Who Regulates Imaging: FDA and 21 CFR 1020, State Radiation Control, and CMS
Unit 3: Regulation, Accreditation, and the CMMS. Lesson 10 of 60 in CRES Academy.
Three layers of government touch an imaging room: a federal agency that regulates the equipment, a state program that registers and inspects it, and a federal payer whose conditions the hospital must meet to be paid. Each asks you for something different.
FDA and the federal performance standards
The FDA regulates medical devices and radiation-emitting products through its CDRH, the Center for Devices and Radiological Health, which carries forward the work the former BRH, the Bureau of Radiological Health, began. Its performance standards for diagnostic x-ray systems live in 21 CFR 1020, and they are written as numbers a system must meet.
Tube housing leakage less than 100 mR/h (about 1 mGy/h) at 1 m from the housing
AEC backup timer ends the exposure at 6 s or 600 mAs, whichever comes first
Light field to beam within 2 percent of the SID; at 100 cm that is 2 cm
PBL and SID indicator each held within the same 2 percent
Minimum total filtration 2.5 mm Al above 70 kVp, 1.5 mm Al from 50 to 70 kVp, 0.5 mm Al below 50
Fluoroscopy 10 R/min tabletop, 20 R/min with high-level control; dead-man control;
cumulative timer signaling at 5 minutes; SSD at least 38 cm fixed, 30 cm mobileThe standard binds the manufacturer and anyone who modifies a system, and that includes you. Swap a collimator, recalibrate an automatic exposure control, or replace a high-voltage component and the room must still meet every one of those numbers when you leave, with the measurement in the record to prove it.
State radiation control programs
States, not the federal government, register and inspect the machines in use. A state program registers every tube, inspects rooms on its own schedule, licenses or certifies the radiologic technologist who may operate a system, sets what must be posted, and can shut a room down. Their rules differ from state to state but most are built from the shared suggested regulations that state program directors write together through CRCPD, which is why registration, survey intervals, and operator rules look similar everywhere without being identical. A new or relocated tube is a registration event: your paperwork feeds it.
CMS and the survey
CMS sets the conditions of participation a hospital must meet to be paid, may survey directly, and otherwise accepts the survey of an accrediting organization it has granted deeming authority. Equipment maintenance is in those conditions, which is why a maintenance strategy that departs from the manufacturer's recommendation has to be written down and justified rather than simply adopted.
Reporting incidents
When a device may have caused or contributed to a death or serious injury, that is a medical device report, filed on the facility's timeline to the manufacturer and the FDA. Your part is to stop using the device, preserve it exactly as it is with its logs and settings, photograph and document, and never "test it to see." A repaired device is destroyed evidence.
The practical rule
Think of it as three questions with three owners: does the equipment meet the federal performance standard, is the machine registered and inspected by the state, and can the hospital show the payer and its accreditor a managed program. The first is measured, the second is registered, and the third is documented.
Who Regulates Imaging: FDA and 21 CFR 1020, State Radiation Control, and CMS, explained slowly
Three governments, three different demands
It helps to see the regulatory picture as three questions with three different owners, because the answer to each one is a different kind of evidence.
Question Owner Evidence it wants Does the equipment meet the federal FDA, through CDRH, a measurement: your test performance standard? in 21 CFR 1020 results, in the record Is this machine registered and inspected, the state radiation a registration, an inspection and are its operators credentialed? control program report, posted notices Can the hospital show it runs a managed CMS, and the accrediting documentation: inventory, program? organization it deems strategy, completion, training
A technician supplies all three, but the forms are different: a number, a registration, and a record.
What 21 CFR 1020 actually requires of a system
This is the list your repair has to leave intact. Every one of these is measurable, and every one of them is a question the exam can ask as a number.
Item Requirement
Tube housing leakage less than 100 mR/h (about 1 mGy/h) at 1 m from the housing
at maximum continuous rating
Total filtration at least 2.5 mm Al equivalent above 70 kVp; 1.5 mm Al from
50 to 70 kVp; 0.5 mm Al below 50 kVp
Light field to x-ray field coincide within 2 percent of the SID (2 cm at 100 cm)
Positive beam limitation holds the same 2 percent where it is fitted
SID indicator accurate within 2 percent
Console indication exposure conditions shown, and an indication that the tube
is energized
AEC backup timer terminates at 6 s or 600 mAs, whichever comes first
Fluoroscopic exposure rate not above 10 R/min (100 mGy/min) at the tabletop without
high-level control, 20 R/min (200 mGy/min) with it; no limit
while recording
Fluoroscopic timer audible signal at 5 minutes of cumulative beam-on time
Fluoroscopic control dead-man: the beam stops when the operator releases
Source-to-skin distance at least 38 cm on a stationary fluoroscope, 30 cm on a mobile one
Primary barrier the fluoroscopic receptor assembly, at least 2 mm Pb equivalent,
interlocked against energizing while parkedThe clause that matters most to your job is scope: the standard binds the manufacturer and anyone who modifies a certified system. Replace a collimator, recalibrate an automatic exposure control, change a high-voltage component, or alter filtration and the room must still meet every line above when you leave, with the measurement filed. "It worked before" is not a defense; the test result is.
State radiation control programs
Registration and inspection of machines in use is a state function. A state program typically registers each tube, inspects rooms on an interval it sets, requires certain postings and operator credentials, reviews shielding plans for new rooms, and can prohibit use of a room. Because each state writes its own rules, the details differ, but most are drawn from the shared suggested regulations state program directors write together through CRCPD, which is why the shape of the requirements is familiar everywhere. Practical consequences for you: a new, replaced, or relocated tube is a registration event, your output and leakage measurements are what an inspector reads, and an inspector's finding against a room becomes a work order with a deadline.
CMS, deeming, and maintenance strategy
CMS sets the conditions of participation a hospital must satisfy to be paid, and may survey directly or accept the survey of an accrediting organization it has granted deeming authority. The equipment maintenance language in those conditions is why a department cannot simply decide to stretch an interval: a strategy that departs from the manufacturer's recommendation has to be written, justified by evidence, and approved, and certain high-risk and imaging equipment is expected to stay on the manufacturer's schedule. When someone asks you to skip a PM to protect a schedule, that is the rule to point at.
Reporting a device that hurt someone
When a device may have caused or contributed to a death or serious injury, it becomes a reportable event, filed to the manufacturer and the FDA on the facility's timeline.
- Stop using the device and take it out of service physically, not just on paper.
- Preserve it exactly as it is: do not clear error logs, reset settings, replace parts, or "test it to see."
- Record the settings, accessories, disposables, and room conditions, and photograph them.
- Hand it to risk management with the service history from the CMMS attached.
A repaired device is destroyed evidence, and the repair will be read as concealment whether or not it was.
What to memorize
- FDA, through CDRH, continuing the work of BRH, writes 21 CFR 1020, and it binds whoever modifies a system.
- Leakage under 100 mR/h at 1 m; filtration 2.5, 1.5, 0.5 mm Al; collimation, PBL, and SID indicator within 2 percent; AEC backup at 6 s or 600 mAs.
- Fluoroscopy: 10 and 20 R/min, 5-minute timer, dead-man control, 38 cm and 30 cm minimum skin distance.
- States register and inspect machines and credential operators; CMS sets the conditions of participation.
- A device involved in serious harm is preserved and reported, never tested or repaired first.