Company: DARE
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001401914-25-000012
Chunk: 136

Company: Dare Bioscience, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 136
---
 In recent years, the FDA has increased its scrutiny of this issue as part of the review and marketing authorization process for new medical devices; the agency also monitors reports of cybersecurity risks as part of its post-marketing device surveillance activities. In addition, as part of the Consolidated Appropriations Act for 2023, Congress created new premarket requirements for developers of “cyber devices,” defined as medical devices that include software, connect to the internet, and contain any technological features that could be vulnerable to cybersecurity threats.  

Medical devices are classified into one of three classes on the basis of the controls deemed by the FDA to be necessary to reasonably assure their safety and effectiveness. Class I devices are those low risk devices for which reasonable assurance of safety and effectiveness can be provided by adherence to the FDA’s general controls for medical devices, which include applicable portions of the FDA’s Quality System Regulation, or QSR; facility registration and product listing; reporting of adverse medical events and malfunctions; and appropriate, truthful and non-misleading labeling, advertising and promotional materials. Most Class I devices are exempt from premarket regulation; however, some Class I devices require premarket clearance by the FDA through the 510(k) process. Notably, the agency has issued a final rule called the Quality Management System Regulation, or QMSR, to harmonize the FDA's medical device current good manufacturing practice regulations with the International Organization for Standardization, or ISO, standard for device quality management systems (ISO 13485:2016). The effective date for the QMSR final rule is February 2, 2026. Until then, manufacturers are required to comply with QSR.

Class II devices are moderate risk devices and are subject to the FDA’s general controls, and any other special controls, such as performance standards, post-market surveillance, and FDA guidelines, deemed necessary by the FDA to provide reasonable assurance of the devices’ safety and effectiveness. Premarket review and clearance by the FDA for most Class II devices is accomplished through the 510(k) process, although some Class II devices are exempt from the 510(k) requirements. To obtain 510(k) clearance, a sponsor must submit to the FDA a premarket notification demonstrating that the device is substantially equivalent to a device that is already legally marketed in the United States and for which a PMA was not required (i.e., a Class II device). The device to which the sponsor’s device is compared for the purpose of determining substantial equivalence is called a “predicate device.” The FDA’s goal is