Method·August 19, 2026 · 4 min read

A PCCP change leaves no new record

FD&C Act Section 515C, added by statute in December 2022 and given final guidance in December 2024, lets FDA pre-authorize an AI-enabled device's own future software changes inside its original clearance. Implement one, and no new 510(k) gets filed — nothing in the public clearance record marks that the device changed at all.

By Connor Griggs — Regulatory & Quality Strategist

A cleared 510(k) has always meant the same thing going forward: the device FDA reviewed is the device on the market, until a change big enough to affect safety or effectiveness sends the applicant back for a new clearance. For a growing set of AI-enabled devices, that is no longer true. FDA can now pre-approve the next several versions of a device before any of them exist, and the record that later shows the device cleared never says which ones already shipped.

The statute behind the plan

Section 3308 of the Food and Drug Omnibus Reform Act of 2022 (FDORA) — Division FF of the Consolidated Appropriations Act, 2023, enacted December 29, 2022 — added a new Section 515C to the FD&C Act, codified at 21 U.S.C. § 360e-4. It lets FDA approve or clear a Predetermined Change Control Plan (PCCP) inside a 510(k), De Novo request, or PMA: a description of specific future modifications, and how they will be validated, submitted up front. Once FDA authorizes the plan, a change that matches it does not need the supplemental application or new 510(k) it would otherwise require.

What FDA actually reviews

FDA’s final guidance on the subject — effective December 2024, for AI-enabled device software functions specifically — sets out three required pieces of a PCCP: a Description of Modifications naming what will change, a Modification Protocol describing how each change will be developed and verified, and an Impact Assessment of what the plan means for the device’s benefits and risks. FDA reviews all three at clearance or approval, the same submission that reviews everything else about the device. The plan itself becomes part of the record FDA already keeps — the changes it authorizes have not happened yet.

A PCCP is not a promise to submit again later. It is FDA agreeing, once, to a version of the device that does not exist yet.

The record a change under the plan doesn’t create

When a manufacturer implements a change consistent with an authorized PCCP, Section 515C is explicit about what does not happen: no new 510(k), no new PMA supplement. Nothing about that decision requires a new K-number, a new decision code, or a new row in openFDA’s 510(k) dataset — the fields this blog has already read closely arek_number, decision_code, decision_date, and a handful of others fixed at the moment of the original clearance. FDA’s guidance directs manufacturers toward two places a PCCP and its implemented changes should actually be disclosed: the device’s labeling, and the 510(k) summary FDA posts under 21 CFR 807.92. Both are documents, not database fields. A predicate search built only from openFDA’s structured 510(k) record will not surface that a competitor’s cleared device has already changed twice since the day it cleared.

The practice

Watching a product code for “a competitor cleared” used to be watching for the event that mattered. For a device cleared with an authorized PCCP, the event that matters most — a materially different version reaching the market — can now happen with no new clearance event at all. Whether a specific competitor’s device carries an authorized PCCP, and what an implemented change under one means for a predicate or portfolio decision, is a judgment for the regulatory professional holding that file — this is regulatory intelligence and method, about where a change does and doesn’t leave a public trace, never regulatory advice about a submission of your own.

FDA Radar ingests k_number, decision code, product code, and decision date on every clearance exactly as openFDA publishes them; see what we monitor and how often. A PCCP flag isn’t missing from that record by omission. openFDA has never published a field for one.

