IEC 60601-1: safety of medical electrical equipment

Author Hugues Orgitello Last updated 27 May 2026 ~14 min read

Guide · IEC 60601-1

IEC 60601-1 is the horizontal standard that sets out the general requirements for basic safety and essential performance of medical electrical equipment. Published by the International Electrotechnical Commission and maintained by Technical Committee TC 62, it has been since the late 1970s the common reference base recognised, under national variants, by most medical regulators: the EU MDR, the US FDA, Japan's PMDA, Health Canada, Brazil's ANVISA, China's NMPA. This page describes the structure of the standard, its successive editions, its relation to the collateral standards 60601-1-x and the particular standards 60601-2-x, the Means of Protection concept introduced by the 3rd edition, and the pitfalls observed in practical application.

One horizontal standard, two families of companions

The IEC 60601 framework is organised in three tiers. The general standard, IEC 60601-1, applies to any medical electrical equipment or medical electrical system. The collateral standards, identified by the 60601-1-X format (the digit after the second dash is currently 12 or below), extend the general standard to cross-cutting topics that concern several device types: electromagnetic compatibility, usability, alarms, environmentally conscious design, home healthcare environment. The particular standards, identified by the 60601-2-XX format, refine or modify the general requirements for a specific device type: infusion pumps, defibrillators, CT scanners, ventilators and so on.

The hierarchy is explicit. A particular standard prevails over the general standard and over the collateral standards where it explicitly deviates, the aim being to avoid a general requirement that would prevent the legitimate design of a device (a defibrillator, for example, must deliver an energy that would by default exceed the general thresholds). In the absence of explicit deviation, the requirements of the general standard and of the collateral standards apply cumulatively.

This three-tier architecture explains the depth of a typical 60601-1 dossier: a manufacturer almost never files a bare declaration of conformity with the general standard alone. The declaration covers the general standard, the applicable collateral standards (EMC and usability at the very least), and the particular standard for the device type where one exists.

Successive editions

The table below summarises the historical editions and their main contributions. Dates are those of IEC publication; European transposition (EN 60601-1) and US transposition (ANSI/AAMI ES60601-1) follow with a lag of a few months to two years, and harmonised status under the MDR depends on a separate OJEU publication.

Edition	Year	Main contributions	Status
Edition 2	1988	First widely adopted edition; focus on classical electrical safety; no formalised essential performance; no explicit requirement for a risk-management process	Withdrawn; legacy reports still appear during portfolio transitions
Edition 3	2005	Introduction of essential performance; explicit requirement for a risk-management process aligned with ISO 14971; rework of means of protection (MOOP/MOPP); extended EMC and usability requirements; treatment of single-fault conditions	Superseded by 3.1
Edition 3.1	2012	Edition 3 with Amendment 1; numerous clarifications on essential performance, insulation, leakage currents, heating tests; alignment with the 4th edition of IEC 60601-1-2 (EMC) then in preparation	Reference edition currently used in almost every regulatory recognition
Edition 4	In preparation	Expected reworking of 3.1 by TC 62; publication anticipated by the late 2020s, no firm public schedule	Not yet published

The move from the 2nd to the 3rd edition was the most consequential rupture in the history of the standard. The 3rd edition did not merely tighten thresholds; it changed the mode of reasoning: a prescriptive approach (such insulation for such application class) gave way to a risk-based approach in which a documented justification replaces literal compliance. A 3rd-edition test report does not simply tick boxes; it refers to the Risk Management File to explain why a given MOP was selected.

Structure of the standard

The 3rd edition (and thus 3.1) organises its requirements into numbered clauses. The breakdown is useful for scoping a project, locating a requirement quickly and reading a test report.

