What Is IEC 60601-1, and How Does the TGA Regulatory Pathway Work for Medical Electrical Equipment in Australia?

Detailed Explanation

Several pages on this site mention IEC 60601-1 or the TGA in passing: as the standard an isolated USB interface has to satisfy on the patient-connected side, as the EMC collateral standard sitting outside the scope of Australia's usual CISPR framework, as the "different particular standard" a medical device needs instead of IEC 62368-1. Each time, the advice is the same: this is a specialist regulatory area, consult separately. That advice is correct, but it leaves the standard and the regulatory pathway unexplained. This page covers both: what IEC 60601-1 actually requires at a design level, and how the TGA process for supplying a medical electrical device in Australia works, separately from IEC 60601-1 itself.

Two things are worth stating clearly before going further. First, IEC 60601-1 and the TGA pathway are two different things that are often conflated: IEC 60601-1 is a technical safety standard a device is designed and tested against, while the TGA pathway is the legal process for supplying that device in Australia, which requires evidence that the device meets standards like IEC 60601-1 among other things. Second, this is a specialised, heavily regulated field. This page sets out the framework and the vocabulary needed for an informed conversation with a regulatory affairs specialist and a test laboratory. It is not a substitute for engaging one on an actual medical device project.

What IEC 60601-1 Covers

IEC 60601-1 is the base standard in the IEC 60601 series, titled Medical electrical equipment, Part 1: General requirements for basic safety and essential performance. It sets out the safety requirements that apply generally across medical electrical equipment, with additional collateral standards (numbered 60601-1-X, covering topics like electromagnetic disturbances in 60601-1-2, or usability in 60601-1-6) and particular standards (numbered 60601-2-X, covering specific device types such as infusion pumps or electrocardiographs) layered on top for a given product. Like AS/NZS 3820 and IEC 62368-1, IEC 60601-1 has moved away from a purely prescriptive checklist towards a structured risk-management approach, but it goes considerably further than IEC 62368-1's hazard-based model because it has to account for a body that may be sick, sedated, unconscious, or otherwise unable to react to a hazard the way a healthy adult using a consumer product could.

The standard is currently at Edition 3.2 (the third edition from 2005, as amended by Amendment 1 in 2012 and Amendment 2 in 2020), commonly cited as IEC 60601-1:2005+AMD1:2012+AMD2:2020. Standards are periodically revised, so always confirm the current edition and any applicable transition period with the test laboratory or conformity assessment body involved before starting a design, rather than working from a remembered edition number.

Means of Patient Protection and Means of Operator Protection

Where IEC 62368-1 organises its safeguards around a generic "safeguard" concept protecting any body from any energy source, IEC 60601-1 separates protection into two distinct categories because a patient and an operator are exposed to genuinely different levels of risk and have different capacity to protect themselves:

• Means of Patient Protection (MOPP): the insulation, spacing, protective earthing, and other safeguards protecting the patient from electric shock via an applied part. Patients may be unconscious, sedated, wearing conductive gel electrodes, or otherwise in a state of reduced physiological resistance and reduced ability to react to a shock, so MOPP requirements are typically the most stringent protection category in the standard.
• Means of Operator Protection (MOOP): the equivalent safeguards protecting the operator (clinician, technician, or other user) who is not physically connected to the patient via an applied part. MOOP requirements are closer in stringency to general consumer-product electrical safety, since an alert adult operator has a materially different risk profile from a patient.

A single piece of equipment typically needs both: MOPP for the circuitry connected to the patient (an ECG lead, a pulse oximeter probe, an infusion line's sensing electronics) and MOOP for everything else the operator might touch (the enclosure, the display, the control panel). The number and rating of MOPP or MOOP required for a given circuit path depends on the working voltage present and the classified severity of what could go wrong. This is directly analogous to how IEC 62368-1 sizes a safeguard to an energy source's classified severity, but calibrated to the patient-risk model rather than the general hazard-based model.

