Regulatory intelligence, explained.

What is regulatory intelligence? Watching health authorities so a filing never meets a rule by surprise

One revised guideline, from an agency website to a changed filing plan

1. An agency publishesEMA posts Revision 1 of a device guideline for comment on Monday, October 5. No company is told.
2. Someone finds itA daily watch of 64 sources picks it up among 41 changed pages. Or an alert, a newsletter, a colleague's forward, days later.
3. Someone works out what it meansCompare it with the version it replaces, decide which products and plans it touches, and how hard. This is where 2 paragraphs out of 11 turn into a booking date.
4. A lead decides, and the owners are toldBiologics regulatory gets section 4.2. Device engineering gets section 4.3. Each one gets the paragraph, the reason and the date.
5. The plan changes, and the record staysThree steps go into the filing plan. Months later, an auditor or a new hire can see who knew what, and when.

Step 3 is the center of this guide, and steps 2 and 4 decide whether it arrives in time. The products, people and the draft in this example are fictional.

Why revised guidelines hide their changes, and three more surprises in agency watching

Health authority, guidance, variation, impact assessment: four terms this guide uses throughout

Fourteen terms are defined in the summary page.

Collection, analysis and dissemination: the three jobs inside regulatory intelligence and how each one fails

In shortRegulatory intelligence is three jobs in a row: collect what agencies publish, analyze what it means for your products, and get that to the people who act on it. Each one's output feeds the next, so the weakest sets the value of all three. Each fails differently, and two of the three fail without any sign.

The US Department of Labor's description of a regulatory affairs specialist carries these jobs almost word for word: "Maintain current knowledge base of existing and emerging regulations, standards, or guidance documents" and "Obtain and distribute updated information regarding domestic or international laws, guidelines, or standards".4

Regulatory affairs sends documents to an agency. Regulatory intelligence receives what the agency publishes and routes it inward. That explains why the two fail so differently: a late filing shows on a timeline, and a missed guideline shows on nothing at all.

Monitoring, horizon scanning and strategic intelligence answer three different questions

The duty to keep up with regulatory change, and what changed between 2024 and November 2026

In shortNo law says "run a regulatory intelligence function", but several make you answerable for keeping up. Device makers have it most plainly: ISO 13485, the international quality standard for device makers, and the EU device regulation both tie the quality system to changes in requirements. The last two years also show why a watch has to catch withdrawals and delays as well as new text.

Three texts that make keeping up someone's job

Eleven changes a watch list had to catch, March 2025 to January 2027

The chart is a selection, and it leaves out most national changes. Most watch lists need the national texts too, and those are harder to find.

How much there is to read: one agency's Federal Register output, counted year by year

In shortFDA alone put 609 documents in the Federal Register in the first ten months of 2026, about three every working day. That is one agency's formal channel, and most guidance pages, letters and databases sit outside it.

Most of what reaches the Federal Register is routine, and the reader still cannot tell which notice matters without opening it. Of the 609 documents in 2026 so far, four in five are notices.

Which health authorities belong on your watch list: start from your licenses, then check the published lists

In shortWatch every authority that holds a license of yours, every one you plan to file with, and every body whose standards your filings cite. WHO's list and EMA's list help you check for gaps, and neither replaces your own register. English coverage varies more than most teams expect, and it is thinnest in the attachments where requirements live.

Two public lists get called "the list of regulators". WHO's list, 41 authorities from 39 countries as of December 2025, tells you whose work has been assessed.30 EMA's list tells you who licenses medicines outside the centralized route, the single EU-wide license that EMA assesses. National authorities are "primarily responsible for the authorisation of medicines available in the EU" outside it. There are 34 of them in 30 countries, because Germany, Poland and the Netherlands each list more than one.31

Neither list tells you who can stop you selling. Your license register does. Start there.