Clauses	Topic	Indicative content
1 to 3	General	Scope, normative references, terms and definitions (including the definitions of "essential performance" and "basic safety")
4	General requirements	Risk-management process (cross-reference to ISO 14971), conditions of use, single-fault conditions, ambient conditions
5	General test requirements	Test methodology (sample types, conditions, pass criteria)
6	Classification of ME equipment	Class I/II equipment, internally powered; degree of protection against shock (B, BF, CF); IP degrees; mode of operation (continuous, intermittent)
7	Identification, marking and documents	Rating plates, instructions for use, technical manual
8	Electrical hazards	Insulation, creepage distances, clearances, leakage currents (earth, enclosure, patient), working voltages; cornerstone of the electrical chapter
9	Mechanical hazards	Stability, moving parts, surfaces, projection, suspensions
10	Radiation hazards	Non-ionising radiation (laser, UV, microwave); ionising radiation in diagnostic imaging falls under collateral 60601-1-3
11	Protection against excessive temperatures and other hazards	Surface heat, overflow, spillage, biological contamination, compatibility of patient-contact materials
12	Accuracy of controls and instruments	Accuracy of settings and indications, drift, alarms (cross-reference to 60601-1-8)
13	Hazardous situations and fault conditions	Tables of single-fault conditions to verify
14	Programmable electrical medical systems (PEMS)	Architecture, software-development process, cross-reference to IEC 62304 for the software life cycle
15	Construction of ME equipment	Components, quality, manufacturing environment, transport and storage
16	ME systems	Combination of several medical and non-medical pieces of equipment connected to a patient or in common use; equivalent protection across the whole system
17	Electromagnetic compatibility (cross-reference)	Explicit cross-reference to collateral 60601-1-2

Essential performance, defined in clause 3, is probably the most misunderstood concept in the standard. It does not refer to every function of the device, but to the performance whose loss or degradation would render the residual risk unacceptable for the patient. For an infusion pump, flow accuracy is typically essential performance; the display of the manufacturer's logo is not. The definition is specific to each device and emerges from the risk-management process.

Means of Protection: MOOP and MOPP

The 3rd edition distinguished two purposes of protection against electric shock according to the exposed person. The distinction structures the requirements for insulation, creepage, clearance and allowable leakage currents.

Criterion	MOOP (Means of Operator Protection)	MOPP (Means of Patient Protection)
Person protected	Operator (physician, nurse, technician)	Patient in contact with an applied part
Reference working voltage	Typical mains voltage	Typical mains voltage
Insulation requirement	Comparable to general IT-equipment standards (IEC 62368-1 / legacy IEC 60950-1)	Reinforced, higher safety margin
Creepage and clearance	Standard industrial level	Increased, typically twice the MOOP creepage
Allowable leakage current	Professional-equipment level	Patient level, markedly lower (typically microamperes depending on applied-part type B, BF or CF)
Dielectric-strength tests	Standard	Higher test voltage
Typical use	Enclosure, user interface, controls not in patient contact	Any applied part: electrodes, ECG sensors, probes

The standard typically requires two MOPs between the source of hazardous energy and the protected person. The choice among 2x MOOP, 2x MOPP, 1 MOOP + 1 MOPP or mixed combinations depends on the energy path analysed in the Risk Management File. The simple rule: protecting a patient requires two MOPPs; protecting an operator requires two MOOPs; protecting a patient when an energy path runs through the operator combines MOOP and MOPP depending on the topology.

A single reinforced insulation does not replace two independent means of protection. This is the most frequent mistake in early design iterations: a properly specified isolation transformer counts as one MOP, not two. A second independent means is required (typically a protective earth, a supplementary insulation or a correctly sized functional earth).

Collateral standards 60601-1-X

Collateral standards extend the general standard to cross-cutting topics. They apply on top of the general standard and must be identified explicitly in the test plan.

