health digital health tools are potentially marketed pursuant to FDA enforcement discretion policies for additional low-risk general wellness tools as well as for certain low-risk mobile medical applications. 

The Cures Act also excludes from the FDCA device definition certain software functions that provide recommendations to a healthcare professional (HCP) about prevention, diagnosis or treatment of a disease or condition provided certain conditions are met. Although this Cures Act CDS exemption does not apply to digital health tools intended for patients (“patient CDS”), the FDA in draft guidance announced that there are certain low-risk patient CDS for which the FDA intends to exercise enforcement discretion. Specifically, the FDA does not intend to enforce compliance with applicable FDCA requirements for patient CDS that are intended to inform clinical management for “non-serious situations or conditions” and that, in addition, are intended for the patient to be able to independently evaluate the basis for the software’s recommendations. 

In contrast, the FDA does intend to focus its regulatory oversight on patient CDS functions that are intended to inform clinical management for a non-serious situation or condition but that are not intended for the patient to be able to independently evaluate the basis for the software’s recommendations. The FDA also intends to focus its regulatory oversight on device patient CDS functions that are intended to inform clinical management for a serious or critical situation or condition, whether or not the software is intended for the patient to be able to independently evaluate the basis for the software’s recommendations.

If a digital health tool does meet the definition of a medical device (and does not fall under an enforcement discretion policy), the requirements applicable to manufacturing and marketing of the product would turn on the device classification under which the product falls: Class I – low risk; Class II – moderate risk; Class III – high risk. If a product meets the FDCA definition of a “device”, but no FDA device classification exists under which the product would fall (or the product potentially falls under an existing Class II classification but no suitable legally marketed predicate exists to which the manufacturer could demonstrate substantial equivalence for purposes of a Section 510(k) pre-market notification), the product would by default be considered a Class III device, subject to approval through a pre-market approval (PMA). This can occur, for example, when a product is a novel device (eg, certain software-based technologies). The FDA’s de novo classification process can potentially be used to down-classify devices in this category to either Class II or Class I, depending on risks posed by use of the device. For example, Natural Cycles®, the first pregnancy contraception mobile medical application to receive FDA marketing authorisation, was reviewed and classified through the de novo process. 

If a proposed product has device functions as well as non-device (eg, exempt) software functions, the FDA may assess the impact that the software non-device function has on the device function when assessing the safety and effectiveness of the device function as further detailed in FDA guidance on multiple function devices. In addition, as it relates to certain diagnostic femtech products, also relevant is the FDA’s enforcement discretion policy for certain types of in vitro diagnostic devices referred to as laboratory developed tests (LDTs).

In terms of advertising and promotion, for most over-the-counter medical devices, the FDA and FTC exercise joint regulatory authority over product labelling and advertising. The FDA has primary jurisdiction over labelling for all medical devices and advertising for restricted devices (typically Class III), while FTC has primary jurisdiction over advertising of “unrestricted” medical devices (Class I and most Class II devices). The FDCA prohibits the distribution or receipt in interstate commerce of a misbranded medical device, which includes a device bearing false or misleading labelling. Claims in device labelling, including product websites, that are outside the scope of the devices’ cleared uses can misbrand, and even adulterate the device, another prohibited act under the FDCA.

Similarly, FTC’s enabling statute, the Federal Trade Commission Act, prohibits unfair or deceptive acts or practices in or affecting commerce as well as the dissemination of any false advertisement that is likely to induce the purchase of medical devices. The FDA takes a broad view of what types of materials are considered labelling, and, ultimately, promotion of these products on platforms such as websites and social media may come within both agencies’ purview. Additionally, advertising for products that are not regulated as medical devices is subject to FTC’s truth-in-advertising laws. Firms marketing these products must take care to avoid expressly or by implication suggesting they are intended for use as medical devices, as this presents risk of enforcement action and advertising challenges.

Both agencies are known to collaborate when pursuing enforcement action, and issue joint warning letters in cases where claims violate the agencies’ enabling statutes and implementing regulations. Furthermore, violations of FDA and FTC requirements can also lead to follow-on consumer, competitor or National Advertising Division of the Better Business Bureau (NAD) challenges. Thus, a key aspect of compliance and risk mitigation is ensuring that all product advertising and promotion is truthful, non-misleading and appropriately substantiated.

Digital health tools marketed in the femtech and babytech sectors, including as medical devices

An increasing number of femtech and babytech products are regulated as medical devices, and some companies marketing products that are not regulated as such are eyeing medical device applications as a way to expand their markets and uses. Common themes underlying the introduction of newer medical devices in the femtech market are offering women more insights into and control over their health. Babytech products are also heavily information-driven, and aim to give parents insights into infants’ patterns, vitals and other wellness data. Femtech and babytech products cover a broad variety of consumer health and wellness interests, including fertility, conception, contraception, and infant sleep and monitoring, as discussed further below.

