What’s changing in GxP — and when.
Every other SPEQ surface decodes what the rules require today. This one looks ahead: the effective dates, transition deadlines, and open comment windows a quality team needs on the calendar — with the themes reshaping practice underneath them.
8 upcoming milestones · each dated to a primary source
Comment windows and consultations
Live from the FDA Federal Register and EMA consultation feeds — your chance to shape a requirement before it binds you.
EMA publishes no closing date in this feed, so SPEQ states when each consultation opened and does not claim it is still open. Open the document for the deadline.
See all open comment windows in the Regulatory Changes tracker →Effective and transition dates ahead.
EU AI Act — high-risk AI obligations apply
Under Regulation (EU) 2024/1689, the core obligations for high-risk AI systems become applicable: conformity assessment, risk management, data governance, logging, human oversight, and registration. High-risk covers AI as a safety component of regulated products (including medical devices) and Annex III use cases.
DSCSA — small-dispenser exemption ends
The FDA exemption for small dispensers (fewer than 25 full-time pharmacists/pharmacy technicians) from the DSCSA enhanced drug distribution security requirements expires. Enhanced, interoperable, electronic package-level traceability then applies to them as well.
EU AI Act — pre-2025 general-purpose AI must comply
General-purpose AI models placed on the EU market before 2 August 2025 must be brought into full compliance with the AI Act by this date, closing the grandfathering window for existing GPAI.
EU MDR — transition ends for higher-risk legacy devices
Under the Regulation (EU) 2023/607 extension, the MDR transition period ends for class III and certain class IIb implantable legacy devices. From this date they must hold MDR certificates to remain on the EU market (subject to the Article 120 conditions).
EU IVDR — transition ends for class D IVDs
Under the Regulation (EU) 2024/1860 extension, the IVDR transition period ends for class D in vitro diagnostics (the highest-risk tier, e.g. blood-screening and high-consequence infectious-disease assays).
EU MDR — transition ends for medium/lower-risk legacy devices
The MDR transition period ends for other legacy devices under the Regulation (EU) 2023/607 extension — class IIb (other than the 2027 group), class IIa, and class Im, Is, and Ir devices.
EU IVDR — transition ends for class C IVDs
Under the Regulation (EU) 2024/1860 extension, the IVDR transition period ends for class C in vitro diagnostics (e.g. many companion diagnostics and infectious-disease tests below class D).
EU IVDR — transition ends for class B and class A sterile IVDs
The final IVDR transition tranche under Regulation (EU) 2024/1860 ends for class B and class A sterile in vitro diagnostics — the last legacy IVDs move fully under the IVDR.
Already landed — and still being adopted.
Recent changes that are now operative but where implementation is still maturing across the industry.
FDA QMSR takes effect (21 CFR 820 ↔ ISO 13485)
The Quality Management System Regulation (QMSR) replaced the Quality System Regulation, amending 21 CFR Part 820 to incorporate ISO 13485:2016 by reference. FDA device inspections retired the QSIT approach on the same date in favour of the updated compliance program.
FDA finalizes Computer Software Assurance (CSA) guidance
FDA issued the final "Computer Software Assurance for Production and Quality System Software" guidance, formalizing a risk-based, least-burdensome alternative to traditional computer system validation for production and quality-system software (draft first published September 2022).
EU AI Act — general-purpose AI rules apply
Obligations for providers of general-purpose AI models began to apply under Regulation (EU) 2024/1689, including transparency, technical documentation, and — for models with systemic risk — additional evaluation and risk-mitigation duties.
ICH E6(R3) Good Clinical Practice applies in the EU
The modernized ICH E6(R3) GCP guideline (principles + Annex 1) came into effect for clinical trials in the EU after EMA adoption. E6(R3) reframes GCP around quality-by-design, proportionate risk-based approaches, and data governance; Annex 2 (decentralized/pragmatic designs) follows.
EU AI Act — prohibited AI practices banned
The first AI Act obligations took effect: unacceptable-risk AI practices (e.g. social scoring, certain manipulative or exploitative systems) became prohibited, and organizations must ensure staff AI literacy.
Forward-case themes to track.
Beyond fixed dates, these are the currents reshaping how GxP work gets done — a SPEQ reading, each linked to a deeper page.
AI & machine learning in GxP
The joint FDA + EMA Good AI Practice principles fold AI into validation, data integrity, and the quality system — the fastest-moving theme across every regulated industry.
Go deeper →Computer Software Assurance & digital validation
CSA reframes computer system validation around patient-safety risk and least-burdensome assurance — the industry pivot from script-heavy CSV to risk-based CSA is underway.
Go deeper →Decentralized & hybrid clinical trials
ICH E6(R3) and its forthcoming Annex 2 push GCP toward quality-by-design, decentralized elements, and real-world data — reshaping how trials are run and monitored.
Go deeper →Data integrity in the cloud era
As records move to SaaS and AI pipelines, ALCOA+ expectations extend to cloud audit trails, vendor qualification, and model data provenance — a durable inspection focus.
Go deeper →Milestone dates are cited to primary regulator sources. The “SPEQ take” notes and the forward-case themes are SPEQ interpretation, not regulator guidance.
Turn the horizon into a plan.
Track live rulemaking as it publishes, or baseline where your quality system stands before the next date lands.