AI Medical Diagnosis Compliance
compliance

AI Medical Diagnosis: What German Providers Need to Know

Diagnostic AI saves lives. It can also cause serious harm when it fails. That’s why the EU AI Act classifies medical diagnostic AI as high-risk—and why compliance matters so much.

For German healthcare providers and medtech companies, AI Act requirements layer onto existing Medical Device Regulation (MDR) obligations.

Why Diagnostic AI Is High-Risk

Any AI that qualifies as a medical device under the MDR is automatically high-risk under the AI Act. This includes diagnostic imaging analysis, clinical decision support systems, symptom checkers with diagnostic outputs, pathology analysis, and radiology AI.

The classification is explicit in Annex III: AI systems intended as safety components of products covered by EU product safety legislation are high-risk.

MDR and AI Act Integration

Here’s the good news: if you’ve completed MDR conformity assessment, you don’t need a separate AI Act conformity assessment. The notified body process for medical devices now incorporates AI Act requirements.

But you still need to meet the substantive requirements—risk management, data governance, human oversight, technical documentation. MDR compliance doesn’t automatically satisfy every AI Act obligation.

Human Oversight in Healthcare

Diagnostic AI must support, not replace, clinical judgment. The AI Act requires that qualified humans can interpret AI outputs, understand system limitations, identify potential errors, and override recommendations when appropriate.

This aligns with existing clinical practice—but it needs to be documented and systematic.

What This Means Practically

For healthcare organizations using or developing diagnostic AI, compliance requires mapping AI systems against both MDR and AI Act requirements, ensuring notified body processes address AI-specific risks, documenting human oversight procedures, and maintaining risk management throughout the AI lifecycle.

How Compound Law Helps

  • Integrated MDR and AI Act compliance assessment
  • Notified body coordination
  • Clinical AI risk management frameworks
  • Documentation support for dual compliance
  • Ongoing monitoring as requirements evolve

Frequently Asked Questions

Is our radiology AI high-risk? Almost certainly yes. AI that analyzes medical images for diagnostic purposes is high-risk under both MDR and AI Act.

Do we need two conformity assessments? No. MDR conformity assessment is recognized for AI Act purposes, but must address AI-specific requirements.

What about AI for clinical research only? Research AI has more flexibility, but clinical application triggers full medical device and AI Act compliance.

The August 2025 transparency deadline and August 2026 high-risk deadline are approaching. For further reading, see our guides on AI drug discovery compliance and AI risk assessment.

Related Compliance Guides

Anthropic GDPR compliance overview for companies deploying Claude in Germany
Guides

Is Anthropic GDPR Compliant? Complete Compliance Guide

Anthropic GDPR compliance explained: DPA, SCCs, EU data residency, ZDR, certifications, and what German companies must verify before deploying Claude.

AI hiring tools EU AI Act GDPR compliance guide Germany
compliance

AI Hiring Tools in Germany: EU AI Act & GDPR Compliance Guide (2026)

AI hiring tools are high-risk under EU AI Act Annex III. This guide covers GDPR, works council rights, and the August 2026 deadline for German companies.

AI tools compliance guide for law firms in Germany: BRAO and GDPR
compliance

AI Tools for Law Firms in Germany: BRAO & GDPR Guide

Can German lawyers use AI? This guide covers BRAO §43e attorney-client privilege, GDPR DPA requirements, and a provider comparison table.

Frequently asked questions

Is our radiology AI high-risk?

Almost certainly yes. AI that analyzes medical images for diagnostic purposes is high-risk under both MDR and AI Act.

Do we need two conformity assessments?

No. MDR conformity assessment is recognized for AI Act purposes, but must address AI-specific requirements.

What about AI for clinical research only?

Research AI has more flexibility, but clinical application triggers full medical device and AI Act compliance. The August 2025 transparency deadline and [August 2026 high-risk deadline](/en-DE/compliance/eu-ai-act-august-2026-deadline-checklist/) are approaching. For further reading, see our guides on [AI drug discovery compliance](/en-DE/compliance/ai-drug-discovery/) and [AI risk assessment](/en-DE/compliance/ai-risk-assessment/).

Book Free Call