The Consolidated Appropriations Act of 2023 (Omnibus) amended the Federal Food, Drug, and Cosmetic Act to require medical device manufacturers to address cybersecurity. As of March 29, 2023, they must provide cybersecurity details in premarket submissions. The Omnibus mandates plans for postmarket cybersecurity vulnerabilities, device cybersecurity demonstrations, and software bill of materials (SBOM) disclosures. Starting October 1, 2023, the FDA will reject submissions not meeting cybersecurity criteria, emphasizing proactive cybersecurity measures.

AMA urges lawmakers to implement safeguards on AI chatbots
Though chatbots could have some benefits for mental health access, the physician lobby argued “immediate attention is required” to avoid harming patients looking for support.


