The 2026 Regulatory Horizon: EU AI Act Deferral, US EtO Rollback and the Packaging Rules Exporters Must Plan Around
Regulatory timing in medical devices has become the single biggest source of planning risk for exporters. In 2026, three separate tracks are moving at once, and each one rewards preparation rather than reaction: the EU AI Act's high-risk obligations were deferred but not cancelled, the US EPA's ethylene oxide (EtO) sterilisation rule is being rolled back while supply chains already restructured around it, and EU packaging and extended producer responsibility duties are now fully applicable. For anyone buying or supplying single-use medical consumables, understanding how these three interact is no longer optional.
1. EU AI Act: the high-risk clock moved — it did not stop
Under the original AI Act timetable, the main high-risk obligations were due to apply from 2 August 2026. The Commission's Digital Omnibus on AI, agreed in May 2026 and published as Regulation (EU) 2026/1744, deferred them rather than removing them: obligations for Annex III stand-alone high-risk systems now apply from 2 December 2027, and obligations for Annex I product-embedded high-risk AI — where AI sits inside a regulated product such as a medical device requiring notified body involvement — move to 2 December 2028.
Two obligations did not slip and are already binding. Article 50 transparency duties have applied since 2 August 2026: if a device or service interacts with a user, users must be told they are dealing with an AI system. Article 4 AI literacy applies to providers and deployers alike, meaning staff handling AI-enabled devices need documented training.
The practical read for medical device exporters: the 14-month runway is a genuine gift, but only if it is used. Most Annex I devices will not need a notified body for the AI component itself, yet the MDR conformity assessment, technical documentation and post-market surveillance around the AI function all still apply. Build the AI risk file now — data governance, intended purpose, performance monitoring — and the December 2028 date becomes a formality rather than a fire drill.
2. US EtO sterilisation: the rules are loosening, the cost already went up
Ethylene oxide remains the dominant sterilant for a large share of single-use medical devices, particularly those made from plastics and multi-layer films that cannot survive gamma or e-beam processing. That makes EPA's air-quality regulation of EtO commercial sterilisation facilities a direct medical supply issue, not an environmental one.
The 2024 NESHAP final rule required most steriliser facilities to cut emissions and install continuous emissions monitoring, with compliance due by 6 April 2026. On 17 March 2026, EPA published a proposed reconsideration that would rescind the risk-based standards, revise the aeration-room vent standard resulting from the earlier technology review, and revise the compliance-demonstration requirements. EPA extended the comment period, and industry groups including the American Chemistry Council have pressed the agency to complete a full repeal rather than a partial reconsideration.
What this means commercially is more interesting than the regulatory headline. Facility operators have already committed capital to monitoring and control upgrades under the 2024 rule; litigation from environmental groups remains pending; and states such as California are pursuing their own EtO rules independently of EPA. Expect continued regional cost variance rather than a uniform relief. Buyers who switched suppliers to avoid EtO-regulatory risk in 2025 should re-evaluate: qualified capacity is scarce, and a second-source qualification cycle is expensive in both time and validation documents.
3. The connecting thread: audit the substance, not the certificate
All three regulatory shifts reward a supplier that can document substance. Buyers evaluating any disposable medical consumables vendor should verify: which sterilisation modality each product uses and where it is performed; whether the supplier holds ISO 13485 and current MDR conformity, with technical documentation available for audit; and whether packaging weight and material composition are declared so EPR obligations can be discharged downstream.
That last point has become a hard gate rather than a preference. The EU Packaging and Packaging Waste Regulation (EU) 2025/40 has been fully applicable since 12 August 2026, combining packaging minimisation duties with the extended producer responsibility regime. A supplier who cannot state their packaging bill of materials by weight and material type cannot support a customer who must register with a producer responsibility organisation and report quantities placed on the market.
A practical Q4 2026 checklist
- AI-enabled products: confirm Article 50 disclosure and Article 4 training are in place now; start the Annex I AI technical file well ahead of December 2028.
- Sterilisation: ask each supplier to name the sterilisation modality and facility location. Treat US EtO capacity as regionally variable and re-verify second sources rather than assuming the 2025 landscape still holds.
- Packaging data: require a per-SKU packaging bill of materials. Without it, your EPR registration and reporting will fail regardless of your product quality.
- Quality system depth: ask for the risk management file, not just the certificate. The FDA QMSR now in force since 2 February 2026 incorporates ISO 13485 by reference, which means certification without demonstrated risk-based practice will not survive an inspection.
Suppliers who treat these as preparation work rather than paperwork tend to be the ones that keep their customers in supply. For buyers building 2027 frameworks, that reliability is worth more than a nominally lower unit price.
Wehere Medical operates an ISO 13485:2016-certified quality management system across three own factories and a network of more than 45 audited partner factories, covering 2,500+ products shipped to 50+ countries. Our regulatory team documents sterilisation modality by reference, MDR conformity and packaging data for EPR reporting — with 24-hour response on active inquiries.
Related Links — Authoritative Sources
- European Commission — AI Act regulatory framework
- EUR-Lex — Regulation (EU) 2024/1689 (Artificial Intelligence Act)
- U.S. EPA — Ethylene Oxide Commercial Sterilization NESHAP
- Federal Register — EtO Commercial Sterilization Final Rule (March 2024)
- European Commission — Packaging and Packaging Waste
- EUR-Lex — Regulation (EU) 2025/40 (PPWR)