[ GxP HORIZON ]
What’s changing in GxP — and when.
Every other SPEQ surface decodes what the rules require today. This one looks ahead: the effective dates, transition deadlines, and open comment windows a quality team needs on the calendar — with the themes reshaping practice underneath them.
9 dated milestones and 6 FDA comment deadlines ahead · each dated to a primary source
[ ON THE CALENDAR · SOONEST FIRST ]
What has to be done, and by when.
Effective dates, transition deadlines and FDA comment deadlines on one timeline. A red ring is a deadline to act on; a solid dot is a date that arrives either way.
- TODAY · Oct 28, 2026
- Q4 2026
- Oct 29, 2026in 1 day
- Oct 30, 2026in 2 days
- Oct 30, 2026in 2 days
- Nov 2, 2026in 5 days
- Nov 3, 2026in 6 days
- Nov 3, 2026in 6 days
- Q3 2027
- Aug 2, 2027in ~9 monthsTRANSITION DEADLINE# link
EU AI Act — pre-2025 general-purpose AI must comply
General-purpose AI models placed on the EU market before 2 August 2025 must be brought into full compliance with the AI Act by this date, closing the grandfathering window for existing GPAI.
- Q4 2027
- Nov 27, 2027in ~13 monthsTRANSITION DEADLINE# link
DSCSA — small-dispenser exemption ends
The FDA exemption for small dispensers (a corporate parent with 25 or fewer full-time employees licensed as pharmacists or qualified as pharmacy technicians, assessed as of 27 November 2026) from the DSCSA enhanced drug distribution security requirements expires. Enhanced, interoperable, electronic package-level traceability then applies to them as well.
- Dec 2, 2027in ~13 monthsEFFECTIVE DATE# link
EU AI Act — high-risk use cases (Annex III) apply
The obligations for high-risk AI used in the sensitive areas listed in Annex III (including biometrics, critical infrastructure, education, employment, and migration and border control) apply from this date: risk management, data governance, logging, human oversight, conformity assessment and registration. Moved from 2 August 2026 by the AI Omnibus, Regulation (EU) 2026/1744, in force 27 July 2026.
- Dec 31, 2027in ~14 monthsTRANSITION DEADLINE# link
EU IVDR — transition ends for class D IVDs
Under the Regulation (EU) 2024/1860 extension, the IVDR transition period ends for class D in vitro diagnostics (the highest-risk tier, e.g. blood-screening and high-consequence infectious-disease assays).
- Dec 31, 2027in ~14 monthsTRANSITION DEADLINE# link
EU MDR — transition ends for higher-risk legacy devices
Under the Regulation (EU) 2023/607 extension, the MDR transition period ends for class III and certain class IIb implantable legacy devices. From this date they must hold MDR certificates to remain on the EU market (subject to the Article 120 conditions).
- Q3 2028
- Aug 2, 2028in ~21 monthsEFFECTIVE DATE# link
EU AI Act — high-risk AI in regulated products (Annex I, incl. devices) applies
The high-risk obligations for AI systems embedded into products covered by the EU harmonisation legislation in Annex I — which includes medical devices and in vitro diagnostics — apply from this date, as set by the AI Omnibus, Regulation (EU) 2026/1744, in force 27 July 2026, which also clarifies how the AI Act interacts with EU product-safety law.
- Q4 2028
- Dec 31, 2028in ~2 yearsTRANSITION DEADLINE# link
EU IVDR — transition ends for class C IVDs
Under the Regulation (EU) 2024/1860 extension, the IVDR transition period ends for class C in vitro diagnostics (e.g. many companion diagnostics and infectious-disease tests below class D).
- Dec 31, 2028in ~2 yearsTRANSITION DEADLINE# link
EU MDR — transition ends for medium/lower-risk legacy devices
The MDR transition period ends for other legacy devices under the Regulation (EU) 2023/607 extension — class IIb (other than the 2027 group), class IIa, and class Im, Is, and Ir devices.