As noted, a number of femtech products concentrate on core areas of women’s health – conception and contraception. For example, following the trend of expanding direct-to-consumer diagnostic test options, Modern Fertility launched an at-home fertility test system that culminates in issuing an app-enabled fertility profile based on the results of an at-home finger-prick blood test or in-laboratory hormone testing. Women seeking to become pregnant and non-hormonal contraception are also served by a growing market of app-enabled and wearable medical devices. For example, Ava Sciences markets the Ava Fertility Tracker, an over-the-counter, 510(k)-cleared device comprised of a fertility tracking sensor bracelet and accompanying app. Natural Cycles offers a 510(k)-cleared (initially authorised under a de novo) web and mobile-based application that is intended for women 18 years and older to monitor fertility, and can be used for preventing a pregnancy (contraception) or planning a pregnancy (conception). The app monitors a woman’s menstrual cycle by using information entered by the user – daily temperature measurements – and then a proprietary algorithm evaluates the data and provides the user’s fertility status. 

In the babytech space, infant sleep and monitoring products are a key focus, and companies are starting to consider subjecting their products to FDA regulation as medical devices, which could expand permitted uses, claims, and open up new customer markets. Happiest Baby®, for example, presently markets an app-enabled bassinet (cradle) called the SNOO Smart Sleeper® that bears claims of adding an additional one to two hours of sleep per night, preventing rolling, and giving piece of mind to parents by securing their baby safely on the back. For now, the product is not regulated as a medical device and does not bear SIDS-prevention claims, but that could change. In February 2020, the company announced that the SNOO® Smart Sleeper was accepted into the FDA’s Breakthrough Device Program as a potential candidate for preventing or reducing SIDS.

Another veteran of the infant-care ecosystem marketplace, Owlet Baby Care, also recently announced intention to seek FDA clearance for new and existing products in its infant ecosystem portfolio (eg, the Smart Sock product that tracks a baby’s heart rate, oxygen levels and sleep trends using pulse oximetry technology). The company’s February 2021 Investor Presentation acknowledged that FDA authorisation for its products could allow for expanded claims, new markets and possibly telehealth opportunities. 

Advertising and promotion enforcement and challenges

Regardless of whether the product at issue is an FDA-regulated medical device, regulatory agencies, the NAD, competitors and consumers pay close attention to product claims in the femtech and babytech space. Recent enforcement action and challenges reflect the heightened scrutiny applied to these products and are illustrative of the risks that marketers of these types of products face. 

With respect to infant products, the FDA has historically scrutinised product marketing that expressly or by implication claims to prevent SIDS and has broadly notified industry of its stance that marketing a baby product with claims to cure, treat or prevent SIDS subjects it to regulation as a medical device. In addition to a 2010 warning letter to a firm marketing a 510(k)-cleared infant sleep mattress with SIDS-prevention claims – for which the product was not cleared – in 2011, the FDA sent letters to companies regarding SIDS-prevention claims for baby products. This letter cautioned that labelling, packaging or advertising containing claims to prevent or reduce the risk of SIDS violates the FD&C Act, a message echoed on FDA webpages centred on baby products with SIDS-prevention claims. Companies marketing infant sleep and monitoring products have to tread carefully in this area and refrain from suggesting or stating that their products can prevent or reduce the risk of SIDS, unless the FDA specifically approves or clears the products for that purpose.

More recently, the FDA’s and FTC’s enforcement priorities in the women’s health space have focused on therapeutic (drug) claims for products that are marketed as dietary supplements. On 20 May 2021, the FDA and the FTC jointly issued warning letters to five companies that were illegally selling dietary supplements claiming to cure, treat, mitigate or prevent infertility and other reproductive health conditions (eg, restoring fertility, replacing conventional fertility treatments, touting pregnancy within several months after using the supplement). Although targeted at marketers of purported dietary supplements, such regulatory enforcement attention on therapeutic claims creates risk for diagnostic or wellness products that recommend supplements or other interventions.

Aside from regulatory action, companies marketing femtech and babytech products also face the risk of challenge by or before the NAD and piggy-back or parallel consumer litigation arising out of allegedly false or misleading claims. 

In 2019, Owlet both faced a challenge to advertising claims for its Smart Sock® monitor brought by the NAD as part of its ongoing monitoring programme, as well as consumer litigation alleging unlawful, false, misleading and deceptive marketing and advertising practices in connection with the sale of the Smart Sock. The NAD evaluated whether Owlet accurately communicated to consumers the nature of the product as an information-gathering device, “without overstating the extent to which the Owlet can actually prevent adverse medical events”; see Owlet Baby Care, Inc., Smart Sock Baby Monitor, NAD Case No 6282 (4 June 2019).

At issue were claims that the product would reassure parents that their baby is okay and provide notifications if his or her heart rate and oxygen levels leave pre-set zones, testimonials that the product gives parents peace of mind, and the content and placement of a disclosure communicating that the Smart Sock is not an FDA-approved medical device nor is it intended to diagnose, cure, treat, alleviate or prevent disease.