Reference	Topic	Couplings
IEC 60601-1-2	Electromagnetic compatibility (EMC): emissions, radiated and conducted immunity, ESD immunity, immunity to RF fields in healthcare and home environments	Ed 4 in force; the most frequently applied collateral; indispensable to any medical CE marking
IEC 60601-1-3	Radiation protection in diagnostic X-ray imaging	Applicable to X-ray units, CT scanners, high-voltage generators
IEC 60601-1-6	Usability	Articulated with IEC 62366-1; required for presumption of conformity with MDR usability requirements
IEC 60601-1-8	Alarm systems: general requirements, tests and guidance	Applies as soon as a device incorporates alarms (pumps, ventilators, monitors)
IEC 60601-1-9	Environmentally conscious design	Identification of life-cycle environmental aspects
IEC 60601-1-10	Physiological closed-loop controllers	Applicable to devices that close the loop on a physiological parameter: automated anaesthesia, closed-loop insulin pumps
IEC 60601-1-11	Equipment for the home healthcare environment	Wider ambient conditions, drops, transport, increased mechanical robustness
IEC 60601-1-12	Equipment intended for the emergency medical services (EMS) environment	Transport conditions, robustness, batteries, visual identification

Two collaterals are nearly always applicable: IEC 60601-1-2 (EMC) and IEC 60601-1-6 (usability). Their omission is one of the most frequent non-conformities observed during a technical-file review.

Particular standards 60601-2-XX

Particular standards refine or modify the general requirements for a specific device type. The series counts several dozen standards. A representative sample:

• IEC 60601-2-1 X-ray equipment for radiotherapy (linear accelerators and others)
• IEC 60601-2-2 High-frequency surgical equipment (electrosurgical units)
• IEC 60601-2-4 Cardiac defibrillators
• IEC 60601-2-12 Critical-care ventilators
• IEC 60601-2-13 Anaesthetic systems
• IEC 60601-2-24 Infusion pumps and controllers
• IEC 60601-2-25 Electrocardiographs
• IEC 60601-2-27 ECG monitoring equipment
• IEC 60601-2-37 Ultrasonic medical diagnostic and monitoring equipment
• IEC 60601-2-44 Computed-tomography equipment (CT scanners)
• IEC 60601-2-47 Ambulatory ECG systems (Holter)
• IEC 60601-2-83 Home-use phototherapy equipment

The applicable particular standard is determined by crossing the device definition with the declared scope of the particular standard. A single device may, by construction, fall under several particular standards (an ECG monitor integrated into a critical-care ventilator), in which case each applies on its functional perimeter.

The absence of a particular standard for a given device type does not exempt the manufacturer from conformity: the general standard and the applicable collateral standards are sufficient to establish presumption of conformity, complemented by vertical standards proper to the functional domain (software via IEC 62304, biocompatibility via ISO 10993, sterilisation via ISO 11135 or 11137 depending on method).

Integration of risk management (ISO 14971)

Clause 4.2 of the 3rd edition formally requires a risk-management process aligned with ISO 14971. The Risk Management File is expected as a deliverable at assessment time, in an accredited test laboratory or during a notified-body review under the MDR.

The integration is not decorative. Several design decisions are explicitly delegated to risk analysis:

• the definition of essential performance, specific to each device, must be justified by the analysis of clinical consequences of failure,
• the selection of Means of Protection in certain scenarios depends on the accepted level of residual risk,
• the treatment of single-fault conditions rests on the documented identification of failure modes,
• the definition of environmental conditions of use (temperature, humidity, transport) must be coherent with the use-related risk analysis and the real operating environment (hospital, home, ambulance, field).

ISO 14971 is not merely a juxtaposed deliverable; its process shapes the 60601-1 dossier. A 60601-1 test file delivered without a coherent Risk Management File is very generally referred back by the laboratory or the notified body for completion.

Couplings with IEC 62366-1 and IEC 62304

Two standards outside the 60601 family are systematically applied in parallel.

IEC 62366-1 defines the process for applying usability engineering to medical devices. It is articulated with the collateral IEC 60601-1-6, which serves as the interface between 60601-1 and 62366-1. The usability file comprises, among other elements, the user-task analysis, identification of use-related hazards, interface specification, formative tests and the final summative test. For MDR devices, usability is explicitly required by Annex I, sections 5 and 22 of the regulation.