Four tests before a source goes on your regulatory watch list

Are FDA guidance documents binding? How much weight a regulation, a guidance and a draft each carry

In shortFDA guidance is not binding in law and still decides most reviews, because the reviewer has read it and you must justify departing from it. The route a document takes tells you how much warning you get: a regulation arrives with years of notice, and a Level-2 guidance with none. A good watch ranks documents on both.

FDA's own rule answers the question in plain terms: "Guidance documents do not establish legally enforceable rights or responsibilities. They do not legally bind the public or FDA."2 You may take another approach if it meets the law. FDA staff have less room: they may depart from a guidance only with justification and a supervisor's agreement.2 So a text that binds nobody still carries real weight: following it needs no argument, and leaving it needs a written one with evidence behind it.

Level-1 guidance gives you a comment period; Level-2 guidance takes effect when posted

All quoted from 21 CFR 10.115.2 EMA works differently: a guideline's cover page carries its own dates for agreement, adoption for consultation, the comment period and the date it takes effect.11

Seven marks on the first page of an FDA guidance, and what each tells a reader

The seven elements are from 21 CFR 10.115(i)(1).2 The questions are our reading.

Regulatory horizon scanning: how far ahead you can see, measured on ICH E6(R3) and FDA's guidance agenda

In shortYou can see between about two years and zero days ahead, depending on the channel. The good clinical practice revision from ICH, the council where regulators and industry agree drug standards, gave 796 days from first public draft to effect in the EU. A published agenda gives direction with no dates and no promise. A Level-2 guidance gives no warning. A scan reads those channels for direction and records what it found as a line in a plan.

ICH E6(R3), the international guideline on good clinical practice, shows the long case, because every date is public. Members endorsed the draft on May 19, 2023, and adopted the final text on January 6, 2025.35 EMA gave it a legal effective date of July 23, 2025 for the principles and Annex 1, and January 15, 2027 for Annex 2.12 A team that read the 2023 draft had more than two years. A team that first heard when the EU date was announced had about six months.

What CDER says it may write in 2026, and the sentence that limits it

FDA's drug center, CDER, posts a plan of the guidances it intends to draft or revise. The July 2026 edition lists 85 topics in 14 categories.34 Its own footnote sets the limit: "CDER is not bound by this list of topics nor required to issue every guidance document on this list. We are not precluded from developing guidance documents on topics not on this list."34 Read an agenda for direction, then watch each line that touches you.

How to read a revised guideline: comparing it with the version it replaces, worked through paragraph by paragraph

In shortFind the version the agency names as replaced, compare the two paragraph by paragraph, sort every change as editorial, needs a check, or changes a plan, then work back from your filing date. The sorting is where the value lies. In our fictional example, 11 changed paragraphs reduce to 2 that move a date.

The comparison starts by choosing the right earlier text. Agencies keep several versions online, and a working party's draft, an adopted version and a corrected reissue can all carry one reference number. EMA's real guideline on medicines used with a device shows why. Its reference ends in 2019 because the draft went out for comment that year. The text in force was adopted on July 22, 2021, and took effect on January 1, 2022.11 A reader who compares against the 2019 consultation draft gets a false list of changes.

Eleven changed paragraphs sorted into editorial, needs a check, and changes a plan

Working back from a May 2027 filing to an October 30 booking date

Here is the arithmetic the sorted list makes possible, using the example's dates. The filing is planned for May 2027. Section 4.2 adds a notified body opinion, which takes 4 to 6 months. The plan allows five months, inside that range: the opinion starts in early November and is back by early April, ahead of the mid-May filing. A full six months would run to early May and leave no slack.

To start in early November, the body has to be booked by October 30. Section 4.3 adds two delivered-dose batches, December to February, and those results feed Module 3, the quality part of the application file (the dossier), written from February to April. Book later than October 30 and the opinion lands after the filing date, so the variation slips to Q3 2027.

Nothing in the draft mentions October 30. It only appears when someone holds the changed paragraph beside the company's own filing plan.

