From Class III to Class II: What FDA’s DBT Reclassification Proposal Teaches MedTech Teams About Regulatory Maturity
On the 10th of August 2026, the FDA proposed reclassifying DBT (digital breast tomosynthesis) systems from Class III requiring PMA, to Class II with special controls and the 510(k) pathway. This article presents DBT as a case study of how an entire device category can evolve from a high-risk technology to a well-understood product class. It argues that a technology becomes more established from a regulatory perspective as evidence grows and its risks become better understood and easier to manage.
DBT Reclassification
Reclassifying DBT from Class III/PMA to Class II/510(k) shows a shift from a regulatory framework built for devices whose risks demand intensive premarket review to one built for devices whose risks are now understood well enough to be managed through established regulatory requirements.
The risk hasn't gone away; it simply became well-understood enough to control.
Factors that determine regulatory maturity
Medical technology achieves regulatory maturity through accumulated evidence rather than time alone. For DBT original PMA data and supplements, advisory panel reviews, peer-reviewed studies, recall history, post-market surveillance and adverse event reporting have established a reliable benefit-risk profile and enabled the definition of appropriate special controls. This data allows regulators to evaluate not just individual products, but the maturity of the entire technology category.
This has happened before: full-field digital mammography (FFDM) made the same move from Class III to Class II back in 2008, once an FDA panel decided its risks were well enough understood for special controls. Importantly, it demonstrates that the technology's risks are understood well enough to support a more proportionate regulatory approach.
Lessons for MedTech Companies
MedTech teams can learn from this case. DBT systems rely heavily on embedded software and image-reconstruction algorithms. The special controls FDA proposes for these devices typically include software validation and cybersecurity requirements, where strong engineering practices determine whether a product is ready for this less demanding regulatory pathway.
Organizations should build traceability into the development process, keep risk management linked to actual product changes, validate software according to its clinical significance, and treat change control as a core engineering discipline. Through the entire product lifecycle there should be continuous monitoring of post-market trends, maintaining documentation and ensuring evidence-continuity.
Summary
The same disciplines that helped DBT earn its Class II status are the ones any device team should be building toward long before a reclassification proposal ever appears.
In order to earn Class II status through regulatory maturity, three points companies should remember are evidence, risk management and consistent post-market performance.