

Blog
ISO 10993‑7:2026: Addressing Patient Safety Concerns Around EO Residuals
What Is ISO 10993-7?
ISO 10993-7 is part of the ISO 10993 series that establishes allowable residual limits for ethylene oxide (EO) and ethylene chlorohydrin (ECH) on medical devices following EO sterilization. It applies to all devices sterilized using EO, with allowable limits determined based on the device’s contact category and duration of contact and supported by toxicological risk assessment to establish safe exposure thresholds.
EO is classified by the International Agency for Research on Cancer (IARC) as a Group 1 known human carcinogen and a recognized reproductive toxin under GHS. Because EO penetrates complex device geometries and does not degrade heat-sensitive or moisture-sensitive materials, it remains the primary sterilization method for devices that cannot tolerate steam, dry heat, or radiation - including heart valves, pacemakers, vascular grafts, stents, implantable orthopedic components, and long-term intravascular and urological catheters. FDA estimates that more than 20 billion EO-sterilized devices are sold in the United States each year, representing approximately 50% of all sterile medical devices on the US market.
ISO 10993-7 operates within the biological evaluation framework defined by 10993-1:2025. Where ISO 10993-1 sets the overarching biological evaluation approach for all medical devices, ISO 10993-7 provides device-contact-category-specific residual limits and the risk-based methodology for demonstrating that post-sterilization EO and ECH levels are clinically safe.
What Changed in ISO 10993-7:2026?
ISO 10993-7:2026 is the latest version of the standard, replacing ISO 10993-7:2008 and its 2019 amendment (Amd.1:2019). The 2026 revision is the most substantive update since original publication - moving from a fixed-limit compliance model to a patient-specific, risk-based accountability framework.
The 2008 edition and Amd.1:2019 established the tabulated allowable limit values most manufacturers currently work to. The 2026 revision redefines how manufacturers must justify that their limits are appropriate for the specific patients exposed to their devices. Manufacturers transitioning from the 2008 + Amd.1 framework should assess gaps across the following key areas:
• Enhance consideration of Patient Population: Patient-population-specific exposure justification is now a clear standard requirement. A generic 'typical patient' assumption is no longer sufficient. Residual limit justifications must reflect the actual patient population - including neonates, chronic users, and long-term implant recipients - and must be scientifically defensible.
• Risk-based limit justification: The 2026 revision allows manufacturers to derive device-specific limits through documented risk-based calculations aligned with ISO 10993-17, rather than relying solely on predefined tables - provided those limits are scientifically justified and clinically defensible.• Integration with ISO 14971 (Risk Management). EO residual assessments are no longer standalone exercises. Risk management files must include EO-related hazards, exposure assumptions, risk controls, and residual safety conclusions with full traceability.
• Improved analytical expectations: Extraction conditions must represent clinically meaningful worst-case scenarios. Validated methods, defined detection and quantitation limits, and batch-to-batch consistency are expected by regulators and notified bodies. Critically, data quality, context, and rationale now carry as much weight as the numerical results themselves - a technically valid number with a poorly justified methodology will not satisfy a notified body or FDA reviewer.
• Justification in case of exceedances: Exceedance in allowable limits triggers a requirement for documented toxicological justification and risk evaluation integrated into the biological evaluation report. The burden of justification rests entirely with the manufacturer.
The 2024 FDA Transitional Enforcement Policy for Ethylene Oxide Sterilization Facility Changes for Class III Devices reinforces urgency: EO sterilization is now under active regulatory scrutiny connecting residual safety to supply continuity, facility transitions, and portfolio-level risk management documentation.
What Are the Patient Safety Risks of EO Residual Non-Compliance?
EO's toxicological profile defines the baseline clinical risk. Classified as an IARC Group 1 carcinogen and a GHS-designated reproductive toxicant, EO presents quantifiable cancer and reproductive risks at sufficient exposure levels. Ethylene chlorohydrin (ECH), the primary by-product controlled alongside EO by ISO 10993-7, is also a genotoxic compound with independent dose-dependent risk. Device surface residuals are a direct patient exposure pathway, with risk amplified by contact duration, contact area, and patient susceptibility.
Exposure risk is not uniform. Neonates, immunocompromised patients, and long-term implant recipients carry higher cumulative exposure burdens and greater sensitivity to EO-related harm. The ISO 10993-7:2026 mandate for patient-population-specific justification is a direct regulatory response to this variability - the standard now requires manufacturers to account for who the device is actually used on, not a statistical average.