Regulatory impact assessment: how one change is scored per product, per market and per team

In shortImpact is a relation between a document and your portfolio, so an agency can never tell you what it is. Score it per product and per market, with the reason, the passage behind it and a named owner. Fixed rules set the minimum level, a person signs the serious ones, and low-level filings get sampled so errors surface.

A single document can be High for one product, Medium for another presentation (form, such as a syringe or an autoinjector) of the same product, and irrelevant to the rest. Three of your own records decide it: the product register (what you sell, in which forms, where), the labeling plan (which label changes are due and when) and the submission calendar (which filings are coming). A team without those three can say only that a guideline exists. With them, it can say that this guideline moves that filing.

Which regulatory documents land on which team

Two rules that keep an impact assessment honest

Write impact rules down in advance. For example: any labeling change for a marketed product is at least High. A fixed floor stops a tired reader, or a confident model, from filing a serious change as routine.

Record the reason beside the level. A level with no reason cannot be reviewed. "High, because the planned Q2 2027 switch is a device-part change and section 4.2 now asks for an opinion taking 4 to 6 months" can be challenged, and an inspector can follow it.

A signature on a regulated electronic record should also say what it means. FDA's electronic records rule, 21 CFR Part 11, asks that a signed record show the signer's printed name, the date and time, and "The meaning (such as review, approval, responsibility, or authorship)" of the signature.36 Whether your impact records fall under Part 11 is your quality team's call, and working to that shape costs little either way.

How a regulatory change gets missed: eight failure points, and what FDA inspection data can and cannot show

In shortNo regulator counts missed regulatory changes as a category, so nobody can give you a rate. The failures themselves are easy to name: the wrong channel, the wrong version, a translation trusted blind, a draft read as final, a finding in the wrong inbox. FDA's device inspection data shows management review cited 71 times in fiscal 2025, which is the nearest published evidence.

What FDA's Form 483 counts show about device management review

The closest public record is FDA's yearly count of inspection observations. A Form 483 is the list of problems an investigator hands a company at the end of an inspection. In fiscal 2025 FDA's system issued 791 of them in the device area, with 2,660 citations.37 Management review, the meeting ISO 13485 says must take in new or revised requirements,6 was cited 71 times under the older rule (21 CFR 820.20(c)), across three entries about procedures, intervals and dates.

The usual cost of a late change is an agency's request for more data and a stopped clock on your application, then a later filing. The size of that cost is in section 18.

AI in regulatory intelligence: what FDA, EMA and EU GMP expect, and what the accuracy studies show

In shortWe found no regulator that bans AI in this work or approves a tool for it. FDA's draft and EMA's paper both leave the company accountable and scale the scrutiny to how much the output affects a regulatory decision. Reading and routing publications sits at the low end of that scale. The limits are real: in one preprint, general chat models got a third to nearly two-thirds of facts from FDA documents wrong.

How often AI shows up in European regulatory evidence, and how well general models read FDA text

One systematic count is published. A 2026 study screened 26,480 EMA public reports and internal development advice documents and found AI use in 52.43 So nobody can say "this is how the industry does it" yet.

A December 2025 preprint, which has not been peer reviewed, tested three general chat models on extracting facts from FDA documents for one class of antibiotics, and found hallucination, meaning invented content, to be the most frequent error across models.44 The test was narrow, and it says nothing about tools built with citations and human review. It does show why a model's unchecked reading is no basis for a regulatory decision.

What AI changes in this work, and where it stops

Data integrity expectations apply to the records this work produces. The GxP data integrity guidance from MHRA, the UK regulator, uses the acronym ALCOA: attributable, legible, contemporaneous, original and accurate. It says the "+" in ALCOA+ refers to complete, consistent, enduring and available, and that expectations are the same under either acronym.45

The regulatory intelligence market: unreliable sizes, a profession growing at an average rate and more digital agencies

In shortMarket sizes come from commercial report publishers with no inputs you can check, so treat them as rough. What can be measured points one way: a profession growing at an average rate, formal output that swings year to year, and agencies moving product information into structured electronic form. The trend favors teams that can read and route faster without adding people.

