Navigating the Patchwork: FDA Approval vs. California AI Law
FDA cleared? Great. But are you California compliant? The dual-regulatory burden is here. 🏥
Federal vs. State
Historically, medical device manufacturers focused almost exclusively on the FDA. If you got your 510(k) clearance, you were good to go. That has changed.
The FDA focuses on safety and efficacy: Does the device work? Is it safe?
California focuses on privacy, transparency, and civil rights: Is the device biased? Does it tell the user it's an AI? Does it protect data privacy?
It is entirely possible to have a device that is safe and effective (FDA approved) but violates California law because it lacks a transparency notice or has disparate impact on certain demographic groups.
Key Differences
- Transparency: California (AB 3030) requires direct-to-consumer disclosure that they are interacting with AI. The FDA labeling requirements are often more technical and directed at the clinician.
- Bias: The FDA recommends diversity in clinical trials, but California law (Unruh Act) creates a private right of action for discrimination. The liability bar is different.
- Data Rights: The FDA does not regulate data privacy (that's HIPAA). California's CMIA and CCPA go further than HIPAA, protecting data even outside of covered entities.
The "Preemption" Question
Does FDA approval preempt state law? The Medical Device Amendments of 1976 generally preempt state requirements that are "different from, or in addition to" federal requirements regarding safety and efficacy. However, courts have often allowed state laws regarding consumer protection and fraud to stand.
Relying on preemption is a high-stakes legal gamble. It is far safer and cheaper to comply with both regimes.
Conclusion
Build a compliance strategy that covers both federal and state requirements. Treat California as a "super-regulator" that adds a layer of requirements on top of the FDA.
Frequently Asked Questions (FAQ)
If I'm FDA cleared, do I still need an AB 3030 disclosure?
Likely yes. AB 3030 is a consumer protection law about transparency, not a medical device safety law. It's safer to include the disclosure.
Can California ban my FDA-approved device?
California cannot ban the sale of an FDA-approved device based on safety/efficacy grounds. However, they can fine you for violating privacy or transparency laws, or for discriminatory business practices, effectively making it impossible to operate profitably.
Do other states have similar laws?
Yes, Colorado, Utah, and Connecticut are also active in AI regulation. However, California's laws are generally the most stringent and often set the national standard.