Abstract

U.S. FDA REGULATORY GUIDELINES AND VALIDATION OF DIGITAL THERAPEUTICS

Thota Bhargavi*, M. Beena Devi, M. V. Nagabhushanam, G. Ramakrishna

Abstract

Digital therapeutics (DTx) are evidence-based, software-driven interventions intended to prevent, manage, or treat diseases and medical conditions. Their increasing use in mental health, neurological disorders, substance-use disorders, chronic diseases, and behavioral medicine has created a need for regulatory frameworks that address clinical effectiveness, software reliability, cybersecurity, usability, and continuous technological change. In the United States, DTx that meet the statutory definition of a medical device are principally regulated by the U.S. Food and Drug Administration (FDA) within the device software framework. Regulatory requirements depend on intended use, risk, technological characteristics, and device classification, with 510(k) premarket notification, De Novo classification, and Premarket Approval (PMA) representing the major premarket routes. Validation extends beyond conventional software testing and includes software verification and validation, clinical evaluation, human-factors engineering, cybersecurity, risk management, quality management, data integrity, and post-market performance monitoring. The transition to the Quality Management System Regulation (QMSR), effective in 2026, further emphasizes lifecycle quality management and alignment with ISO 13485. Emerging artificial intelligence and machine-learning functions increase the importance of predetermined change control, representative data, bias assessment, and continuous real-world performance monitoring. This review summarizes the U.S. FDA framework applicable to DTx, examines principal validation requirements and representative regulatory case studies, and discusses challenges associated with software updates, cybersecurity, health equity, evidence generation, and AI-enabled adaptive technologies. A total-product-lifecycle strategy integrating clinical evidence, software engineering, quality management, cybersecurity, usability, and post-market surveillance is essential for safe and effective translation of DTx into routine healthcare.

Keywords: Digital therapeutics; DTx; U.S. FDA; Software as a Medical Device; SaMD; software validation; cybersecurity.