US occupational data places regulatory affairs specialists inside the compliance officer group: 436,400 people employed in 2025, a median wage of $38.81 an hour, and "Average (3% to 4%)" projected growth to 2035.4 That group spans every industry, so it says little about pharma pay.

We found no market size from a regulator, journal or trade body. Commercial report publishers sell estimates: one puts "regulatory intelligence platforms" at $2.8 billion in 2025 and $7.6 billion by 2034. Its page names bottom-up and top-down methods and gives no inputs a reader could check.46 Check any such report's method and market definition before you use it.

Three shifts that change the job over the next few years

How regulatory affairs teams watch agencies today: bookmarks, alerts, spreadsheets and long waits between hand-offs

In shortOne intelligence lead or a few analysts watch sources, read, translate, compare and pass findings to product leads and affiliates by email. The reading adds up to less than people think. The elapsed time adds up to far more, because every hand-off waits. Teams run it in house, through a subscription database, through an outsourced desk, or with software that reads against their own portfolio.

From intelligence lead to device engineer: who an agency change passes through

Six hand-offs between an agency website and the team that owns the plan

About 4,000 hours a year: a worked estimate for a global portfolio

Here is one worked estimate for a company watching about 4,000 updates a year: every minute count below is an assumption to replace.

In-house desk, subscription database, outsourced desk or portfolio-aware software

October 6, 2026: from 64 sources checked to a signed impact and three teams told by 9:14 a.m.

In shortThis is the example from the top of the page, inside the product. Seven specialist agents check 64 sources from 5:00 a.m. and print a front page at 5:12. Dana Okafor, the regulatory intelligence lead, reads the lead story, opens the comparison, and signs the impact at 9:14. Three teams then get their own paragraphs, and nothing goes out before her signature.

1

Sources read and the edition printed by 5:12 a.m.

The agency watcher checks 64 sources in 38 countries and finds 41 changed pages, which come down to 27 updates once duplicates are gone. The translator handles nine documents from Japanese, Chinese, German and Portuguese and keeps each original.

The version comparer checks three revised documents against the versions they replace: 22 changed paragraphs, 5 of which change a plan. The impact assessor proposes 5 High, 8 Medium, 10 Low and 4 not relevant, across the four products.

2

A front page led by the update that moves a filing

Dana opens The Regulatory Morning, edition No. 214. The lead is EMA's draft Revision 1 of the guideline on medicines used with a device, chosen because it has the highest impact on these products. It is High for the planned Veltrimab autoinjector and Medium for the marketed syringe. Talvoren and Dravenzo are marked not affected.

Beside it are a second lead on Veltrimab's product information, the deadlines in this edition and 13 impacts waiting for a signature. The old and new wording of the two important paragraphs is already on the page.

3

Two of eleven paragraphs, word for word, with their owners

Dana clicks through to What changed. The version comparer has lined up the draft against the guideline it names as replaced. Eleven paragraphs changed: 6 editorial, 3 need a check, and 2 change the plan. The view opens on those two.

Section 4.2 is rewritten and lands on Lena Ortiz in biologics regulatory. Section 4.3 is new and lands on Tom Becker in device engineering, who has delivered-dose data from one engineering batch and needs two more. The panel on the right shows the plan after the change, with three steps in red and the October 30 booking date.

4

Dana signs, and the signature says what it means

Dana keeps the autoinjector at High and the syringe at Medium, leaves three teams ticked and chooses the meaning of her signature: "I confirm this impact assessment". Her password goes in. The screen tells her that her name, the date, the time and the meaning go on the audit trail.

Up to this point no team has been told anything. The agents propose; she decides.

5

Three teams get their own paragraphs at 9:14 a.m.

The digest writer sends each team only its part, with the original document attached. Biologics regulatory gets section 4.2. Device engineering gets sections 4.3, 5.3 and 6. Regulatory policy gets section 8.