Applied-Part Classification: Type B, BF, and CF

An applied part is any part of the equipment that, in normal use, necessarily comes into physical contact with the patient for the equipment to perform its function: an ECG electrode, a temperature probe, a pulse oximeter clip, a patient-contacting surface on an imaging table. IEC 60601-1 classifies every applied part into one of three types, in increasing order of isolation and leakage-current stringency:

• Type B (Body): general applied parts not intended for direct cardiac application, providing a defined degree of protection against electric shock, typically not electrically isolated (floating) from earth.
• Type BF (Body Floating): applied parts with the same general patient-contact role as Type B, but electrically isolated (floating) from earth to a higher degree, reducing the risk if a single fault connects the applied part to a stray voltage. Most patient-contacting sensors that aren't intended for direct cardiac connection, including many ECG electrodes, temperature probes, and pulse oximeters, fall here.
• Type CF (Cardiac Floating): the most stringent category, intended for applications with direct cardiac connection or otherwise carrying the highest risk if a fault current reaches the patient (for example, an intracardiac catheter or a direct cardiac electrode). CF applied parts are floating and carry the tightest leakage-current limits in the standard.

The standard specifies separate limits for earth leakage current, enclosure (touch) leakage current, and patient leakage current, each defined separately for normal condition and for single-fault condition, and each tightened progressively from Type B through BF to CF. The exact microamp thresholds for each of these current paths, applied-part type, and condition are set out in IEC 60601-1's own tables and have shifted in detail across editions and amendments. Treat any remembered figure as a starting point for discussion with a test lab, not as a design input, and always confirm the applicable limit against the current edition of the standard for the specific applied-part type and fault condition in question.

Essential Performance

Essential performance is IEC 60601-1's term for the subset of a device's clinical functions whose loss or degradation would result in unacceptable risk to the patient, operator, or a third party. This is distinct from basic safety, which is protection from immediate physical hazards like electric shock, fire, or mechanical injury. A patient monitor's basic safety is about not shocking or burning anyone; its essential performance is about whether the vital-signs reading it displays, or the alarm it raises when a value goes out of range, remains accurate and functional (or fails in an obviously detectable way) even under a single-fault condition.

Identifying essential performance is a design-stage risk-management exercise specific to each device, not a fixed checklist. A manufacturer must analyse the device's clinical function and determine which capabilities are essential in this sense, then design and test the device to demonstrate that those capabilities are either maintained or fail safely under the fault conditions IEC 60601-1 requires the device to withstand. This is one of the clearest points where IEC 60601-1's scope goes beyond a general electrical safety standard: IEC 62368-1 asks whether a product's own energy sources can hurt someone, while IEC 60601-1 additionally asks whether the clinical function itself failing silently could hurt someone, which is a fundamentally different and harder engineering question.

How This Differs From AS/NZS 3820 and IEC 62368-1

This is a distinction covered only briefly on what AS/NZS 3820 and IEC 62368-1 actually require for electrical safety, and it is worth stating explicitly: IEC 60601-1 is not an alternative route to that page's framework, and it is not a matter of choosing between them. AS/NZS 3820 states Australia's general essential safety requirements for electrical equipment, and directs a manufacturer to the correct particular standard for their specific product category to demonstrate compliance with those essential requirements. For consumer AV, IT, and communications equipment, that particular standard is AS/NZS 62368.1 (Australia's adoption of IEC 62368-1). For medical electrical equipment, it is IEC 60601-1 and its relevant collateral and particular standards instead: a different, stricter standard family purpose-built for the patient-safety context, not a harder version of the same document.

A device is medical electrical equipment, and therefore falls under IEC 60601-1 rather than IEC 62368-1, when its intended use is medical: diagnosis, treatment, monitoring, or alleviation of disease, injury, or disability, generally as determined by the manufacturer's own intended purpose and claims for the device, and confirmed against the TGA's own definition of a medical device (see below). This determination should be made early and deliberately. Designing a device against IEC 62368-1 because it's the more familiar consumer-electronics standard, when the product is actually intended for a medical use, produces a compliance gap that a later reclassification cannot easily fix, since the underlying safety analysis (MOPP/MOOP, applied-part classification, essential performance) has to be built into the design from the outset rather than retrofitted.