IEC 62304 defines the life cycle of medical-device software, from planning through maintenance, including development, verification and configuration management. It is referenced from clause 14 of 60601-1 for programmable electrical medical systems (PEMS). The rigour required by IEC 62304 depends on the software safety class (Class A, B or C), determined through risk analysis. For software whose failure could cause serious harm to health, Class C requires the highest level of documentation and verification.

For the full glossary of terms used here (essential performance, single-fault condition, applied part B/BF/CF, MOOP, MOPP, PEMS), see the glossary.

Test sequence and laboratory competencies

A 60601-1 test campaign is generally conducted in an accredited laboratory (ISO/IEC 17025) competent specifically on the medical scope. The typical sequence combines:

• upstream documentary review: Risk Management File, definition of essential performance, list of MOPs, classification of the device (class I/II, applied part B/BF/CF, mode of operation), applicable collateral and particular standards,
• insulation and dielectric-strength tests: application of the breakdown voltages defined in clause 8 for each analysed MOP,
• leakage-current tests: earth, enclosure, patient, under normal and single-fault conditions,
• mechanical tests: stability, robustness of suspensions, drops (in particular under 60601-1-11 for the home environment),
• thermal tests: accessible surfaces, surfaces in patient contact, thermal single-fault conditions,
• EMC tests: on a separate bench, under IEC 60601-1-2, generally in a distinct accredited EMC laboratory,
• usability review: against the IEC 62366-1 file, with documented summative tests,
• software review: against the IEC 62304 file, verifying that the software safety class matches the risk level.

Laboratories recognised on the medical scope in France and across Europe are few. The laboratory choice should be made during the development phase, several months before the campaign, in order to plan the test window and anticipate the iterations that will almost certainly be required.

Working on the normative scoping of a medical-electrical project ahead of a 60601-1 campaign for a real product? AESTECHNO can audit your design and certification plan. Get in touch →

Relation to the MDR: harmonised standard and presumption of conformity

IEC 60601-1 and its collateral standards are published as harmonised standards under Regulation (EU) 2017/745 (MDR) by implementing decisions appearing in the Official Journal of the European Union. Application of a harmonised standard provides presumption of conformity with the general safety and performance requirements it covers, meaning the manufacturer does not have to demonstrate separately compliance with the corresponding essential requirement of the MDR.

A few practical points:

• The list of harmonised standards evolves: the Commission publishes successive communications (corrigenda) that add, remove or pin specific editions. The OJEU itself is the only authoritative reference.
• A specific edition is named in the communication: applying an edition not yet harmonised, or already withdrawn, does not grant presumption of conformity. This is a frequent surprise at certificate renewal.
• The absence of a harmonised standard does not bar placing on the market; it merely shifts the burden of proof: the manufacturer must then demonstrate by other means that the essential requirements are met (state of the art, another recognised standard, ad-hoc demonstration).

For the global frame of CE conformity for medical devices, see the MDR guide and the IVDR guide. For general CE marking, see the CE page and the harmonised standards.

Relation to the FDA: Recognized Consensus Standards

In the United States, the FDA lists IEC 60601-1 (with its edition and amendment) in the Recognized Consensus Standards database. Each listing carries a Recognition Number and identifies precisely the recognised edition, any partial recognition, and any supplements or deviations applicable on US territory.

The manufacturer declares conformity to the recognised standard through a Declaration of Conformity attached to a 510(k), De Novo or PMA submission. The FDA may, in some cases, retain an earlier edition than the one pinned in Europe; a single device targeting both markets may therefore have to document conformity against two distinct editions.

At the US level, the national transposition is ANSI/AAMI ES60601-1, which reproduces the international 60601-1 and adds national deviations (for instance on insulation for the US mains, on certain working voltages). A manufacturer targeting the US market declares conformity to ANSI/AAMI ES60601-1 rather than to the pure IEC version, even if the two are technically very close.