The record now shows who confirmed it, when, and who was told. Lena's first action is on the list too: add a notified body step to the plan, due October 30.

The Veltrimab autoinjector plan, before and after the draft

Seventeen more screens, from a Japanese notice read beside its translation to a past edition

In shortOne update is the story. These screens show the rest: a notice in Japanese, the EU counterpart, more comparisons, the agency columns, the full list, the impact board, cited answers, the dashboard, past editions and the settings a team controls.

Screens that quote a guideline or notice show the product's sample text. Never read one as an agency's real wording.

Seven agents read, compare and propose; a named regulatory lead signs every High and Medium impact

In shortSeven agents do the reading, translating, comparing and drafting, each with limits it cannot pass. A named person confirms every High and Medium impact before any team hears. Low and Not relevant updates are filed automatically, and 10% are sampled for review each week.

The sample company's five regulatory people, and what each one asks for

Cited, signed and on the record: how a regulatory watch keeps its evidence

Botminds holds an independently audited SOC 2 Type II report and manages information security to ISO 27001. GxP, Part 11 and Annex 11 cannot be certified for a product; they are met by how you use it.

Agency websites and your portfolio in; a front page, signed impacts and cited answers out

In shortThe solution reads public agency websites and your own product register, labeling plan and submission calendar. It leaves you a morning front page, old and new wording compared, a signed impact per product and market, each team's note and cited answers. Your systems of record stay where they are.

Systems a regulatory intelligence rollout connects to

For each, check whether it has an API, a file feed, or only screens, and who owns it.

What stays in your systems, and what becomes a setting you control

A medtech customer's hours saved and the design target for reaching the owner

What a late agency change costs you in reading hours, slipped filings and missed comment periods

In shortStart with your own costs, because published figures only frame them: the value of a day of delay is large and the wage for the reading is small, so one slipped filing can outweigh years of reading hours.

Timing ten agency updates to find your own baseline

Costs no reading-hours sum captures

What faster agency watching returns when you count reading hours and avoided filing delays

In shortPut in your own numbers. Hours alone may just cover the cost of a tool. The bigger value sits in the filing you did not delay, so the calculator keeps that as its own line with a default of zero. Count a delay only if you can name the filing. Every default marked illustrative is an assumption to replace.

Reading time, version comparison and missed deadlines: where a regulatory watch saves

Calculate your return from updates a year, minutes per update and hourly cost

A company with about 4,000 updates a year clears the first line and misses the second. A company watching a few hundred updates for one product family will not cover this cost on hours, and should say so before buying anything. In that case the argument, if there is one, rests on a named filing.

How ready your regulatory watch is: sources, baseline, portfolio data, sign-off and quality

In shortPick the answer closest to your team today. Eight questions score 0 to 2, and the last is for reflection. The meter adds up your score as you go, and each question says why it matters and what a strong answer sounds like.

A low score means writing the source list and product register first

What to ask regulatory intelligence software about sources, version comparison, translation and evidence

In shortAsk every vendor the same questions, us included. The answers show what it reads, how it picks the version it compares with, whether you can check a translation, what it knows about your products, and what record you keep.

Testing a regulatory watch on your own portfolio with planted changes, then deciding on three numbers

In shortMeasure first, then test on your own products with changes you planted in copies of real documents, then decide with three numbers. None of these steps commits you to a vendor.

1. Time ten recent updates from publication to owner, step by step. That is your baseline.
2. Write the source list against your license register, and pull your register, labeling plan and calendar into one export.
3. Take ten real revised guidelines with their earlier versions. Copy them and plant changes you know about: rewritten, new and widened paragraphs.
4. Run beside your current process on live agency output for five weeks, with your own people signing every impact.
5. Decide with three numbers: planted changes found by type, false alarms per week in reader minutes, and days from publication to owner.

Measuring planted changes found, false alarms and days to the owner

Regulatory intelligence questions answered: definitions, FDA guidance, EMA, software and AI

In shortThe questions regulatory teams and buyers search for most, each answered on its own.