CFCM · Intelligence

Clinical Flow AI Under the EU AI Act

The regulatory question begins with intended purpose and the product's role. An accuracy score cannot determine the legal classification.

Original CFCM report: 17 August 2026. Expanded for pre-launch review; this is not a retrospective web-publication date.

Primary evidence

Regulatory sources: Regulation (EU) 2024/1689, consolidated 27 July 2026, especially Articles 6 and 113 and Annex I; European Commission implementation guidance. The amended timeline distinguishes Annex III high-risk systems (2 December 2027) from Article 6(1)/Annex I high-risk systems (2 August 2028). A blanket claim that every high-risk clinical AI obligation began in August 2026 is incorrect.

What it actually demonstrates

Article 6(1) links high-risk status to an AI system that is a covered product or its safety component, and a third-party conformity-assessment requirement under the relevant product legislation. Medical-device and IVD frameworks appear in Annex I. Application depends on the particular intended purpose and conformity route, not simply whether a laboratory uses the software.

Evidence boundary

This is regulatory analysis, not a certification of a particular cytometry application. Research exploration, clinical decision support and an IVD diagnostic product can have different legal contexts. A human reviewer or a 'research use' label is not enough by itself to settle the classification. The extended high-risk timetable does not suspend other applicable product, privacy or AI Act obligations.

What changes in practice

CFCM governance framework: maintain an inventory of each model, version, supplier, clinical purpose and deployment context. Record who supplies and who uses the system, what output reaches the clinical report, and what happens when the output is unreliable. Link the legal assessment to the actual workflow. Keep technical evaluation, human oversight, incident handling and change control reviewable, with responsibilities assigned rather than implied.

CFCM view

The best preparation is evidence that remains useful whether a system falls into a particular legal category or not: traceable inputs, documented limitations, representative evaluation and controlled changes. Treat current legislation as a versioned source. Recheck the consolidated text before procurement or deployment decisions, especially when the intended purpose or software changes.

References and source classification

EU AI Act — consolidated legal text →European Commission — implementation timeline →

About the author

Juan Manuel Ojeda — Founder & Editor, CFCM

Professional background: Juan Manuel Ojeda has professional experience with Sysmex España in clinical flow cytometry and now works as a freelance consultant. CFCM is his independent editorial project; its views do not represent Sysmex or imply company endorsement. The same evidence standard applies to all manufacturers.

Related: validation and analysis resources →Clinical Notes →

Expanded web version and source-check pass: 19 September 2026. EU regulatory sources rechecked on 23 September 2026. This was not independent scientific review. The original-report date is preserved separately above.