Method
The lab is accredited. Not the device.
Practice
Breakthrough is law. STeP is a guidance.
Practice
MDSAP replaces routine. Not for-cause.
Method
No field on a 510(k) says what it treats
Method
Discretion is a policy. Exclusion is a statute.
Practice
Designated by one office. Approved by another.
Method
MedSun sits beside MAUDE, not inside it
Practice
The five-unit device never gets a K-number
Practice
Meeting the criteria isn't a tracking order
Method
The PMA clock doesn't stop at approval
Practice
The K-number doesn't track today's device
Method
A MAUDE report proves it was filed
Practice
Not every MDR starts with the manufacturer
Method
Completed. Not terminated.
Practice
The device-ban list has three entries
Method
The UDI exception has its own deadline
Method
MDUFA VI is being negotiated in public
Practice
The inspection manual changed, not the rule
Method
The count Congress had to legislate
Practice
The small-business rate isn't retroactive
Method
A detention order has no docket to read
Practice
PMA approvals moved off the Federal Register
Method
A citizen petition names names
Practice
A market withdrawal isn't a recall
Method
Not every device letter comes from CDRH
Practice
Closed on one device. Open on the rest.
Method
No IDE is confirmed until the PMA is
Practice
The remedial-action call sets the clock
Method
Jurisdiction is a letter, not a field
Practice
An address is not a footprint
Method
The final rule that isn't final yet
Practice
The special controls aren't in the record
Method
Exempt from GMP. Not from complaints.
Practice
The notify list isn't the shortage list
Method
A constraint can't be skipped. A script can.
Practice
No cron sends this. A person does.
Method
Corrected, not rewritten
Practice
Quiet is a finding, not a default
Method
The summary is public. The statement isn't.
Practice
A competitor's 513(g) leaves no trace
Practice
An empty response field proves nothing
Method
A petition is public. Its outcome isn't.
Practice
The panel is a category, not a meeting
Method
An accessory carries its own classification
Method
A TPLC report is a category, not a device
Practice
A 522 order is a question, not a verdict
Practice
Not every signal becomes a recall
Method
eSTAR did not remove the acceptance check
Practice
An early alert has no recall number yet
Practice
A consent decree isn't a database row
Method
The record has no cybersecurity field
Practice
Classification Change is not one event
Method
Publication date is not effective date
Method
One event. Many recall numbers.
Practice
Quantity is a sentence, not a number
Practice
How a firm told you is a field too
Method
A RIN outlives the document number
Method
The docket ID is not the comments
Practice
The 510(k) record doesn't name the predicate
Practice
The 510(k) FDA didn't review first
Method
The letter FDA doesn't have to post
Practice
Cleared doesn't say which track it took
Method
The clock stops. The calendar doesn't.
Method
Why a guessed match never reaches you
Practice
The standards list never names a device
Method
The guidance isn't in the Federal Register.
Practice
Filtered. Not discarded.
Method
There are two recall databases, not one
Practice
Breakthrough status is confidential by law
Practice
One MAUDE report is not one malfunction
Method
A supplement number is not a track
Method
Cleared is not approved
Practice
Nationwide doesn't mean your building
Practice
Not every correction reaches FDA
Method
Registered. Not reviewed.
Method
Contact ODE is not a pathway
Practice
Almost no recall is FDA-mandated
Method
FDA's device names read like a card catalog
Practice
openFDA is free. It is not unlimited.
Method
GUDID stores the model. Not the box.
Practice
Detention doesn't need a warning letter
Method
A Class I device, a Class I recall
Practice
21 CFR 820 didn't move. Its contents did.
Method
The product code that doesn't exist yet
Practice
The classification posts. The 483 behind it doesn't.
Method
A recall has three dates, and the pipeline had to pick one
Practice
The count is real. The rate is not.
Method
The firm on the record is not the firm on the box
Practice
Low confidence is an instruction, not a hedge
Method
The same company, spelled three ways
Practice
A device that was never a medical device
Method
FDA's warning letters, addressed by column number
Practice
Your regulation has a decimal. FDA's watch doesn't.
Method
Three letters is too short to search for
Practice
Most warning letters never close
Method
The guidance that skipped the draft
Practice
Ongoing, as of when?
Method
The least interesting fact in a 510(k)
Practice
No recall arrives with a product code attached
Practice
The deadline that doesn't email you
Method
The warning letter has two dates
Method
How to monitor FDA without drowning
Practice
Your predicate was recalled. Now what?
Method
Why no item reaches you without a human