The PATIENT AI Act draft: a third-party FDA review path and a Medicare pathway, comments due December 1
Senator Cassidy's discussion draft is the first serious attempt to legislate how clinical AI gets reviewed and paid for. FDA lawyers say the review title mostly duplicates what the agency can already do.

Senator Bill Cassidy, the Louisiana physician who chairs the Senate Health, Education, Labor and Pensions Committee, released a discussion draft on October 29 called the Protecting Americans Through Intelligent, Ethical, and Transparent Artificial Intelligence in Health Care Act, or PATIENT AI Act. It asks for stakeholder feedback by December 1. It is a draft, not a bill, and it has no co-sponsors yet. It is also the most complete legislative sketch so far of how the US might regulate and pay for AI in clinical care, which is why it deserves a close read now rather than when it is introduced.
What is in it
The draft runs to 19 sections across several titles covering privacy, cybersecurity, liability, transparency, workforce training, datasets, health IT and Medicare coverage and payment for AI services. Health systems and medical schools have focused on the workforce and coverage pieces: HHS would be told to identify ways AI can improve outcomes and operations and to build training resources for clinicians, and CMS would get a pathway to make coverage determinations for AI-based services.
The FDA title has drawn the sharpest technical reading. Section 201 would create a voluntary preliminary review of individual software components of "integrated devices", with FDA directed to rely more on prior related reviews, though components would not receive standalone authorisation. Section 202 writes a risk-based approach to premarket review of software devices into statute and lets manufacturers submit predetermined change-control plans for changes made while a 510(k) or PMA is still under review. Section 203 sets up an accredited third-party review programme for low- and moderate-risk software devices across 510(k), de novo and PMA submissions. Section 204 is a voluntary pilot to modernise postmarket surveillance, coordinated with CMS on payment.
The lawyers' critique
In an analysis published November 8, Steven Gonzalez and Jennifer Newberger of Hyman, Phelps & McNamara argue that Title II largely duplicates authority FDA already exercises. The agency already applies risk-based review; it already accepts predetermined change-control plans; it already runs a third-party review programme. Component review, they note, still leaves the manufacturer filing a full submission, so it is unclear what is gained, and the draft is silent on whether component reviews carry a user fee. Change plans filed mid-review could create version-control and deadline problems under the MDUFA performance goals. Their conclusion is that the draft could add procedure without shortening the path to market.
That critique matters because the industry's real complaint is not the absence of pathways but their speed and predictability. FDA has now authorised well over a thousand AI-enabled devices, almost all through 510(k). The recent example of UpDoc, an LLM-enabled insulin-dosing assistant cleared in December 2025 by pairing a conversational model with a deterministic, clinician-configured dosing engine and a conventional predicate, shows the existing route can accommodate generative AI when the intended use is narrow. What it does not do well is handle models that update frequently or systems whose clinical role is broad, and the draft's component and change-plan ideas are aimed at exactly that gap, however imperfectly.
Why the Medicare title may matter more
For most health-AI companies the binding constraint is not clearance but payment. A statutory CMS pathway for coverage of AI services would be the first general mechanism for reimbursing software that does clinical work, replacing today's patchwork of new technology add-on payments and a handful of CPT codes. Investors have been asking for this since 2023; it is the provision most likely to change which products get built.
What to watch
The December 1 comment deadline, and who files. Whether a Democratic co-sponsor emerges, which would signal the draft is headed for introduction rather than the archive. Whether the FDA title is trimmed to the pieces lawyers cannot find in current law, chiefly component review and user-fee treatment. And how the draft interacts with the state AI laws and the federal pre-emption fight that defined 2026's AI policy calendar.
More in Health & medicine
All →
OpenAI's BioBasicsBench: AI agents score 66.7% on routine lab work, and the failures are the story
A new 100-task benchmark tests whether AI can read gels, plates and microscopy like a bench scientist. The headline score is decent; the error cases s…

After the midterms, the data-center backlash has votes behind it
Local measures against new AI data centers won across several states this week. The industry's response, from paying for its own power to warning of s…
Get the brief in your inbox
One email every morning: the stories that mattered in AI, each with a one-line "why it matters" for your role. Free, no ads, unsubscribe any time.
Published daily by AI Briefing. We never share your address.