The TGA Regulatory Pathway for Medical Electrical Equipment

Meeting IEC 60601-1 addresses the technical safety and performance side of a medical electrical device. Supplying that device in Australia is a separate legal question, governed by the Therapeutic Goods Administration (TGA), the Australian government body administering the Therapeutic Goods Act 1989 and the Therapeutic Goods (Medical Devices) Regulations 2002. The TGA's role for medical devices is broadly analogous to the ACMA's role for RCM, in that both administer a conformity-and-registration scheme rather than performing the testing themselves. But the TGA's scheme is a materially different regulatory framework with its own classification system, its own documentation requirements, and its own register. It is not a variant of RCM, and RCM marking (which covers electrical safety, EMC, and radio compliance for the product categories the ACMA regulates) does not itself demonstrate TGA compliance for a medical device.

The TGA's own Australian Regulatory Guidelines for Medical Devices (ARGMD) is the primary published guidance for this process, covering the Essential Principles (the TGA's legislative safety-and-performance requirements, playing a similar structural role to AS/NZS 3820's essential requirements in the general electrical safety framework), device classification, conformity assessment procedures, and ARTG inclusion. The rest of this section summarises the pathway at a level useful for engineering planning; the ARGMD and a regulatory affairs specialist are the authoritative sources for a specific device and application.

Device Risk Classification

The TGA classifies medical devices by risk, broadly following a tiered model of Class I (lowest risk), Class IIa, Class IIb, Class III (highest risk), and a separate Active Implantable Medical Devices (AIMD) category, using classification rules based on factors including how invasive the device is, whether it's active (powered) or passive, its intended duration of use, and whether it contacts the central nervous system, cardiovascular system, or other higher-risk anatomical sites. The classification rules are detailed and device-specific. The TGA publishes a classification decision tree and detailed guidance precisely because manufacturers frequently misjudge where a novel or borderline device sits. Confirm classification against the TGA's current published rules for the specific device rather than assuming a classification by analogy to a similar product, since small differences in intended use or contact duration can shift a device between classes.

The classification a device receives determines how much regulatory evidence and independent scrutiny its ARTG application requires. It is the single decision that most shapes the rest of the compliance pathway, which is why it should be assessed as early as possible in a medical device project, ideally before detailed engineering design work is committed, since classification can influence design decisions around risk controls and essential performance.

ARTG Inclusion and Conformity Assessment

Before a medical device can be lawfully supplied in Australia (imported, sold, or otherwise made available for supply), it generally must be entered on the Australian Register of Therapeutic Goods (ARTG), the TGA's public register of therapeutic goods approved for supply in Australia, subject to the specific exemptions the Act and Regulations define. Getting a device onto the ARTG requires the manufacturer or their Australian sponsor to hold appropriate conformity assessment evidence: documentation demonstrating the device meets the Essential Principles, appropriate to its risk classification.

For lower-risk devices, this evidence is typically a manufacturer's own declaration supported by technical documentation. For higher-risk devices, it typically requires review by an independent Conformity Assessment Body (CAB), the TGA's own term for a body it has approved to conduct these assessments, covering the manufacturer's quality management system, technical file, clinical evidence, and risk management documentation (commonly built around ISO 14971's risk-management process). The TGA also recognises a range of comparable overseas approvals as supporting evidence for many device classes, including certificates issued by EU Notified Bodies under the EU Medical Device Regulation, and clearances or approvals from other recognised overseas regulators. This can meaningfully streamline the Australian pathway for a device already approved in a comparable jurisdiction, though the Australian classification and application process must still be completed. Conformity assessment routes, evidentiary requirements, and recognised overseas pathways are updated by the TGA over time and vary by device class, so treat any specific route described here as a starting point for a conversation with a regulatory affairs specialist or the TGA directly, not as a fixed procedure. Never rely on timelines or costs quoted informally, since both vary considerably by device classification, evidence pathway, and TGA workload, and should be confirmed directly with the TGA or a regulatory consultant for the specific device in question.

