Key points
- 1Health and Human Services Department published the final action “Medical Devices; Radiology Devices; Classification of the Radiological Machine Learning-Based Quantitative Imaging Software With Predetermined Change Control Plan.” Executive Office of the President published the official policy instrument “Promoting Advanced Artificial Intelligence Innovation and Security.” The legal effect of those events depends on their distinct posture, not their shared appearance in a monthly feed.[1][2]
- 2FDA’s classification of machine-learning quantitative imaging software and a presidential AI security directive show sector regulation and executive policy moving together. Product teams should separate the device’s legally operative classification from broader federal security priorities while designing one coherent control system.[1][2]
- 3The response should begin with a verifiable record of the authority that actually governs the matter, the operational facts, the accountable decision maker, and any event that requires the analysis to be refreshed. The background authorities collected here are context, not a conclusion that each governs every monthly development.[3][4]
June 2026: the record in view
The first in-window anchor is “Medical Devices; Radiology Devices; Classification of the Radiological Machine Learning-Based Quantitative Imaging Software With Predetermined Change Control Plan,” issued by Health and Human Services Department. The second is “Promoting Advanced Artificial Intelligence Innovation and Security,” issued by Executive Office of the President. Read together, they show the range of instruments, enforcement postures, and—where present—judicial authority that can shape this practice area during a single month.[1][2]
Neither a publication title nor an agency summary should be asked to carry more weight than its posture permits. A proposed action is not a final rule; a charging document states allegations; a settlement resolves a matter on negotiated terms; and a notice may initiate, explain, or complete only the procedure it identifies.[1][2]
The legal significance
FDA’s classification of machine-learning quantitative imaging software and a presidential AI security directive show sector regulation and executive policy moving together. Product teams should separate the device’s legally operative classification from broader federal security priorities while designing one coherent control system.[1][2]
FDA classified radiological machine-learning quantitative-imaging software with a predetermined change-control plan as a Class II device subject to special controls, supplying a codified pathway for a defined product category rather than a general AI rule. Executive Order 14409 separately directs federal cybersecurity actions, an AI clearinghouse, and development of a voluntary frontier-model framework while expressly rejecting mandatory licensing or preclearance in that framework.[1][2]
The practical question is not whether an organization uses “AI” in the abstract. It is which model performs which function, on whose data, with what consequence, subject to which human authority and sector-specific rule. The selected statutory, regulatory, or policy materials below provide background for recurring issues in this practice area; they may not govern every monthly development. Counsel must identify the operative authority for the particular facts before advising on scope, duties, or relief.[1][2][3][4]
A disciplined operating response
A defensible program therefore begins with use-case inventory and decision rights, then connects testing, data provenance, vendor terms, change control, incident response, and legal review to the risk created by that use.[1][3][4]
- Maintain a use-case register that identifies the model, data, decision, owner, affected population, and review trigger.[1][3]
- Document predeployment testing and postdeployment monitoring against the harm pathways relevant to the actual use.[2][4]
- Align vendor change notice, audit access, security, IP, and incident obligations with internal escalation rights.[1][2]
What to watch next
Distinguish requests for information, policy statements, guidance, proposed rules, final rules, settlements, and charging announcements. Their immediate legal force differs even when they point toward a common governance expectation.[1][2]
This June 2026 edition is an issue-spotting record, not a representation that every relevant authority was captured. The accepted ingest covered Federal Register and DOJ materials for the calendar month; case-law discovery, historical eCFR changes, dockets, corporate filings, and state sources remain subject to the limitations stated on this page.[1][2]