ISO 14971:2019/Amd 1:2024

Amendment 1 is a clarification, not a rewrite. The 2019 process — risk analysis, evaluation, control, residual-risk evaluation, overall benefit–risk, production and post-production information — stands. The amendment sharpens vocabulary around 'benefit', 'risk–benefit analysis' vs 'benefit–risk analysis', and how the manufacturer must justify that residual risk is acceptable in relation to clinical benefit.

• Defined 'benefit' more crisply and aligned with EU MDR Annex I §1 and §8 language.
• Replaced 'risk/benefit analysis' with 'benefit–risk analysis' throughout, matching ICH and EU usage.
• Clarified the 'overall residual risk' evaluation: it is a single conclusion about the device, not a sum of individual residual risks.
• Tightened the link between the Risk Management Plan, Risk Management File and the Clinical Evaluation Report — benefits stated in the RMF must be supported by clinical evidence.
• Made explicit that risk control decisions cannot be justified by economic considerations alone (already implicit in 2019; now stated).

EU MDR (Reg 2017/745) and IVDR (Reg 2017/746) raised the bar on benefit–risk justification across the technical documentation. Notified Bodies and competent authorities saw widespread mismatches between RMF benefit claims and clinical evidence. The amendment closes that loop. It is also a small step toward future EU harmonisation: ISO 14971:2019 is on the harmonised-standards list but with caveats; Amd 1:2024 narrows those gaps.

1. Update the Risk Management Plan template to use 'benefit–risk' terminology and reference Amd 1:2024.
2. Restate benefit claims in the RMF in terms supported by the Clinical Evaluation Report or Performance Evaluation Report.
3. Re-evaluate the overall residual risk conclusion as a single statement, with traceability to all risk-control measures.
4. Refresh design-input and post-market surveillance procedures so feedback loops back into the RMF.
5. Train risk-management, clinical, regulatory and post-market teams on the new vocabulary — Notified Bodies will probe.

ISO 14971:2019/Amd 1:2024 was published in 2024. ISO does not prescribe a transition window; the operational timeline is set by Notified Bodies and EU harmonised-standards listing updates. Practical expectation: new submissions and Notified-Body surveillance audits in 2025 onward reference the amended text. Existing RMFs should be refreshed at the next scheduled review or trigger event (significant change, post-market signal, periodic safety update report).

• Treating Amd 1 as a paperwork change — Notified Bodies are using it to challenge the substance of benefit claims.
• Stating benefits in the RMF that the Clinical Evaluation does not support.
• Computing 'overall residual risk' as an arithmetic roll-up of individual residual risks instead of a holistic conclusion.
• Failing to update the Risk Management Plan signature page — auditors flag a stale plan immediately.
• Inconsistent terminology across RMF, CER, IFU and labelling.

ISO/TR 24971:2020 is the application guidance for ISO 14971. It is not amended in 2024, but its examples and worked methods remain the operational reference. Expect a future TR revision to fold in Amd 1 language; until then, manufacturers should treat the TR as guidance and Amd 1 as the binding clarification.

FDA recognises ISO 14971:2019 as a consensus standard for risk management. FDA does not separately recognise Amd 1:2024 yet as of mid-2026; submissions citing ISO 14971:2019 remain acceptable. Manufacturers selling into both EU and US can adopt Amd 1 unilaterally; the FDA pathway is unaffected, the EU pathway benefits.