Naomi Schwartz, Medcrypt
[Image by Angelov via Stock.Adobe.com]
As of Oct. 1, 2023, the FDA enacted its Cybersecurity Refuse to Accept (RTA) policy, turning away any medical devices that do not meet its premarket and postmarket cybersecurity guidance. And earlier, in June 2023 the FDA released final guidance about the Electronic Submission Template and Resource (eSTAR) program which requires all relevant cybersecurity information to be completed, effectively signaling a new era of regulatory accountability.With the FDA’s increased cybersecurity authority and resulting enforcement, medical device manufacturers must now comply with FDA mandates. In years leading up to recent regulations, the FDA used a more idiosyncratic and educative carrot approach, providing guidance and…