FDA and the EO Sterilization Reckoning
In 2019, FDA launched an EO sterilization action plan after identifying facility emissions as a public health concern - the first major regulatory intervention targeting EO beyond device-level residual limits. FDA placed sterilization facilities under increased environmental scrutiny and required manufacturers to evaluate alternative sterilization methods where feasible. The 2024 Transitional Enforcement Policy for Class III PMA and HDE devices extended this posture: FDA now manages EO sterilization as a supply-chain and patient safety risk at the portfolio level, not a device-by-device compliance matter. Sources: FDA.gov - 2019 EO Action Plan; FDA Transitional Enforcement Policy (November 2024).
Non-compliance or inadequate residual justification carries compounding risk. Manufacturers unable to demonstrate ISO 10993-7:2026-aligned safety may face: increased regulatory questions during 510(k), PMA, or CE submission review (particularly for Class III, implantable, long-duration, or neonatal-use devices); requests for additional toxicological rationale and analytical validation before clearance; and post-market remediation where exposure assumptions no longer reflect current clinical practice. Insufficient EO residual justification is a patient safety, regulatory, and supply continuity risk - not a documentation gap.
How Should Manufacturers Prepare for ISO 10993-7:2026?
ISO 10993-7:2026 should be treated as a structured transition, not a one-time document update. While the standard does not impose a single global enforcement deadline, regulators and notified bodies are progressively expecting alignment for new submissions, design changes, recertification activities, and remediation program. The FDA transitional enforcement policy confirms that EO-related changes are already under active regulatory focus. The following five steps support a structured readiness approach.
1. Conduct a portfolio-level EO inventory. List every EO-sterilized product, its current biological evaluation report version, and the exposure scenario documented in that report. Flag any product where the exposure scenario is described as 'typical patient' without population-specific justification - these are your highest-priority remediation items under the 2026 standard.
2. Triage by device risk profile. Prioritize Class III devices, long-term implants, neonatal-use devices, and products with repeated or chronic patient contact. These will attract the earliest regulatory scrutiny and have the least tolerance for undocumented assumptions. Lower-risk, limited-contact devices can follow in a second wave.
3. Update exposure scenarios in the biological evaluation report to reflect actual clinical use. For each priority device, identify the realistic worst-case patient population - age, health status, cumulative exposure from simultaneous devices - and replace generic assumptions with a documented, justified scenario. If multiple use patterns exist, the report must explain why the selected scenario is protective for all of them.
4. Audit analytical method documentation for each EO-sterilized product. Confirm that extraction methods are validated, detection and quantitation limits are defined, batch-to-batch variability is recorded, and the analytical rationale is explicitly linked to the toxicological risk conclusion in the biological evaluation. Regulators and notified bodies will probe this linkage - a numerical result without a documented methodological rationale is not sufficient.
5. Pull EO residual safety into the risk management file as a named hazard. Create or update a hazard entry for EO and ECH residual exposure, with the associated risk controls, residual risk justification, and traceability to the biological evaluation report. This makes the EO safety decision visible to auditors and inspectors - not buried in a separate testing file.
For manufacturers undertaking this gap assessment, specialist support can accelerate each of these five steps - particularly where in-house toxicological expertise or regulatory documentation resource is limited.
How Does Tata Elxsi Support ISO 10993-7 Compliance?
Tata Elxsi provides end-to-end medical device biocompatibility testing and regulatory documentation support under the full ISO 10993 series, including ISO 10993-7 EO residual compliance. Our services span EO residual testing protocol design, extraction and analytical method validation, toxicological risk assessment per ISO 10993-17, and full biological
evaluation report preparation.For manufacturers navigating the ISO 10993-7:2026 revision, we conduct gap assessments of existing EO residual documentation against current regulatory expectations - evaluating whether exposure assumptions, patient population justifications, analytical method quality, and risk management integration are adequate for new submissions, design change filings, or recertification activities.
Our team has direct experience supporting FDA 510(k), PMA, and De Novo submissions and CE marking under EU MDR 2017/745 across EO-sterilized device categories including Class III devices, permanent implants, and long-duration contact products.
To discuss how we can support your ISO 10993-7 testing and documentation program, visit our biocompatibility compliance services page.
EO residual compliance is no longer a release-testing formality. It is a patient safety decision — and ISO 10993-7:2026 places the burden of justifying that decision squarely with the manufacturer.
FDA and the EO Sterilization Reckoning In 2019, FDA launched an EO sterilization action plan after identifying facility emissions as a public health concern - the first major regulatory intervention targeting EO beyond device-level residual limits. FDA placed sterilization facilities under increased environmental scrutiny and required manufacturers to evaluate alternative sterilization methods where feasible. The 2024 Transitional Enforcement Policy for Class III PMA and HDE devices extended this posture: FDA now manages EO sterilization as a supply-chain and patient safety risk at the portfolio level, not a device-by-device compliance matter. Sources: FDA.gov - 2019 EO Action Plan; FDA Transitional Enforcement Policy (November 2024).





