Consultation for medical device cyber security

This consultation closed on Thursday, 14 February 2019.

The TGA sought comments from interested parties on the applicability and usefulness of the content contained in the draft regulatory guidance and information materials.

The guidance is intended to assist industry understand and comply with their responsibilities to ensure that medical devices are cyber secure. 

The guidance will also contain information to assist users (including those in health care settings) with managing cyber security matters related to the use of medical devices.

Consultation documents

• Consultation: Draft medical device cyber security guidance (pdf,934kb)*
• Consultation: Draft medical device cyber security guidance (docx,1.11Mb)*

Timetable

Document released for consultation on Thursday, 20 December 2018.

Interested parties should respond by close of business Thursday, 14 February 2019.

Feedback will be released following consideration of submissions. (See 'What will happen').

About the consultation

The purpose of the consultation is to seek stakeholder feedback on the proposed guidance and information materials which have been prepared to assist industry understand and comply with their responsibilities to ensure that medical devices are cyber secure under the Therapeutic Goods Act 1989 as well as in accordance with the 'Essential Principles', as set out in Schedule 1 of the Therapeutic Goods (Medical Devices) Regulations 2002.

Feedback from the medical device cyber security public consultation and webinar, and targeted stakeholder interviews has informed the development of this guidance.

Background

Connectivity and digitisation of medical device technologies may help improve or increase device functionality. However, the connection of devices to networks or the internet exposes devices to increased cyber vulnerabilities that can potentially lead to unacceptable risk of harm to patients. A large number of Class II, Class III and Active Implantable medical devices on the ARTG include electronic components with embedded software, have a software accessory or are a software device. This is a growing area of interest as more health care systems and patients rely on medical devices that are 'connectable'. There is also significant innovation and fast moving technological advancements in software development underpinning more personalised medical devices.

Submissions

• Submissions received

Submissions may provide general, technical or editorial feedback.

Enquiries

Any questions relating to submissions should be directed to the Medical Devices Branch by email to digital.devices@tga.gov.au.

What will happen

All submissions will be placed on this website unless marked confidential or indicated otherwise in the submission form (see Privacy information).

Submissions will be reviewed by the TGA and feedback on submissions will be provided through this website.

Once the TGA has considered feedback from this consultation, and any subsequent consultations the TGA undertakes as a result of feedback received, final guidance and information materials will be developed. At this stage it is anticipated the final guidance will be published in mid-2019.

Privacy information

• The TGA collects your personal information in this submission in order to:
  • contact you if the TGA wants to seek clarification of issues raised in your submission or to check whether you consent to certain information that you have provided being made publicly available.
  • help provide context about your submission (e.g. to determine whether you are an individual or a director of a company or representing an interest group).
  • Seek feedback about how the consultation was undertaken.
• Please do not include personal information about other individuals in the body of your submission. Personal information in this context means information or an opinion about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.
• More information on consultations and privacy is included in the submission form and on our website.