Why a Certified Component Doesn't Certify the Finished Device

The same principle that applies to general electrical safety compliance, that a pre-certified sub-assembly narrows the compliance task but doesn't complete it, applies at least as strongly to medical electrical equipment. It's worth stating without qualification, given how often it's assumed otherwise: an off-the-shelf power supply, isolation module, or other component that itself holds IEC 60601-1 (or IEC 62368-1) certification does not, by itself, certify the finished medical device. A certified medical-grade power supply demonstrates that sub-assembly's own compliance under its own specified conditions of use. The complete device, including its enclosure, its applied parts, its essential performance under fault conditions, the integration of that power supply into the actual system, and every other energy source and clinical function the finished product introduces, still needs its own IEC 60601-1 system-level assessment and its own TGA conformity assessment and ARTG inclusion. This mirrors exactly the point made for pre-certified radio modules and RCM and for pre-certified power supplies under AS/NZS 62368-1: a certified component is a useful head start, not a substitute for assessing the system it becomes part of.

Design Considerations

• Confirm the device's intended use, and therefore its standard family, before locking in a design approach. A device intended for medical diagnosis, treatment, or monitoring needs IEC 60601-1, not IEC 62368-1, and the two standards' safety models (MOPP/MOOP versus generic hazard-based safeguards) are different enough that a design built against the wrong one will need substantial rework, not a light retrofit.
• Determine risk classification, applied-part type, and essential performance early. All three shape fundamental design decisions, including isolation topology, creepage and clearance (as covered generally for PCB-level spacing), and redundancy for essential functions, that are expensive to change once a design is substantially complete.
• Treat interfaces that leave the isolated, patient-connected side of the device as a specific design problem. A device with a patient-connected applied part that also needs a USB, network, or other host-facing connection typically needs galvanic isolation across that boundary sized to the applied part's classification, not a generic isolation component chosen for convenience. See designing a galvanically isolated USB interface for how this plays out at a component and layout level.
• Budget for both IEC 60601-1 testing and the separate TGA pathway in the project schedule, since they are distinct workstreams with different deliverables (a test report against the standard, versus a classification, technical file, and ARTG application), not a single combined activity. Confirm actual timelines and costs directly with a test laboratory, conformity assessment body, or regulatory consultant, since both vary considerably by device classification and are not meaningfully generalisable.
• Zeus Design's electronics design team supports medical electrical product development from schematic and applied-part isolation design through to IEC 60601-1 test readiness, working alongside a regulatory affairs specialist on the separate TGA pathway.

Common Mistakes

• Assuming AS/NZS 62368.1 or general consumer-electronics electrical safety practice covers a medical device. IEC 60601-1 is a separate, stricter standard family with its own safety model; a device designed against the general consumer-electronics framework and later found to be a medical device typically requires a substantial redesign, not a compliance-testing bolt-on.
• Treating IEC 60601-1 compliance as equivalent to TGA approval, or vice versa. They are related but distinct: IEC 60601-1 is a technical standard the device is designed and tested against; the TGA pathway is the legal supply process, which requires evidence including but not limited to standards compliance. Passing IEC 60601-1 testing does not put a device on the ARTG, and being on the ARTG does not mean every detail of IEC 60601-1 compliance has been independently re-verified by the TGA.
• Assuming a certified power supply, isolator, or other sub-assembly certifies the finished device. As covered above, a certified component narrows the remaining compliance work; it does not remove the need for system-level IEC 60601-1 assessment and TGA conformity assessment of the complete device.
• Leaving classification and essential-performance analysis until late in development. Both decisions influence fundamental design choices (isolation approach, redundancy, fault-tolerance strategy) that are far cheaper to build in from the start than to retrofit once a design is largely fixed.
• Assuming a device approved overseas (CE-marked under EU MDR, FDA-cleared) can be supplied in Australia without a separate TGA process. Overseas approvals can support an Australian application and reduce duplicate evidence generation, but the device still needs Australian classification, an appropriate application, and ARTG inclusion before lawful supply in Australia.

Medical electrical equipment sits at the intersection of two specialist disciplines, safety-critical hardware design and regulatory affairs, and neither substitutes for the other. An engineering team can design a technically excellent IEC 60601-1-compliant device that still can't be lawfully supplied in Australia without the separate TGA classification and ARTG process, and a regulatory application built around a device that hasn't actually been designed to the standard's safety model has nothing to submit. Treat both as required, parallel workstreams from the start of the project.