FDA Expands Criteria for Digital Mental Health Product Approvals

The FDA released updated draft guidance in December 2023 that outlines expectations for digital therapeutics aimed at mental health conditions. The document covers clinical study design, device classification pathways, and ongoing safety monitoring. These recommendations build on earlier agency positions about software-based medical devices.

Clinical Evidence Requirements

The guidance stresses that studies supporting these products must match the intended user population in size and scope. Sponsors need to select endpoints that directly address the mental health target. Appropriate powering of trials helps demonstrate both safety and effectiveness under real-world conditions.

Device Classification Pathways

Digital therapeutics for psychiatric indications can follow either the de novo route or the 510(k) process. Classification depends on how novel the software function is and the level of risk it presents. The agency provides examples that tie risk level to the specific claims made by the product.

Postmarket and Cybersecurity Expectations

Sponsors must maintain systems that track software performance, cybersecurity incidents, and clinical outcomes after market entry. The guidance references separate documents on postmarket cybersecurity management for medical devices. Continuous surveillance allows the agency to identify issues that emerge once broader use begins.

What this means

The updates give developers clearer benchmarks for evidence generation and risk management when seeking marketing authorization. They also reinforce the need for sustained monitoring after approval or clearance. The framework applies to products that collect remote data or deliver interventions through software.

Key takeaways

• FDA guidance from December 2023 specifies clinical trial design standards for digital mental health products [1].
• Classification may occur through de novo or 510(k) pathways based on novelty and risk [3].
• Postmarket surveillance must cover software function, cybersecurity, and clinical effectiveness [2].
• Requirements address both remote data acquisition and software interventions treated as devices [1].
• The documents represent draft or final guidance rather than binding regulations.

Limitations

These materials are guidance documents that may change with additional public input. They focus on regulatory expectations in the United States and do not cover clinical practice standards or requirements in other countries.

Last updated: September 3, 2026