Transition between editions

The arrival of a new edition of 60601-1 (or of one of its collaterals) triggers a transition period during which the two editions coexist in the regulatory databases:

• The harmonised-standards list published by the European Commission pins the recognised edition; a new edition enters into force on a published date, at which point the previous edition is withdrawn with a cessation date beyond which presumption of conformity ceases.
• The FDA Recognized Consensus Standards database updates the Recognition Number; the FDA generally grants a grace period during which submissions filed under the older edition remain acceptable.
• European notified bodies apply the same rules as the Commission, sometimes with an internal transition policy more prudent than the legal cut-off date.

A practical rule for project schedules: do not start a test campaign on an edition whose harmonised cessation date is shorter than the intended validity of the resulting certificate. The transition from 3.1 to the future 4th edition will, when it comes, be accompanied by official communications to be tracked in the OJEU and in the FDA database.

Pitfalls observed in practice

Without claiming to be an exhaustive implementation guide, several pitfalls recur in industry feedback and notified-body literature.

• Reusing a 2nd-edition test report in a 3.1 dossier without redoing the risk analysis and the essential-performance definition. The 2nd edition has been withdrawn; its reports no longer carry current regulatory value. Any transition forces a redrafting.
• Omitting the applicable collateral standards, in particular IEC 60601-1-2 (EMC) and IEC 60601-1-6 (usability). The omission is a direct non-conformity at technical-file review.
• Miscounting Means of Protection, particularly the confusion between MOOP and MOPP, and the assumption that a single reinforced insulation amounts to two independent means. This audit point is a recurring laboratory finding.
• Empty or tautological definitions of essential performance. The definition must identify a performance whose loss or degradation would render the residual risk unacceptable; "the device must work correctly" is not a definition.
• Risk Management File absent or unaligned: a 60601-1 dossier without a coherent ISO 14971 file is not assessable. The RMF is not an appendix; it shapes several clauses of the standard.
• Confusion between IEC 60601-1 and IEC 62368-1 on the electrical perimeter: 62368-1 is the general standard for IT and audiovisual equipment; it does not cover medical-specific requirements (applied parts, MOPP, patient leakage currents). A device certified under 62368-1 alone is not 60601-1 compliant.
• Subcontracting a laboratory without checking scope: a laboratory accredited on the general 60601-1 may not be accredited on the targeted particular standard 60601-2-XX. The accreditation scope must be verified on the COFRAC (or equivalent national) certificate before placing the test order.

Further reading

This page lays out the general frame of IEC 60601-1. Dedicated pages will follow to explore specific topics in depth:

• the 4th edition of IEC 60601-1-2 (EMC) in medical environments and its articulation with the general EMC directive,
• usability engineering under IEC 62366-1 and its articulation with the collateral IEC 60601-1-6,
• ISO 14971 risk management specifically in the medical-device context,
• medical software under IEC 62304 and its safety classes A, B, C.

Need help?

A 30-minute audit with AESTECHNO engineers.

AESTECHNO is the electronics design house that edits spilma. We help product teams scope their certification effort and avoid the common mistakes.

Book a free audit

Sources & references

1. IEC 60601-1 Medical electrical equipment, Part 1 General requirements for basic safety and essential performance , IEC webstore.iec.ch/publication/2603
2. IEC TC 62, Electrical equipment in medical practice , IEC www.iec.ch/dyn/www/f?p=103:7:::::FSP_ORG_ID:1245
3. ISO 14971, Medical devices, Application of risk management to medical devices , ISO www.iso.org/standard/72704.html
4. IEC 62366-1, Medical devices, Application of usability engineering to medical devices , IEC webstore.iec.ch/publication/24148
5. FDA Recognized Consensus Standards database for medical devices , FDA www.fda.gov/medical-devices/standards-and-conformity-assessment-program/recognized-consensus-standards-medical-devices
6. Regulation (EU) 2017/745 on medical devices (MDR) , EUR-Lex eur-lex.europa.eu/eli/reg/2017/745/oj
7. Harmonised standards for medical devices under the MDR , European Commission health.ec.europa.eu/medical-devices-sector/new-regulations/guidance-mdcg-endorsed-documents-and-other-guidance_en