Wearable Health Devices and Remote Patient Monitoring: The Regulatory Grey Zone
Continuous glucose monitors, ECG-capable smartwatches, and remote monitoring dashboards that flag an abnormal heart rhythm to a treating doctor have moved from novelty to routine clinical tool in a short span of time. What has not kept equal pace is clarity about which of these products actually count as regulated medical devices in India, and which stay outside CDSCO’s reach as general wellness gadgets.
The Line Between a Wellness Gadget and a Medical Device
Under the Medical Device Rules, 2017, a device is regulated if it is intended by its manufacturer for a medical purpose, such as diagnosis, monitoring, prevention, or treatment of disease. Since 2020, India has followed a principles-based approach where this definition applies to any device meeting that intent, not just to a pre-notified list of categories, and it explicitly includes software and accessories alongside physical hardware.
In practice, this means a step counter marketed purely for general fitness is unlikely to be treated as a medical device, while a wrist-worn sensor marketed to detect atrial fibrillation, or a continuous glucose monitor intended to guide insulin dosing, falls squarely within CDSCO’s regulatory net because of the medical claim attached to it.
How CDSCO Classifies These Devices
CDSCO uses a four-tier, risk-based classification running from Class A, the lowest risk, to Class D, the highest. Most non-invasive continuous monitors, including many wearable ECG and vitals-tracking devices, fall into Class B or C. Remote patient monitoring software that simply flags abnormal readings for a clinician to review typically sits in Class B or C as well, while software that goes further and autonomously generates a diagnosis or recommends a medication change is pushed into Class C or higher and requires central licensing.
Class A and B devices are licensed through state licensing authorities, while Class C and D devices require central licensing through CDSCO. Manufacturers file applications through the SUGAM portal, using Form MD-14 or MD-15 depending on class, and receive licences on Form MD-5 or MD-6 that remain valid for five years.
Software as a Medical Device: The 2026 Clarification
A major source of the earlier confusion was that CDSCO had not clearly separated embedded device firmware from standalone health software. That changed with CDSCO’s Medical Device Software guidance, first circulated as a draft in October 2025 and finalised in mid-2026, which draws a clear line between Software in a Medical Device, meaning firmware inseparable from hardware such as a pacemaker, and Software as a Medical Device, meaning standalone software performing a medical function on its own, such as a remote monitoring dashboard or an AI-based triage app.
The finalised guidance explicitly brings AI-enabled monitoring tools, IoT-connected wearables, and digital therapeutics within scope when they are intended for a medical purpose, while keeping general wellness, fitness, and pure administrative software outside it. It also raises the compliance bar in ways clinics and vendors should note: a documented quality management system aligned with standards such as IEC 62304 and ISO 14971, cybersecurity risk management, a software bill of materials, and ongoing post-market performance monitoring.
What Clinics Buying or Prescribing These Devices Should Check
Before recommending or integrating a wearable or RPM platform into patient care, clinics should confirm the vendor holds a valid CDSCO licence appropriate to the device’s risk class, rather than relying on FDA or CE marking alone, since those approvals do not automatically extend to the Indian market. Clinics should also check that any patient data collected through these platforms is handled in line with the Digital Personal Data Protection Rules, 2025, particularly where data is processed or stored outside India.
Where an RPM platform is used to bill remote monitoring services or integrate with ABDM-linked health records, confirming the vendor’s regulatory status protects both patient safety and the clinic’s own compliance position if a device malfunction or data issue is later questioned.
Conclusion
The regulatory grey zone around wearables is narrowing rather than widening. With CDSCO’s finalised software guidance now in place, clinics adopting remote monitoring tools have a clearer basis to ask vendors the right classification and licensing questions before rollout, rather than treating every wearable as either fully regulated or entirely exempt by default.
Researched Resources
1. Smart Wearables in India: An Overview of the Regulatory Framework
2. HealthTech IoT Remote Patient Monitoring Platform Contracts
3. CDSCO Medical Device Registration in India: What’s Changed in 2026
4. Wearable Technology in Healthcare: FDA, CE & CDSCO Compliance Guide
Disclaimer: This article is for general informational and educational purposes and reflects CDSCO’s medical device software and wearable classification framework as understood at the time of writing; risk classifications and licensing timelines continue to evolve. It is not regulatory or legal advice, and clinics and vendors should confirm specific device classification directly with CDSCO or a qualified regulatory consultant.
Vivek Chaudhary is a Technical Content Developer specializing in healthcare, health technology, and digital healthcare business solutions. He creates research-driven, SEO-focused content for doctors, clinics, hospitals, healthcare professionals, and patients, covering topics such as healthcare technology, patient engagement, clinic management, digital communication, and online visibility.
