Blue Goat CyberSMMedical Device Cybersecurity
    K
    Podcast · Episode 40

    What Happens When AI in Medical Devices Make Mistakes?

    With MedTech leader - MedTech manufacturers and developers, what happens if your AI-powered medical device makes a terrible, life-threatening mistake? This episode explores what happens when artificial intelligence in medical devices goes wrong.

    Christian Espinosa, Founder & CEO at Blue Goat Cyber

    By Christian Espinosa, MBA, CISSP

    Founder & CEO · Blue Goat Cyber

    Listen now

    Key takeaways

    • AI in medical devices presents both innovation and risk, particularly in diagnostic and therapeutic applications.
    • The EU AI Act and Medical Device Coordination Group (MDCG) guidance provide regulatory frameworks for AI in medical devices, emphasizing safety and security.
    • Real-world cases highlight the critical need for robust AI governance, especially in sensitive areas like mental health support.
    • The FDA does not currently have specific regulations for AI in medical devices; general medical device regulations apply.
    • The episode emphasizes securing AI systems to prevent unintended consequences and ensure patient safety.

    MedTech manufacturers and developers, what happens if your AI-powered medical device makes a terrible, life-threatening mistake?

    This episode explores what happens when artificial intelligence in medical devices goes wrong. Christian Espinosa and Trevor Slattery break down the real-world consequences of AI failure, using a tragic mental health chatbot case to highlight the stakes of inadequate oversight. They also examine the EU AI Act, new MDCG guidance, and the ethical, regulatory, and cybersecurity challenges facing innovators in the high-risk medical AI space.

    Key points:

    (03:02) The EU AI Act and how it intersects with the MDR and IVDR.

    (03:55) A real case study involving a suicidal patient and an AI mental health chatbot.

    (06:07) How general-purpose AI tools differ from regulated medical AI.

    (09:57) Why threat modeling should apply to AI systems.

    (12:16) Ethical decision-making in autonomous systems using self-driving car analogies.

    (14:02) The Medical Device Coordination Group’s guidance on aligning the AI Act with EU medical device regulations.

    (17:10) Shared accountability across regulators, manufacturers, and users for AI oversight.

    (18:35) The U.S. still treats AI as a “Wild West” compared to the EU’s stricter approach.

    (22:42) Regulators aren’t asking if your AI works - they’re asking how it fails.

    Notable quotes

    “What happens when AI gets it wrong in the medical context? This can mean someone's life is on the line, so AI making a decision, trying to step in as the place of diagnosis or therapy provision, is a little bit of a dangerous territory.”
    - Trevor Slattery
    “The EU AI Act and then some of the new guidance pushed out by the Medical Device Coordination Group in the EU... it all ties into medical device safety.”
    - Trevor Slattery
    “There was a medical device manufacturer that has a mental health application that has an AI-based chatbot... the AI-based chatbot told the patient, 'You should commit suicide.'”
    - Christian Espinosa

    Frequently asked questions

    Bring this work to your device

    Need help with threat modeling?

    Blue Goat Cyber delivers medical device threat modeling for medical device manufacturers - from threat modeling to FDA-ready reports.

    Medical Device Threat Modeling

    More on Threat Modeling

    Ready when you are

    Get FDA cleared without the cybersecurity headaches.

    30-minute strategy session. No cost, no commitment - just answers from people who've shipped 250+ FDA submissions.