--- title: "A specific framework, on its own timeline. · AI SaMD…" description: "China's NMPA, through the Center for Medical Device Evaluation (CMDE), has issued a stack of AI-specific technical review guidelines that look familiar from a…" lang: en json-ld: | [ { "@context": "https://schema.org", "@graph": [ { "@type": "WebSite", "@id": "https://ai-samd.com/#website", "url": "https://ai-samd.com/", "name": "AI SaMD Playbook", "description": "Working reference for regulating AI/ML Software as a Medical Device: FDA, EU AI Act, MHRA, Health Canada and NMPA guidance, model risks, and cybersecurity for RA/QA teams.", "inLanguage": "en" }, { "@type": "Organization", "name": "Blue Goat Cyber", "url": "https://bluegoatcyber.com" } ] }, [ { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://ai-samd.lovable.app/" }, { "@type": "ListItem", "position": 2, "name": "Crosswalk", "item": "https://ai-samd.lovable.app/crosswalk" }, { "@type": "ListItem", "position": 3, "name": "A specific framework, on its own timeline.", "item": "https://ai-samd.lovable.app/regulators/nmpa" } ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "A specific framework, on its own timeline.", "description": "China's NMPA, through the Center for Medical Device Evaluation (CMDE), has issued a stack of AI-specific technical review guidelines that look familiar from a distance and diverge sharply on inspection. Algorithm filing, locked-model expectations, and Chinese-population data requirements make this a market you cannot reuse a US dossier for.", "about": "China · National Medical Products Administration", "mainEntityOfPage": "https://ai-samd.lovable.app/regulators/nmpa", "publisher": { "@type": "Organization", "name": "Blue Goat Cyber", "url": "https://bluegoatcyber.com" } } ] ] --- [AI SaMD Playbook ](/) Sections[Crosswalk](/#crosswalk)Tools Search Ctrl K[Talk to us →](https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-session) [← Back to crosswalk](/#crosswalk) NMPA China · National Medical Products Administration # A specific framework, on its own timeline. China's NMPA, through the Center for Medical Device Evaluation (CMDE), has issued a stack of AI-specific technical review guidelines that look familiar from a distance and diverge sharply on inspection. Algorithm filing, locked-model expectations, and Chinese-population data requirements make this a market you cannot reuse a US dossier for. Posture · Emerging · prescriptive, distinct from FDA/EU Last reviewed · April 2026 Key facts AI-aided detection clinical guideline 2023 Mobile medical devices guideline (renewed) May 2025 Approved AI medical devices 100+ Algorithm change posture Locked · file to update §01 ## How NMPA classifies AI medical devices AI-enabled medical devices fall under CMDE's software guideline framework, with additional AI-specific technical review principles. Risk classification follows traditional Class II / Class III logic, but AI-specific evidence on data, algorithm, and clinical performance is layered on top. Most diagnostic AI ends up Class III · the high-risk track with the longest review. - Algorithm filing · the model architecture, training scope, and intended population are part of the registration record. - Chinese-population validation · regulators expect performance evidence on local data, not only foreign cohorts. - Locked-model default · adaptive behaviour after registration triggers re-filing, not a PCCP-style envelope. - Clinical evaluation guidance for AI-aided detection (2023) sets specific expectations on reader studies and reference standards. §02 ## Where NMPA diverges from FDA/EU The instinct to reuse a 510(k) or MDR dossier breaks down quickly. NMPA wants its own algorithm description in Chinese, its own validation on Chinese patients, and its own change-control discipline that assumes the model is locked at registration. Predetermined change control as the FDA frames it does not have a clean analogue. §03 ## Cybersecurity and software guidelines NMPA's medical device cybersecurity expectations align broadly with IMDRF principles, secure design, vulnerability management, post-market patching, but reference Chinese national standards (GB/T) and the Cybersecurity Law / Data Security Law / PIPL stack for data handling. Cross-border data transfer of training and post-market data is a live, evolving constraint. §04 ## Practical posture Treat NMPA as a distinct market with a distinct dossier, not a translation exercise. Plan local clinical evidence early, lock your model for the Chinese registration, and budget for a separate post-market change pathway. Most surprises in this market come from assuming convergence that is not there. Key takeaways 1. 01 Plan a Chinese-population validation cohort up front · it is not optional for diagnostic AI. 2. 02 Assume the model is locked at registration; budget re-filings for material change. 3. 03 Map your cybersecurity controls to GB/T standards in parallel with FDA / IMDRF. 4. 04 Treat data-localisation and cross-border transfer as a regulatory constraint, not an IT detail. References - [CMDE · Clinical evaluation guideline for AI-aided detection (2023) ↗](https://reguverse.com/documentation/nmpa-regulations-index/pre-market-submission/guidance-document/21-sw/cmde-2023-38) - [Regulatory frameworks for AI-enabled SaMD in China · JMIR AI (2024) ↗](https://pmc.ncbi.nlm.nih.gov/articles/PMC11319888/) - [Comparative overview of AI medical device approvals · npj Digital Medicine (2024) ↗](https://www.nature.com/articles/s41746-024-01254-x) [ ← Previous Canada · Health Canada ](/regulators/health-canada)[ Next → United States · FDA ](/regulators/fda) © 2026 AI SaMD Playbook · Sponsored by Blue Goat Cyber [Crosswalk](/crosswalk)[Colophon](/colophon) Editorial reference only. Not legal or regulatory advice.