The NAD concluded that the Smart Sock advertising “reasonably conveyed” that it could prevent SIDS and save lives, which was unsupported by the available evidence. The NAD thus recommended that Owlet limit the scope of its advertising claims by using a clear and conspicuous disclosure highlighting the product’s information-gathering function, and explicitly stating that the product does not prevent SIDS nor replace a medical monitor.

In the Owlet consumer litigation, plaintiffs alleged that the Smart Sock was defective – giving false alarms that cause parents to think their baby is ill, while also failing to detect abnormal oxygen levels and heart rates – allegedly the “exact purpose” for which the product was designed and advertised; see Ruiz and Marisela v Owlet Baby Care, Inc., Case No 2:19-cv-00252-HCN-DBP  (D. Ut. 2019). Plaintiffs alleged that this material information was not disclosed to consumers before sale, the company actively concealed its knowledge of these defects, and that the company failed to disclose that the product can burn babies' feet, even when used as instructed. In June 2020, the court ruled on the defendant’s motion to dismiss and gave plaintiffs leave to amend their complaint. Plaintiffs sought leave to file an amended complaint on 1 July 2020. Subsequently, on 3 August 2021, the court denied plaintiffs’ motion for leave to file the proposed amended complaint and dismissed the case, having found that the amended complaint asserted essentially the same claims asserted in the previous complaint and dismissed by the court. 

Ava Science, Inc. also faced a challenge regarding claims for its Ava Ovulation Bracelet arising out of NAD’s routine monitoring programme. The NAD focused on whether a “one-year guarantee of pregnancy” claim that hyperlinked to a money-back guarantee, and a social media post that displayed a picture of a pregnant woman next to “one year pregnancy guarantee” in a circle communicated a money-back guarantee message or a product performance claim (guaranteeing pregnancy); see Ava Science, Inc., Ava Ovulation Bracelet, NAD Case No 6348 (6 February 2020).

The NAD concluded that the pregnancy guarantee claim was tied to the “performance result” (pregnancy) rather than the refund which may be issued if the product does not perform as claimed, and recommended modifications to the claim and hyperlink. After Ava Science failed to confirm it would comply with NAD’s recommendations, the NAD referred the matter to the FTC in March 2020. The FTC decided not to take additional action but reserved the right to take further action as the public interest demands.


Companies entering the market for digital health tools, especially femtech and babytech products, face a number of important considerations. These include whether the product is subject to regulation as a medical device, and whether to develop and position the product in order to seek regulation and clearance through the medical device pathway. Although medical device status carries particular regulatory compliance burdens, it can allow companies to lawfully promote their products for prevention, treatment and management of key aspects of consumers’ health.

As recent announcements of intention to seek FDA clearance of babytech products not currently subject to regulation as a medical device suggest, companies in this sector see FDA regulation as a way to grow their markets. Overall, the femtech and babytech sectors and related product offerings are poised to continue expanding, and will continue to push the agencies’ frameworks for regulation and oversight. 

Arnold & Porter

601 Massachusetts Avenue
NW Washington
DC 20001

+1 202 942 5120
Author Business Card

Law and Practice


Arnold & Porter has 200 attorneys dedicated to serving its multinational life sciences clients across the firm's US and international offices. It provides globally integrated counselling to pharmaceutical, biotechnology, medical products and diagnostic companies, clinical laboratories, emerging growth and venture-backed companies, investors, non-profit institutions and universities around the world. Arnold & Porter currently has 94 attorneys who have held senior positions in US and European government and international organisations and over 100 attorneys with scientific degrees. Its team also includes healthcare professionals and public policy specialists. The firm's offerings in these fields cover regulatory matters, internal investigations, civil and criminal government investigations, domestic and global compliance programmes, patent procurement, structuring and fundraising, corporate transactions, mergers and acquisitions, tax and securities offerings, licensing and other partnering transactions, patent and commercial litigation, antitrust, product liability and government contracting.

Trends and Development


Arnold & Porter has 200 attorneys dedicated to serving its multinational life sciences clients across the firm's US and international offices. It provides globally integrated counselling to pharmaceutical, biotechnology, medical products and diagnostic companies, clinical laboratories, emerging growth and venture-backed companies, investors, non-profit institutions and universities around the world. Arnold & Porter currently has 94 attorneys who have held senior positions in US and European government and international organisations and over 100 attorneys with scientific degrees. Its team also includes healthcare professionals and public policy specialists. The firm's offerings in these fields cover regulatory matters, internal investigations, civil and criminal government investigations, domestic and global compliance programmes, patent procurement, structuring and fundraising, corporate transactions, mergers and acquisitions, tax and securities offerings, licensing and other partnering transactions, patent and commercial litigation, antitrust, product liability and government contracting.

Compare law and practice by selecting locations and topic(s)


Select Topic(s)

loading ...

Please select at least one chapter and one topic to use the compare functionality.