All high-risk AI systems that are medical devices must comply with AI Act requirements including risk management, data governance, technical documentation, logging, transparency, human oversight, and cybersecurity standards. Penalties up to €15M or 3% of global turnover.