Key Changes and Implementation Challenges of ISO 10993-1:2025 in Medical Device Biocompatibility

ISO 10993-1:2025 – What’s Changed and Why It Matters Now

ISO 10993-1:2025 is a major update to the core global standard that guides biocompatibility evaluation for medical devices. If you’re responsible for regulatory compliance, material selection, or submission strategies, these changes aren’t just academic—they affect how you prepare files, justify safety, plan testing, and keep products on the market.

This article breaks down the most important updates, highlights specific challenges for manufacturers, and gives straightforward tips for adapting to the new requirements—both in day-to-day practice and when navigating regional regulatory differences.

The Shift: From Checklist Testing to Risk-Based Biological Evaluation

The previous version of ISO 10993-1 encouraged a tabular approach: select your device category, follow Table A.1, and run the listed tests. In practice, this led many companies to treat biological evaluation as a series of checkboxes, not a scientific risk assessment.

With ISO 10993-1:2025, the old table-driven mentality is out. The new requirement is a documented, risk-managed process that integrates:

• Early and extensive material characterization
• Chemical, toxicological, and biological risk assessment based on actual device use
• Robust scientific justification for any testing omitted or replaced
• Ongoing, lifecycle-based evaluation

Compliance is now based on “what are the risks with this actual device based on materials, contacts, and exposure”—not just “what tests are required for this category.”

Eight Key Changes in ISO 10993-1:2025

1. Lifecycle-Risk Alignment with ISO 14971

Biological evaluation is now explicitly tied to the device’s risk management plan. Manufacturers must start risk assessment at the earliest stage—material selection—and carry it through development, manufacturing, and post-market surveillance. Biological risk should be managed just like electrical or software risk.

2. New Categorization By Contact Type

Device categorization moves away from surface/implant labels. Instead, devices are placed into four groups based on:

• Intact skin
• Mucosal surface
• Compromised surface or internal tissue
• Blood contact

Duration is defined by actual total patient exposure—not by use per day. Multiple short uses across days sum together, which may push a device into a longer duration category and increase evaluation needs.

3. Reasonably Foreseeable Misuse

Manufacturers must assess biological risks not just for intended use, but also for “reasonably foreseeable misuse.” This could mean:

• Devices used for longer than labeled duration
• Contact with non-target tissues during real-world use

This goes beyond IFU claims—regulators expect risk analysis of predictable off-label scenarios.

4. Material Characterization and Chemical Assessment First

Testing no longer starts with cytotoxicity or irritation panels. Before any biological testing, manufacturers must characterize materials, quantify extractables/leachables, and build a toxicological risk profile. Testing is then targeted to fill specific evidence gaps.

5. Major Revamp of Biological Evaluation Matrices

Table A.1 is gone—replaced by four separate matrices (one per contact type). Columns and required endpoints have changed:

• Genotoxicity: Evaluation now required for any tissue but intact skin if contact is >24 hours (prolonged or permanent contact)—broader than before.
• Carcinogenicity: Extended to some long-term mucosal devices.
• Systemic toxicity: Acute, sub-acute, sub-chronic, and chronic columns are merged; now it’s a single column with duration-dependent requirements.
• Material-mediated pyrogenicity: No longer a table checkbox; only addressed where specifically justified.
• “Implantation effects” are replaced with “local effects after tissue contact,” expanding attention to non-implants with significant exposure.

6. Prioritization of Alternative (Non-Animal) Methods

The standard actively encourages use of in vitro and computational methods before in vivo animal tests. In vivo is a last resort. However, some regulators (notably the FDA) still require animal data for certain endpoints, causing regulatory friction.

7. Higher Expectation for Scientific Justification

It’s not about running more tests—it’s about stronger, clearer evidence. Manufacturers must:

• Document rationale for all evaluation choices
• Explain why certain tests are omitted or are not relevant
• Provide integrated chemical/biological/toxicological reasoning, not just accumulate reports

8. Increased Documentation and Evidence Burden

Biological Evaluation Plans (BEPs) and Reports (BERs) now need to:

• Lay out the entire risk-based justification
• Embed material, chemical, and toxicological data
• Be traceable to risk management files and design controls

Practical Implementation Challenges for Manufacturers

These changes bring both technical and organizational hurdles—especially during the first years of transition.

Adapting Biological Evaluation and Testing Workflows

• Early material data is now mandatory. Delays in getting full characterization hold up biological risk assessment and regulatory submissions.
• Not all suppliers can deliver detailed composition. This is especially true for legacy devices and third-party components.
• Complex devices (combinations, multi-material, colorants, coatings) pose practical problems in building a complete chemical profile.

Re-categorization and Increased Test Triggers

• Many reusable or multi-use devices now require risk evaluation based on cumulative exposure time, not isolated sessions. This can move devices into higher risk categories with stricter requirements.
• Devices previously considered “short-term” may require genotoxicity or carcinogenicity evaluation if total exposure increases.

Rethinking Strategies for Legacy Devices

• Retesting is not automatic for legacy devices, but records must support the new risk-based justification. Gaps may require more data or updated scientific arguments.
• Some legacy files may be challenged during audits—even if the original testing met prior versions of the standard.
• Obtaining composition or extractables data for old devices is often difficult and may require collaboration with supply chains or even reverse engineering.

Documentation and Regulatory Submissions

• Submissions must now include structured BEPs/BEPs with explicit risk management linkage.
• Justifications must be clear for every risk consideration—even for devices with “well-known” safety histories.
• More involvement from toxicologists or risk assessment specialists is often required to interpret complex data.

Global Regulatory Divergence: Not All Markets Move Together

ISO 10993-1:2025 is a global standard, but in practice, different regulators interpret and adopt changes in their own timelines. This leads to several problems:

If you market in multiple regions, you must:

• Monitor adoption status in each market
• Prepare documentation that allows for regional overlays on a core BEP/BER
• Avoid assuming one-size-fits-all compliance

What to Do Next: Practical Steps for Regulatory Teams

1. Review and Update Your BEP Template
   • Include lifecycle risk logic, trace to ISO 14971, and make space for scientific justification.
2. Audit Your Material Characterization Process
   • Work with suppliers early to get all composition and extractable data, not just regulatory declarations.
3. Map Device Portfolios for Recategorization Risk
   • Identify devices at risk of increased duration classification or new required endpoints.
4. Reassess Legacy Device Files
   • Check if legacy data is enough under the new logic—add scientific rationale, literature data, or new tests if necessary.
5. Engage Toxicology Expertise Early
   • Risk evaluations, especially for complex materials or ambiguous extractables, often require professional toxicological input.
6. Create Region-Specific Overlays for Global Submissions
   • Adopt a core biological evaluation structure and add local requirements as overlays for each regulatory region.
7. Plan for More Frequent Post-Market Review
   • The lifecycle approach means ongoing biological assessment—track device/material changes and update biologic risk files as needed.

Conclusion: Compliance Is a Process, Not a Checkbox

The 2025 update to ISO 10993-1 sets a new bar for medical device biological evaluation—one grounded in science, lifecycle risk, and transparent justification. It will make files longer, not always testing more, but will demand more cross-functional collaboration and regulatory attention. Early, active adaptation is the only realistic way to avoid disruptions and maintain access in multiple markets.