- Q4 2029
- Dec 31, 2029in ~3 yearsTRANSITION DEADLINE# link
EU IVDR — transition ends for class B and class A sterile IVDs
The final IVDR transition tranche under Regulation (EU) 2024/1860 ends for class B and class A sterile in vitro diagnostics — the last legacy IVDs move fully under the IVDR.
EMA · RECENTLY OPENED FOR CONSULTATION
Not on the timeline: consultations whose deadline SPEQ does not hold.
EMA publishes no closing date in this feed, so SPEQ states when each consultation opened and does not claim it is still open. Open the document for the deadline.
[ PROPOSED — NOT IN FORCE ]
Drafts worth planning against.
Published in draft and consulted on, but not adopted. Nothing here is a requirement yet — the date shown is when the draft was published or its consultation closed, not an operative date.
EU GMP Annex 22 (Artificial Intelligence) — draft, consultation closed
The European Commission published draft Annex 22 on 7 July 2025, jointly with PIC/S, as the first GMP-specific expectations for artificial intelligence in regulated manufacture. It was consulted alongside revisions to Chapter 4 (Documentation) and Annex 11 (Computerised Systems); the consultation closed 7 October 2025. The draft scopes itself to static, deterministic models — parameters frozen, identical inputs producing identical outputs — and excludes dynamic self-learning models, generative AI and large language models from GMP-critical applications. It also sets expectations for test-data independence, advising against artificially generated test data in critical applications unless justified and documented.
[ RECENTLY IN FORCE ]
Already landed — and still being adopted.
Recent changes that are now operative but where implementation is still maturing across the industry.
FDA QMSR takes effect (21 CFR 820 ↔ ISO 13485)
The Quality Management System Regulation (QMSR) replaced the Quality System Regulation, amending 21 CFR Part 820 to incorporate ISO 13485:2016 by reference. FDA device inspections retired the QSIT approach on the same date in favour of the updated compliance program.
FDA finalizes Computer Software Assurance (CSA) guidance
FDA issued the final "Computer Software Assurance for Production and Quality System Software" guidance, formalizing a risk-based, least-burdensome alternative to traditional computer system validation for production and quality-system software (draft first published September 2022). FDA reissued it on 3 February 2026 as Computer Software Assurance for Production and Quality Management System Software, superseding this version, to align with the Quality Management System Regulation.
EU AI Act — general-purpose AI rules apply
Obligations for providers of general-purpose AI models began to apply under Regulation (EU) 2024/1689, including transparency, technical documentation, and — for models with systemic risk — additional evaluation and risk-mitigation duties.
ICH E6(R3) Good Clinical Practice applies in the EU
The modernized ICH E6(R3) GCP guideline (principles + Annex 1) came into effect for clinical trials in the EU after EMA adoption. E6(R3) reframes GCP around quality-by-design, proportionate risk-based approaches, and data governance; Annex 2 (decentralized/pragmatic designs) follows.
[ WHAT’S RESHAPING PRACTICE ]
Forward-case themes to track.
Beyond fixed dates, these are the currents reshaping how GxP work gets done — a SPEQ reading, each linked to a deeper page.
AI & machine learning in GxP
The joint FDA + EMA Good AI Practice principles fold AI into validation, data integrity, and the quality system — the fastest-moving theme across every regulated industry.
Go deeper →Computer Software Assurance & digital validation
CSA reframes computer system validation around patient-safety risk and least-burdensome assurance — the industry pivot from script-heavy CSV to risk-based CSA is underway.
Go deeper →Decentralized & hybrid clinical trials
ICH E6(R3) and its forthcoming Annex 2 push GCP toward quality-by-design, decentralized elements, and real-world data — reshaping how trials are run and monitored.
Go deeper →Data integrity in the cloud era
As records move to SaaS and AI pipelines, ALCOA+ expectations extend to cloud audit trails, vendor qualification, and model data provenance — a durable inspection focus.
Go deeper →Milestone dates are cited to primary regulator sources. Forward-case themes are SPEQ interpretation, not regulator guidance; implementation analysis is available with SPEQ Intelligence.
A forward implementation view of primary-source-verified effective dates and transition deadlines.
Turn the horizon into a plan.
Track live rulemaking as it publishes, or baseline where your quality system stands before the next date lands.